Sr. Endpoint Engineer

General Dynamics - Bath Iron Works; Bath (ME); On-site; USD 84,000 - 106,000; Full time

Benefits offered by this job

Medical and dental insurance

401(k) retirement plan

HSAs/FSAs

Life and disability insurance

Paid time off (PTO)

Onsite health services

Job summary

General Dynamics - Bath Iron Works (BIW) seeks a Sr. Endpoint Engineer to own the client endpoint and mobile environment, designing imaging standards, MDM policy, automation, and security hardening for a secure, reliable computing experience.

You will lead architecture discussions, mentor engineers, and coordinate with Infrastructure, Security, and Service Desk teams to meet milestones under BIW BOS. The role requires 5+ years in enterprise endpoint engineering, Windows image management,

Qualifications

• High school diploma or equivalent.
• Bachelor’s degree in IT/CS or related field or equivalent experience.
• Microsoft endpoint/Windows certifications (e.g., MD-102) and related credentials.
• BIW background-check and site-access requirements.
• Minimum 5 years of hands-on endpoint engineering in a large enterprise.

Responsibilities

• Design client device images and build configurations for laptops, desktops, and mobile devices.
• Own architecture of enterprise endpoint management tooling and MDM, including deployment, patching, and policy design.
• Develop and maintain PowerShell frameworks to streamline deployments and maintenance.
• Define endpoint security hardening standards and incident response approaches.
• Coordinate hardware refresh and OS upgrade strategy across the estate.
• Mentor engineers and publish SOPs to raise team capability.

Skills

PowerShell

Endpoint management

MDM policy

Active Directory

Networking basics

Security hardening

Automation

Communication skills

Education

High school diploma or equivalent

BS in IT/CS or related field

Tools

Intune

Jira

ServiceNow

Microsoft Endpoint Manager (MCM)

Job description

We offer a competitive salary for this role, with an expected range of $83,900 to $106,300. The final offer will depend on your experience, skills, and overall qualifications.

General Dynamics - Bath Iron Works also provides a variety of benefits including medical & dental insurance coverage, 401(k) retirement savings plan, flexible spending accounts/HSAs, life and disability insurance, company paid holidays, paid time off (PTO), health coaching, athletic trainers, employee assistance programs and onsite health services.

As part of the Endpoint Engineering team, the Sr. Endpoint Engineer is a senior technical owner of the client endpoint and mobile environment at Bath Iron Works, ensuring end users have a secure, reliable, and high-performing computing experience. The role designs device imaging and build standards, endpoint management architecture and tooling, MDM policy, automation strategy, security hardening standards, and endpoint lifecycle roadmap.

The Sr. Endpoint Engineer serves as the final internal escalation point before vendor engagement, mentors and directs Endpoint Engineer III's, and partners at an architectural level with the Infrastructure, Security, and Service Desk teams. Operating under the BIW Business Operating System (BOS), the Sr. Endpoint Engineer ensures compliance with safety, quality, and performance standards while coordinating with other key stakeholders to meet overall milestones.

Key Responsibilities

• Safety Leadership
  • Comply with all BIW safety and security standards while working across office, manufacturing, and shipboard environments.
  • Design and maintain endpoint configurations that uphold BIW security and data-protection requirements, and follow established procedures when handling hardware, media, and sensitive data.
• Project Execution
  • Design client device images and standardized build configurations for laptops, desktops, and mobile devices, and set the standards Endpoint Engineer III builds and maintains.
  • Own the architecture and configuration of enterprise endpoint management tooling and MDM, including software deployment, patching, compliance, reporting, and mobile device policy design.
  • Set the automation strategy for the endpoint estate and develop and maintain PowerShell frameworks that streamline deployments, updates, and routine endpoint tasks.
  • Design endpoint security hardening standards in alignment with BIW security policy, including antivirus, encryption, patching, and vulnerability remediation approach.
  • Own the endpoint lifecycle roadmap and coordinate hardware refresh and operating system upgrade strategy across the estate.
  • Other duties as assigned.
• Training and Development
  • Maintain and document advanced, current knowledge of endpoint platforms, management tools, and security practices. Pursue and obtain relevant certifications.
  • Mentor Endpoint Engineer III's, provide L3 technical direction to the desktop and mobility technicians, and develop and publish SOPs that raise team capability.
• Team Collaboration and Communication
  • Serve as the final internal escalation point for complex hardware, operating system, and application issues, including architecture-level and undocumented issues raised by Endpoint Engineer III's; perform root-cause analysis and coordinate vendor engagement when required.
  • Partner at an architectural level with the Infrastructure, Security, and Service Desk teams on projects, standards, and endpoint roadmap.
  • Communicate complex technical decisions and trade-offs clearly to stakeholders at all levels, from technicians to senior management.
• Continuous Improvement
  • Set the direction for endpoint standards, build processes, and tooling improvements, and prioritize the automation backlog for the Endpoint Engineering team.
  • Own the Endpoint Engineering team’s technical documentation, standard operating procedures, and knowledge base library, and review contributions from Endpoint Engineer I to maintain overall quality.

Required

• High school diploma or equivalent.

Preferred

• Bachelor’s degree in information technology, computer science, or a related field, or equivalent experience.
• Microsoft endpoint/Windows certifications (e.g., MD-102 Endpoint Administrator, Intune, Entra) and other relevant industry certifications.

Required

• Must be able to satisfy BIW background-check and site-access requirements.
• Minimum of 5 years of hands-on endpoint engineering experience in an enterprise environment (1,000+ endpoints), preferably in a regulated industry.
• Expertise designing and maintaining Windows client images and build configurations using an enterprise endpoint management platform (e.g., MCM), and designing MDM policies for iOS/iPadOS and Android.
• Proficiency with PowerShell for endpoint automation, and working knowledge of Active Directory, Group Policy, and identity management.
• Solid understanding of core networking (TCP/IP, DNS, DHCP, VPN) and endpoint security concepts (encryption, MFA, vulnerability remediation, and compliance frameworks).

Preferred

• Experience with cloud-based endpoint management (Intune/Autopilot) and Entra ID, prior mentoring experience, and familiarity with ServiceNow and Jira.