Principal Platform Engineer (DevOps)

Idexx•Westbrook, ID

1d•$120,000 - $140,000•Hybrid

About The Position

IDEXX DevOps contributes to the success of IDEXX employees and customers by providing scalable, innovative solutions and technical leadership. Our PAWS (Productivity Automation Workflow Solutions) team builds and operates the internal developer platforms that IDEXX software teams rely on every day — so that engineers across the company can ship faster, safer, and with confidence. As a Principal Platform Engineer (DevOps), you bring deep technical ownership to IDEXX’s internal developer platforms — shaping the direction of our AWS, GitHub Enterprise, Terraform Cloud, and JFrog Artifactory environments alongside a close-knit agile team. You lead from within the team: writing production Python, mentoring engineers, driving technical decisions, and solving the most complex cross-team platform challenges. You are the go-to person for the hardest problems, the most ambiguous requirements, and the broadest platform questions — and you make the engineers around you better in the process.

Requirements

8+ years of experience in platform engineering, DevOps, or infrastructure software engineering, with demonstrated growth in scope and ownership over time.
Subject matter expertise in CloudFormation and Terraform
Fluency in Python — you write it fluently, review it critically, and set the standard for quality and design on the team.
Deep expertise with AWS Organizations: SCP strategy, account governance, landing zone design (Control Tower or equivalent), and multi-account security architecture.
Advanced GitHub Enterprise administration experience: organization-wide policy design, GitHub Actions at scale, security configuration, and API-driven automation.
Strong Terraform Cloud expertise: workspace and state architecture, Sentinel policy framework design, module publishing, and governance patterns.
A track record of mentoring or growing other engineers — technically and professionally.
Proven ability to handle ambiguous, cross-team problems independently and drive them to clear, well-implemented solutions.
Strong agile collaboration skills: you know how to work within a sprint team, shape a backlog, and deliver iteratively without losing sight of long-term platform health.
Excellent communication skills — you can engage confidently with engineers, managers, InfoSec, and Compliance teams alike.
A collaborative mindset by default — you don’t go it alone, and you don’t let others go it alone either.

Nice To Haves

Experience with native AWS management tools, such as AWS Control Tower, AWS Config, or AWS Security Hub at an organizational scale.
Experience using CloudFormation StackSets to distribute standardized resource configurations
Experience designing policy-as-code frameworks using Sentinel or OPA/Rego.
Experience with identity federation principals in enterprise environments to support single sign-on access, including working knowledge of Entra ID (formerly Azure AD)
Experience with developer portal or internal tooling frameworks (e.g., Backstage, AWS Service Catalog).
AWS professional or specialty certification.
Background working in regulated industries (SOC 2, ISO 27001, HIPAA, FedRAMP, or similar).
Experience contributing to or influencing engineering standards across a broader organization.

Responsibilities

Own the design and architecture of platform capabilities across AWS Organizations, GitHub Enterprise, Terraform Cloud, and JFrog Artifactory — balancing developer experience with security and compliance requirements.
Architect and implement complex AWS Organizations structures: multi-account governance, secure account configuration, SCP strategy, permission boundaries, and account vending pipelines that scale with IDEXX’s growth.
Lead the design of GitHub Enterprise configurations, policies, and automation — ensuring the platform is both highly usable for developers and meets InfoSec and Compliance standards.
Define Terraform Cloud platform standards: workspace architecture, Sentinel policy frameworks, module registry strategy, and state management patterns.
Support engineering teams in adopting secure artifact and dependency hosting within JFrog Artifactory
Write and review production-quality Python — setting the standard for code quality, testing practices, and maintainability on the team.
Lead and participate in pair programming and code review; your engagement elevates the quality and design thinking of the whole team.
Identify platform gaps and technical debt and drive initiatives to address them through the backlog and sprint process.
Mentor and coach Senior and mid-level Platform Engineers — providing technical guidance, code feedback, and career development support.
Model collaborative engineering practices: pairing, documentation, incremental delivery, and open communication.
Help onboard new team members and accelerate their ramp-up on platform tooling, codebases, and team norms.
Partner closely with the Platform Lead Engineer and Platform Agile Practitioner to shape backlog refinement, define acceptance criteria for complex work, and ensure technical clarity before work enters a sprint.
Collaborate with the Platform Engineering Manager and Platform Product Owner to influence prioritization of technically complex or high-impact work.
Drive architectural discussions and lightweight design reviews within the team sprint cycle — keeping the team moving without creating heavyweight process.
Break down ambiguous, cross-team platform problems into well-scoped deliverables.
Engage with senior engineers and technical leads across IDEXX’s software and DevOps teams to understand complex, cross-cutting platform requirements.
Navigate competing customer needs and make principled trade-offs between developer experience, security posture, and platform complexity.
Act as a trusted technical advisor to internal teams on platform capabilities, patterns, and best practices.