Senior Engineering Manager – Network Security Engineering

A.P. Moller – Maersk is the global leader in container shipping services. The business operates in 130 countries and employs c. 90,000 staff. An integrated container logistics company, Maersk aims to connect and simplify its customers’ supply chains. Joining Maersk will embark you on a transformational journey with great opportunities for career development within a global organization. As a Network Security Engineering Manager, you will lead a global engineering team that delivers secure, reliable network security services as internal products - automation-first, measurable, and built to scale across a highly distributed enterprise. You will be exposed to a wide and challenging range of needs and opportunities requiring you to engage closely with stakeholders across all management levels within Maersk as you mature, evolve and operate our portfolio of network security capabilities to become world class.

The Brief

A globally focused shipping and transportation organisation is continuing to drive an ambitious and complex change and transformational programme to deliver a service of excellence for its customers and clients worldwide. The Global CTIO has a mandate from the Maersk board to lead the Technology transformation of Maersk which will enable the Maersk business strategy to become the global integrator of container logistics through digitising the Maersk business processes and customer engagement.

The Technology function is fundamental to enable the company’s transformation and in response to this demand, our in-house technological capability is growing exponentially. We are recruiting world class talent to ensure that the technology services are modernised to enable Maersk to become a logistics integrator leveraging a competitive advantage through technology.

Why this job matters?

The Network Architecture & Engineering function is pivotal to our transformation, responsible for the engineering of network and network security capabilities that provide the digital connectivity backbone for Maersk - connecting people, platforms, assets and value-chain partners.

Reporting to the Director, Network Architecture & Engineering, you will serve as Senior Engineering Manager for Network Security Engineering. You will be accountable for the design, build, and L2/L3 operation of key network security products, run as product-led internal services with clear roadmaps, measurable reliability, and automation-first delivery.

It has a critical role to play as we continue to develop our long-term multi-technology and multi-product network and network security capabilities, connecting our asset, sites and people on land and at sea. Delivering best in class global connectivity and network security services that not only meet the need of our business today but will be a differentiator, enabling our colleagues and partners with technology solutions that are a catalyst for productivity and innovation.

Scope

Network security services protect Maersk environments across core, data center, cloud, and edge locations (offices, warehouses, terminals, data centres, and co-location facilities). Services include:

· Core/Data Center firewall platforms (NGFW) (and related policy governance/operations)

· Secure Web Gateway (SWG)

· Partner/contractor connectivity security controls (VPN, network-side patterns, enforcement requirements, and governance in collaboration with cybersecurity organization)

· AAA / Privileged Network Access (TACACS+/RADIUS) and NAC platform services (incl. policy/identity integrations and governance)

· Out-of-Band (OOB) management for network infrastructure (secure break-glass access and recoverability)

· Branch egress & segmentation governance delivered via the branch connectivity enforcement stack (embedded firewall capability), plus full ownership of any standalone branch NGFW deployments where required

What I'll be doing – your accountabilities?

· Lead a global engineering team delivering network security platforms as internal products, with clear ownership of reliability and operational outcomes.

· Own the product engineering lifecycle for network security services: roadmap execution, modernization, technical debt management, and continuous improvement.

· Establish and operate measurable reliability management: define service indicators and objectives, monitor service health, and drive improvement based on data, incidents, and customer experience.

· Drive automation-first delivery: embed Infrastructure-as-Code and CI/CD practices into network change delivery, with safe deployment patterns (validation, progressive rollout, rollback).

· Partner with the Network Operational Inteliigence teams to adopt golden automation patterns and scale self-service onboarding for engineering teams.

· Collaborate closely with enterprise network architecture to align to standards, patterns, and guardrails while enabling high-speed delivery with minimal friction.

· Define scalable policy governance and guardrails (e.g., segmentation and egress controls) that can be consumed “as-a-service” by other teams - reducing handoffs and enabling fast flow.

· Partner with product ops to ensure services are clearly described in the catalog, cost drivers are transparent, and vendor interfaces support product outcomes.

· Enable integration and standardization of newly acquired environments into Maersk’s standard network security platforms, controls, and operating model.

· Own cost leadership and total cost of ownership (TCO) for Core services - set targets, optimize capacity and carriers, partner with Product Operations and vendors - maintaining SLOs while reducing cost-to-serve.

· Build strong stakeholder relationships across infrastructure and security domains; define crisp interfaces and decision boundaries that reduce handoffs and ambiguity.

· Develop engineering talent, create an inclusive culture, and foster an environment of ownership, learning, and continuous improvement.

The Candidate

To be considered for this opportunity, candidates will have the following core capabilities and technical expertise.

Core Capabilities

· 15+ years of experience in enterprise network security engineering in global, multi-vendor environments, including senior engineering leadership.

· Proven record leading build-and-run services combining engineering, operations, and automation disciplines.

· Detailed network design engineering, integration, optimisation knowledge and expertise across all 7 layers of the OSI stack with the ability to employ in both physical and virtual contexts.

· Strong product-led mindset for internal platforms: clear service contracts, adoption/onboarding focus, and customer outcomes orientation.

· Effective stakeholder leadership across infrastructure and cyber security teams, able to define decision boundaries and scalable interfaces.

· Leadership in design and operations, with a track record of promoting diversity and creating an inclusive working environment.

Technical Expertise

· Deep experience operating NGFW platforms and managing policy lifecycle and governance; familiarity with policy assurance practices/tooling is a plus (Checkpoint, Palo Alto, Fortinet, Cisco or similar).

· Experience integrating with firewall assurance platforms (Firemon, Tufin, or similar).

· Experience running web security gateway services and leading transitions from legacy web security to modern secure access approaches (Bluecoat, Websense, F5, WSS, Zscaler, Prisma or similar).

· Strong expertise in AAA and NAC (TACACS+/RADIUS/NAC) and identity integrations in complex enterprise environments.

· Hands-on proficiency with network automation using Infrastructure-as-Code concepts and modern delivery practices (catalog driven orchestration, automated validation, controlled rollout, CI/CD, Python, NETCONF/RESTCONF/YANG, Ansible/Terraform/Cloud Formation, AIOps).

· Working knowledge of Zero Trust concepts and enterprise migration considerations (ZT