NSX Security Engineer: Micro-Segmentation & Zero-Trust

Themesoft Inc; Spring (TX); On-site; USD 110,000 - 179,000; Full time

Job summary

The NSX Security Engineer at Themesoft Inc will be responsible for the architecture, deployment, configuration, and day-to-day administration of network virtualization and security policies within our VMware infrastructure. This role bridges traditional networking, cloud infrastructure, and cybersecurity to enforce a zero-trust posture across hybrid cloud workloads.

As a hands-on position, you will design micro-segmentation, manage NSX components, and develop IaC and automation to ensure

Qualifications

• Architecture, deployment, configuration and day-to-day administration of network virtualization and security policies in VMware infrastructure.
• Bridge between traditional networking, cloud infrastructure and cybersecurity.

Responsibilities

• Security Architecture & Micro-segmentation: design and enforce granular distributed firewall rules.
• Network Virtualization Management: deploy and manage logical switching, tier-0/tier-1 routing, distributed load balancers and VPNs.
• Lifecycle Management: maintain NSX Managers, Edge Nodes, Transport Nodes; perform upgrades and patches.
• Infrastructure Automation: develop IaC and scripts for security rule deployment and disaster recovery readiness.
• Monitoring & Log Analysis: audit health, capacity, and security logs with VMware Aria Operations, Network Insight, or SIEMs like Splunk.
• Cross-Team Collaboration: work with systems engineers, network admins, and SOC.
• Incident Response Support: assist in deep-packet inspection and emergency isolation.

Skills

VMware NSX

vSphere ESXi

Network Security

Firewall Rules

Tools

PowerShell

PowerCLI

Python

Terraform

NSX REST API

Job description

The NSX Security Engineer at Themesoft Inc will be responsible for the architecture, deployment, configuration, and day-to-day administration of network virtualization and security policies within our VMware infrastructure. This role bridges traditional networking, cloud infrastructure, and cybersecurity to enforce a zero-trust posture across hybrid cloud workloads.

As a hands-on position, you will design micro-segmentation, manage NSX components, and develop IaC and automation to ensure