Senior Systems Administrator
Role details
Job location
Tech stack
Job description
Reporting to the Sr. Manager, Application Infrastructure , the Senior Systems Administrator is responsible for the design, implementation, operation, security, and continuous improvement of critical infrastructure services that support Hach and Water Quality operating companies. This role owns core platform services-including DNS, certificate lifecycle management, email authentication, Windows/virtualization platforms, and external security vulnerability remediation-driving operational reliability, compliance, and business continuity.
This position is part of the Hach IT - Application Infrastructure department located in Ames, IA or Loveland, Colorado and will be hybrid .
In this role, a typical day will look like:
-
Administering andmaintainingWindows Server, Active Directory, VMware/virtualization, storage, and site/datacenter infrastructure platforms.
-
Owning internal and external DNS services, domain registrar activities, and DNS-based email authentication controls (DKIM, SPF, DMARC).
-
Managing end-to-end SSL/TLS certificate lifecycle management (CSRs, issuance, renewals, PKI support).
-
Investigating and remediating external attack surface findings and high-risk vulnerabilities in partnership with SecOps and Global Security teams.
-
Developing PowerShell scripts to automate repetitive infrastructure tasks andsupportingbackup and disaster recovery operations.
Requirements
Motivated by the highest possible stakes in climate change and global health, we're working together within a rapidly digitizing industry to find innovative technologies that guarantee the safety of our water and our environment. More about us: https://www.hach.com/about-us, + Bachelor's degree in Computer Science, Information Systems, Engineering, or equivalent practical experience.
-
6+ years of hands-on infrastructure engineering, systems administration, or platform operations experience in a regulated or business-critical enterprise environment.
-
Deep technical experience with Windows Server, Active Directory, DNS/DHCP, Group Policy, and VMware/virtualization platforms.
-
Proven hands-on experience with SSL/TLS certificate lifecycle management, PKI workflows, and email authentication standards (DKIM, SPF, DMARC).
-
Direct experience with external security vulnerability remediation and advanced PowerShell scripting/automation.
Benefits & conditions
- Flexible working hours, The compensation range for this role is $95,000 - $105,000 USD per year. This job is also eligible for Bonus Pay.
We offer a comprehensive package of benefits including paid time off, medical/dental/vision insurance and 401(k) to eligible employees.
Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, benefits, or any other form of compensation and benefits that are allocable to a particular employee remains in the Company's sole discretion unless and until paid and may be modified at the Company's sole discretion, consistent with the law.
US residents: In any materials you submit, you may redact or remove age-identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information.
Veralto Corporation and all Veralto Companies are committed to equal opportunity regardless of race, color, national origin, religion, sex, age, marital status, disability, veteran status, sexual orientation, gender identity, or other characteristics protected by law. We value diversity and the existence of similarities and differences, both visible and not, found in our workforce, workplace and throughout the markets we serve. Our associates, customers and shareholders contribute unique and different perspectives as a result of these diverse attributes.