Sr. VMware NSX-T Engineer
About ZappsecZappsec is a global digital engineering partner helping high-growth enterprises modernize their cloud, network, and security infrastructure. We combine deep technology expertise, automation-first methodologies, and AI-driven innovation to deliver secure, scalable, and intelligent modernization outcomes.
Role Overview
The Sr. VMware NSX-T Engineer designs, builds, and supports VMware vSphere and NSX environments for Zappsec clients. You will own the software-defined data center from the hypervisor through the overlay network. That means deploying NSX-T fabrics, building Tier-0 and Tier-1 routing, enforcing micro-segmentation, and connecting on-premises environments to public cloud. This is a hands-on engineering role for someone who builds and troubleshoots these platforms personally. A background in cloud or security is strongly preferred.
Key Responsibilities
- VMware vSphere Platform Engineering
- Design, deploy, and administer vSphere environments, including ESXi hosts, vCenter Server, clusters, and vSphere Distributed Switches.
- Configure and tune HA, DRS, vMotion, storage policies, and resource pools for production workloads.
- Plan and run vSphere upgrades and patching through vSphere Lifecycle Manager.
- Troubleshoot compute, storage, and network performance issues across the virtual infrastructure.
- NSX-T Design and Implementation
- Deploy and operate NSX Manager clusters, transport zones, transport nodes, and host preparation.
- Build Geneve overlay networks, segments, and Edge node clusters.
- Design and configure Tier-0 and Tier-1 gateways, including BGP and OSPF peering with the physical network, ECMP, and route redistribution.
- Implement NAT, IPsec and L2 VPN, DHCP, and load balancing services.
- Support multi-site and NSX Federation designs where required.
- Micro-segmentation and Network Security
- Design and enforce Distributed Firewall and Gateway Firewall policies based on security groups, tags, and application tiers.
- Build Zero Trust segmentation models and move clients from flat networks to application-centric policy.
- Configure NSX IDS/IPS and identity-based firewall rules where in scope.
- Maintain the firewall policy lifecycle, including rule reviews, cleanup, and audit evidence.
- Cloud and Hybrid Connectivity
- Design hybrid connectivity between vSphere/NSX environments and AWS or Azure.
- Support workload migration and VMware exit programs, including migrations with VMware HCX.
- Align NSX segmentation and routing with cloud network and security controls so policy stays consistent across environments.
- Operations, Automation, and Documentation
- Lead NSX upgrades, including NSX-T 3.x to NSX 4.x, and NSX-V to NSX-T migrations.
- Automate configuration and day-two tasks with the NSX REST API, PowerCLI, Terraform, or Ansible.
- Monitor and troubleshoot with NSX Traceflow, packet capture, and VMware Aria Operations for Networks.
- Produce high-level and low-level designs, runbooks, and handover documentation for client teams.
- 8+ years of hands-on experience in data center infrastructure, with at least 5 years deploying and operating NSX-T or VMware NSX in production.
- Expert-level knowledge of VMware vSphere 7 and 8, including ESXi, vCenter, and vSphere Distributed Switches.
- Deep understanding of NSX-T architecture, including the management, control, and data planes, overlay networking, Edge services, and Tier-0 and Tier-1 routing.
- Strong routing and switching fundamentals, including BGP, OSPF, VLANs, MTU, and spine-leaf designs.
- Hands-on experience designing and enforcing Distributed Firewall micro-segmentation.
- Ability to troubleshoot complex issues across the hypervisor, overlay, and physical network.
- Strong ownership mindset and ability to work independently with client teams.
- Cloud background in AWS or Azure networking and security, such as VPC or VNet design, Transit Gateway, Virtual WAN, and hybrid connectivity.
- Security background, including Zero Trust architecture, next-generation firewalls (Palo Alto Networks, Fortinet, or Check Point), and segmentation for compliance requirements.
- Experience with VMware Cloud Foundation (VCF) and VMware HCX.
- Scripting and automation experience with Python, PowerShell/PowerCLI, or Terraform.
Preferred (one or more):
- VMware Certified Professional, Network Virtualization 2024 (VCP-NV, exam 2V0-41.24)
- VMware Certified Professional, VMware Cloud Foundation Administrator (VCP-VCF Admin, exam 2V0-17.25)
- AWS Certified Advanced Networking Specialty, or Microsoft Certified: Azure Network Engineer Associate
- A security certification such as CISSP, or a firewall vendor certification
8+ years data center infrastructure experience with 5+ years NSX-T/NSX production; expert vSphere 7/8; strong routing/switching (BGP, OSPF); micro-segmentation; troubleshooting; cloud/security background preferred; certifications preferred.
Key Responsibilities
- designing NSX-T environments
- deploying vSphere infrastructure
- enforcing micro-segmentation
Skills & Tools
VMware vSphere, NSX-T, NSX, ESXi, vCenter Server, vSphere Distributed Switches, vSphere Lifecycle Manager, NSX Manager, Geneve, BGP, OSPF, ECMP, NAT, IPsec, L2 VPN, DHCP, NSX Federation, Distributed Firewall, Gateway Firewall, NSX IDS/IPS, AWS, Azure, VMware HCX, NSX REST API, PowerCLI, Terraform, Ansible, NSX Traceflow, VMware Aria Operations for Networks, Python, PowerShell, Palo Alto Networks, Fortinet, Check Point, VMware Cloud Foundation
Job Details
- Category: Information Technology
- Seniority: Senior Level
- Commitment: Full Time
- Workplace: Remote — India
- Languages: English
About Zappsec Inc.
A global digital engineering partner helping enterprises modernize cloud, network, and security infrastructure. — Industry: Information Technology