VMware NSX Security Engineer

We are seeking an experienced VMware NSX Security Engineer / Administrator responsible for the architecture, deployment, configuration, and day-to-day administration of network virtualization and security policies within a VMware environment.

The role bridges traditional networking, cloud infrastructure, and cybersecurity, with a primary focus on establishing a zero-trust network posture through advanced logical routing, distributed firewalls, and micro-segmentation across hybrid cloud workloads.

• Design and enforce granular Distributed Firewall (DFW) and Gateway Firewall rules.

• Implement micro-segmentation to isolate virtual machines and applications.

• Prevent lateral or east-west threat propagation across workloads.

• Support zero-trust security architecture and policies.

• Deploy and manage logical switching within VMware NSX.

• Configure and administer Tier-0 and Tier-1 routing.

• Manage distributed load balancing and VPN services.

• Troubleshoot network virtualization across hybrid environments.

• Perform maintenance, scaling, upgrades, patches, and configuration management.

• Administer NSX Managers, Edge Nodes, and Transport Nodes.

• Ensure platform stability, availability, and disaster recovery readiness.

• Develop and maintain Infrastructure-as-Code (IaC) solutions.

• Create automation scripts to streamline security rule deployment.

• Automate configuration and operational processes using PowerShell/PowerCLI, Python, Terraform, or NSX REST APIs.

• Monitor infrastructure health, capacity, and security events.

• Utilize VMware Aria Operations, Network Insight, or equivalent monitoring platforms.

• Integrate and analyze security events through SIEM platforms such as Splunk.

• Collaborate with systems engineers, network administrators, and Security Operations Center (SOC) teams.

• Troubleshoot physical-to-virtual network connectivity and overlay issues.

• Support integration between networking, infrastructure, and security environments.

• Assist security teams during network and security incidents.

• Perform deep-packet inspection and network flow tracing.

• Apply emergency isolation and firewall rules during active security events.

• Deep hands-on experience with:

  • VMware vSphere

  • VMware ESXi

  • VMware vCenter

  • VMware NSX-T / NSX architecture

• Expert knowledge of:

  • BGP

  • OSPF

  • Geneve / VXLAN overlay encapsulation

  • VLANs

  • TCP/IP

• Strong understanding of:

  • Layer 4–7 firewall rules

  • Distributed Firewall (DFW)

  • Gateway Firewall

  • IDS/IPS

  • Network micro-segmentation

  • Zero-trust security concepts

• Proficiency with one or more of:

  • PowerShell / PowerCLI

  • Python

  • Terraform

  • NSX REST APIs

• Experience integrating NSX with physical next-generation firewalls such as:

  • Palo Alto Networks

  • Check Point

• Familiarity with cloud networking environments such as AWS and Azure.

• Deep hands-on experience with VMware vSphere, ESXi, vCenter, and VMware NSX-T/NSX architecture.

• Expert-level knowledge of BGP, OSPF, Geneve/VXLAN overlay encapsulation, VLANs, and TCP/IP.

• Strong experience with NSX Distributed Firewall (DFW), Gateway Firewall, micro-segmentation, and zero-trust security concepts.

• Hands-on experience with logical switching, Tier-0/Tier-1 routing, distributed load balancing, and VPNs within VMware NSX.

• Experience managing the NSX lifecycle, including NSX Managers, Edge Nodes, Transport Nodes, upgrades, patches, scaling, and configuration.

• Proficiency with PowerShell/PowerCLI, Python, Terraform, or NSX REST APIs for automation and infrastructure-as-code.

• Experience with Layer 4–7 firewall rules, IDS/IPS, and network security policies.

• Experience monitoring VMware infrastructure and security events using VMware Aria Operations, Network Insight, Splunk, or similar tools.

• Experience troubleshooting physical-to-virtual network overlays and collaborating with networking, systems, and SOC teams.

• Familiarity with integrating NSX with next-generation firewalls such as Palo Alto Networks or Check Point and/or cloud networking platforms such as AWS and Azure.

• Ability to work onsite from Day 1 in Spring, TX.