Deep hands-on experience with VMware vSphere, ESXi, vCenter, and comprehensive
NSX-T/NSX
architecture.
Core Networking Protocols:
Expert-level knowledge of BGP, OSPF, Geneve/VXLAN overlay encapsulation, VLANs, and TCP/IP stack
Role Descriptions:
VMware NSX Security Engineer / Administrator Job Summary The NSX Security Engineer is responsible for the architecture| deployment| configuration| and day-to-day administration of network virtualization and security policies within our VMware infrastructure. This role bridges the gap between traditional networking| cloud infrastructure| and cybersecurity. The primary objective is to enforce a zero-trust network posture by configuring advanced logical routing| distributed firewalls| and micro-segmentation strategies across hybrid cloud workloads.
Design and enforce granular distributed firewall (DFW) and Gateway Firewall rules. Isolate virtual machines and applications to prevent lateral /"east-west/" threat propagation.
Network Virtualization Management:
Deploy and manage logical switching| tier-0/tier-1 routing| distributed load balancers| and VPNs within VMware NSX environments.
Lifecycle Management:
Handle regular maintenance| component scaling| software upgrades| patches| and configurations of NSX Managers| Edge Nodes| and Transport Nodes.
Infrastructure Automation:
Develop infrastructure-as-code (IaC) and automation scripts to streamline security rule deployment and ensure consistent disaster recovery readiness.
Monitoring & Log Analysis:
Audit infrastructure health| capacity| and security event logs utilizing tools like VMware Aria Operations (formerly vRealize)| Network Insight| or third-party SIEM platforms like Splunk.
Cross-Team Collaboration:
Work alongside systems engineers| traditional network administrators| and the Security Operations Center (SOC) to troubleshoot physical-to-virtual network overlays.
Incident Response Support:
Assist security incident teams by performing deep-packet inspection| tracing network flows| and applying emergency isolation rules during an active breach.
Technical Requirements & Skills VMware Ecosystem:
Deep hands-on experience with VMware vSphere| ESXi| vCenter| and comprehensive
NSX-T/NSX
architecture.
Core Networking Protocols:
Expert-level knowledge of BGP| OSPF| Geneve/VXLAN overlay encapsulation| VLANs| and TCP/IP stack.
Firewalling & Security:
Strong understanding of Layer 4-7 firewall rules| intrusion detection/prevention systems (IDS/IPS)| and zero-trust concepts.
Automation/Scripting:
Proficiency with PowerShell/PowerCLI| Python| Terraform| or interacting directly with
NSX REST
APIs.
Third-Party Integration:
Familiarity with integrating NSX with physical next-gen firewalls (e.g.| Palo Alto Networks| Check Point) or cloud networking environments like AWS and Azure. Preferred Certifications VMware Certified Professional Network Virtualization (VCP-NV)VMware Certified Advanced Professional Network Virtualization (VCAP-NV Design or Deploy) Cisco Certified Network Associate (CCNA) or Professional (CCNP) [1| 2] Work Authorization Applicants must be legally authorized to work in the United States. Equal Employment Opportunity [Themesoft Inc] is an Equal Employment Opportunity employer. We consider qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other status protected by applicable federal, state, or local law.