Principal Endpoint Engineer

Job Description:

We offer a competitive salary for this role, with an expected range of $110,100 to $139,500. The final offer will depend on your experience, skills, and overall qualifications. General Dynamics – Bath Iron Works also provides a variety of benefits including medical & dental insurance coverage, 401(k) retirement savings plan, flexible spending accounts/HSAs, life and disability insurance, company paid holidays, paid time off (PTO), health coaching, athletic trainers, employee assistance programs and onsite health services.

 

As part of the Endpoint Engineering team, the Sr. Endpoint Engineer is a senior technical owner of the client endpoint and mobile environment at Bath Iron Works, ensuring end users have a secure, reliable, and high-performing computing experience. The role designs device imaging and build standards, endpoint management architecture and tooling, MDM policy, automation strategy, security hardening standards, and endpoint lifecycle roadmap.

 

The Sr. Endpoint Engineer serves as the final internal escalation point before vendor engagement, mentors and directs Endpoint Engineer III's, and partners at an architectural level with the Infrastructure, Security, and Service Desk teams.  Operating under the BIW Business Operating System (BOS), the Sr. Endpoint Engineer ensures compliance with safety, quality, and performance standards while coordinating with other key stakeholders to meet overall milestones.

 

Key Responsibilities

• Safety Leadership:
• • Comply with all BIW safety and security standards while working across office, manufacturing, and shipboard environments.
  • Design and maintain endpoint configurations that uphold BIW security and data-protection requirements, and follow established procedures when handling hardware, media, and sensitive data.
• Project Execution:
• • Design client device images and standardized build configurations for laptops, desktops, and mobile devices, and set the standards Endpoint Engineer III builds and maintains.
  • Own the architecture and configuration of enterprise endpoint management tooling and MDM, including software deployment, patching, compliance, reporting, and mobile device policy design.
  • Set the automation strategy for the endpoint estate and develop and maintain PowerShell frameworks that streamline deployments, updates, and routine endpoint tasks.
  • Design endpoint security hardening standards in alignment with BIW security policy, including antivirus, encryption, patching, and vulnerability remediation approach.
  • Own the endpoint lifecycle roadmap and coordinate hardware refresh and operating system upgrade strategy across the estate.
  • Other duties as assigned.
• Training and Development:
• • Maintain and document advanced, current knowledge of endpoint platforms, management tools, and security practices. Pursue and obtain relevant certifications.
  • Mentor Endpoint Engineer III's, provide L3 technical direction to the desktop and mobility technicians, and develop and publish SOPs that raise team capability.
• Team Collaboration and Communication:
• • Serve as the final internal escalation point for complex hardware, operating system, and application issues, including architecture-level and undocumented issues raised by Endpoint Engineer III's; perform root-cause analysis and coordinate vendor engagement when required.
  • Partner at an architectural level with the Infrastructure, Security, and Service Desk teams on projects, standards, and endpoint roadmap.
  • Communicate complex technical decisions and trade-offs clearly to stakeholders at all levels, from technicians to senior management.
• Continuous Improvement:
• • Set the direction for endpoint standards, build processes, and tooling improvements, and prioritize the automation backlog for the Endpoint Engineering team.
  • Own the Endpoint Engineering team’s technical documentation, standard operating procedures, and knowledge base library, and review contributions from Endpoint Engineer I to maintain overall quality.

Required/Preferred Education/Training:

Required:

• High school diploma or equivalent.   

Preferred:

• Bachelor’s degree in information technology, computer science, or a related field, or equivalent experience.
• Microsoft endpoint/Windows certifications (e.g., MD-102 Endpoint Administrator, Intune, Entra) and other relevant industry certifications.

Required/Preferred Experience:

Required:

• Must be able to satisfy BIW background-check and site-access requirements.

• Minimum of 5 years of hands-on endpoint engineering experience in an enterprise environment (1,000+ endpoints), preferably in a regulated industry.

• Expertise designing and maintaining Windows client images and build configurations using an enterprise endpoint management platform (e.g., MCM), and designing MDM policies for iOS/iPadOS and Android.

• Proficiency with PowerShell for endpoint automation, and working knowledge of Active Directory, Group Policy, and identity management.

• Solid understanding of core networking (TCP/IP, DNS, DHCP, VPN) and endpoint security concepts (encryption, MFA, vulnerability remediation, and compliance frameworks).

Preferred:

• Experience with cloud-based endpoint management (Intune/Autopilot) and Entra ID, prior mentoring experience, and familiarity with ServiceNow and Jira.