Vmware NSX Security Engineer | W2 Only.

Xlysi LLC.; Spring (TX); On-site; USD 120,000 - 180,000; Full time

Job summary

The NSX Security Engineer will architect, deploy, configure and administer our VMware NSX environment to enforce a zero-trust posture across hybrid cloud workloads.

Responsibilities include designing granular firewall rules, managing logical routing, DNS/PKI integration, and ongoing security monitoring with SIEM tooling while collaborating with SOC and network teams in a Spring TX setting.

Qualifications

• Hands-on with VMware NSX-T/NSX architecture and vSphere/ESXi/vCenter.
• Deep knowledge of BGP/OSPF and Geneve/VXLAN overlays; VLANs and TCP/IP stack are essential.
• Strong firewalling concepts, zero-trust security, and IDS/IPS awareness.

Responsibilities

• Design and enforce distributed firewall (DFW) and Gateway Firewall rules.
• Deploy and manage NSX networking, routing, load balancers, and VPNs.
• Perform regular NSX Managers/Edge/Transport Node maintenance and upgrades.

Skills

VMware NSX

BGP

OSPF

Geneve/VXLAN

VLANs

TCP/IP

PowerShell/PowerCLI

Python

Terraform

NSX REST APIs

Zero-trust concepts

Firewall rules

IDS/IPS

Education

VMware Certifications (VCP-NV/VCAP-NV)

Tools

PowerCLI

Terraform

Job description

Vmware NSX Security Engineer || Location: Spring TX

VMware Ecosystem: Deep hands-on experience with VMware vSphere, ESXi, vCenter, and comprehensive NSX-T/NSX architecture.

Core Networking Protocols: Expert-level knowledge of BGP, OSPF, Geneve/VXLAN overlay encapsulation, VLANs, and TCP/IP stack

Role Descriptions: VMware NSX Security Engineer / Administrator

Job Summary

The NSX Security Engineer is responsible for the architecture| deployment| configuration| and day-to-day administration of network virtualization and security policies within our VMware infrastructure.
This role bridges the gap between traditional networking| cloud infrastructure| and cybersecurity.
The primary objective is to enforce a zero-trust network posture by configuring advanced logical routing| distributed firewalls| and micro-segmentation strategies across hybrid cloud workloads.

Key Responsibilities

• Security Architecture & Micro-segmentation: Design and enforce granular distributed firewall (DFW) and Gateway Firewall rules. Isolate virtual machines and applications to prevent lateral "east-west" threat propagation.
• Network Virtualization Management: Deploy and manage logical switching| tier-0/tier-1 routing| distributed load balancers| and VPNs within VMware NSX environments.
• Lifecycle Management: Handle regular maintenance| component scaling| software upgrades| patches| and configurations of NSX Managers| Edge Nodes| and Transport Nodes.
• Infrastructure Automation: Develop infrastructure-as-code (IaC) and automation scripts to streamline security rule deployment and ensure consistent disaster recovery readiness.
• Monitoring & Log Analysis: Audit infrastructure health| capacity| and security event logs utilizing tools like VMware Aria Operations (formerly vRealize)| Network Insight| or third-party SIEM platforms like Splunk.
• Cross-Team Collaboration: Work alongside systems engineers| traditional network administrators| and the Security Operations Center (SOC) to troubleshoot physical-to-virtual network overlays.
• Incident Response Support: Assist security incident teams by performing deep-packet inspection| tracing network flows| and applying emergency isolation rules during an active breach.

Technical Requirements & Skills

• VMware Ecosystem: Deep hands-on experience with VMware vSphere| ESXi| vCenter| and comprehensive NSX-T/NSX architecture.
• Core Networking Protocols: Expert-level knowledge of BGP| OSPF| Geneve/VXLAN overlay encapsulation| VLANs| and TCP/IP stack.
• Firewalling & Security: Strong understanding of Layer 4-7 firewall rules| intrusion detection/prevention systems (IDS/IPS)| and zero-trust concepts.
• Automation/Scripting: Proficiency with PowerShell/PowerCLI| Python| Terraform| or interacting directly with NSX REST APIs.
• Third-Party Integration: Familiarity with integrating NSX with physical next-gen firewalls (e.g.| Palo Alto Networks| Check Point) or cloud networking environments like AWS and Azure.

Preferred Certifications VMware Certified Professional Network Virtualization (VCP-NV)VMware Certified Advanced Professional Network Virtualization (VCAP-NV Design or Deploy)Cisco Certified Network Associate (CCNA) or Professional (CCNP) [1| 2]

HR

HR Xlysi LLC, Expert Portal Solutions
251 Milwaukee Ave, Buffalo grove, IL 60089
Web : http://www.xlysi.com
E-mail: [e-mail]