IT accelerates the success of IDEXX employees and customers by providing scalable and innovative solutions and leadership. We are a global organization that supports all technology needed to deliver products and solutions to customers enabling them to focus on delivering high quality patient care. We strive to provide exceptional customer service and experience in the most efficient means possible, requiring alignment and cross-functional communication.
We are seeking an experienced Identity and Access Management (IAM) Engineer to lead the design, implementation, and operational maturity of Identity Governance and Administration (IGA) capabilities across the enterprise. This role focuses on securing and governing both human and non-human identities, including service accounts, managed identities, workload identities, automation accounts, API integrations, and AI agents.
The IAM Engineer will be responsible for developing scalable identity governance processes, automating lifecycle management, enforcing least-privilege access, and reducing risk associated with service accounts and machine identities. This individual will work closely with Security, Infrastructure, Cloud Engineering, Application Owners, and Compliance teams to improve identity visibility, governance, and operational efficiency.
In this role, you will be responsible for...
Identity Governance & Administration (IGA)
- Implement and maintain enterprise Identity Governance and Administration (IGA) solutions.
- Design and manage access certification, access review, and entitlement management processes.
- Develop and optimize joiner, mover, and leaver workflows.
- Support role-based access control (RBAC) and access governance initiatives.
- Partner with business stakeholders to define access models and governance controls.
- Support audit, compliance, and regulatory requirements through reporting and attestation processes.
Service Account Governance
- Establish governance standards for service accounts across on-premises and cloud environments.
- Create and maintain inventory, ownership, classification, and lifecycle processes for service accounts.
- Reduce interactive use of service accounts and implement secure authentication methods.
- Design controls for credential rotation, privileged access management, and monitoring.
- Conduct periodic reviews to identify orphaned, stale, or over-privileged service accounts.
Managed Identities & Workload Identities
- Design and govern Azure Managed Identities and other cloud-native workload identities.
- Develop standards for application authentication and authorization.
- Partner with application teams to eliminate embedded credentials and secrets.
- Implement least-privilege access models for cloud workloads and services.
- Monitor and review workload identity permissions for excessive privilege.
AI Agents & Non-Human Identity Management
- Define governance frameworks for AI agents, automation platforms, bots, APIs, and machine identities.
- Establish controls for identity creation, ownership, access reviews, and lifecycle management.
- Develop policies for agent-to-agent and agent-to-application access.
- Ensure visibility and traceability of non-human activity across enterprise systems.
- Partner with security teams to mitigate emerging risks associated with autonomous systems and AI-enabled workflows.
Automation & Engineering
- Develop automation using PowerShell, Graph API, REST APIs, and cloud-native tooling.
- Automate provisioning, deprovisioning, access reviews, reporting, and governance workflows.
- Build integrations between IAM platforms, cloud providers, HR systems, ServiceNow, and enterprise applications.
- Continuously improve IAM operational efficiency through scripting and workflow optimization.
Security & Compliance
- Enforce least privilege and separation-of-duties controls.
- Support security assessments, audit requests, and compliance reviews.
- Develop metrics and reporting related to identity governance maturity.
- Participate in incident response and investigations involving identity-related risks.
- Maintain alignment with industry frameworks such as NIST, ISO 27001, SOC 2, and CIS controls.
What you will need to succeed...
- Location: we are looking someone preferably driving distance to our HQ in Westbrook, Maine where we have a flexible hybrid requirement of only 8 days per month. We are also open to those in NH or MA that can come on site less frequently.
- 5+ years of experience in Identity and Access Management, Identity Governance, or Security Engineering.
- Experience implementing or administering IGA platforms such as:
- Microsoft Entra ID Governance
- SailPoint IdentityNow / IdentityIQ
- Saviynt
- Okta Identity Governance
- Strong understanding of:
- RBAC
- Access Certifications
- Entitlement Management
- Identity Lifecycle Management
- Experience managing:
- Service Accounts
- Managed Identities
- Application Identities
- API Credentials
- Workload Identities
- Experience with:
- Microsoft Entra ID
- Active Directory
- Azure
- AWS IAM
- Google Cloud IAM
- Proficiency with PowerShell, REST APIs, and automation scripting.
Preferred Qualifications
- Experience with Privileged Access Management (CyberArk, BeyondTrust, Delinea, Microsoft PAM, etc.).
- Experience governing AI agents, automation platforms, and machine identities.
- Knowledge of cloud-native authentication methods and secrets management.
- Experience integrating IAM solutions with HR, ITSM, and enterprise application ecosystems.
- Microsoft, SailPoint, CISSP, Security+, or relevant IAM certifications.
Success Measures
- Reduction in unmanaged service accounts and non-human identities.
- Increased identity governance coverage across enterprise applications.
- Successful implementation of automated access reviews and certifications.
- Improved ownership and accountability for service accounts and managed identities.
- Increased use of least-privilege access models.
- Reduction in audit findings related to identity governance and access management.
- Increased automation of identity lifecycle and governance processes
What you can expect from us:
• Base annual salary target: $100000 - $125000 (yes, we do have flexibility if needed)
• Opportunity for annual cash bonus
• Health / Dental / Vision Benefits Day-One
• 5% matching 401k
• Additional benefits including but not limited to financial support, pet insurance, mental health resources, volunteer paid days off, employee stock program, foundation donation matching, and much more!
Why IDEXX?
We’re proud of the work we do, because our work matters. An innovation leader in every industry we serve, we follow our Purpose and Guiding Principles to help pet owners worldwide keep their companion animals healthy and happy, to ensure safe drinking water for billions, and to help farmers protect livestock and poultry from diseases. We have customers in over 175 countries and a global workforce of over 10,000 talented people.
So, what does that mean for you? We enrich the livelihoods of our employees with a positive and respectful work culture that embraces challenges and encourages learning and discovery. At IDEXX, you will be supported by competitive compensation, incentives, and benefits while enjoying purposeful work that drives improvement.
Let’s pursue what matters together.
IDEXX values a diverse workforce and workplace and strongly encourages women, people of color, LGBTQ+ individuals, people with disabilities, members of ethnic minorities, foreign-born residents, and veterans to apply.
IDEXX is an equal opportunity employer. Applicants will not be discriminated against because of race, color, creed, sex, sexual orientation, gender identity or expression, age, religion, national origin, citizenship status, disability, ancestry, marital status, veteran status, medical condition, or any protected category prohibited by local, state, or federal laws.
#LI-EV1
Skills Required
- 5+ years of experience in Identity and Access Management, Identity Governance, or Security Engineering.
- Experience implementing or administering IGA platforms such as Microsoft Entra ID Governance, SailPoint IdentityNow / IdentityIQ, Saviynt, Okta Identity Governance.
- Strong understanding of RBAC, access certifications, entitlement management, and identity lifecycle management.
- Experience managing service accounts, managed identities, application identities, API credentials, and workload identities.
- Experience with Microsoft Entra ID, Active Directory, Azure, AWS IAM, and Google Cloud IAM.
- Proficiency with PowerShell, Microsoft Graph API, REST APIs, and automation scripting.
- Ability to develop integrations and automation between IAM platforms, cloud providers, HR systems, ServiceNow, and enterprise applications.
- Prefer candidates within driving distance of Westbrook, Maine (flexible hybrid: onsite ~8 days/month); NH or MA candidates considered for less frequent onsite.
IDEXX Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about IDEXX and has not been reviewed or approved by IDEXX.
-
Healthcare Strength — Health coverage is described as comprehensive with day-one eligibility and added programs for mental health and musculoskeletal care. Feedback suggests insurance quality is strong, with multiple plan options and supportive wellness services.
-
Retirement Support — Retirement savings support is highlighted through a clear 401(k) match that begins after an initial waiting period. Feedback suggests this materially strengthens total compensation beyond base pay.
-
Leave & Time Off Breadth — Time-off programs are depicted as generous, including PTO, paid holidays, and volunteer days. Parental leave and adoption assistance add to the breadth of paid leave options.
IDEXX Insights
What We Do
10,000 people, one global focus - enhancing the health and well-being of pets, people, and livestock. We are passionate about what we do at IDEXX – and why wouldn’t we be? When you’re working to raise the standard of care for pets, make drinking water safe for billions and keep our livestock population around the globe healthy and free of disease, it’s no wonder that what we do each day is more than just a job. There’s an energy across IDEXX that is contagious – where caring and committed people come together to make things better. IDEXX Laboratories, Inc. (NASDAQ: IDXX), a member of the S&P 500, is a leader in pet healthcare innovation, serving practicing veterinarians around the world with a broad range of diagnostic and information technology-based products and services. Headquartered in southern Maine, we conduct operations through more than 70 locations around the world and serve customers in over 175 countries. Our primary business focuses on pet health, a growing market around the world. Our products —in-clinic diagnostic tests and instrumentation, reference laboratory and telemedicine consultation services, and practice management software—enhance the ability of veterinarians to provide advanced medical care, improve staff efficiency and to build more economically successful practices. We also develop and manufacture diagnostic tests and information for the global production animal industry, including poultry and livestock, as well as tests for the quality and safety of water and milk. Please visit our website, IDEXX.com/careers, for further information and to view all of our job opportunities.
