Lead Infrastructure Engineer

APM Terminals; Den Haag; On-site; EUR 150,000 - 200,000; Full time

Job summary

Maersk seeks a Lead Infrastructure Engineer to own the architecture, strategy and delivery of the Edge Communications Platform across the global Terminal Network. You will shape end‑to‑end solutions and drive security and network programs.

You will lead multi‑stakeholder teams, define standards, and ensure compliance with major security frameworks while maintaining comprehensive design artefacts.

Qualifications

• Over 15 years in Networking & Security with leadership experience.
• 5 years in industrial networking and OT integration.
• Expert-level knowledge of routing/switching and protocols.
• Strong expertise in NGFW, IPS/IDS, AAA, SIEM, DLP, WAF, Zero Trust, micro-segmentation.
• Scripting and IaC: Python, Ansible, Bash, Terraform.
• Experience with Cisco Catalyst/Nexus/Industrial, Palo Alto, Check Point, Aruba.
• Strong OT networking standards knowledge (PROFINET, Modbus, DNP3).
• Proven experience delivering complex, multi-stakeholder programmes.
• Experience managing and developing engineering teams.
• Certifications such as CCNP/CCIE or CISSP are preferred.

Responsibilities

• Own the end-to-end architecture and long-term roadmap for Edge Communications.
• Define engineering standards, design patterns, governance for product/platform.
• Lead design reviews and major technical decisions for network and security.
• Oversee delivery of routing/switching, NGFW, IPS/IDS, NAC, VPN, ZTNA, PAM, wireless.
• Govern automation initiatives and develop frameworks for automated remediation.
• Collaborate with IT and Security teams to translate requirements into platform solutions.
• Lead major network programmes, managing risks, dependencies, and stakeholders.
• Ensure compliance with NIST CSF, ISO 27001, SOC2, PCI-DSS, HIPAA.
• Maintain platform documentation, runbooks, designs, and artefacts.
• Track and report KPIs: availability, MTTR, change success, security metrics.

Skills

Networking & Security leadership

Industrial networking & OT

Routing & Switching

BGP/OSPF/EIGRP

NGFW/IPS/IDS/DLP/WAF

Zero Trust / micro-segmentation

Python / Ansible / Bash / Terraform (I

Cisco Catalyst/Nexus/Industrial

OT standards (PROFINET/Modbus)

Program leadership

CCNP/CCIE/CISSP

Education

CCNP/CCIE or CISSP preferred

Tools

Cisco IOS / NX-OS

Palo Alto / Check Point firewalls

Aruba wireless

Job description

Lead Infrastructure Engineer – Edge Communications Platform

We are seeking a highly experienced Lead Infrastructure Engineer to own the architecture, strategy, and delivery of the Edge Communications Platform across our global Terminal Network.

Key Responsibilities

• Own the end‑to‑end architecture and long‑term roadmap for Edge Communications.
• Define engineering standards, design patterns, product and platform governance.
• Lead design reviews and major technical decisions for network and security solutions.
• Oversee delivery of routing/switching, NGFW, IPS/IDS, NAC, VPN, ZTNA, PAM, and wireless solutions.
• Govern automation initiatives and develop frameworks for automated remediation.
• Engage with Terminal IT and Security teams to translate requirements into platform solutions.
• Lead major network programmes, managing risks, dependencies, and stakeholder communications.
• Ensure compliance with NIST CSF, ISO 27001, SOC2, PCI‑DSS, and HIPAA.
• Maintain platform documentation, runbooks, designs, and architectural artefacts.
• Track and report KPIs including availability, MTTR, change success rate, and security metrics.

Qualifications & Skills

• 15+ years of experience in Networking & Security, including technical leadership roles.
• 5 years of Industrial networking and OT integration.
• Expert-level knowledge of routing/switching (BGP, OSPF, EIGRP, VPC, VLAN, STP, LACP, MPLS).
• Strong expertise in NGFW, IPS/IDS, AAA, SIEM, DLP, WAF, Zero Trust, micro‑segmentation.
• Skilled in network automation and IaC (Python, Ansible, Bash, Terraform).
• Experience with Cisco Catalyst/Nexus/Industrial, PaloAlto, CheckPoint, and Aruba/Cisco wireless.
• Strong understanding of OT networking standards (PROFINET, Modbus, DNP3).
• Proven experience delivering complex, multi‑stakeholder programmes.
• Experience managing and developing engineering teams.
• CCNP/CCIE, TOGAF, or CISSP preferred.
• Knowledge of cybersecurity frameworks and compliance standards.

What We Offer

• Opportunity to define and lead the future of mission‑critical edge communications.
• Strategic influence over infrastructure supporting thousands of IT/OT devices.
• Innovative engineering culture with strong investment in development.

Maersk is committed to a diverse and inclusive workplace, and we embrace different styles of thinking. Maersk is an equal opportunities employer and welcomes applicants without regard to race, colour, gender, sex, age, religion, creed, national origin, ancestry, citizenship, marital status, sexual orientation, physical or mental disability, medical condition, pregnancy or parental leave, veteran status, gender identity, genetic information, or any other characteristic protected under applicable law. We will consider qualified applicants with criminal histories in a manner consistent with all legal requirements.