Senior Systems Administrator

Imagine yourself doing meaningful work that makes an everyday impact on the world around you. Growing your expertise and expanding your skillset with every project. At Hach (a Veralto company), we ensure water quality for people around the world, and every team member plays a vital role in that mission. Our founding vision is to make water analysis better—faster, simpler, greener, and more informative through teamwork, customer partnerships, passionate experts, and reliable, easy-to-use solutions.

As part of our team and the broader Veralto network, you’ll be part of a unique work environment where purpose meets possibility: where you’ll make an immediate, measurable impact on a global scale by enabling the world’s everyday water needs, and where you’ll have opportunities to foster your professional development and fuel your career growth. Motivated by the highest possible stakes in climate change and global health, we’re working together within a rapidly digitizing industry to find innovative technologies that guarantee the safety of our water and our environment.

More about us.

About the role

Reporting to the Sr. Manager, Application Infrastructure, the Senior Systems Administrator is responsible for the design, implementation, operation, security, and continuous improvement of critical infrastructure services that support Hach and Water Quality operating companies. This role owns core platform services—including DNS, certificate lifecycle management, email authentication, Windows/virtualization platforms, and external security vulnerability remediation—driving operational reliability, compliance, and business continuity. This position is part of the Hach IT – Application Infrastructure department located in Ames, IA or Loveland, Colorado and will be hybrid.

Responsibilities

• Administering and maintaining Windows Server, Active Directory, VMware/virtualization, storage, and site/datacenter infrastructure platforms.
• Owning internal and external DNS services, domain registrar activities, and DNS-based email authentication controls (DKIM, SPF, DMARC).
• Managing end-to-end SSL/TLS certificate lifecycle management (CSRs, issuance, renewals, PKI support).
• Investigating and remediating external attack surface findings and high-risk vulnerabilities in partnership with SecOps and Global Security teams.
• Developing PowerShell scripts to automate repetitive infrastructure tasks and supporting backup and disaster recovery operations.

Requirements

• Bachelor’s degree in Computer Science, Information Systems, Engineering, or equivalent practical experience.
• 6+ years of hands-on infrastructure engineering, systems administration, or platform operations experience in a regulated or business-critical enterprise environment.
• Deep technical experience with Windows Server, Active Directory, DNS/DHCP, Group Policy, and VMware/virtualization platforms.
• Proven hands-on experience with SSL/TLS certificate lifecycle management, PKI workflows, and email authentication standards (DKIM, SPF, DMARC).
• Direct experience with external security vulnerability remediation and advanced PowerShell scripting/automation.

Benefits

• Flexible working hours
• Professional onboarding and training options
• Career coaching and development opportunities
• Health benefits
• 401(k)

Pay

The compensation range for this role is $95,000 - $105,000 USD per year. This job is also eligible for Bonus Pay.