Cloud Security Architect

Our cybersecurity and information security teams at IDEXX contribute to a more resilient, adaptable, and security-aware enterprise prepared to navigate today’s evolving threat landscape. We have complex, multi-dimensional programs across the organization that support all the technology needed to deliver products and solutions to customers - enabling them to focus on delivering high quality patient care.IDEXX is seeking a Cloud Security Architect to lead our multi-cloud security architecture across AWS, Azure, and GCP environments. This senior-level position will architect and implement cloud security posture management (CSPM) solutions, drive security standards enforcement, and partner with engineering teams to embed security controls directly into cloud deployment pipelines. You will play a critical role in protecting applications that serve our global veterinary diagnostics business while enabling development teams to move fast without compromising security.This position reports to the Senior Manager of Product & Application Security and works closely with DevOps engineers and cloud platform owners across the organization.In this role, you will be responsible for...Cloud Security Architecture & CSPMArchitect, implement, and continuously improve cloud security posture management across AWS, Azure, and GCP environments supporting IDEXX products and applicationsLead the migration from AquaSec to CrowdStrike Falcon CSPM, ensuring continuity of visibility and compliance enforcementEstablish and maintain compliance with CIS Benchmarks Level 1 standards across all cloud platformsDesign monitoring and alerting strategies that surface actionable security gaps to both security and engineering teamsInfrastructure-as-Code SecurityImplement automated security scanning and policy enforcement for Terraform, CloudFormation, and other IaC frameworksIntegrate tools like CrowdStrike Falcon, Checkov and Trivy into CI/CD pipelines to prevent misconfigurations before deploymentDevelop policy-as-code frameworks that codify security requirements and enable self-service complianceDevOps Partnership & EnablementEmbed security controls directly into cloud deployment pipelines using native platform capabilities and third-party toolingPartner with DevOps teams to build secure-by-default infrastructure templates and golden pathsConduct architecture reviews for new cloud services and deployment patternsTranslate complex security requirements into practical, actionable guidance for engineering teamsSecurity Assessments & Risk ManagementConduct cloud security assessments, threat modeling, and architecture reviews for critical workloadsIdentify and prioritize security risks based on business impact, exploitability, and compensating controlsWork with product teams to implement mitigations that balance security effectiveness with operational feasibilityTooling, Automation & MetricsManage and optimize cloud-native security tooling including CSPM, CNAPP, and secret scanning solutionsBuild automation to reduce manual security work and improve consistency of controlsEstablish metrics and reporting that demonstrate security posture improvement and compliance trendsWhat You Will Need to Succeed...7-10+ years of experience in information security with at least 5 years focused on cloud security architectureHands-on experience implementing and operating CSPM solutions in multi-cloud environmentsDeep hands-on experience architecting security controls in AWS, Azure, and GCP production environmentsDemonstrated proficiency with CSPM tools (CrowdStrike Falcon, Wiz, Prisma Cloud, or similar platforms)Strong knowledge of CIS Benchmarks, cloud security frameworks (CSA CCM, NIST), and compliance standards (SOC 2, GDPR, HIPAA)Expertise in Infrastructure-as-Code security scanning and policy enforcement (Checkov, Trivy, Terraform Sentinel, OPA)Experience integrating security controls into CI/CD pipelines (GitHub Actions, GitLab CI, Jenkins, Azure DevOps)Solid understanding of container security, Kubernetes security, and serverless security patternsProficiency with scripting and automation (Python, Bash, PowerShell)Proven track record architecting security controls for large-scale cloud deploymentsExperience with CIS Benchmarks implementation and compliance enforcementStrong understanding of cloud-native architecture patterns and security implicationsBachelor's degree in Computer Science, Information Security, or equivalent practical experienceProven ability to design security architectures that scale across large, complex cloud environmentsTrack record of successfully partnering with DevOps and engineering teams to implement security without blocking deliveryExperience driving security tool migrations and consolidations with minimal disruptionStrong analytical skills to assess risk, prioritize work, and make pragmatic security decisionsAbility to translate technical security concepts into language that resonates with both technical and business stakeholdersExcellent written and verbal communication skills; able to produce concise architecture documentation and executive summariesDemonstrated ability to influence engineering teams through technical credibility rather than authorityComfortable presenting security recommendations to senior technical leadership and defending design decisionsSelf-directed and outcome-focused; able to identify problems, propose solutions, and drive them to completion with minimal supervisionPreferredRelevant cloud security certifications (AWS Certified Security - Specialty, Azure Security Engineer Associate, GCP Professional Cloud Security Engineer, CCSP)Experience with CrowdStrike Falcon CSPM or other leading CSPM/CNAPP platformsBackground in DevSecOps, SRE, or cloud platform engineeringFamiliarity with OWASP SAMM or similar security maturity frameworksPrior experience in regulated industries (healthcare, financial services) with SOC 2, HIPAA, or PCI-DSS compliance requirementsContributions to open-source security tools or cloud security communitiesWhat you can expect from us:• Base annual salary target: $120000 - $150000 (yes, we do have flexibility if needed)• Opportunity for annual cash bonus• Health / Dental / Vision Benefits Day-One• 5% matching 401k• Additional benefits including but not limited to financial support, pet insurance, mental health resources, volunteer paid days off, employee stock program, foundation donation matching, and much more!Why IDEXX?We’re proud of the work we do, because our work matters. An innovation leader in every industry we serve, we follow our Purpose and Guiding Principles to help pet owners worldwide keep their companion animals healthy and happy, to ensure safe drinking water for billions, and to help farmers protect livestock and poultry from diseases. We have customers in over 175 countries and a global workforce of over 10,000 talented people.So, what does that mean for you? We enrich the livelihoods of our employees with a positive and respectful work culture that embraces challenges and encourages learning and discovery.   At IDEXX, you will be supported by competitive compensation, incentives, and benefits while enjoying purposeful work that drives improvement. Let’s pursue what matters together. IDEXX values a diverse workforce and workplace and strongly encourages women, people of color, LGBTQ+ individuals, people with disabilities, members of ethnic minorities, foreign-born residents, and veterans to apply.IDEXX is an equal opportunity employer. Applicants will not be discriminated against because of race, color, creed, sex, sexual orientation, gender identity or expression, age, religion, national origin, citizenship status, disability, ancestry, marital status, veteran status, medical condition, or any protected category prohibited by local, state, or federal laws.#LI-EV1SummaryLocation: Westbrook, ME; US-NH-Virtual; Virtual Maine; Virtual New Hampshire; Virtual Massachusetts; US-ME-Virtual; US-MA-VirtualType: Full time