Principal Network Security Architect: Zero Trust & DNS

IDEXX; Boston (MA); On-site; USD 108,000 - 132,000; Full time

Benefits offered by this job

Health benefits (Day-One)

Dental benefits (Day-One)

Vision benefits (Day-One)

5% 401k match

Employee stock program

Job summary

IDEXX is seeking a Principal Network Security Administrator in Boston to lead the security architecture for Zero Trust, DNS/IPAM, and SVRA across global teams. You will drive strategy, governance, and secure connectivity for users and applications at scale.

The role requires 7+ years of enterprise network security, strong DNS/IPAM and SVRA experience, and the ability to mentor engineers. A Bachelor’s degree and exceptional communication are essential.

Qualifications

• 7+ years of hands‑on enterprise network security engineering experience.
• Expert in IPAM and DNS/DHCP with security controls and operational troubleshooting.
• Experience implementing Zero Trust in production enterprise environments.
• Experience managing Secure Vendor Remote Access (SVRA) with security controls and auditability.
• Foundational knowledge of CASB, Generative AI Control, and DLP concepts.

Responsibilities

• Define overall security architecture and roadmap for Zero Trust, DNS Security/IPAM, and SVRA.
• Own DNS security and IPAM platforms, setting reliability and security standards.
• Architect Zero Trust access and secure user/app connectivity at global scale.
• Govern SVRA access with least‑privilege and strong auditing.

Skills

Enterprise network security

IPAM & DNS/DHCP

Zero Trust in production

SVRA security

CASB & Generative AI Control

DLP concepts

Security auditing & logging

Global-scale architecture

Technical leadership

Education

Bachelor’s degree or equivalent

Tools

DNS/IPAM tooling

SIEM/SOC integration

Job description

IDEXX is seeking a Principal Network Security Administrator in Boston to lead the security architecture for Zero Trust, DNS/IPAM, and SVRA across global teams. You will drive strategy, governance, and secure connectivity for users and applications at scale.

The role requires 7+ years of enterprise network security, strong DNS/IPAM and SVRA experience, and the ability to mentor engineers. A Bachelor’s degree and exceptional communication are essential.