Cloud Security ArchitectUSC1 IDEXX Laboratories, Inc. • Westbrook, Maine, United States

Dieses Stellenangebot ist nicht mehr verfügbar

Cloud Security Architect

USC1 IDEXX Laboratories, Inc.

Westbrook, Maine, United States

Westbrook, Maine, United States

Über

About the Role Our cybersecurity and information security teams at IDEXX rely on a resilient, adaptable, and security‑aware enterprise prepared to navigate today’s evolving threat landscape. We are seeking a Cloud Security Architect to lead our multi‑cloud security architecture across AWS, Azure, and GCP environments. In this senior‑level position you will architect and implement CSPM solutions, drive security standards enforcement, and partner with engineering teams to embed security controls directly into cloud deployment pipelines. It reports to the Senior Manager of Product & Application Security and works closely with DevOps engineers and cloud platform owners across the organization. Responsibilities Architect and implement cloud security posture management (CSPM) across AWS, Azure, and GCP environments supporting IDEXX products and applications. Lead the migration from AquaSec to CrowdStrike Falcon CSPM, ensuring continuity of visibility and compliance enforcement. Maintain compliance with CIS Benchmarks Level 1 across all cloud platforms. Design monitoring and alerting strategies that surface actionable security gaps to security and engineering teams. Implement automated security scanning and policy enforcement for Terraform, CloudFormation, and other IaC frameworks. Integrate tools such as CrowdStrike Falcon, Checkov, and Trivy into CI/CD pipelines to prevent misconfigurations before deployment. Develop policy‑as‑code frameworks that codify security requirements and enable self‑service compliance. Embed security controls directly into cloud deployment pipelines using native platform capabilities and third‑party tooling. Partner with DevOps teams to build secure‑by‑default infrastructure templates and golden paths. Conduct architecture reviews for new cloud services and deployment patterns. Translate complex security requirements into practical, actionable guidance for engineering teams. Conduct cloud security assessments, threat modeling, and architecture reviews for critical workloads. Identify and prioritize security risks based on business impact, exploitability, and compensating controls. Work with product teams to implement mitigations that balance security effectiveness with operational feasibility. Manage and optimize cloud‑native security tooling including CSPM, CNAPP, and secret scanning solutions. Build automation to reduce manual security work and improve consistency of controls. Establish metrics and reporting that demonstrate security posture improvement and compliance trends. Qualifications 7–10+ years of experience in information security with at least 5 years focused on cloud security architecture. Hands‑on experience implementing and operating CSPM solutions in multi‑cloud environments. Deep hands‑on experience architecting security controls in AWS, Azure, and GCP production environments. Proficiency with CSPM tools such as CrowdStrike Falcon, Wiz, Prisma Cloud, or similar platforms. Strong knowledge of CIS Benchmarks, cloud security frameworks (CSA CCM, NIST), and compliance standards (SOC2, GDPR, HIPAA). Expertise in Infrastructure‑as‑Code security scanning and policy enforcement (Checkov, Trivy, Terraform Sentinel, OPA). Experience integrating security controls into CI/CD pipelines using GitHub Actions, GitLab CI, Jenkins, or Azure DevOps. Solid understanding of container security, Kubernetes security, and serverless security patterns. Proficiency with scripting and automation languages such as Python, Bash, and PowerShell. Proven track record architecting security controls for large‑scale cloud deployments. Experience with CIS Benchmarks implementation and compliance enforcement. Strong understanding of cloud‑native architecture patterns and security implications. Bachelor’s degree in Computer Science, Information Security, or equivalent practical experience. Proven ability to design security architectures that scale across large, complex cloud environments. Track record of successfully partnering with DevOps and engineering teams to implement security without blocking delivery. Experience driving security tool migrations and consolidations with minimal disruption. Strong analytical skills to assess risk, prioritize work, and make pragmatic security decisions. Ability to translate technical security concepts into language that resonates with both technical and business stakeholders. Excellent written and verbal communication skills; able to produce concise architecture documentation and executive summaries. Demonstrated ability to influence engineering teams through technical credibility rather than authority. Comfortable presenting security recommendations to senior technical leadership and defending design decisions. Self‑directed and outcome‑focused; able to identify problems, propose solutions, and drive them to completion with minimal supervision. Preferred Experience Relevant cloud security certifications such as AWS Certified Security – Specialty, Azure Security Engineer Associate, GCP Professional Cloud Security Engineer, or CCSP. Experience with CrowdStrike Falcon CSPM or other leading CSPM/CNAPP platforms. Background in DevSecOps, SRE, or cloud platform engineering. Familiarity with OWASP SAMM or similar security maturity frameworks. Prior experience in regulated industries (healthcare, financial services) with SOC2, HIPAA, or PCI‑DSS compliance requirements. Contributions to open‑source security tools or cloud security communities. Benefits Base annual salary target: $120,000 – $150,000. Opportunity for annual cash bonus. Health, dental, and vision benefits from day one. 5% matching 401(k). Additional benefits including financial support, pet insurance, mental health resources, volunteer paid days off, employee stock program, foundation donation matching, and more. Equal Opportunity Statement IDEXX values a diverse workforce and workplace and strongly encourages women, people of color, LGBTQ+ individuals, people with disabilities, members of ethnic minorities, foreign‑born residents, and veterans to apply. IDEXX is an equal‑opportunity employer. Applicants will not be discriminated against because of race, color, creed, sex, sexual orientation, gender identity or expression, age, religion, national origin, citizenship status, disability, ancestry, marital status, veteran status, medical condition, or any protected category prohibited under local, state, or federal laws.
#J-18808-Ljbffr

Westbrook, Maine, United States

Sprachkenntnisse

English

Hinweis für Nutzer

Dieses Stellenangebot wurde von einem unserer Partner veröffentlicht. Sie können das Originalangebot einsehen hier.

Ähnliche Jobs finden