Senior Cyber Engineer

Maersk; Maidenhead; On-site; GBP 70,000 - 100,000; Full time

Job summary

Maersk seeks a highly experienced Active Directory SME to lead the design, security, and governance of our global AD infrastructure, supporting enterprise-scale identity and access management. You will join a world‑renowned logistics company where your contributions truly matter and must operate on-site five days a week.

Your 7+ years of hands-on AD experience, forest/domain design, DNS integration, FSMO roles, and migration expertise will drive improvements and collaboration with product owners

Qualifications

• 7+ years of hands-on experience architecting, administering, and securing enterprise-scale Active Directory environments.
• Expertise in AD Forest and Domain design, DNS integration, FSMO role management, and replication troubleshooting.
• Proven experience with AD migration, consolidation, and integration in complex organisations.

Responsibilities

• Drive successful technical delivery and governance of the AD infrastructure.
• Manage technical debt and communicate trade-offs to stakeholders.
• Ensure high-quality implementation and adherence to procedures.
• Collaborate with Engineering Managers to deliver design specifications.
• Lead continuous service improvement for AD performance and health.
• Extract data and generate reports to identify opportunities and reduce risk.

Skills

Active Directory

AD design

DNS integration

Replication troubleshooting

REST APIs

MS Graph API

Conditional Access

Automation scripting

Tools

REST APIs

MS Graph API

Log Analytics API

Microsoft AD

Job description

About us

With over 100,000 employees across 130 countries A.P. Moller - Maersk is a global leader in logistics services and can offer you the opportunity to grow and evolve in a truly diverse workplace. A.P. Moller - Maersk is an integrated container logistics company working to connect and simplify its customers’ supply chains. With simple end‑to‑end offering of products and digital services, seamless customer engagement and a superior end‑to‑end delivery network, Maersk enables its customers to trade and grow by transporting goods anywhere - all over the world.

What we can offer

To work at Maersk is to work with the world. You’ll learn from – and collaborate with – skilled professionals who literally move the world, every day. With a supportive environment to develop your skills, you’ll gain access to world‑class learning programmes to accelerate your career goals. And you’ll find yourself welcome in our diverse and inclusive culture, where you are valued for who you are and rewarded for what you bring. This role will be onsite 5 days a week.

About the role

We are seeking a highly experienced Active Directory SME to lead the design, security, optimisation, and governance of our global AD infrastructure, ensuring it supports our enterprise‑scale identity and access management strategy.
You will become part of an elite cyber operation at one of the globe’s most renowned logistics companies, where your contributions truly make a difference.

What you’ll be doing:

• Drive successful technical delivery, utilising various programmes and operational support to increase capability and reduce risk.

• Manage technical debt and technology trade‑offs, communicating these to the Service Owner.

• Ensure implementation quality and adherence to procedures that assure code and feature quality.

• Collaborate with Engineering Managers to produce design specifications and ensure operational solutions meet business needs.

• Work with organisational resources to remove impediments and shield the team from bureaucracy.

• Leading continuous service improvement for AD performance and health.

• Extracting data and generating reports to identify service improvement opportunities and reduce risk.

• Ensuring high‑quality documentation and code in line with current frameworks.

• Building strong collaborative relationships with architects, engineers, vendors, and industry experts.

• Defining scope, assessing technical viability, and designing best‑practice solutions.

• Guiding Solution Architects in solution development.

• Identifying and escalating risks and issues affecting delivery.

• Partnering with Product Owners to align technical capabilities with business needs.

• Defining efficient cross‑team implementation strategies.

• Sharing best practices and mentoring team members.

• Contributing to the evolution of company‑wide development standards and policies.

To succeed in this role, we believe that you can offer

• Minimum 7+ years of hands‑on experience architecting, administering, and securing enterprise‑scale Active Directory environments.

• Expertise in AD Forest and Domain design, DNS integration, FSMO role management, and replication troubleshooting.

• Proven experience with AD migration, consolidation, and integration in complex organisations.

• Experience with system integration using modern technologies (e.g., REST APIs, MS Graph API, Log Analytics API).

• Skilled in configuring Conditional Access, Identity Protection, and Privileged Access Workstations.

• Strong automation skills using Microsoft AD functions.

• Proficient in writing clean, reusable, and efficient code.

• Deep understanding of identity and access management protocols and solutions.

• Familiarity with Microsoft’s AD infrastructure and security.

• Knowledge of cloud‑based document management products.

#LI-SS1

Maersk is committed to a diverse and inclusive workplace, and we embrace different styles of thinking. Maersk is an equal opportunities employer and welcomes applicants without regard to race, colour, gender, sex, age, religion, creed, national origin, ancestry, citizenship, marital status, sexual orientation, physical or mental disability, medical condition, pregnancy or parental leave, veteran status, gender identity, genetic information, or any other characteristic protected by applicable law. We will consider qualified applicants with criminal histories in a manner consistent with all legal requirements.

We are happy to support your need for any adjustments during the application and hiring process. If you need special assistance or an accommodation to use our website, apply for a position, or to perform a job, please contact us by emailing [e-mail].