Strategic Enterprise Data Security Architect - Remote

IDEXX Laboratories, Inc; Portland (ME); On-site; USD 120,000 - 155,000; Full time

Job summary

IDEXX Laboratories, Inc is seeking a Data Security Architect to lead the enterprise data security architecture, DSPM integration, and design standards across Snowflake, Databricks, M365, Box, and cloud apps (AWS-first).

The role focuses on the “how” of data protection, ensuring secure design patterns, scalable controls, and cross-team collaboration with program, engineering, and SOC teams. The position is fully remote in the US, with EST time preference.

Qualifications

• 7-10+ years experience in data security, cloud security, or security architecture.
• Location: this role is 100% virtual/remote, based in the US only, with a strong preference for EST time zone.
• Strong experience designing security for cloud-native data platforms (Snowflake, Databricks).
• Proven ability to design and scale data classification and tagging models, data protection controls (DLP, masking), and access control models (RBAC, ABAC).
• Experience working across data engineering, application engineering, and cloud platform teams.

Responsibilities

• Data Security Architecture & Design: define enterprise data security architecture and control strategies (DSPM integration, DLP, data platform controls).
• Establish standard control patterns (classification, encryption, tokenization, masking, RBAC/ABAC, data movement controls).
• Ensure consistency and scalability of data protection across SaaS, cloud, and application environments.
• Platform Integration & Control Alignment: design integration across Snowflake, Alation, Entra ID, M365/Box, cloud environments.
• Translate data risk insights into technical control implementation requirements.
• Reference Architecture & Engineering Enablement: maintain Data Security Reference Architecture and secure design patterns for engineering teams.
• Collaboration with Program & Engineering Teams: provide architectural direction and ensure execution aligns with risk priorities.
• Standards, Governance & Continuous Improvement: evolve data protection standards in line with policy, regulatory requirements, and emerging DSPM/DLP capabilities.

Skills

Data security architecture

Cloud security

DSPM

DLP

Snowflake

Databricks

Entra ID

RBAC/ABAC

Tools

DSPM tools

Alation

Snowflake

Databricks

M365/Box

Entra ID

AWS

Job description

IDEXX Laboratories, Inc is seeking a Data Security Architect to lead the enterprise data security architecture, DSPM integration, and design standards across Snowflake, Databricks, M365, Box, and cloud apps (AWS-first).

The role focuses on the “how” of data protection, ensuring secure design patterns, scalable controls, and cross-team collaboration with program, engineering, and SOC teams. The position is fully remote in the US, with EST time preference.