Job Summary The Desktop Engineer is responsible for managing, supporting, and optimizing endpoint hardware, software, and secure access solutions across multiple manufacturing and office environments. This role ensures operational uptime and device compliance by leveraging enterprise tools like Microsoft Intune, Zscaler, and endpoint automation frameworks. The Desktop Engineer will play a critical role in balancing reliability, security, and performance across diverse user environments, ensuring that both office and production teams have secure, efficient access to necessary resources. Reporting directly to the IT Infrastructure Manager, the Desktop Engineer will collaborate closely with cross-functional teams-including IT Security, Operations, and Manufacturing-to deliver seamless, secure, and high-performance desktop and endpoint solutions that support daily operational efficiency and business continuity.
Essential Functions Job duties may change over time and additional job functions may become essential. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
- Deliver Tier 2 support for desktops, laptops, ruggedized tablets, and peripherals across both corporate and manufacturing environments, ensuring minimal downtime and optimal end-user experience
- Collaborate with infrastructure, network, and security teams to support the deployment and sustainment of enterprise-grade networking, endpoint, and access control systems
- Deploy, configure, and manage endpoints using Microsoft Intune, Autopilot, and SCCM, enforcing compliance, security baselines, and zero-touch provisioning standards
- Assist in the design and ongoing implementation of Zero Trust Architecture (ZTA), supporting endpoint segmentation, identity-based access, and conditional policy enforcement
- Support the installation, configuration, and sustainment of end-user IT systems and services in alignment with corporate IT governance and lifecycle management practices
- Enforce endpoint compliance through automated patching, malware prevention, vulnerability remediation, and Multi-Factor Authentication (MFA) integration
- Manage the full endpoint lifecycle - from procurement, imaging, and deployment to decommissioning - ensuring devices meet corporate standards, asset tracking, and security posture requirements
- Maintain and support the enterprise voice platform, including RingCentral VoIP, endpoint provisioning, softphone configuration, analog device integration, and mobile access to ensure seamless and reliable communications
- Develop and maintain accurate IT documentation, including standard operating procedures (SOPs), knowledgebase articles, configuration baselines, and asset records
- Provide hands-on support for domain migrations, ERP/MES implementations, and infrastructure modernization projects across distributed facilities
- Participate in enterprise-wide incident resolution, collaborating with cross-functional IT teams to address escalated issues and fulfill critical endpoint support during on-call rotations
- Operate with minimal supervision, demonstrating initiative, accountability, and ownership in resolving complex technical issues and driving continuous service improvement
Expected Areas of Competence (KSAs)- Bachelor's degree in IT, Computer Science, or related field - or equivalent experience
- 4-8 years of experience in desktop deployment, configuration, and lifecycle support in enterprise environments
- Proficient in Windows 10/11, Microsoft 365, Active Directory, and ITSM platforms (e.g., Freshservice)
- Skilled in Microsoft Intune, Autopilot, and enforcing endpoint compliance policies
- Familiar with Zscaler (ZIA, Client Connector) and Zero Trust access models
- Experience supporting RingCentral VoIP systems, including endpoint and analog device setup
- Strong troubleshooting skills across OS, hardware, software, and connectivity issues
- Working knowledge of networking fundamentals: TCP/IP, DNS, DHCP, VPN
- Experience with rugged industrial hardware (e.g., Zebra, Honeywell)
- Proficient in PowerShell scripting for endpoint automation and configuration
- Effective communicator with strong documentation and collaboration skills
- Ability to manage multiple priorities, operate independently, and maintain confidentiality
- Positive, proactive mindset with a commitment to learning and continuous improvement
This position description is intended to cover the most significant, ongoing job functions and competency areas. Successful performance in the role will require performing satisfactorily other duties as assigned.
Education and Experience Requirements - Minimum of a bachelor's degree in a related field or equivalent industry certifications and experience.
- Minimum of four years of experience working with IT hardware and software.
- Minimum of three years supporting IT systems in a manufacturing or similarly complex environment preferred.
Preferred Qualifications- Microsoft 365 Certified: Modern Desktop Administrator Associate
- Zscaler Certified Associate (ZCA)
- CompTIA A+ / Network+ / Security+
- Familiarity utilizing Microsoft Intune for endpoint management and security enforcement
- Demonstrated ability to work effectively in a team environment and collaborate with diverse cross-functional teams.
Travel Requirements Up to 15% travel may be required to other Neenah Foundry Company locations
Salary based on experience and qualifications Candidates for positions with Neenah Foundry Company and its subsidiaries must be legally authorized to work in the United States. Verification of employment eligibility will be required at the time of hire. All offers of employment will be conditioned upon successful completion of a post-offer, pre-hire background check and drug screen. Visa sponsorship is not available for this position.
Neenah Foundry Company and its subsidiaries is an equal opportunity employer, and applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, veteran status, disability status or national origin.
Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities
This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.