VMware NSX Security Engineer

Job Summary

We are seeking an experienced VMware NSX Security Engineer / Administrator responsible for the architecture, deployment, configuration, and day-to-day administration of network virtualization and security policies within a VMware environment.

The role bridges traditional networking, cloud infrastructure, and cybersecurity, with a primary focus on establishing a zero-trust network posture through advanced logical routing, distributed firewalls, and micro-segmentation across hybrid cloud workloads.

Location: Spring, TX – Day 1 Onsite Duration: 6–12+ Months Contract

Key Responsibilities

Security Architecture & Micro-Segmentation

Design and enforce granular Distributed Firewall (DFW) and Gateway Firewall rules.

Implement micro-segmentation to isolate virtual machines and applications.

Prevent lateral or east-west threat propagation across workloads.

Support zero-trust security architecture and policies.

Network Virtualization Management

Deploy and manage logical switching within VMware NSX.

Configure and administer Tier-0 and Tier-1 routing.

Manage distributed load balancing and VPN services.

Troubleshoot network virtualization across hybrid environments.

Lifecycle Management

Perform maintenance, scaling, upgrades, patches, and configuration management.

Administer NSX Managers, Edge Nodes, and Transport Nodes.

Ensure platform stability, availability, and disaster recovery readiness.

Infrastructure Automation

Develop and maintain Infrastructure-as-Code (IaC) solutions.

Create automation scripts to streamline security rule deployment.

Automate configuration and operational processes using PowerShell/PowerCLI, Python, Terraform, or NSX REST APIs.

Monitoring & Log Analysis

Monitor infrastructure health, capacity, and security events.

Utilize VMware Aria Operations, Network Insight, or equivalent monitoring platforms.

Integrate and analyze security events through SIEM platforms such as Splunk.

Cross-Team Collaboration

Collaborate with systems engineers, network administrators, and Security Operations Center (SOC) teams.

Troubleshoot physical-to-virtual network connectivity and overlay issues.

Support integration between networking, infrastructure, and security environments.

Incident Response Support

Assist security teams during network and security incidents.

Perform deep-packet inspection and network flow tracing.

Apply emergency isolation and firewall rules during active security events.

Required Technical Skills

VMware Ecosystem

Deep hands-on experience with:

VMware vSphere

VMware ESXi

VMware vCenter

VMware NSX-T / NSX architecture

Networking

Expert knowledge of:

BGP

OSPF

Geneve / VXLAN overlay encapsulation

VLANs

TCP/IP

Firewall & Security

Strong understanding of:

Layer 4–7 firewall rules

Distributed Firewall (DFW)

Gateway Firewall

IDS/IPS

Network micro-segmentation

Zero-trust security concepts

Automation & Scripting

Proficiency with one or more of:

PowerShell / PowerCLI

Python

Terraform

NSX REST APIs

Third-Party & Cloud Integration

Experience integrating NSX with physical next-generation firewalls such as:

Palo Alto Networks

Check Point

Familiarity with cloud networking environments such as AWS and Azure.

Preferred Certifications

VMware Certified Professional – Network Virtualization (VCP-NV)

VMware Certified Advanced Professional – Network Virtualization (VCAP-NV Design or Deploy)

Cisco Certified Network Associate (CCNA)

Cisco Certified Network Professional (CCNP)