Senior Engineering Manager – Network Security Engineering

About the role

As Senior Engineering Manager for Network Security Engineering, you will lead a global team delivering secure, reliable network security services as internal products. You will own the product lifecycle, drive automation, and ensure measurable reliability across Maersk’s highly distributed enterprise.

Key responsibilities

• Lead a global engineering team delivering network security platforms with clear ownership of reliability and operational outcomes.
• Own product engineering lifecycle: roadmap execution, modernization, technical debt management, and continuous improvement.
• Define and monitor service reliability indicators, driving data‑based improvements.
• Embed Infrastructure‑as‑Code and CI/CD practices for safe, automated network change delivery.
• Partner with architecture and operational intelligence teams to align standards, scale self‑service onboarding, and define scalable policy governance.
• Manage cost leadership and total cost of ownership for core services while maintaining SLOs.

Required profile

• 15+ years of enterprise network security engineering experience in global, multi‑vendor environments, including senior leadership.
• Proven record of leading build‑and‑run services that combine engineering, operations, and automation.
• Strong product‑led mindset with focus on service contracts, adoption, and customer outcomes.
• Demonstrated ability to build inclusive, high‑performing engineering teams.

Required skills

• Deep experience with NGFW platforms (Checkpoint, Palo Alto, Fortinet, Cisco) and policy lifecycle management.
• Experience with firewall assurance tools (Firemon, Tufin) and web security gateways (Bluecoat, Websense, F5, Zscaler, Prisma).
• Expertise in AAA/NAC (TACACS+, RADIUS) and identity integrations.
• Hands‑on network automation using IaC, CI/CD, Python, NETCONF/RESTCONF/YANG, Ansible, Terraform, CloudFormation, AIOps.
• Knowledge of Zero Trust concepts, hybrid network security patterns, routing & switching, WAF, NTP/PTP, DDI, cloud networking, NFV, SDN, SD‑WAN.
• Optional certifications: CISSP, CISM.