Endpoint Engineer III

We offer a competitive salary for this role with an expected range of $70600 to $89400. The final offer will depend on your experience skills and overall qualifications. General Dynamics Bath Iron Works also provides a variety of benefits including medical & dental insurance coverage 401(k) retirement savings plan flexible spending accounts/HSAs life and disability insurance company paid holidays paid time off (PTO) health coaching athletic trainers employee assistance programs and onsite health services.

As part of the Endpoint Engineer team the Endpoint Engineer III builds administers and maintains the client endpoint and mobile environment for Bath Iron Works under the direction of the Sr. Endpoint Engineer. The role executes established build standards and images administers enterprise endpoint management tooling and mobile device management (MDM) develops PowerShell automation for defined tasks and implements endpoint security configurations.

The Endpoint Engineer III serves as an L3 escalation point for the desktop and mobility technicians on documented complex issues and partners with the Infrastructure Security and Service Desk teams on project execution. Operating under the BIW Business Operating System (BOS) the Endpoint Engineer III ensures compliance with safety quality and performance standards while coordinating with other key stakeholders to meet overall milestones.

Key Responsibilities

• Safety Leadership:
• Comply with all BIW safety and security standards while working across office manufacturing and shipboard environments.
• Implement endpoint configurations that uphold BIW security and data-protection requirements and follow established procedures when handling hardware media and sensitive data.
• Project Execution:
• Build and maintain client device images and standard build configurations for laptops desktops and mobile devices under the direction of the senior Endpoint Engineer.
• Administer enterprise endpoint management tooling (e.g. MCM) and MDM platforms for software deployment patching compliance reporting and mobile device policy execution.
• Develop and maintain PowerShell scripts to automate defined deployment update and endpoint administration tasks.
• Implement endpoint security configurations in alignment with BIW security policy including antivirus encryption patching and vulnerability remediation activities.
• Support endpoint lifecycle management activity including hardware refresh execution and operating system upgrades across the estate.
• Other duties as assigned.
• Training and Development:
• Maintain and document working knowledge of endpoint platforms management tools and security practices. Pursue and obtain relevant certifications.
• Provide L3 guidance to the desktop and mobility technicians on documented issue types and grow technical depth under the mentorship of the senior Endpoint Engineer.
• Team Collaboration and Communication:
• Serve as L3 escalation for documented complex hardware operating system and application issues raised by Desktop Technician II; escalate architecture-level or undocumented issues to the senior Endpoint Engineer.
• Partner with the Infrastructure Security and Service Desk teams on assigned project execution and cross-team incident resolution.
• Communicate technical issues and solutions clearly to technicians peer IT teams and stakeholders.
• Continuous Improvement:
• Identify opportunities to automate manual processes encountered during routine work and propose them for prioritization with the senior Endpoint Engineer.
• Contribute to technical documentation standard operating procedures and knowledge base articles for endpoint tooling and procedures.

Required:

• High school diploma or equivalent.

Preferred:

• Associate or bachelors degree in information technology computer science or a related field or equivalent experience.
• Microsoft endpoint/Windows certifications (e.g. MD-102 Endpoint Administrator) and other relevant industry certifications.

Required:

• Must be able to satisfy BIW background-check and site-access requirements.
• 24 years of endpoint administration senior desktop or entry-level endpoint engineering experience in an enterprise environment.
• Hands-on experience administering an enterprise endpoint management platform (e.g. MCM) including image build software deployment patching and compliance reporting.
• Working proficiency in PowerShell for endpoint automation and working knowledge of Active Directory Group Policy and identity management.
• Working understanding of core networking (TCP/IP DNS DHCP VPN) and endpoint security concepts (encryption MFA patching and vulnerability remediation).

Preferred:

• Exposure to cloud-based endpoint management (Intune/Autopilot) and Entra ID MDM administration ServiceNow Jira and experience in a defense manufacturing or other regulated environment.