Endpoint Engineer III

General Dynamics - Bath Iron Works; Bath (ME); On-site; USD 71,000 - 89,000; Full time

Job summary

General Dynamics - Bath Iron Works in Bath, ME is seeking an Endpoint Engineer III to build, administer, and maintain the client endpoint and mobile environment under the direction of the Senior Endpoint Engineer. You will develop and enforce standard images and configurations across laptops, desktops, and mobile devices.

The role requires PowerShell automation, enterprise endpoint management tooling, and alignment with BIW security policies, including encryption, patching, and vulnerability

Qualifications

• Hands-on experience with PowerShell for endpoint automation.
• Experience with Active Directory, Group Policy, and identity management.
• Familiarity with core networking (TCP/IP, DNS, DHCP, VPN) and endpoint security concepts.

Responsibilities

• Build and maintain client device images and standard build configurations for laptops, desktops, and mobile devices.
• Administer enterprise endpoint management tooling (e.g., MCM) and MDM platforms for software deployment, patching, compliance reporting, and policy execution.
• Develop and maintain PowerShell scripts to automate defined deployment, update, and endpoint administration tasks.
• Implement endpoint security configurations in alignment with BIW security policy, including antivirus, encryption, patching, and vulnerability remediation activities.
• Support endpoint lifecycle management including hardware refresh and operating system upgrades across the estate.
• Other duties as assigned.

Skills

PowerShell scripting

Active Directory

Group Policy

Identity management

Networking basics

Endpoint security concepts

Education

High school diploma or equivalent

Associate or bachelor’s degree in information technology

Tools

MCM

Job description

We offer a competitive salary for this role, with an expected range of $70,600 to $89,400. The final offer will depend on your experience, skills, and overall qualifications. General Dynamics - Bath Iron Works also provides a variety of benefits including medical & dental insurance coverage, 401(k) retirement savings plan, flexible spending accounts/HSAs, life and disability insurance, company paid holidays, paid time off (PTO), health coaching, athletic trainers, employee assistance programs and onsite health services.

As part of the Endpoint Engineer team, the Endpoint Engineer III builds, administers, and maintains the client endpoint and mobile environment for Bath Iron Works under the direction of the Sr. Endpoint Engineer. The role executes established build standards and images, administers enterprise endpoint management tooling and mobile device management (MDM), develops PowerShell automation for defined tasks, and implements endpoint security configurations.

The Endpoint Engineer III serves as an L3 escalation point for the desktop and mobility technicians on documented complex issues and partners with the Infrastructure, Security, and Service Desk teams on project execution. Operating under the BIW Business Operating System (BOS), the Endpoint Engineer III ensures compliance with safety, quality, and performance standards while coordinating with other key stakeholders to meet overall milestones.

Key Responsibilities

• Safety Leadership
  • Comply with all BIW safety and security standards while working across office, manufacturing, and shipboard environments.
  • Implement endpoint configurations that uphold BIW security and data-protection requirements, and follow established procedures when handling hardware, media, and sensitive data.
• Project Execution
  • Build and maintain client device images and standard build configurations for laptops, desktops, and mobile devices under the direction of the senior Endpoint Engineer.
  • Administer enterprise endpoint management tooling (e.g., MCM) and MDM platforms for software deployment, patching, compliance reporting, and mobile device policy execution.
  • Develop and maintain PowerShell scripts to automate defined deployment, update, and endpoint administration tasks.
  • Implement endpoint security configurations in alignment with BIW security policy, including antivirus, encryption, patching, and vulnerability remediation activities.
  • Support endpoint lifecycle management activity, including hardware refresh execution and operating system upgrades across the estate.
  • Other duties as assigned.
• Training and Development
  • Maintain and document working knowledge of endpoint platforms, management tools, and security practices. Pursue and obtain relevant certifications.
  • Provide L3 guidance to the desktop and mobility technicians on documented issue types and grow technical depth under the mentorship of the senior Endpoint Engineer.
• Team Collaboration and Communication
  • Serve as L3 escalation for documented complex hardware, operating system, and application issues raised by Desktop Technician II; elevate architecture-level or undocumented issues to the senior Endpoint Engineer.
  • Partner with the Infrastructure, Security, and Service Desk teams on assigned project execution and cross-team incident resolution.
  • Communicate technical issues and solutions clearly to technicians, peer IT teams, and stakeholders.
• Continuous Improvement
  • Identify opportunities to automate manual processes encountered during routine work and propose them for prioritization with the senior Endpoint Engineer.
  • Contribute to technical documentation, standard operating procedures, and knowledge base articles for endpoint tooling and procedures.

Required

• High school diploma or equivalent.

Preferred

• Associate or bachelor’s degree in information technology, computer science, or a related field, or equivalent experience.
• Microsoft endpoint/Windows certifications (e.g., MD-102 Endpoint Administrator) and other relevant industry certifications.

Required

• Must be able to satisfy BIW background-check and site-access requirements.
• 2-4 years of endpoint administration, senior desktop, or entry-level endpoint engineering experience in an enterprise environment.
• Hands-on experience administering an enterprise endpoint management platform (e.g., MCM), including image build, software deployment, patching, and compliance reporting.
• Working proficiency in PowerShell for endpoint automation, and working knowledge of Active Directory, Group Policy, and identity management.
• Working understanding of core networking (TCP/IP, DNS, DHCP, VPN) and endpoint security concepts (encryption, MFA, patching, and vulnerability remediation).

Preferred

• Exposure to cloud-based endpoint management (Intune/Autopilot) and Entra ID, MDM administration, ServiceNow, Jira, and experience in a defense, manufacturing, or other regulated environment.