Sr. Endpoint Engineer

We offer a competitive salary for this role with an expected range of $83900 to $106300. The final offer will depend on your experience skills and overall qualifications. General Dynamics Bath Iron Works also provides a variety of benefits including medical & dental insurance coverage 401(k) retirement savings plan flexible spending accounts/HSAs life and disability insurance company paid holidays paid time off (PTO) health coaching athletic trainers employee assistance programs and onsite health services.

As part of the Endpoint Engineering team the Sr. Endpoint Engineer is a senior technical owner of the client endpoint and mobile environment at Bath Iron Works ensuring end users have a secure reliable and high-performing computing experience. The role designs device imaging and build standards endpoint management architecture and tooling MDM policy automation strategy security hardening standards and endpoint lifecycle roadmap.

The Sr. Endpoint Engineer serves as the final internal escalation point before vendor engagement mentors and directs Endpoint Engineer IIIs and partners at an architectural level with the Infrastructure Security and Service Desk teams. Operating under the BIW Business Operating System (BOS) the Sr. Endpoint Engineer ensures compliance with safety quality and performance standards while coordinating with other key stakeholders to meet overall milestones.

Key Responsibilities

• Safety Leadership:
• Comply with all BIW safety and security standards while working across office manufacturing and shipboard environments.
• Design and maintain endpoint configurations that uphold BIW security and data-protection requirements and follow established procedures when handling hardware media and sensitive data.
• Project Execution:
• Design client device images and standardized build configurations for laptops desktops and mobile devices and set the standards Endpoint Engineer III builds and maintains.
• Own the architecture and configuration of enterprise endpoint management tooling and MDM including software deployment patching compliance reporting and mobile device policy design.
• Set the automation strategy for the endpoint estate and develop and maintain PowerShell frameworks that streamline deployments updates and routine endpoint tasks.
• Design endpoint security hardening standards in alignment with BIW security policy including antivirus encryption patching and vulnerability remediation approach.
• Own the endpoint lifecycle roadmap and coordinate hardware refresh and operating system upgrade strategy across the estate.
• Other duties as assigned.
• Training and Development:
• Maintain and document advanced current knowledge of endpoint platforms management tools and security practices. Pursue and obtain relevant certifications.
• Mentor Endpoint Engineer IIIs provide L3 technical direction to the desktop and mobility technicians and develop and publish SOPs that raise team capability.
• Team Collaboration and Communication:
• Serve as the final internal escalation point for complex hardware operating system and application issues including architecture-level and undocumented issues raised by Endpoint Engineer IIIs; perform root-cause analysis and coordinate vendor engagement when required.
• Partner at an architectural level with the Infrastructure Security and Service Desk teams on projects standards and endpoint roadmap.
• Communicate complex technical decisions and trade-offs clearly to stakeholders at all levels from technicians to senior management.
• Continuous Improvement:
• Set the direction for endpoint standards build processes and tooling improvements and prioritize the automation backlog for the Endpoint Engineering team.
• Own the Endpoint Engineering teams technical documentation standard operating procedures and knowledge base library and review contributions from Endpoint Engineer I to maintain overall quality.

Required:

• High school diploma or equivalent.

Preferred:

• Bachelors degree in information technology computer science or a related field or equivalent experience.
• Microsoft endpoint/Windows certifications (e.g. MD-102 Endpoint Administrator Intune Entra) and other relevant industry certifications.

Required:

• Must be able to satisfy BIW background-check and site-access requirements.

• Minimum of 5 years of hands-on endpoint engineering experience in an enterprise environment (1000 endpoints) preferably in a regulated industry.

• Expertise designing and maintaining Windows client images and build configurations using an enterprise endpoint management platform (e.g. MCM) and designing MDM policies for iOS/iPadOS and Android.

• Proficiency with PowerShell for endpoint automation and working knowledge of Active Directory Group Policy and identity management.

• Solid understanding of core networking (TCP/IP DNS DHCP VPN) and endpoint security concepts (encryption MFA vulnerability remediation and compliance frameworks).

Preferred:

• Experience with cloud-based endpoint management (Intune/Autopilot) and Entra ID prior mentoring experience and familiarity with ServiceNow and Jira.