Senior Desktop Engineer Jobs in Lewiston, ME (NOW HIRING)

We offer a competitive salary for this role, with an expected range of $70,600 to $89,400. The final offer will depend on your experience, skills, and overall qualifications. General Dynamics – Bath Iron Works also provides a variety of benefits including medical & dental insurance coverage, 401(k) retirement savings plan, flexible spending accounts/HSAs, life and disability insurance, company paid holidays, paid time off (PTO), health coaching, athletic trainers, employee assistance programs and onsite health services.

As part of the Endpoint Engineer team, the Endpoint Engineer III builds, administers, and maintains the client endpoint and mobile environment for Bath Iron Works under the direction of the Sr. Endpoint Engineer. The role executes established build standards and images, administers enterprise endpoint management tooling and mobile device management (MDM), develops PowerShell automation for defined tasks, and implements endpoint security configurations.

The Endpoint Engineer III serves as an L3 escalation point for the desktop and mobility technicians on documented complex issues and partners with the Infrastructure, Security, and Service Desk teams on project execution.  Operating under the BIW Business Operating System (BOS), the Endpoint Engineer III ensures compliance with safety, quality, and performance standards while coordinating with other key stakeholders to meet overall milestones.

Key Responsibilities

• Safety Leadership:
• Comply with all BIW safety and security standards while working across office, manufacturing, and shipboard environments.
• Implement endpoint configurations that uphold BIW security and data-protection requirements, and follow established procedures when handling hardware, media, and sensitive data.
• Project Execution:
• Build and maintain client device images and standard build configurations for laptops, desktops, and mobile devices under the direction of the senior Endpoint Engineer.
• Administer enterprise endpoint management tooling (e.g., MCM) and MDM platforms for software deployment, patching, compliance reporting, and mobile device policy execution.
• Develop and maintain PowerShell scripts to automate defined deployment, update, and endpoint administration tasks.
• Implement endpoint security configurations in alignment with BIW security policy, including antivirus, encryption, patching, and vulnerability remediation activities.
• Support endpoint lifecycle management activity, including hardware refresh execution and operating system upgrades across the estate.
• Other duties as assigned.
• Training and Development:
• Maintain and document working knowledge of endpoint platforms, management tools, and security practices. Pursue and obtain relevant certifications.
• Provide L3 guidance to the desktop and mobility technicians on documented issue types and grow technical depth under the mentorship of the senior Endpoint Engineer.
• Team Collaboration and Communication:
• Serve as L3 escalation for documented complex hardware, operating system, and application issues raised by Desktop Technician II; escalate architecture-level or undocumented issues to the senior Endpoint Engineer.
• Partner with the Infrastructure, Security, and Service Desk teams on assigned project execution and cross-team incident resolution.
• Communicate technical issues and solutions clearly to technicians, peer IT teams, and stakeholders.
• Continuous Improvement:
• Identify opportunities to automate manual processes encountered during routine work and propose them for prioritization with the senior Endpoint Engineer.
• Contribute to technical documentation, standard operating procedures, and knowledge base articles for endpoint tooling and procedures.

Required:

• High school diploma or equivalent.  

Preferred:

• Associate or bachelor’s degree in information technology, computer science, or a related field, or equivalent experience.
• Microsoft endpoint/Windows certifications (e.g., MD-102 Endpoint Administrator) and other relevant industry certifications.

Required:

• Must be able to satisfy BIW background-check and site-access requirements.
• 2–4 years of endpoint administration, senior desktop, or entry-level endpoint engineering experience in an enterprise environment.
• Hands-on experience administering an enterprise endpoint management platform (e.g., MCM), including image build, software deployment, patching, and compliance reporting.
• Working proficiency in PowerShell for endpoint automation, and working knowledge of Active Directory, Group Policy, and identity management.
• Working understanding of core networking (TCP/IP, DNS, DHCP, VPN) and endpoint security concepts (encryption, MFA, patching, and vulnerability remediation).

Preferred:

• Exposure to cloud-based endpoint management (Intune/Autopilot) and Entra ID, MDM administration, ServiceNow, Jira, and experience in a defense, manufacturing, or other regulated environment.