> Markdown version of [/jobs/ext/2594320-sr-endpoint-engineer](https://www.wearedevelopers.com/jobs/ext/2594320-sr-endpoint-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Sr. Endpoint Engineer

- **Company:** General Dynamics Bath Iron Works
- **Location:** Bath, ME, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Apple IOS, JIRA, Dynamic Host Configuration Protocol, Domain Name System (DNS), Identity and Access Management, Virtual Private Networks (VPN), Windows PowerShell, TCP/IP, Computer Network Technologies, Microsoft InTune, Deployment Automation, Servicenow, Windows Client
- **Published:** August 10, 2026
- **Apply:** https://us.experteer.com/career/view-jobs/sr-endpoint-engineer-bath-me-usa-58894284

## About the Role

and tasks * Design endpoint security hardening standards aligned with BIW security policy (antivirus, encryption, patching, remediation) * Own the endpoint lifecycle roadmap including hardware refresh and OS upgrade strategy * Mentor engineers and provide L3 direction; publish SOPs to raise team capability * Serve as final escalation point for complex hardware/OS/app issues; coordinate vendor engagement as needed * Partner with Infrastructure, Security, and Service Desk on projects, standards, and roadmap * Drive continuous improvement of endpoint standards, processes, and tooling backlog * Own documentation and knowledge base for the Endpoint Engineering team Tasks * 5+ years of hands-on enterprise endpoint engineering experience (1000+ endpoints) * Proficiency designing Windows client images and configurations using an enterprise endpoint management platform (e.g., MCM) * Experience designing MDM policies for iOS/iPadOS and Android * PowerShell proficiency for automation; working aaaaa
MFA, of AD, GPO, and identity management * Solid understanding of core networking (TCP/IP, DNS, DHCP, VPN) and endpoint security concepts (encryption, MFA, remediation, compliance) * Preferred: cloud-based endpoint management (Intune/Autopilot) and Entra ID; familiarity with ServiceNow and Jira * Must pass BIW background-check and site-access requirements Key requirements *

## Description

Experteer Overview As a senior technical lead in Endpoint Engineering at BIW, you own the client endpoint and mobile environment, shaping imaging, management tooling, and security standards. You work across Infrastructure, Security, and Service Desk to deliver secure, reliable, and high-performing endpoints. You'll drive automation, lifecycle planning, and policy design, impacting safety, compliance, and operational milestones. This role offers influence on architecture and hands-on mentorship in a collaborative, cross-functional setting. Compensation / Benefits * Design and maintain endpoint configurations that meet BIW security and data protection requirements * Develop client device images and standardized build configurations for laptops, desktops, and mobile devices * Own the enterprise endpoint management tooling and MDM architecture (deployment, patching, compliance, reporting) * Set the automation strategy for the endpoint estate and build PowerShell frameworks for deployments and tasks * Design endpoint security hardening standards aligned with BIW security policy (antivirus, encryption, patching, remediation) * Own the endpoint lifecycle roadmap including hardware refresh and OS upgrade strategy * Mentor engineers and provide L3 direction; publish SOPs to raise team capability * Serve as final escalation point for complex hardware/OS/app issues; coordinate vendor engagement as needed * Partner with Infrastructure, Security, and Service Desk on projects, standards, and roadmap * Drive continuous improvement of endpoint standards, processes, and tooling backlog * Own documentation and knowledge base for the Endpoint Engineering team Tasks * 5+ years of hands-on enterprise endpoint engineering experience (1000+ endpoints) * Proficiency designing Windows client images and configurations using an enterprise endpoint management platform (e.g., MCM) * Experience designing MDM policies for iOS/iPadOS and Android * PowerShell proficiency for automation; working knowledge of AD, GPO, and identity management * Solid understanding of core networking (TCP/IP, DNS, DHCP, VPN) and endpoint security concepts (encryption, MFA, remediation, compliance) * Preferred: cloud-based endpoint management (Intune/Autopilot) and Entra ID; familiarity with ServiceNow and Jira * Must pass BIW background-check and site-access requirements Key requirements *


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Improving quality with Agentic AI with Rovo Dev and Xray](https://www.wearedevelopers.com/videos/2005-improving-quality-with-agentic-ai-with-rovo-dev-and-xray)
- [An Applied Introduction to eBPF with Go](https://www.wearedevelopers.com/videos/1075-an-applied-introduction-to-ebpf-with-go)
- [Xcode development redefAIned](https://www.wearedevelopers.com/videos/100195-xcode-development-redefained)
- [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company)
- [Collaboration Quantified: Lessons from Open Source Developer Networks](https://www.wearedevelopers.com/videos/1422-collaboration-quantified-lessons-from-open-source-developer-networks)

## Related Articles

- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)
- [Dev Digest 139 - Soft and hard queries](https://www.wearedevelopers.com/magazine/487-dev-digest-139-soft-and-hard-queries)
- [Dev Digest 129 - Now that's what I call private data!](https://www.wearedevelopers.com/magazine/468-dev-digest-129-now-that-s-what-i-call-private-data)