Senior Systems Administrator

Reporting to the Sr. Manager, Application Infrastructure, the Senior Systems Administrator is responsible for the design, implementation, operation, security, and continuous improvement of critical infrastructure services that support Hach and Water Quality operating companies. This role owns core platform services-including DNS, certificate lifecycle management, email authentication, Windows/virtualization platforms, and external security vulnerability remediation-driving operational reliability, compliance, and business continuity.

This position is part of the Hach IT - Application Infrastructure department located in Ames, IA or Loveland, Colorado and will be hybrid.

In this role, a typical day will look like:

• Administering and maintaining Windows Server, Active Directory, VMware/virtualization, storage, and site/datacenter infrastructure platforms.

• Owning internal and external DNS services, domain registrar activities, and DNS-based email authentication controls (DKIM, SPF, DMARC).

• Managing end-to-end SSL/TLS certificate lifecycle management (CSRs, issuance, renewals, PKI support).

• Investigating and remediating external attack surface findings and high-risk vulnerabilities in partnership with SecOps and Global Security teams.

• Developing PowerShell scripts to automate repetitive infrastructure tasks and supporting backup and disaster recovery operations.

The essential requirements of the job include:

• Bachelor's degree in Computer Science, Information Systems, Engineering, or equivalent practical experience.

• 6+ years of hands-on infrastructure engineering, systems administration, or platform operations experience in a regulated or business-critical enterprise environment.

• Deep technical experience with Windows Server, Active Directory, DNS/DHCP, Group Policy, and VMware/virtualization platforms.

• Proven hands-on experience with SSL/TLS certificate lifecycle management, PKI workflows, and email authentication standards (DKIM, SPF, DMARC).

• Direct experience with external security vulnerability remediation and advanced PowerShell scripting/automation.

US ONLY:

The below range reflects the range of possible compensation for this role at the time of this posting. We may ultimately pay more or less than the posted range. This range may be modified in the future. An associate's position within the salary range will be based on several factors, including, but not limited to, relevant education, qualifications, certifications, experience, skills, seniority, geographic location, performance, shift, travel requirements, sales or revenue-based metrics, any collective bargaining agreements, and business or organizational needs.

The compensation range for this role is $95,000 - $105,000 USD per year. This job is also eligible for Bonus Pay.

We offer a comprehensive package of benefits including paid time off, medical/dental/vision insurance and 401(k) to eligible employees.

Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, benefits, or any other form of compensation and benefits that are allocable to a particular employee remains in the Company's sole discretion unless and until paid and may be modified at the Company's sole discretion, consistent with the law.

US residents: In any materials you submit, you may redact or remove age-identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information.

Unsolicited Assistance

We do not accept unsolicited assistance from any headhunters or recruitment firms for any of our job openings. All resumes or profiles submitted by search firms to any employee at any of the Veralto companies, in any form without a valid, signed search agreement in place for the specific position, approved by Talent Acquisition, will be deemed the sole property of Veralto and its companies. No fee will be paid in the event the candidate is hired by Veralto and its companies because of the unsolicited referral.