{"id":1937366,"url":"https://alion.io/job/idexx-laboratories-principal-network-security-administrator","title":"Principal Network Security Administrator","company":{"id":5908,"name":"IDEXX Laboratories","domain":"idexx.com","url":"https://alion.io/company/idexx-laboratories","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":85,"open_postings":28,"ghost_share":0,"stale_share":0.571,"repost_share":0.071,"time_to_fill_p50_days":24,"computed_at":"2026-10-31T05:58:55Z"}},"role":"Networking","role_family":"Networking","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Westbrook, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":120000,"max":null,"currency":"USD","period":"year","gross":null,"usd_annual":120000},"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"DHCP","optional":false},{"name":"DLP","optional":false},{"name":"DNS","optional":false},{"name":"Least Privilege","optional":false},{"name":"TCP/IP","optional":false},{"name":"Zero Trust","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"CI/CD","optional":true},{"name":"GCP","optional":true},{"name":"SIEM","optional":true}],"status":"live","first_seen_at":"2026-10-05T00:00:00Z","employer_posted_date":"2026-10-05","last_verified_at":"2026-10-31T15:15:32Z","board_verified":true,"closed_at":null,"days_open":26,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":26},"description":"IT accelerates the success of IDEXX employees and customers by providing scalable and innovative solutions and leadership. We are a global organization that supports all technology needed to deliver products and solutions to customers enabling them to focus on delivering high quality patient care. We strive to provide exceptional customer service and experience in the most efficient means possible, requiring alignment and cross-functional communication.\nAt IDEXX, our work helps create clarity in a complex and evolving world through diagnostic and software products and services. That clarity depends on secure, resilient connectivity and trusted access-especially across global teams, cloud services, and third-party/vendor ecosystems.\nWe’re looking for a Principal Network Security Administrator to serve as the technical architect and highest level of internal escalation for our Zero Trust Platform, DNS Security/IPAM, and Secure Vendor Remote Access (SVRA) ecosystem-setting the strategy, standards, and architecture that keep IDEXX secure at global scale. This role also carries our newly rolled out CASB, Generative AI Control, and DLP capabilities forward as they mature.\nIn this role, you will…\nLead efforts to define the overall security architecture and roadmap for Zero Trust, DNS Security/IPAM, and Secure Vendor Remote Access, across current and future initiatives.\nOwn enterprise DNS security and IP address management platforms (IPAM, DNS/DHCP, DNS Security), setting standards for reliability, security controls, and operational excellence.\nArchitect and expand Zero Trust access, partnering with network, endpoint, and security leadership to deliver secure user/app connectivity at global scale.\nSet strategy and governance for secure third-party access through the SVRA platform, enforcing least-privilege access, strong auditing, and vendor lifecycle controls.\nSupport and help mature our first-generation rollout of CASB, Generative AI Control, and DLP, partnering with the security team to expand policy coverage and adoption.\nResearch and evaluate emerging security technologies, producing gap analyses and technical recommendations that shape enterprise-wide architecture decisions.\nTranslate risk into engineering outcomes: drive segmentation, policy, logging, and security automation strategy that reduces exposure without slowing the business.\nBuild clarity through standards and documentation: create runbooks, reference architectures, and design patterns that make secure operations repeatable and scalable across the organization.\nServe as the highest level of internal escalation for complex network security issues; mentor other engineers through design reviews, troubleshooting, and best-practice adoption.\nAssess and report on the impact and ramifications of proposed security changes, and provide input into broader infrastructure strategy.\nWhat you will need to succeed...\n You must have 7+ years of hands-on experience in the following areas:Enterprise network security engineering, with demonstrated expert-level knowledge in the discipline.\nStrong experience in IPAM and DNS/DHCP, plus DNS Security administration and operational troubleshooting.\nExperience implementing Zero Trust in production enterprise environments.\nExperience managing Secure Vendor Remote Access (or closely equivalent), with security controls and auditability.\n\nStrong foundational skills in TCP/IP, DNS, routing, firewall concepts, authentication/authorization, and security logging/monitoring.\nFoundational knowledge of CASB, Generative AI Control, and DLP concepts and controls.\nDemonstrated ability to work independently, with guidance needed only in the most complex situations; recognized as an expert resource within and outside own discipline.\nProven track record as technical lead on complex infrastructure/security projects, able to solve complex problems and take a broad perspective to identify solutions.\nExperience working in a global environment with 24/7 system availability requirements.\nBachelor’s degree or equivalent combination of education and experience.\nExcellent communication skills-able to translate complex technical systems into actionable decisions for technical and non-technical partners alike, and to align a single line of business around shared security outcomes.\nIt would be a plus if you had any of these experiences...\nAutomation or infrastructure-as-code experience (APIs, scripting, policy automation, CI/CD integration); proficiency automating increasingly complex administrative tasks.\nExperience integrating DNS and Zero Trust telemetry into SIEM/SOC workflows.\nCloud networking/security exposure (Azure/AWS/GCP), plus enterprise identity integrations.\nExperience with audit/compliance frameworks (e.g., SOX) and supporting internal or external audits.\nRelevant certifications (e.g., CCNP Security, CISSP, GIAC).\nWhat you can expect from us:\nBase annual salary target starts at $120,000 and we offer more based on experience\nOpportunity for annual cash bonus\nHealth / Dental / Vision Benefits Day-One\n5% matching 401k\nAdditional benefits including but not limited to financial support, pet insurance, mental health resources, volunteer paid days off, employee stock program, foundation donation matching, and much more!\nWhy IDEXX?\nWe’re proud of the work we do, because our work matters. An innovation leader in every industry we serve, we follow our Purpose and Guiding Principles to help pet owners worldwide keep their companion animals healthy and happy, to ensure safe drinking water for billions, and to help farmers protect livestock and poultry from diseases. We have customers in over 175 countries and a global workforce of over 10,000 talented people. \nSo, what does that mean for you? We enrich the livelihoods of our employees with a positive and respectful work culture that embraces challenges and encourages learning and discovery. At IDEXX, you will be supported by competitive compensation, incentives, and benefits while enjoying purposeful work that drives improvement. \nLet’s pursue what matters together.\nIDEXX values a diverse workforce and workplace and strongly encourages women, people of color, LGBTQ+ individuals, people with disabilities, members of ethnic minorities, foreign-born residents, and veterans to apply.\nIDEXX is an equal opportunity employer. Applicants will not be discriminated against because of race, color, creed, sex, sexual orientation, gender identity or expression, age, religion, national origin, citizenship status, disability, ancestry, marital status, veteran status, medical condition, or any protected category prohibited by local, state, or federal laws.","description_format":"text","description_chars":6673,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["401k plan"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Network Security","Veterinary Medicine","Environmental Science"],"lifecycle":[{"event":"open","at":"2026-10-06T00:11:07Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 17 · green card filings: 1","filings_12m":17,"filings_prev_12m":21,"green_card_filings_12m":1,"median_offered_wage_usd":145556,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":1}],"liveness":{"score":32,"band":"fade","label":"Fading","p_open":1,"p_active":0.577,"p_room":0.55,"age_days":26,"expected_fill_days":24,"reasons":["conf:4","stale_co","velocity","win:tail","comp:brand"],"computed_at":"2026-10-31T05:58:55Z"},"pay":{"stated_usd_annual":120000,"is_top_pay":false},"html_url":"https://alion.io/job/idexx-laboratories-principal-network-security-administrator","json_url":"https://alion.io/job/idexx-laboratories-principal-network-security-administrator.json","meta":{"generated_at":"2026-10-31T23:34:49Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":36917,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5908},"rest":"https://alion.io/mcp/rest/get_company?id=5908"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fidexx-laboratories-principal-network-security-administrator"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fidexx-laboratories-principal-network-security-administrator"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fidexx-laboratories-principal-network-security-administrator"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/idexx-laboratories-principal-network-security-administrator\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fidexx-laboratories-principal-network-security-administrator"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1937366}},{"tool":"search_jobs","arguments":{"company":"idexx.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1937366},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}