Infrastructure Engineer

NetSecOps Engineer, Network Reliability Engineering (Maersk)

Job Level 3 (Infrastructure Engineer)

This position will be based in Bangalore

A.P. Moller - Maersk

A.P. Moller – Maersk is the global leader in container shipping services. The business operates in 130 countries and employs c. 80,000 staff.  An integrated container logistics company, Maersk aims to connect and simplify its customers’ supply chains.   

We Offer Joining Maersk will embark you on a transformational journey with great opportunities for career development within a global organization. As an Senior NetSecOps Engineer, you will design, build and operate world class network and perimeter platforms and products that enable our highly distributed global business for site, fleet, asset and IoT connectivity, required to deliver against our integrator business strategy. You will be exposed to a wide and challenging range of needs and opportunities requiring you to engage closely with stakeholders across all Maersk as you mature, evolve and operate our portfolio of networking and perimeter capabilities. The Brief

A globally focused shipping and transportation organisation is continuing to drive an ambitious and complex change and transformational programme to deliver a service of excellence for its customers and clients worldwide.  The Global CTIO has a mandate from the Maersk board to lead the Technology transformation of Maersk which will enable the Maersk business strategy to become the global integrator of container logistics through digitising the Maersk business processes and customer engagement.

The Technology function is fundamental to enable the company’s transformation and in response to this demand, our in-house technological capability is growing exponentially. We are recruiting world class talent to ensure that the technology services are modernised to enable Maersk to become a logistics integrator leveraging a competitive advantage through technology.

Why this job matters?

The Network Reliability Engineering function is pivotal to our transformation, it is a central team within Network Architecture & Engineering, responsible for the delivery of infrastructure products, design build quality and L2-to-resolution in-life operation of network and perimeter platforms, products and capabilities provided to Maersk.

Reporting to the Network Engineering Manager, Network Edge & Cloud you will serve as an Senior NetSecOps Engineer. This role is responsible centrally and locally for the design, build and L2 – L3 in-life operation of our Network Edge and Cloud Networking platforms, products and capabilities provided to Maersk.

It has a critical role to play as we continue to develop our long-term multi-technology and multi-product network and perimeter capabilities, connecting our asset, sites and people on land and at sea. Delivering best in class global connectivity and perimeter services that not only meet the need of our business today but will be a differentiator, enabling our colleagues and partners with technology solutions that are a catalyst for productivity and innovation.

Scope

All data networks provided to Maersk across Core, Edge and Cloud locations (offices, warehouses, terminals, vessels, data centres, cloud etc), and the perimeter  services that protect and enable them including but not limited to:

• WAN, LAN : Internet | IP/MPLS/IPSEC | Next-Gen/SD WAN
• Perimeter: Checkpoint SME skills - Mandatory

      Specific Job Requirements Work across Network Reliability Engineering, Network Product Engineering and Network OSS Engineering to define the specifications and perform impact assessments ensuring a collaborative approach and consensus agreement of the performance and customer experience parameters of the systems, network, perimeter and network-based services to be delivered. Work with Network design peer’s, architecture and operational teams to define the implementation roadmap and scope sprints to deliver faster business outcomes across the team. Identify the network and perimeter hardware, software infrastructure and EMS needs and perform evalution and benchmarking before introduction into the estate. Design multi-tenant and geo-distributed Core IP Fabric, supporting Cloud Interconnects (Public and Private) Data Centre Interconnect, Internet Peering and WAN Interconnects that is secure, scalable, and resilient, which is compliant with Maersk technology architecture standards and policies. Identify, define and engineer the right set of enabling services - DHCP, IPAM, Time synchronisation and Instrumentation technologies to support connectivity of commercial offices, warehouses, ports and terminals to the Network Edge and Cloud at scale. Responsible for the integrity of engineered solutions ensuring alignment with Network Architecture. Build and expand converged network and perimeter deployment automation and standardization using Infrastructure as code (IaC). Document, publish and maintain integration designs for NetSecOps systems entities and their interfaces. Provide subject matter expertise to contributing to the bottom-up-build process required to support budgeting and investment cases. To be a successful technologist at Maersk, you must be passionate about building, enabling and sustaining our business, as well as inspiring and developing our people. Further, in this role you will:

• Provide network and perimeter capabilities as a products with streamlined fulfilment journeys such that Maersk is self-sufficient in the company’s ability to deliver on its strategic remit.
• Should posess strong handson on Checkpoint FW skills and will work with operational squad to handle INCs.
• Be a world class expert in core network and cloud network engineering domain, acting as a L2-to-resolution escalation specialist, ensuring that Network Edge and Cloud Networking infrastructures are in line with in-life operations SLA’s.
• Design, build and manage a representative Network Integration Test (NIT) model to enable quality assurance of all network designs ahead of production deployment.
• Measure and optimize network and perimeter performance, pushing our capabilities forward, getting ahead of upstream needs, and innovating for continual improvement.
• Provide subject matter expertise to implementation and operational teams to guide deployment and in-life troubleshooting of Network Edge and Cloud Networking infrastructure.
• Ensure the successful incremental design, build, deploy and operate of the current capability stack while modernizing and transforming to enable the future strategy.
• Regularly provide a transparent view of network development progress and design commitments.

What I'll be doing – your accountabilities?

Network Reliability Engineering – Design, build, operate of the Network Edge and Cloud Networking ecosystem in support of the modernisation and transformation agenda for network and perimeter. Balancing the adoption of next generation technologies with mature solutions and insourced capability with outsourced services:

• Execute network and perimeter product requirements as NetSecOps initiatives that are delivered to time, cost and quality. Ensuring that network and perimeter capabilities are easily consumed “As-a-Service’ and are simultaneously compliant with Maersk technology architecture standards and security policies.
• Develop, implement and in-life operate tools to deploy, monitor, and administer virtual and physical network and perimeter infrastructure, over the top products and capabilities ensuring they are delivered to time, cost and quality.
• Build internal, external and third-party supplier relationships to ensure full commitment and support in execution of the architecture into operational designs
• Improve reliability, quality, and time-to-restore for network and perimeter services across the estate, within SLAs
• Provide subject matter expertise to delivery and L1 operational teams to guide deployment and in-life troubleshooting of converged networking and perimeter services
• Continually improve operations processes to drive efficiency and lower operational costs
• Plan and execute maintenance activities, ensuring appropriate levels of spares for all dedicated and managed network and perimetet technology

The Candidate

To be considered for this opportunity candidates will have the following capabilities.

• A demonstrable track record operating as a Security Network Engineer with 6+ years’ experience in security design and enterprise cloud technology adoption in multi-vendor and or multi-MSP production environments in a globally focused business
• Engineer level credibility with hands-on experience within a Systems Integrator, Service Provider, Network Technology Vendor or Multi-National Corporation (MNC)
• Requires detailed network development, integration, optimisation, standards (IETF, ITU, IEEE, ETSI, TMF, NIST and BIPM) knowledge and expertise across Layer 1 - 4 of the OSI stack with the ability to employ in both physical and virtual contexts
• Expert knowledge in networks and the supporting ecosystem, experienced in engaging on network topics at all levels internally and externally:
  • Traditional – Routing & Switching, Internet Peering, IPSec, Firewalls, Load Balancers, Web Proxies, and DDI
  • Next-generation – NAC, Micro-Segmentation, NGFW, WAF, SSE, SIEM
  • Tooling – Active and Passive Instrumentation, NPMD and APM
  • OSS – EMS, Catalogue driven Orchestration, IBN and Experience API integrations
• A very good understanding of network element management plane, control plane, data plane and fast switching
• Expertise of DevSecOps, Agile methodologies, CI/CD, and tools like Azure DevOps and Jira
• Strong presentation skills (written and oral), capable of articulating complex ideas with authority and making the case for adoption in simple language with the ability to present a high-level vision and story as well as the detailed analysis to underpin it.

The candidate will be a fit with the culture and values of Maersk

Maersk is committed to a diverse and inclusive workplace, and we embrace different styles of thinking. Maersk is an equal opportunities employer and welcomes applicants without regard to race, colour, gender, sex, age, religion, creed, national origin, ancestry, citizenship, marital status, sexual orientation, physical or mental disability, medical condition, pregnancy or parental leave, veteran status, gender identity, genetic information, or any other characteristic protected by applicable law.
We are happy to support your need for any adjustments during the application and hiring process. If you need special assistance or an accommodation to use our website, apply for a position, or to perform a job, please contact us by emailing accommodationrequests@maersk.com.