IDEXX

Lead and architect secure, scalable CIAM solutions and strategy across customer-facing products. | 8+ years CIAM/IAM experience with 3+ years in lead/security architecture roles and deep Auth0 expertise. | IDEXX’s Cyber Security and Information Security teams enable a resilient, adaptable, and security-aware enterprise—supporting the technology that delivers trusted products and solutions to customers worldwide. The Customer Identity & Access Management (CIAM) Security Architecture Lead is a senior, high-impact role within the Information Security organization, serving as the primary architectural authority and technical visionary for customer identity across IDEXX’s customer-facing ecosystem. This role is responsible for assessing, strengthening, and evolving a secure, scalable, and unified CIAM architecture that supports multiple products, customer types, and integration models—while delivering a consistent, friction-aware customer experience. IDEXX has an existing Auth0 implementation in place; however, this role will lead a comprehensive review and re-architecture of the current environment to ensure it is securely implemented, properly configured, and aligned to enterprise-scale requirements and long-term CIAM vision. While Auth0 is the current CIAM platform, this role maintains a platform-agnostic security architecture perspective, ensuring IDEXX can evolve, extend, or transition CIAM platforms as business, risk, or regulatory needs change. You will bridge executive strategy and hands-on engineering execution—defining not only what is built, but how customer identity integrates into IDEXX’s broader cyber security architecture, ensuring identity is a business enabler, not a constraint. In This Role, Your Key Responsibilities Will Include... CIAM Security Architecture & Platform Leadership: • Serve as the security architecture authority for customer identity and access management across all customer-facing products • Assess the existing Auth0 deployment and lead remediation, reconfiguration, and architectural improvements to meet enterprise security and scale requirements • Design and evolve an enterprise CIAM architecture that remains portable across other CIAM platforms (e.g., Okta CIAM, Ping Identity, ForgeRock, Microsoft Entra ID) • Establish CIAM security standards, reference architectures, control requirements, and guardrails aligned with Zero Trust principles and enterprise security strategy Strategic Roadmap & Vision • Develop and maintain a multi-year CIAM roadmap aligned with enterprise goals and digital transformation initiatives • Define future-state capabilities including SSO, MFA, passwordless authentication, adaptive authentication, modern RBAC/ABAC models, and expansion across B2B and B2C use cases • Ensure the roadmap addresses remediation of current-state gaps while enabling long-term scalability and consistency Authentication, Authorization & Federation • Architect and govern secure authentication and authorization patterns across diverse customer use cases • Design and implement federated identity integrations using OIDC, OAuth 2.0, and SAML • Support customer-managed and federated identity scenarios, including trust boundary definition, assurance levels, and delegated administration models Multi-Tenant, Admin & Delegated Access Models • Architect secure multi-tenant CIAM models supporting multiple products, customers, and environments • Design layered administrative and delegated access controls for internal operations and customer administrators • Ensure administrative access adheres to least privilege, separation of duties, and strong auditability Integrations, System Accounts & Non-Human Identity • Architect CIAM solutions supporting both human customer identities and system, service, and integration accounts • Define secure API authentication, token lifecycle management, system to system (internal and external) authentication patterns and non-interactive access patterns Security Controls, Risk & Governance • Define and validate security controls, configurations, and assurance requirements for CIAM implementations • Ensure CIAM solutions integrate with the broader security ecosystem including SIEM/SOAR, IAM/IGA, monitoring, and fraud detection platforms • Partner with GRC, Security Operations, and Product Security teams to perform threat modeling, support audits, and reduce identity-related risk Cross-Functional Leadership & Communication • Act as the primary CIAM security advisor to Product, Marketing, IT, Engineering, and Platform teams • Translate complex identity and security requirements into clear, consumable architectural guidance • Communicate CIAM strategy, risk posture, and progress to VP-level and executive leadership What You Will Need To Succeed... • 8+ years of experience in CIAM/IAM with at least 3 years in a lead or security architecture capacity • Demonstrated experience assessing, remediating, and scaling existing CIAM implementations in complex environments • Deep hands-on experience with Auth0 and at least one additional Tier-1 CIAM platform (e.g., Okta CIAM, Ping Identity, ForgeRock, Microsoft Entra ID) • Expertise in OIDC, OAuth 2.0, SAML, FIDO2/WebAuthn, and SCIM • Location: 100% remote/virtual is fine for this role. Preferred is being local/driving distance or willing to relocate to the Westbrook, Maine area, but that is not required. • Strong understanding of modern application architectures (SPAs, microservices, mobile APIs) and cloud platforms (AWS preferred) • Proven ability to translate identity risk and architectural gaps into actionable remediation and roadmap decisions • Strong understanding of Zero Trust principles, identity threat models, logging, monitoring, and auditability • Ability to communicate complex security concepts to technical and non-technical stakeholders • Proven ability to navigate a matrixed organization to accomplish goals Preferred Qualifications • Security certifications such as CISSP-ISSAP, CISM, or senior vendor certifications (e.g., Okta or Auth0 Certified Architect) • Experience with Identity-as-Code, CI/CD pipelines, and Terraform • Experience integrating CIAM with fraud detection, bot mitigation, or risk-based authentication engines • Experience supporting CIAM in regulated or high-trust environments such as healthcare or life sciences • Programming or scripting experience (Python, Java, Go, etc.) • Experience applying analytics or AI/ML to identity security or anomaly detection What Success Looks Like • A hardened, well-architected Auth0 environment aligned with enterprise security standards and long-term CIAM vision • Clear remediation of current-state CIAM security and configuration gaps • A scalable, secure CIAM foundation supporting consistent customer experiences across products • A platform-agnostic CIAM architecture that can evolve or migrate without increasing risk • Product teams enabled with secure, reusable identity patterns that accelerate delivery What You Can Expect From Us • Base annual salary target: $160000 - $180000 (yes, we do have flexibility if needed) • Opportunity for annual cash bonus and yearly equity award • Health / Dental / Vision Benefits Day-One • 5% matching 401k • Additional benefits including but not limited to financial support, pet insurance, mental health resources, volunteer paid days off, employee stock program, foundation donation matching, and much more! Why IDEXX? We’re proud of the work we do, because our work matters. An innovation leader in every industry we serve, we follow our Purpose and Guiding Principles to help pet owners worldwide keep their companion animals healthy and happy, to ensure safe drinking water for billions, and to help farmers protect livestock and poultry from diseases. We have customers in over 175 countries and a global workforce of over 10,000 talented people. So, what does that mean for you? We enrich the livelihoods of our employees with a positive and respectful work culture that embraces challenges and encourages learning and discovery.   At IDEXX, you will be supported by competitive compensation, incentives, and benefits while enjoying purposeful work that drives improvement. Let’s pursue what matters together. IDEXX values a diverse workforce and workplace and strongly encourages women, people of color, LGBTQ+ individuals, people with disabilities, members of ethnic minorities, foreign-born residents, and veterans to apply. IDEXX is an equal opportunity employer. Applicants will not be discriminated against because of race, color, creed, sex, sexual orientation, gender identity or expression, age, religion, national origin, citizenship status, disability, ancestry, marital status, veteran status, medical condition, or any protected category prohibited by local, state, or federal laws.

Lead and develop a distributed engineering team to deliver a scalable, secure payments platform. | 10+ years in software with 3+ years in leadership, strong technical background in relevant stack, experience with SaaS and secure systems. | As theSoftware Development Engineering ManagerforIDEXX Veterinary Software, you will manage and grow theVetSoft Payments engineering team, a group of experienced, dedicated, and skilled engineers building a missioncritical, cloudnative payments platform for the veterinary industry. You will inherit a strong foundation and continue to evolve the platform as customer needs and business priorities grow. This role offers a unique opportunity to lead a distributed engineering team while delivering secure, reliable, and scalable payment capabilities that create lasting value for veterinary practices, corporate partners, and pet owners worldwide. In this role, you will: • Lead and develop a geographically distributed engineering team across the U.S. and UK, fostering a culture of ownership, inclusion, and continuous improvement • Define and maintain a technical roadmap that supports platform scalability, reliability, and security • Partner closely with Product to translate themes and strategy into clear technical execution through agile delivery • Drive high engineering velocity while maintaining a strong focus on quality, reliability, and operational excellence • Establish and evolve engineering standards, development practices, CI/CD pipelines, and test strategies • Champion secure engineering practices and sound operational discipline for systems processing financial transactions • Team with commercial stakeholders such as corporate strategy, marketing, customersupportand operations • Recruit, mentor, and retain top engineering talent What you will need to succeed: • You have experience managing a software development team or in a similar role, including 10 or more years total in Software, 3 or more years in Software Leadership • You have a strong technical background, have personally delivered solutions in a similar technical stack,and willing to stay handson in leading teams • Experience designing, building, and operating missioncritical SaaS systems • Strong experience with TypeScript / Node.js, React, AWSbased serverless architectures, and RESTful APIs • Experience with CI/CD pipelines, automation, and test strategy • Proficiency with standard development tools such as Jira, Confluence, Slack, etc. • Strong experience using AI coding tools / AI developer productivity tools What are we looking for? • Advanced knowledge and experience with AWS services and architectures • Experience with designing and implementing mission critical systems that manage large scale data sets. • In-depth experience creating API/Service interfaces. • Experience in payments, fintech, or other regulated environments is a big plus • Experience with eventdriven architectures and multiregion deployments • Experience significantly improving developer productivity, delivery cadence, and engineering throughput especially through the use of AI • Experience leading technology projects across different time zones, and engineering teams in multiple locations. What you can expect from us • Salary $155,000 $165,000 • Opportunity for annual cashbonus • Health / Dental / Vision Benefits Day-One • 5% matching 401k • Additionalbenefits include pet insurance, mental health resources, volunteer paid days off, employee stock program, foundation donation matching, and more!