VMware NSX Security Engineer

Job Summary

We are seeking an experienced VMware NSX Security Engineer / Administrator responsible for the architecture deployment configuration and day-to-day administration of network virtualization and security policies within a VMware environment.

The role bridges traditional networking cloud infrastructure and cybersecurity with a primary focus on establishing a zero-trust network posture through advanced logical routing distributed firewalls and micro-segmentation across hybrid cloud workloads.

Location: Spring TX Day 1 Onsite
Duration: 612 Months Contract

Key Responsibilities

Security Architecture & Micro-Segmentation

• Design and enforce granular Distributed Firewall (DFW) and Gateway Firewall rules.

• Implement micro-segmentation to isolate virtual machines and applications.

• Prevent lateral or east-west threat propagation across workloads.

• Support zero-trust security architecture and policies.

Network Virtualization Management

• Deploy and manage logical switching within VMware NSX.

• Configure and administer Tier-0 and Tier-1 routing.

• Manage distributed load balancing and VPN services.

• Troubleshoot network virtualization across hybrid environments.

Lifecycle Management

• Perform maintenance scaling upgrades patches and configuration management.

• Administer NSX Managers Edge Nodes and Transport Nodes.

• Ensure platform stability availability and disaster recovery readiness.

Infrastructure Automation

• Develop and maintain Infrastructure-as-Code (IaC) solutions.

• Create automation scripts to streamline security rule deployment.

• Automate configuration and operational processes using PowerShell/PowerCLI Python Terraform or NSX REST APIs.

Monitoring & Log Analysis

• Monitor infrastructure health capacity and security events.

• Utilize VMware Aria Operations Network Insight or equivalent monitoring platforms.

• Integrate and analyze security events through SIEM platforms such as Splunk.

Cross-Team Collaboration

• Collaborate with systems engineers network administrators and Security Operations Center (SOC) teams.

• Troubleshoot physical-to-virtual network connectivity and overlay issues.

• Support integration between networking infrastructure and security environments.

Incident Response Support

• Assist security teams during network and security incidents.

• Perform deep-packet inspection and network flow tracing.

• Apply emergency isolation and firewall rules during active security events.

Required Technical Skills

VMware Ecosystem

• Deep hands-on experience with:

  • VMware vSphere

  • VMware ESXi

  • VMware vCenter

  • VMware NSX-T / NSX architecture

Networking

• Expert knowledge of:

  • BGP

  • OSPF

  • Geneve / VXLAN overlay encapsulation

  • VLANs

  • TCP/IP

Firewall & Security

• Strong understanding of:

  • Layer 47 firewall rules

  • Distributed Firewall (DFW)

  • Gateway Firewall

  • IDS/IPS

  • Network micro-segmentation

  • Zero-trust security concepts

Automation & Scripting

• Proficiency with one or more of:

  • PowerShell / PowerCLI

  • Python

  • Terraform

  • NSX REST APIs

Third-Party & Cloud Integration

• Experience integrating NSX with physical next-generation firewalls such as:

  • Palo Alto Networks

  • Check Point

• Familiarity with cloud networking environments such as AWS and Azure.

Preferred Certifications

• VMware Certified Professional Network Virtualization (VCP-NV)

• VMware Certified Advanced Professional Network Virtualization (VCAP-NV Design or Deploy)

• Cisco Certified Network Associate (CCNA)

• Cisco Certified Network Professional (CCNP)

Required Qualifications

• Deep hands-on experience with VMware vSphere ESXi vCenter and VMware NSX-T/NSX architecture.

• Expert-level knowledge of BGP OSPF Geneve/VXLAN overlay encapsulation VLANs and TCP/IP.

• Strong experience with NSX Distributed Firewall (DFW) Gateway Firewall micro-segmentation and zero-trust security concepts.

• Hands-on experience with logical switching Tier-0/Tier-1 routing distributed load balancing and VPNs within VMware NSX.

• Experience managing the NSX lifecycle including NSX Managers Edge Nodes Transport Nodes upgrades patches scaling and configuration.

• Proficiency with PowerShell/PowerCLI Python Terraform or NSX REST APIs for automation and infrastructure-as-code.

• Experience with Layer 47 firewall rules IDS/IPS and network security policies.

• Experience monitoring VMware infrastructure and security events using VMware Aria Operations Network Insight Splunk or similar tools.

• Experience troubleshooting physical-to-virtual network overlays and collaborating with networking systems and SOC teams.

• Familiarity with integrating NSX with next-generation firewalls such as Palo Alto Networks or Check Point and/or cloud networking platforms such as AWS and Azure.

• Ability to work onsite from Day 1 in Spring TX.