Sr. VMware NSX-T Engineer

Sr. VMware NSX-T EngineerAbout Zappsec Zappsec is a global digital engineering partner helping high-growth enterprises modernize their cloud, network, and security infrastructure. We combine deep technology expertise, automation-first methodologies, and AI-driven innovation to deliver secure, scalable, and intelligent modernization outcomes. Role Overview The Sr. VMware NSX-T Engineer designs, builds, and supports VMware vSphere and NSX environments for Zappsec clients. You will own the software-defined data center from the hypervisor through the overlay network. That means deploying NSX-T fabrics, building Tier-0 and Tier-1 routing, enforcing micro-segmentation, and connecting on-premises environments to public cloud. This is a hands-on engineering role for someone who builds and troubleshoots these platforms personally. A background in cloud or security is strongly preferred. Key Responsibilities

1. VMware vSphere Platform Engineering

• Design, deploy, and administer vSphere environments, including ESXi hosts, vCenter Server, clusters, and vSphere Distributed Switches.
• Configure and tune HA, DRS, vMotion, storage policies, and resource pools for production workloads.
• Plan and run vSphere upgrades and patching through vSphere Lifecycle Manager.
• Troubleshoot compute, storage, and network performance issues across the virtual infrastructure.

1. NSX-T Design and Implementation

• Deploy and operate NSX Manager clusters, transport zones, transport nodes, and host preparation.
• Build Geneve overlay networks, segments, and Edge node clusters.
• Design and configure Tier-0 and Tier-1 gateways, including BGP and OSPF peering with the physical network, ECMP, and route redistribution.
• Implement NAT, IPsec and L2 VPN, DHCP, and load balancing services.
• Support multi-site and NSX Federation designs where required.

1. Micro-segmentation and Network Security

• Design and enforce Distributed Firewall and Gateway Firewall policies based on security groups, tags, and application tiers.
• Build Zero Trust segmentation models and move clients from flat networks to application-centric policy.
• Configure NSX IDS/IPS and identity-based firewall rules where in scope.
• Maintain the firewall policy lifecycle, including rule reviews, cleanup, and audit evidence.

1. Cloud and Hybrid Connectivity

• Design hybrid connectivity between vSphere/NSX environments and AWS or Azure.
• Support workload migration and VMware exit programs, including migrations with VMware HCX.
• Align NSX segmentation and routing with cloud network and security controls so policy stays consistent across environments.

1. Operations, Automation, and Documentation

• Lead NSX upgrades, including NSX-T 3.x to NSX 4.x, and NSX-V to NSX-T migrations.
• Automate configuration and day-two tasks with the NSX REST API, PowerCLI, Terraform, or Ansible.
• Monitor and troubleshoot with NSX Traceflow, packet capture, and VMware Aria Operations for Networks.
• Produce high-level and low-level designs, runbooks, and handover documentation for client teams.

Qualifications

• 8+ years of hands-on experience in data center infrastructure, with at least 5 years deploying and operating NSX-T or VMware NSX in production.
• Expert-level knowledge of VMware vSphere 7 and 8, including ESXi, vCenter, and vSphere Distributed Switches.
• Deep understanding of NSX-T architecture, including the management, control, and data planes, overlay networking, Edge services, and Tier-0 and Tier-1 routing.
• Strong routing and switching fundamentals, including BGP, OSPF, VLANs, MTU, and spine-leaf designs.
• Hands-on experience designing and enforcing Distributed Firewall micro-segmentation.
• Ability to troubleshoot complex issues across the hypervisor, overlay, and physical network.
• Strong ownership mindset and ability to work independently with client teams.

Strongly Preferred

• Cloud background in AWS or Azure networking and security, such as VPC or VNet design, Transit Gateway, Virtual WAN, and hybrid connectivity.
• Security background, including Zero Trust architecture, next-generation firewalls (Palo Alto Networks, Fortinet, or Check Point), and segmentation for compliance requirements.
• Experience with VMware Cloud Foundation (VCF) and VMware HCX.
• Scripting and automation experience with Python, PowerShell/PowerCLI, or Terraform.

Certifications Preferred (one or more):

• VMware Certified Professional, Network Virtualization 2024 (VCP-NV, exam 2V0-41.24)
• VMware Certified Professional, VMware Cloud Foundation Administrator (VCP-VCF Admin, exam 2V0-17.25)
• AWS Certified Advanced Networking Specialty, or Microsoft Certified: Azure Network Engineer Associate
• A security certification such as CISSP, or a firewall vendor certification

 

8+ years data center infrastructure experience with 5+ years NSX-T/NSX production; expert vSphere 7/8; strong routing/switching (BGP, OSPF); micro-segmentation; troubleshooting; cloud/security background preferred; certifications preferred.

Key Responsibilities

• designing NSX-T environments
• deploying vSphere infrastructure
• enforcing micro-segmentation

Skills & Tools

VMware vSphere, NSX-T, NSX, ESXi, vCenter Server, vSphere Distributed Switches, vSphere Lifecycle Manager, NSX Manager, Geneve, BGP, OSPF, ECMP, NAT, IPsec, L2 VPN, DHCP, NSX Federation, Distributed Firewall, Gateway Firewall, NSX IDS/IPS, AWS, Azure, VMware HCX, NSX REST API, PowerCLI, Terraform, Ansible, NSX Traceflow, VMware Aria Operations for Networks, Python, PowerShell, Palo Alto Networks, Fortinet, Check Point, VMware Cloud Foundation

Job Details

• Category: Information Technology
• Seniority: Senior Level
• Commitment: Full Time
• Workplace: Remote — India
• Languages: English

About Zappsec Inc.

A global digital engineering partner helping enterprises modernize cloud, network, and security infrastructure. — Industry: Information Technology

Apply Now →