Director, Product Management - Endpoint Policy and Configuration Management

About this role

The Basics:

Tanium's Product Management team is actively seeking a Director, Product Management to lead Policy and Configuration Management for the Endpoint Management portfolio . This is a senior individual contributor role responsible for owning the strategy, roadmap, and execution of how Tanium defines, applies, and proves configuration state across the enterprise — giving IT and Security teams a single way to set policy once and enforce it consistently across Windows, Linux, and macOS endpoints, regardless of whether those endpoints are on-premises, remote, or in the cloud.

The successful candidate will own the product strategy behind Tanium's centralized policy engine: application allow/deny control, full-disk encryption, device and removable media control, host firewall management, and machine- and user-scoped administrative template (Group Policy-style) policy. This includes the migration tooling that lets customers import existing Group Policy backups and industry hardening standards — such as CIS Build Kits and vendor security baselines — directly into managed policy. You will also shape the next generation of policy types that supersede legacy mechanisms as customers modernize off traditional, on-premises group policy infrastructure.

You will work cross-functionally with Engineering, Product Marketing, Sales, and Customer Success to set vision, drive roadmap, ship capabilities customers trust for compliance and audit, and turn consistent configuration state into measurable risk reduction for customers.

A successful candidate is a strong communicator and influencer who can operate fluently across executive stakeholder conversations, deep technical architecture discussions, and customer-facing storytelling. Must have a successful track record of shipping enterprise configuration management, compliance, or policy products at scale.

What you'll do

• Own the product strategy, roadmap, and delivery for Tanium's endpoint policy and configuration management capabilities, end to end from ideation to launch.

• Drive the roadmap for Windows policy and configuration management — application control (allow/deny rules), full-disk encryption, device and removable storage control, host firewall management, and machine- and user-scoped administrative template policy — ensuring parity with and differentiation from traditional Group Policy infrastructure.

• Expand Linux configuration management capabilities (e.g., host firewall management and hardening controls), building out coverage on top of an established Windows foundation.

• Own the strategy for legacy migration and baseline import tooling — Group Policy backup import and industry hardening standard support (CIS Build Kits, vendor security baselines) that automatically convert a downloaded benchmark file into a ready-to-enforce compliance policy, complete with conflict detection across overlapping settings and automatic content-set mapping — and for next-generation policy types that supersede legacy equivalents as customers modernize.

• Define and evolve policy enforcement state and compliance reporting (applied, partially applied, superseded, not applied) so customers can prove configuration compliance and audit posture at any time.

• Partner with incident response, reporting, and guidance capabilities across the platform to turn security findings into durable preventive policy and to surface actionable configuration drift and remediation guidance to operators.

• Document customer use cases, product requirements, and business justifications for new policy and configuration investments; prioritize ruthlessly based on customer risk reduction, compliance mandates, and platform leverage.

• Partner with Product Marketing and Sales to develop go-to-market motions, enablement, and messaging ; support launches, analyst engagements, and customer briefings.

• Cultivate strategic customer relationships to validate direction, surface gaps, and turn lighthouse deployments into reference architectures.

• Establish and track KPIs — policy adoption, time-to-compliance, configuration drift and remediation rates, and platform pull-through — and use them to drive continuous improvement.

• Leverage emerging trends in agentic AI and autonomous IT to shape the roadmap for self-healing, continuously enforced endpoint configuration.

Requirements

Education

• Bachelor's degree or equivalent experience.

• Masters in Computer Science or MBA preferred.

Experience

• 8+ years of total professional experience in enterprise B2B software, with at least 5 years in product management supporting a SaaS or enterprise platform.

• Required: hands-on experience with Windows policy and configuration management — Group Policy, ADMX administrative templates, security baselines, full-disk encryption, application control, or comparable endpoint configuration tooling.

• Strong bonus: in-depth experience with Linux configuration management — configuration/hardening frameworks, host firewall management, or compliance baselines for Linux systems.

• Demonstrated success owning and shipping policy, compliance, or configuration management products at enterprise scale.

• Deep familiarity with endpoint management and IT operations — including the customer workflows that span IT and Security teams.

• Strong fluency with compliance frameworks and industry baselines (e.g., CIS benchmarks, vendor security baselines) and how they translate into enforceable policy.

• Experience working with executive stakeholders to align on vision, secure investment, and unblock execution.

• Proven ability to drive cross-functional alignment across engineering, marketing, and sales without direct authority.

Other

• Align with the Tanium values: we win as a team, we do the right thing, and we are unstoppable .

• Intuition to identify high-leverage configuration and compliance gaps that align with Tanium's platform and present opportunities for rapid growth.

• Willingness to take on f

Similar jobs

• Staff Product Manager, Endpoint Security Posture Management — Huntress · Remote
• Director of Product Management, Security — Clickhouse · Remote
• Director, Product Management (Enterprise) — Housecall · United States
• Director, Enterprise Product Management — Dandy · Remote
• Director, Product Management (Platform, Security & Enterprise Readiness) — Workato · Palo Alto, California
• Product Manager, Agent Security & Governance — Gleanwork · San Francisco, CA
• Senior Manager, Product Management — Anaplan · Minneapolis, United States
• Principal Product Manager, Compliance & Security — Clickhouse · United States