Senior Systems Administrator

Experteer Overview In this role you will design, implement, and continuously improve critical infrastructure services to support Hach and its Water Quality operating companies. You will be part of the IT - Application Infrastructure team in a hybrid role based in Ames, IA or Loveland, CO, enabling reliable DNS, certificate management, and secure Windows/VMware platforms. You will partner with SecOps and Global Security to address vulnerabilities and drive compliance and business continuity. You will automate tasks with PowerShell and support backup and disaster recovery. This is a hands-on opportunity to impact global water quality initiatives while advancing your technical leadership. Compensation / Benefits * Administer and maintain Windows Server, Active Directory, VMware/virtualization, storage, and data center infrastructure * Own internal and external DNS, domain registrar activities, and DNS-based email authentication controls (DKIM, SPF, DMARC) * Manage end-to-end SSL/TLS certificate lifecycle (CSRs, issuance, renewals, PKI support) * Investigate and remediate external attack surface findings with SecOps and Global Security * Develop PowerShell scripts to automate infrastructure tasks and support backup/disaster recovery operations Tasks * Bachelor’s degree in Computer Science, Information Systems, Engineering, or equivalent practical experience * 6+ years of hands-on infrastructure engineering or platform operations in a regulated or critical environment * Deep experience with Windows Server, Active Directory, DNS/DHCP, Group Policy, and VMware/virtualization * Proven experience with SSL/TLS certificate lifecycle management, PKI workflows, and email authentication standards (DKIM, SPF, DMARC) * Direct experience with external security vulnerability remediation and advanced PowerShell scripting/automation Key requirements * Flexible working hours * Onboarding and training options * Powerful team environment * Career coaching and development opportunities * Health benefits * 401(k)

address lifecycle (CSRs, issuance, renewals, PKI support) * Investigate and remediate external attack surface findings with SecOps and Global Security * Develop PowerShell scripts to automate infrastructure tasks and support backup/disaster recovery operations Tasks * Bachelor’s degree in Computer Science, Information Systems, Engineering, or equivalent practical experience * 6+ years of hands-on infrastructure engineering or platform operations in a regulated or critical environment * Deep experience with Windows Server, Active Directory, DNS/DHCP, Group Policy, and VMware/virtualization * Proven experience with SSL/TLS certificate lifecycle management, PKI workflows, and email authentication standards (DKIM, SPF, DMARC) * Direct experience with external security vulnerability remediation and advanced PowerShell scripting/automation Key requirements * Flexible working hours * Onboarding and training options * Powerful team environment * Career coaching and development opportunities * a aaaB_ benefits * 401(k)