The network security infrastructure safeguards all Maersk data networks across Core, Cloud, and Edge environments - including offices, warehouses, terminals, data centres, and co-location facilities. Protection is delivered through a comprehensive suite of network security products and services that both secure and enable these environments, including but not limited to:
- Next-Generation Firewalls (NGFW) and Intrusion Detection/Prevention Systems (IDS/IPS)
- Secure Web Gateway (SWG)
- Zero Trust Network Access (ZTNA) and Secure Service Edge (SSE) solutions
- Virtual Private Network (VPN) and SD-WAN edge security controls
- Secure partner and contractor access
- AAA infrastructure (RADIUS, TACACS+, NAC)
Specific Job Requirements
Lead the design, development, global delivery, and operations of secure, reliable, and automated network security products and services across our enterprise network that meet current and future business needs. The position involves collaborating across technical, security, and business teams to gather requirements, assess impacts, and agree on performance and customer experience standards. Key responsibilities include:
- Define and execute network security product roadmap , aligned with enterprise network strategy and zero-trust architecture.
- Own the design build, and run of network security products and services.
- Drive an automation-first operating model , using infrastructure-as-code, APIs, CI/CD pipelines, and self-service to eliminate manual work.
- Establish clear SLAs, SLOs, and service catalogs for network security offerings.
- Partner closely with Cyber Security teams to align policy and enforcement.
- Lead major lifecycle initiatives: VPN exit strategy, firewall policy standardization and modernization, on-premise SWG and SSE consolidation, and AAA automation.
- Lead agile engineering team to deliver prioritized features aligned with business demand, industry trends, and defect resolution.
- Manage incident response and problem management for network security domain, ensuring operational excellence and continuous improvement.
- Influence product/application design, infrastructure standards, and non-functional requirements.
- Act as a technical stakeholder and solution owner , maintaining strong coordination between architecture, engineering, and operations teams.
- Lead, mentor, and grow a global engineering team focused on innovation, quality, and accountability.
What Ill be doing your accountabilities?
Network Security Engineering Design, engineering and operations of global network security infrastructure balancing the adoption of next generation technologies with mature solutions across Cloud, Edge, and Datacentres:
Lead engineering teams that ensures network security product requirements are delivered to time, cost and quality. Ensure that products and capabilities are compliant with Maersk technology architecture standards and security policies, and easily consumed As-a-Service by other TSE products and the business.
Drive and operate resilient services with measurable business uptime and performance.
Maintain compliance with security policies, audits, and regulatory frameworks (e.g. Zero-Trust NIST 800-207).
Build internal, external, and third-party supplier relationships to ensure full commitment and support in execution of the product architecture into operational designs.
Provide subject matter expertise to delivery and L1 operational teams to guide deployment and in-life troubleshooting of converged networking and perimeter services.
Establish and continuously improve operations processes to drive efficiency, lower operational costs, implement governance and controls to manage error budgets and consumption, and report on KPIs.
Publish and maintain a service catalog for Network Security, with documented SLIs, SLOs, SLAs and ownership.
Achieve 40%+ reduction in manual operations through automation and self-service capabilities.
Reduce incident MTTR by 30% through proactive monitoring and AIOps integration.
Plan and coordinate maintenance, while enfocing global consistency with secure configuration baselines and implementing proactive vulnerability management practices.
Build a culture of learning, transparency, and excellence within the network security team.
The Candidate
To be considered for this opportunity, candidates will have the following core capabilities and technical expertise.
Core Capabilities
- A demonstrable track record operating as an Engineering Manger with 10+ years experience in network security design and enterprise cloud technology adoption in multi-vendor and or multi-MSP production environments in a globally focused business.
- Lead Engineer level credibility with hands-on experience within a systems integrator, enterprise with global footprint, network technology vendor or multi-national Corporations.
- Strong leadership in product engineering, combining design, operations, and automation disciplines.
- Strategic thinker who translates business needs into secure, scalable technical solutions.
- Self-starter, with a strong drive for results , taking accountability for significantly improved outcomes.
- You have a low ego attitude - willing to shift from high-level critical thinking, to rolling up your sleeves and supporting implementation.
- Skilled communicator who can lead globally distributed teams and influence stakeholders.
- Leadership in design and operations, with a track record of promoting diversity and creating an inclusive working environment .
Technical Expertise
- Demonstrated expertise in comprehensive network development, integration, and optimisation, as well as adherence to standards across Layers 1 through 7 of the OSI model, with proficiency in applying these skills within both physical and virtual environments.
- Deep experience with SSE platforms (Zscaler, Prisma Access, Netscope, etc.)
- Expertise in AAA infrastructure (RADIUS, TACACS+, NAC) and identity integrations.
- Proven track record with next-gen firewalls (Checkpoint, Firepower, Palo Alto, Fortinet, or equivalent).
- Hands-on proficiency with automation frameworks Terraform, Ansible, Python, CloudFormation/ARM templates, REST APIs, CI/CD pipelines.
- Understanding of Zero Trust architectures (NIST 800-207), macro/micro segmentation, and secure network access patterns.
- Experience integrating with firewall assurance platforms (Firemon, Tufin, or similar).
- Knowledge in traditional network domains such as Routing & Switching, Load Balancers, Web Proxies, WAF, NTP/PTP and DDI.
- Practitioner understanding of cloud networking, cloud network security best practices, NFV, and hybrid WAN/Internet edge designs (incl SD-WAN).
