Senior Platform Engineer (DevOps)

Job Overview IDEXX DevOps contributes to the success of IDEXX employees and customers by providing scalable, innovative solutions and technical leadership. Our PAWS (Productivity Automation Workflow Solutions) team builds and operates the internal developer platforms that IDEXX software teams rely on every day so that engineers across the company can ship faster, safer, and with confidence. Responsibilities As a Senior Platform Engineer (DevOps) you will be a hands‑on member of an agile platform engineering team, building and iterating on the internal AWS, GitHub Enterprise, Terraform Cloud, and JFrog Artifactory platforms that IDEXX developers and software teams use to build and deliver their products. Design, build, and maintain automation and tooling for IDEXX’s internal developer platforms using Python as the primary language, covering AWS Organizations, GitHub Enterprise, and Terraform Cloud, and JFrog Artifactory. Implement and manage AWS Organizations policies (Service Control Policies, permission boundaries, account vending) to enforce security standards set by Information Security and Compliance teams. Administer and automate GitHub Enterprise: repository management, access controls, GitHub Actions runner infrastructure, organization policies, and security configurations. Configure and operate Terraform Cloud workspaces, variable sets, policy‑as‑code (Sentinel), and team permissions to enable safe, consistent infrastructure‑as‑code delivery across engineering teams. Write clean, well‑tested, maintainable Python code for platform tooling, CLI utilities, automation scripts, and API integrations. Participate actively in pair programming, code reviews, and team refinement sessions – platform engineering here is a team sport, not a solo pursuit. Agile Team Participation Work closely with the Platform Lead Engineer, Platform Agile Practitioner, Platform Engineering Manager, and Platform Product Owner to define, refine, and estimate work coming off the platform backlog. Contribute to sprint ceremonies: planning, stand‑ups, retrospectives, and demos. Break down ambiguous problems into well‑defined tickets with clear acceptance criteria. Internal Customer Partnerships Engage directly with internal developer and software teams to understand their platform use cases, pain points, and requirements. Translate customer feedback into actionable platform improvements and surface findings to the team during backlog refinement. Provide clear, approachable guidance to developers on platform capabilities, best practices, and self‑service workflows. Qualifications 5+ years of experience in platform engineering, DevOps, or a related infrastructure software engineering role. Strong experience in CloudFormation and Terraform. Fluency in Python and daily use of it to build production‑quality tooling, automation, and API integrations. Hands‑on experience administering AWS Organizations: SCP authoring, account management, Control Tower or similar landing zone frameworks. Practical experience with GitHub Enterprise administration: repository policies, access management, Actions runner configuration, and organization‑level security settings. Working knowledge of Terraform Cloud: workspace management, remote state, Sentinel policies, and team permissions. Significant exposure to dependency management within software development teams to support the configuration needs of various coding languages. Strong collaborative instincts – thrives in pair programming and agile team settings and actively contributes to collective code quality. Ability to work with internal customers to understand their needs and translate them into platform capabilities. Comfortable working in a structured agile process with a backlog, sprint cadence, and shared team ceremonies. Clear communicator, written and verbal, with the ability to explain technical concepts to non‑platform engineers. Nice to Have Experience with AWS IAM Identity Center (SSO), AWS Config, or AWS Security Hub. Experience using CloudFormation StackSets to distribute standardized resource configurations. Familiarity with policy‑as‑code tooling (Sentinel, OPA/Rego). Familiarity with identity federation principals in enterprise environments to support single sign‑on access, including working knowledge of Entra ID (formerly Azure AD). Experience with developer portal or internal tooling frameworks (e.g., Backstage, AWS Service Catalog). AWS certification (Solutions Architect, Developer, or SysOps). Background working in regulated industries with compliance requirements (SOC2, ISO27001, HIPAA, etc.). Technologies Amazon Web Services and AWS Organizations (SCPs, IAM, Control Tower), GitHub Enterprise, Terraform Cloud, JFrog Artifactory, Python, CloudFormation. Location We prefer candidates who can commute to our headquarters in Westbrook, Maine for a flexible hybrid work environment requiring eight days per month on‑site. Candidates in New Hampshire or Massachusetts who can attend occasionally are also welcome. Compensation & Benefits Base annual salary target: $100,000 - $120,000. Opportunity for annual cash bonus. Health / Dental / Vision benefits from day one. 5% matching 401(k). Additional benefits including financial support, pet insurance, mental health resources, volunteer paid days off, employee stock program, foundation donation matching, and more. EEO Statement IDEXX values a diverse workforce and workplace and strongly encourages women, people of color, LGBTQ+ individuals, people with disabilities, members of ethnic minorities, foreign‑born residents, and veterans to apply. IDEXX is an equal‑opportunity employer. Applicants will not be discriminated against because of race, color, creed, sex, sexual orientation, gender identity or expression, age, religion, national origin, citizenship status, disability, ancestry, marital status, veteran status, medical condition, or any protected category prohibited by local, state, or federal laws. #J-18808-Ljbffr