VMware NSX Security Engineer / Administrator

Programmers.io; Spring (TX); On-site; USD 110,000 - 152,000; Full time

Job summary

Programmers.io seeks a VMware NSX Security Engineer/Administrator to design, deploy, and administer security policies in a VMware-based environment.

You will enforce a zero-trust posture via micro-segmentation, distributed firewalls, and routing configurations, automate rule deployment with IaC, and collaborate with SOC and network teams onsite in Spring, TX for a 6+ month contract.

Experience with vSphere/ESXi, vCenter, NSX-T, and SIEM integrations is required.

Qualifications

• Architect and administer NSX security policies in VMware infrastructure.
• Implement zero-trust posture with micro-segmentation and DFW/Gateway Firewall rules.
• Bridge traditional networking with cloud security and virtualization.
• Experience with NSX-T/NSX architecture and automation.

Responsibilities

• Design and enforce granular distributed firewall and gateway firewall rules.
• Deploy and manage NSX components, VPNs, and virtual networking.
• Handle routine NSX maintenance, upgrades, and configurations.
• Develop IaC and automation scripts for security rule deployment.

Skills

NSX

Zero-trust security

Firewall rules

Python

PowerShell/PowerCLI

Terraform

BGP/OSPF

REST API

Education

VCAP-NV Design or Deploy

Tools

Splunk

Aria Operations

Network Insight

NSX REST APIs

Job description

Job Role: VMware NSX Security Engineer / Administrator

Location: Spring, TX (Onsite)

Duration: Contract for 06+ Months

VMware Ecosystem: Deep hands-on experience with VMware vSphere, ESXi, vCenter, and comprehensive NSX-T/NSX architecture.

Core Networking Protocols: Expert-level knowledge of BGP, OSPF, Geneve/VXLAN overlay encapsulation, VLANs, and TCP/IP stack

Job Description:

• The NSX Security Engineer is responsible for the architecture| deployment| configuration| and day-to-day administration of network virtualization and security policies within our VMware infrastructure.
• This role bridges the gap between traditional networking| cloud infrastructure| and cybersecurity.
• The primary objective is to enforce a zero-trust network posture by configuring advanced logical routing| distributed firewalls| and micro-segmentation strategies across hybrid cloud workloads.

Key Responsibilities

• Security Architecture & Micro-segmentation: Design and enforce granular distributed firewall (DFW) and Gateway Firewall rules. Isolate virtual machines and applications to prevent lateral "east-west" threat propagation.
• Network Virtualization Management: Deploy and manage logical switching| tier-0/tier-1 routing| distributed load balancers| and VPNs within VMware NSX environments.
• Lifecycle Management: Handle regular maintenance| component scaling| software upgrades| patches| and configurations of NSX Managers| Edge Nodes| and Transport Nodes.
• Infrastructure Automation: Develop infrastructure-as-code (IaC) and automation scripts to streamline security rule deployment and ensure consistent disaster recovery readiness.
• Monitoring & Log Analysis: Audit infrastructure health| capacity| and security event logs utilizing tools like VMware Aria Operations (formerly vRealize)| Network Insight| or third-party SIEM platforms like Splunk.
• Cross-Team Collaboration: Work alongside systems engineers| traditional network administrators| and the Security Operations Center (SOC) to troubleshoot physical-to-virtual network overlays.
• Incident Response Support: Assist security incident teams by performing deep-packet inspection| tracing network flows| and applying emergency isolation rules during an active breach.
• Technical Requirements & Skills VMware Ecosystem: Deep hands-on experience with VMware vSphere| ESXi| vCenter| and comprehensive NSX-T/NSX architecture.
• Core Networking Protocols: Expert-level knowledge of BGP| OSPF| Geneve/VXLAN overlay encapsulation| VLANs| and TCP/IP stack.
• Firewalling & Security: Strong understanding of Layer 4-7 firewall rules| intrusion detection/prevention systems (IDS/IPS)| and zero-trust concepts.
• Automation/Scripting: Proficiency with PowerShell/PowerCLI| Python| Terraform| or interacting directly with NSX REST APIs.
• Third-Party Integration: Familiarity with integrating NSX with physical next-gen firewalls (e.g.| Palo Alto Networks| Check Point) or cloud networking environments like AWS and Azure.

Preferred Certifications

• VMware Certified Advanced Professional Network Virtualization (VCAP-NV Design or Deploy)