Sr. VMware NSX-T Engineer

Zappsec Inc.; India; Vor Ort; INR 4.000.000 - 7.000.000; Vollzeit

Zusammenfassung

Zappsec Inc. in India is seeking an experienced Sr VMware vSphere & NSX-T Engineer to own architecture and hands-on delivery of complex VMware environments. You will design, build, migrate, harden security, and hand over production systems across ESXi, vCenter, NSX-T, and related components.

Strong troubleshooting and ownership mindset are essential. You will lead end-to-end clustering, NSX-T networking, and security policy implementations while coordinating with engineering and delivery

Qualifikationen

• 8+ years in enterprise infrastructure, with VMware vSphere deployments and NSX-T/NSX.
• Ability to design, build, troubleshoot, and own production VMware environments.
• Experience explaining exact configurations, scale, dependencies, and incident history.

Aufgaben

• Architect, deploy, upgrade, and operate ESXi and vCenter estates, including clusters, HA, DRS, vMotion, and vSphere switches.
• Design and implement NSX-T 4.x: Manager, transport nodes, zones, Edge clusters, NAT, and high availability.
• Own end-to-end underlay/overlay connectivity: VLANs, BGP, DNS, north-south/east-west traffic, and failover.
• Build Zero Trust policies with NSX DFW, groups, service definitions, and workload segmentation.
• Lead VMware modernization, migrations, cutovers, and create migration waves with test/rollback plans.
• Troubleshoot outages using NSX Traceflow, packet captures, logs, and CLI to identify root causes.

Kenntnisse

VMware vSphere

NSX-T

vCenter

vMotion

HA/DRS

vDS

vSAN

Packet capture

PowerCLI

API automation

Ausbildung

VCP-NV

VCP-DCV

VCF Administrator

VCF Foundation

Tools

Terraform

Ansible

HCX

VCF

Jobbeschreibung

Sr VMware vSphere & NSX-T Engineer

• Title: Principal VMware vSphere & NSX-T Engineer
• Location: India
• Experience: 8+ years
• Reports to: Engineering / Delivery Leadership
• Type: Hands-on technical lead - architect, builder and troubleshooter

About Zappsec

Zappsec is a platform-led services company specializing in cloud, networking, cybersecurity, and identity. We combine deep engineering expertise, reusable platforms, and automation to modernize and secure enterprise infrastructure across hybrid and multi-cloud environments.

Our teams design, build, migrate, and operate production environments for enterprise customers. We value engineers who can defend an architecture, execute the configuration, troubleshoot complex failures, and own the final outcome.

Mission

Own the architecture and hands-on delivery of complex VMware vSphere and NSX-T environments, from design and build through migration, security hardening, production cutover, and operational handover. You must be comfortable at the ESXi host, vCenter, NSX Edge, routing, distributed firewall, and packet-capture layers, and able to resolve high-severity issues independently.

Responsibilities

• Architect, deploy, upgrade, and operate ESXi and vCenter estates, including clusters, HA, DRS, vMotion, vSphere Distributed Switches, performance, capacity, and resilience.
• Design and implement VMware NSX-T / NSX 4.x: Manager, transport nodes and zones, TEPs, overlay and VLAN segments, Edge clusters, Tier-0/Tier-1 gateways, NAT, and high availability.
• Own end-to-end underlay and overlay connectivity: VLANs, MTU, BGP, routing advertisements, DNS, north-south/east-west flows, upstream network integration, and failover.
• Build enforceable Zero Trust policies using NSX Distributed Firewall, groups/tags, service definitions, gateway firewall, and workload microsegmentation; validate traffic before and after policy changes.
• Lead VMware modernization, upgrades, migrations, and cutovers using vMotion and HCX where applicable; create dependency maps, migration waves, test plans, rollback steps, and hypercare plans.
• Troubleshoot production outages using NSX Traceflow, packet captures, CLI, ESXi/vCenter logs, esxtop, route tables, and policy realization to isolate and fix root causes.
• Produce HLDs/LLDs, as‑built diagrams, security rule matrices, runbooks, change records, and operational handover evidence; automate repeatable work with PowerCLI, APIs, or IaC.
• Lead technical discussions with customer VMware, network, security, storage, and cloud teams. Own design decisions, risk mitigation, and successful implementation.

Required Experience

• 8+ years in enterprise infrastructure, vSphere and deploying and troubleshooting NSX-T / VMware NSX.
• Personally designed and built production VMware environments. Must explain exact configuration, scale, dependencies, change windows, incident history, and individual contribution.
• Expertise across ESXi, vCenter, HA/DRS, vDS, vSAN or enterprise storage, lifecycle upgrades, availability design, workload performance, and host/VM recovery.
• Strong NSX-T engineering: Tier-0/Tier-1 routing, Edge clusters, BGP, overlay/TEP, transport zones, DFW, service groups, segmentation, and north-south traffic inspection.
• Hands‑on L2‑L7 problem isolation across VMware, physical networking, routing, firewalls, and storage. Must be able to whiteboard a complete packet path.
• Proven ownership of enterprise migrations or major production incidents, including root‑cause analysis, rollback decisions, risk controls, and customer‑facing execution.

Strongly Preferred - Cloud & Security

• Amazon Elastic VMware Service (Amazon EVS) and VMware Cloud Foundation: environment planning, VCF bring‑up/lifecycle, NSX overlay design, AWS VPC underlay, VPC Route Server/BGP, and workload connectivity.
• AWS hybrid networking: Amazon VPC, Transit Gateway, Direct Connect, route tables, DNS, security groups/NACLs, and integration between VMware workloads, AWS‑native services, and on‑premises networks.
• Enterprise security experience: NSX DFW and gateway policies, microsegmentation, least privilege, firewall change control, and integration with Palo Alto, Fortinet, or Check Point.
• VMware HCX, SDDC Manager / VCF Operations, Aria Operations, PowerCLI, Terraform, Ansible, and API‑driven automation for build, compliance, and operations.

Relevant Certifications

• Core VMware: VMware Certified Professional - Network Virtualization (VCP-NV); VCP - Data Center Virtualization (VCP-DCV); VCP - VMware Cloud Foundation Administrator (VCP-VCF Administrator).
• Advanced / security: VCAP - VMware Cloud Foundation Networking; VCAP-DCV (Deploy or Design); VCP - Private Cloud Security Administrator / vDefend, or comparable NSX security credentials.
• AWS (strongly preferred): AWS Certified Solutions Architect - Professional or Associate; AWS Certified Security - Specialty; AWS Certified Advanced Networking - Specialty (if held).

You Will Do Well Here If

• You can diagram the packet path from a VM through NSX DFW, Tier-1, Tier-0, Edge, BGP, and upstream firewalls, then prove where traffic fails.
• You have personally recovered broken VMware hosts, networks, or migrations and can explain exactly how you diagnosed and fixed them.
• You move from HLD to working configuration without waiting for another engineer to do the difficult parts.
• You write rollback plans before changes, verify the result, and leave behind a supportable production environment.

Technology Stack

• Virtualization & Storage: VMware vSphere, ESXi, vCenter, HA/DRS, vMotion, vDS, vSAN
• Networking & Security: NSX‑T / NSX 4.x, Edge, Tier‑0/Tier‑1, BGP, DFW, Traceflow
• Cloud & Hybrid (preferred): Amazon EVS, VCF, Amazon VPC, VPC Route Server, TGW, Direct Connect, HCX
• Automation & Operations: PowerCLI, APIs, Terraform, Ansible, VCF/Aria Operations, logs and captures

Strong candidates understand how compute, overlay networking, routing, security, storage, and AWS connectivity work together, rather than treating each as a separate tower.

Career Growth

Help shape Zappsec's VMware, cloud migration, and Zero Trust engineering practice. Strong performers can grow into practice architecture and technical leadership while remaining close to hands-on delivery.