As a Senior Platform Engineer (DevOps) you will be a hands-on member of an agile platform engineering team, building and iterating on the internal AWS, GitHub Enterprise, Terraform Cloud, and JFrog Artifactory platforms that IDEXX developers and software teams use to build and deliver their products. You write production-quality Python, collaborate closely with teammates through pair programming, and work directly with internal customers to understand their needs and translate them into well-crafted platform capabilities.
In this role...
You will be responsible for Platform Development:- Design, build, and maintain automation and tooling for IDEXX’s internal developer platforms using Python as the primary language — covering AWS Organizations, GitHub Enterprise, and Terraform Cloud, and JFrog Artifactory.
- Implement and manage AWS Organizations policies (Service Control Policies, permission boundaries, account vending) to enforce security standards set by Information Security and Compliance teams.
- Administer and automate GitHub Enterprise: repository management, access controls, GitHub Actions runner infrastructure, organization policies, and security configurations.
- Configure and operate Terraform Cloud workspaces, variable sets, policy-as-code (Sentinel), and team permissions to enable safe, consistent infrastructure-as-code delivery across engineering teams.
- Write clean, well-tested, maintainable Python code for platform tooling, CLI utilities, automation scripts, and API integrations.
- Participate actively in pair programming, code reviews, and team refinement sessions — platform engineering here is a team sport, not a solo pursuit.
You will participate with an Agile Team:- Work closely with the Platform Lead Engineer and Platform Agile Practitioner to define, refine, and estimate work coming off the platform backlog.
- Collaborate with the Platform Engineering Manager and Platform Product Owner to clarify priorities and ensure delivery aligns with business and technical goals.
- Contribute to sprint ceremonies: planning, standups, retrospectives, and demos.
- Break down ambiguous problems into well-defined tickets with clear acceptance criteria.
You will have Internal Customer Partnerships:- Engage directly with internal developer and software teams to understand their platform use cases, pain points, and requirements.
- Translate customer feedback into actionable platform improvements and surface findings to the team during backlog refinement.
- Provide clear, approachable guidance to developers on platform capabilities, best practices, and self-service workflows.
What You Need to Succeed...
- 5+ years of experience in platform engineering, DevOps, or a related infrastructure software engineering role.
- Strong experience in CloudFormation and Terraform
- Fluency in Python — you write it daily and are comfortable building production-quality tooling, automation, and API integrations in it.
- Hands-on experience administrating AWS Organizations: SCP authoring, account management, Control Tower or similar landing zone frameworks.
- Practical experience with GitHub Enterprise administration: repository policies, access management, Actions runner configuration, and organization-level security settings.
- Working knowledge of Terraform Cloud: workspace management, remote state, Sentinel policies, and team permissions.
- Significant exposure to dependency management within software development teams to support the configuration needs of various coding languages
- Strong collaborative instincts — you thrive in pair programming and agile team settings and actively contribute to collective code quality.
- Ability to work with internal customers to understand their needs and translate them into platform capabilities.
- Comfortable working in a structured agile process with a backlog, sprint cadence, and shared team ceremonies.
- Clear communicator, written and verbal, with the ability to explain technical concepts to non-platform engineers.
Nice to Have...
- Experience with AWS IAM Identity Center (SSO), AWS Config, or AWS Security Hub.
- Experience using CloudFormation StackSets to distribute standardized resource configurations
- Familiarity with policy-as-code tooling (Sentinel, OPA/Rego).
- Familiarity with identity federation principals in enterprise environments to support single sign-on access, including working knowledge of Entra ID (formerly Azure AD)
- Experience with developer portal or internal tooling frameworks (e.g., Backstage, AWS Service Catalog).
- AWS certification (Solutions Architect, Developer, or SysOps).
- Background working in regulated industries with compliance requirements (SOC 2, ISO 27001, HIPAA, etc.).
Technologies You’ll Work With...
Amazon Web Services and AWS Organizations (SCPs, IAM, Control Tower), GitHub Enterprise, Terraform Cloud, JFrog Artifactory, Python, CloudFormation, Git
Location: We prefer you to be driving distance to our headquarters in Westbrook, Maine for a flexible hybrid work environment only requiring 8 days per month on-site. Alternatively, we are also open to those in NH or MA that could come in less frequently.
What you can expect from us:
• Base annual salary target: $100000 - $120000 (yes, we do have flexibility if needed)
• Opportunity for annual cash bonus
• Health / Dental / Vision Benefits Day-One
• 5% matching 401k
• Additional benefits including but not limited to financial support, pet insurance, mental health resources, volunteer paid days off, employee stock program, foundation donation matching, and much more!
