Senior Cyber Engineer

A.P. Moller - Maersk; Maidenhead; On-site; GBP 70,000 - 90,000; Full time

Benefits offered by this job

Onsite work five days a week

Job summary

Maersk is seeking a highly experienced Active Directory SME to lead the design, security, optimisation and governance of our global AD infrastructure. This role focuses on supporting enterprise‑scale identity and access management and requires hands‑on expertise in AD architecture and secure practices.

You will join a cyber operation within a world‑leading logistics company, collaborating with architects, engineers, vendors, and product owners to deliver robust, scalable solutions on a global

Qualifications

• Minimum 7+ years hands‑on experience architecting and securing enterprise‑scale Active Directory.
• Expertise in AD Forest/Domain design, DNS integration, FSMO, replication troubleshooting.
• Proven AD migration/consolidation experience in large organisations.
• Experience with REST APIs, MS Graph API and Log Analytics APIs.

Responsibilities

• Drive successful technical delivery and reduce risk across AD environments.
• Define scope, assess viability, and design best‑practice solutions.
• Collaborate with engineers and product owners to align capabilities with needs.
• Lead continuous service improvement for AD performance and health.
• Mentor team members and share best practices.
• Ensure documentation and code quality align with standards.

Skills

Active Directory

AD design

DNS integration

FSMO roles

Replication troubleshooting

AD migration

REST APIs

MS Graph API

Log Analytics API

Conditional Access

Identity Protection

Privileged Access Workstations

Automation

Code writing

IAM protocols

Tools

Microsoft AD tools

Job description

About Us

With over 100,000 employees across 130 countries

About Us

With over 100,000 employees across 130 countries A.P. Moller - Maersk is a global leader in logistics services and can offer you the opportunity to grow and evolve in a truly diverse workplace. A.P. Moller - Maersk is an integrated container logistics company working to connect and simplify its customers’ supply chains. With simple end-to-end offering of products and digital services, seamless customer engagement and a superior end-to-end delivery network, Maersk enables its customers to trade and grow by transporting goods anywhere - all over the world.

What We Can Offer

To work at Maersk is to work with the world. You’ll learn from – and collaborate with – skilled professionals who literally move the world, every day. With a supportive environment to develop your skills, you’ll gain access to world‑class learning programmes to accelerate your career goals. And you’ll find yourself welcome in our diverse and inclusive culture, where you are valued for who you are and rewarded for what you bring.

This role will be onsite 5 days a week.

About The Role

We are seeking a highly experienced Active Directory SME to lead the design, security, optimisation, and governance of our global AD infrastructure, ensuring it supports our enterprise‑scale identity and access management strategy.

You will become part of an elite cyber operation at one of the globe’s most renowned logistics companies, where your contributions truly make a difference.

What you’ll be doing:

• Drive successful technical delivery, utilising various programmes and operational support to increase capability and reduce risk.
• Manage technical debt and technology trade‑offs, communicating these to the Service Owner.
• Ensure implementation quality and adherence to procedures that assure code and feature quality.
• Collaborate with Engineering Managers to produce design specifications and ensure operational solutions meet business needs.
• Work with organisational resources to remove impediments and shield the team from bureaucracy.
• Leading continuous service improvement for AD performance and health.
• Extracting data and generating reports to identify service improvement opportunities and reduce risk.
• Ensuring high‑quality documentation and code in line with current frameworks.
• Building strong collaborative relationships with architects, engineers, vendors, and industry experts.
• Defining scope, assessing technical viability, and designing best‑practice solutions.
• Guiding Solution Architects in solution development.
• Identifying and escalating risks and issues affecting delivery.
• Partnering with Product Owners to align technical capabilities with business needs.
• Defining efficient cross‑team implementation strategies.
• Sharing best practices and mentoring team members.
• Contributing to the evolution of company‑wide development standards and policies.

To succeed in this role, we believe that you can offer

• Minimum 7+ years of hands‑on experience architecting, administering, and securing enterprise‑scale Active Directory environments.
• Expertise in AD Forest and Domain design, DNS integration, FSMO role management, and replication troubleshooting.
• Proven experience with AD migration, consolidation, and integration in complex organisations.
• Experience with system integration using modern technologies (e.g., REST APIs, MS Graph API, Log Analytics API).
• Skilled in configuring Conditional Access, Identity Protection, and Privileged Access Workstations.
• Strong automation skills using Microsoft AD functions.
• Proficient in writing clean, reusable, and efficient code.
• Deep understanding of identity and access management protocols and solutions.
• Familiarity with Microsoft’s AD infrastructure and security.
• Knowledge of cloud‑based document management products.

Maersk is committed to a diverse and inclusive workplace, and we embrace different styles of thinking. Maersk is an equal opportunities employer and welcomes applicants without regard to race, colour, gender, sex, age, religion, creed, national origin, ancestry, citizenship, marital status, sexual orientation, physical or mental disability, medical condition, pregnancy or parental leave, veteran status, gender identity, genetic information, or any other characteristic protected by applicable law. We will consider qualified applicants with criminal histories in a manner consistent with all legal requirements.

We are happy to support your need for any adjustments during the application and hiring process. If you need special assistance or an accommodation to use our website, apply for a position, or to perform a job, please contact us by emailing [e-mail].