VMware NSX Security Engineer

Job Summary

We are seeking an experienced VMware NSX Security Engineer / Administrator responsible for the architecture, deployment, configuration, and day-to-day administration of network virtualization and security policies within a VMware environment. The role bridges traditional networking, cloud infrastructure, and cybersecurity , with a primary focus on establishing a zero-trust network posture through advanced logical routing, distributed firewalls, and micro-segmentation across hybrid cloud workloads.

Location: Spring, TX – Day 1 Onsite Duration: 6–12+ Months Contract

Key Responsibilities

Security Architecture & Micro-Segmentation

• Design and enforce granular Distributed Firewall (DFW) and Gateway Firewall rules.
• Implement micro-segmentation to isolate virtual machines and applications.
• Prevent lateral or east-west threat propagation across workloads.
• Support zero-trust security architecture and policies.

Network Virtualization Management

• Deploy and manage logical switching within VMware NSX.
• Configure and administer Tier-0 and Tier-1 routing .
• Manage distributed load balancing and VPN services.
• Troubleshoot network virtualization across hybrid environments.

Lifecycle Management

• Perform maintenance, scaling, upgrades, patches, and configuration management.
• Administer NSX Managers, Edge Nodes, and Transport Nodes .
• Ensure platform stability, availability, and disaster recovery readiness.

Infrastructure Automation

• Develop and maintain Infrastructure-as-Code (IaC) solutions.
• Create automation scripts to streamline security rule deployment.
• Automate configuration and operational processes using PowerShell/PowerCLI, Python, Terraform, or NSX REST APIs.

Monitoring & Log Analysis

• Monitor infrastructure health, capacity, and security events.
• Utilize VMware Aria Operations, Network Insight , or equivalent monitoring platforms.
• Integrate and analyze security events through SIEM platforms such as Splunk.

Cross-Team Collaboration

• Collaborate with systems engineers, network administrators, and Security Operations Center (SOC) teams.
• Troubleshoot physical-to-virtual network connectivity and overlay issues.
• Support integration between networking, infrastructure, and security environments.

Incident Response Support

• Assist security teams during network and security incidents.
• Perform deep-packet inspection and network flow tracing.
• Apply emergency isolation and firewall rules during active security events.

Required Technical Skills

VMware Ecosystem Deep hands-on experience with:

• VMware vSphere
• VMware ESXi
• VMware vCenter
• VMware NSX-T / NSX architecture

Networking Expert knowledge of:

• BGP
• OSPF
• Geneve / VXLAN overlay encapsulation
• VLANs
• TCP/IP

Firewall & Security Strong understanding of:

• Layer 4–7 firewall rules
• Distributed Firewall (DFW)
• Gateway Firewall
• IDS/IPS
• Network micro-segmentation
• Zero-trust security concepts

Automation & Scripting Proficiency with one or more of:

• PowerShell / PowerCLI
• Python
• Terraform
• NSX REST APIs

Third-Party & Cloud Integration Experience integrating NSX with physical next-generation firewalls such as:

• Palo Alto Networks
• Check Point

Familiarity with cloud networking environments such as AWS and Azure .

Preferred Certifications

• VMware Certified Professional – Network Virtualization (VCP-NV)
• VMware Certified Advanced Professional – Network Virtualization (VCAP-NV Design or Deploy)
• Cisco Certified Network Associate (CCNA)
• Cisco Certified Network Professional (CCNP)

Required Qualifications

• Deep hands-on experience with VMware vSphere, ESXi, vCenter, and VMware NSX-T/NSX architecture .
• Expert-level knowledge of BGP, OSPF, Geneve/VXLAN overlay encapsulation, VLANs, and TCP/IP .
• Strong experience with NSX Distributed Firewall (DFW), Gateway Firewall, micro-segmentation, and zero-trust security concepts .
• Hands-on experience with logical switching, Tier-0/Tier-1 routing, distributed load balancing, and VPNs within VMware NSX.
• Experience managing the NSX lifecycle , including NSX Managers, Edge Nodes, Transport Nodes, upgrades, patches, scaling, and configuration.
• Proficiency with PowerShell/PowerCLI, Python, Terraform, or NSX REST APIs for automation and infrastructure-as-code.
• Experience with Layer 4–7 firewall rules, IDS/IPS, and network security policies .
• Experience monitoring VMware infrastructure and security events using VMware Aria Operations, Network Insight, Splunk, or similar tools .
• Experience troubleshooting physical-to-virtual network overlays and collaborating with networking, systems, and SOC teams.
• Familiarity with integrating NSX with next-generation firewalls such as Palo Alto Networks or Check Point and/or cloud networking platforms such as AWS and Azure .
• Ability to work onsite from Day 1 in Spring, TX .