Senior Network Security Architect - Zero Trust & DNS

IDEXX; Westbrook (ME); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Health/Dental/Vision Day-One

401(k) matching - 5%

Employee stock program

Volunteer days / wellness programs

Job summary

IDEXX is seeking a Principal Network Security Administrator to define the Zero Trust and DNS/IPAM strategy across global operations. You will own the security architecture, drive secure access, and mentor engineers to deliver scalable, compliant security outcomes.

The role emphasizes collaboration with cross-functional teams to manage third-party access and emerging DLP/AI controls. The position requires 7+ years in enterprise network security, strong DNS/IPAM expertise, and a track record of

Qualifications

• You must have 7+ years in enterprise network security engineering.
• Strong IPAM, DNS/DHCP, and DNS security administration experience.
• Experience implementing Zero Trust in production environments.
• Experience with Secure Vendor Remote Access (SVRA) and governance.
• Bachelor’s degree or equivalent is required.

Responsibilities

• Define the security architecture and roadmap for Zero Trust, DNS/IPAM, and SVRA.
• Own enterprise DNS security and IPAM platforms with reliability and controls.
• Architect Zero Trust access and secure global user/app connectivity.
• Set governance for secure third-party access via SVRA with least-privilege.
• Support CASB, Generative AI Control, and DLP rollout with policy coverage.
• Research security technologies and provide architecture recommendations.
• Translate risk into engineering outcomes with segmentation, logging, and automation.
• Create runbooks and reference architectures for scalable secure operations.
• Serve as top escalation for complex network security issues; mentor engineers.
• Assess impact of security changes and contribute to infrastructure strategy.

Skills

Enterprise network security engineers

IPAM & DNS/DHCP management

DNS Security administration

Zero Trust implementation

Secure Vendor Remote Access (SVRA)

Networking fundamentals

CASB & DLP concepts

Technical leadership

Global 24/7 availability

Excellent communication

Education

Bachelor’s degree or equivalent

Job description

IDEXX is seeking a Principal Network Security Administrator to define the Zero Trust and DNS/IPAM strategy across global operations. You will own the security architecture, drive secure access, and mentor engineers to deliver scalable, compliant security outcomes.

The role emphasizes collaboration with cross-functional teams to manage third-party access and emerging DLP/AI controls. The position requires 7+ years in enterprise network security, strong DNS/IPAM expertise, and a track record of