Network Security Administrator

At IDEXX our work helps create clarity in a complex and evolving world through diagnostic and software products and services. That clarity depends on secure resilient connectivity and trusted access especially across global teams cloud services and third-party vendor ecosystems.

Were looking for a Network Security Engineer to provide hands-on engineering across our IPAM and DNS Security Zero Trust Platform and Secure Vendor Remote Access strengthening IDEXXs security posture while enabling the business at global scale.

Location:We are looking for someone within driving distance to Westbrook Maine with the flexibility of working on a hybrid basis a minimum of 8 days per month on-site. Alternatively we are open to someone in Massachusetts or New Hampshire that could potentially also come on-site but open to less times per month.

In this role you will

• Manage DNS security and IP address management platforms across the enterprise using our (IPAM DNS/DHCP DNS Security) ensuring reliability security controls and operational excellence.
• Optimize & Expand Zero Trust access by partnering with network endpoint and security teams to deliver secure user/app connectivity.
• Run secure third-partyaccess through our SVRA platform enforcing least privilegeaccess strong auditing and vendor lifecycle controls.
• Translate risk into engineering outcomes: improve segmentation policy logging and security automation that reduce exposure without slowing the business.
• Build clarity through standards and documentation: create runbooks patterns and reference architectures that make secure operations repeatable and scalable.
• Serve as an escalation point for complex issues and mentor other engineers through design reviews troubleshooting and best practiceadoption.
  

What You Will Need To Succeed

• 3-5 years of hands-on experience in enterprise network security engineering.
• 3-5 years of strong experience in IPAM and DNS/DHCP plus DNS Security administration and operational troubleshooting.
• 3-5 years implementing Zero Trustin production enterprise environments.
• 3-5 years managing Secure Vendor Remote Access (or closely equivalent) with security controls and auditability.
• Strong foundational skills in TCP/IP DNS routing firewall concepts authentication/authorization and security logging/monitoring.
• Ability to communicate clearly with both technical and nontechnical partnersturning complex systems into actionable decisions (and keeping the messagecustomer focused ).
  

It would be a plus if you any of this experience

• Automation or infrastructure ascodeexperience (APIs scripting policy automation CI/CD integration).
• Experience integrating DNS and Zero Trust telemetry into SIEM/SOC workflows.
• Cloud networking/security exposure (Azure/AWS/GCP) plus enterprise identity integrations.
• Relevant certifications (e.g. Zscaler certs CCNP Security CISSP GIAC).

Why IDEXX

Were proud of the work we do because our work matters. An innovation leader in every industry we serve we follow our Purpose and Guiding Principles to help pet owners worldwide keep their companion animals healthy and happy to ensure safe drinking water for billions and to help farmers protect livestock and poultry from diseases. We have customers in over 175 countries and a global workforce of over 10000 talented people.

So what does that mean for you We enrich the livelihoods of our employees with a positive and respectful work culture that embraces challenges and encourages learning and discovery. At IDEXX you will be supported by competitive compensation incentives and benefits while enjoying purposeful work that drives improvement.

Lets pursue what matters together.

IDEXX values a diverse workforce and workplace and strongly encourages women people of color LGBTQ individuals people with disabilities members of ethnic minorities foreign-born residents and veterans to apply.

IDEXX is an equal opportunity employer. Applicants will not be discriminated against because of race color creed sex sexual orientation gender identity or expression age religion national origin citizenship status disability ancestry marital status veteran status medical condition or any protected category prohibited by local state or federal laws.

#LI-EV1