Cloud Security Architect

IDEXX Laboratories is seeking a Cloud Security Architect to lead our multi‑cloud security architecture across AWS, Azure, and GCP environments. This senior‑level position will architect and implement cloud security posture management (CSPM) solutions, drive security standards enforcement, and partner with engineering teams to embed security controls directly into cloud deployment pipelines. You will play a critical role in protecting applications that serve our global veterinary diagnostics business while enabling development teams to move fast without compromising security.

This position reports to the Senior Manager of Product & Application Security and works closely with Dev Ops engineers and cloud platform owners across the organization.

• Architect, implement, and continuously improve cloud security posture management across AWS, Azure, and GCP environments supporting hundreds of applications
• Lead the migration from Aqua Sec to Crowd Strike Falcon CSPM, ensuring continuity of visibility and compliance enforcement
• Establish and maintain compliance with CIS Benchmarks Level 1 standards across all cloud platforms
• Design monitoring and alerting strategies that surface actionable security gaps to both security and engineering teams

• Implement automated security scanning and policy enforcement for Terraform, Cloud Formation, and other IaC frameworks
• Integrate tools like Crowd Strike Falcon, Checkov and Trivy into CI/CD pipelines to prevent misconfigurations before deployment
• Develop policy‑as‑code frameworks that codify security requirements and enable self‑service compliance

• Embed security controls directly into cloud deployment pipelines using native platform capabilities and third‑party tooling
• Partner with Dev Ops teams to build secure‑by‑default infrastructure templates and golden paths
• Conduct architecture reviews for new cloud services and deployment patterns
• Translate complex security requirements into practical, actionable guidance for engineering teams

• Conduct cloud security assessments, threat modeling, and architecture reviews for critical workloads
• Identify and prioritize security risks based on business impact, exploitability, and compensating controls
• Work with product teams to implement mitigations that balance security effectiveness with operational feasibility

• Manage and optimize cloud‑native security tooling including CSPM, CNAPP, and secret scanning solutions
• Build automation to reduce manual security work and improve consistency of controls
• Establish metrics and reporting that demonstrate security posture improvement and compliance trends

• Deep hands‑on experience architecting security controls in AWS, Azure, and GCP production environments
• Demonstrated proficiency with CSPM tools (Crowd Strike Falcon, Wiz, Prisma Cloud, or similar platforms)
• Strong knowledge of CIS Benchmarks, cloud security frameworks (CSA CCM, NIST), and compliance standards (SOC 2, GDPR, HIPAA)
• Expertise in Infrastructure‑as‑Code security scanning and policy enforcement (Checkov, Trivy, Terraform Sentinel, OPA)
• Experience integrating security controls into CI/CD pipelines (Git Hub Actions, Git Lab CI, Jenkins, Azure Dev Ops)
• Solid understanding of container security, Kubernetes security, and serverless security patterns
• Proficiency with scripting and automation (Python, Bash, Power Shell)

• Proven ability to design security architectures that scale across large, complex cloud environments
• Track record of successfully partnering with Dev Ops and engineering teams to implement security without blocking delivery
• Experience driving security tool migrations and consolidations with minimal disruption
• Strong analytical skills to assess risk, prioritize work, and make pragmatic security decisions
• Ability to translate technical security concepts into language that resonates with both technical and business stakeholders

• Excellent written and verbal communication skills; able to…