VMware vDefend Security Engineer; SME

VMware vDefend Security Engineer (SME)

Location: Onsite – Alexandria, VA (occasional travel to Springfield, VA)
Clearance:
Top Secret (TS) Required
Type: Full-time / Onsite Federal Engagement

The VMware vDefend Security Engineer will serve as a Subject Matter Expert (SME) supporting the Department of State’s secure on-premise environment. This role focuses on designing, deploying, and optimizing VMware vDefend and associated security technologies, including firewalling, advanced threat protection, micro‑segmentation, and AVI (NSX Advanced Load Balancer). The engineer will ensure secure, resilient infrastructure in accordance with federal requirements, customer use cases, and VMware best practices.

• Lead design and deployment of VMware vDefend solutions to meet Department of State requirements.
• Develop architecture plans for threat protection, segmentation, distributed firewalling, and monitoring.
• Integrate vDefend capabilities with existing VMware and security infrastructure.

• Configure and optimize vDefend and NSX firewall rulesets (north‑south and east‑west).
• Implement advanced threat protection policies and defensive security measures.
• Apply micro‑segmentation strategies to protect virtual workloads and sensitive data.
• Ensure compliance with DoS security standards and federal cybersecurity frameworks.

• Design, deploy, and manage AVI load balancing services for mission‑critical applications.
• Configure virtual services, health checks, policies, and HA settings.
• Integrate AVI with vDefend and other VMware components to support secure application delivery.

• Assess and enhance the security posture of the on‑prem VMware environment.
• Implement infrastructure hardening, vulnerability reduction, and secure configuration controls.
• Troubleshoot complex security, networking, and virtualization issues across the environment.

• Produce architecture diagrams, design documents, configuration guides, and operational SOPs.
• Provide knowledge transfer and technical mentorship to government IT/security personnel.
• Support stakeholder discussions, technical recommendations, and solution briefings.

• Hands‑on expertise with VMware vDefend security technologies.
• Strong knowledge of vDefend firewalling, advanced threat protection, tenant‑level security, and north‑south/east‑west security.
• Experience with AVI (NSX Advanced Load Balancer) deployment and configuration.
  
  Background in infrastructure security, micro‑segmentation, and virtualized networking.
• Ability to design, deploy, and validate enterprise VMware security solutions in a secure federal environment.
• Excellent troubleshooting and diagnostic skills across VMware, security, and network domains.

• Security+ (meets DoD 8570 baseline requirements)
• VMware Certified Professional (VCP) in a relevant track (e.g., VCP-DCV, VCP-NV)

• Active Top Secret clearance (required on day one).
• Ability to work onsite in Alexandria, VA, with occasional travel to Springfield, VA.
• Strong communication and documentation skills.
• Experience supporting federal or air‑gapped environments preferred.

140-185K

Our comprehensive benefits package for full‑time salaried employees is effective immediately upon the start date. Benefits include comprehensive PPO medical coverage with access to a Health Savings Account (HSA) option, a vision plan, and dental insurance with the base dental plan option paid for by PGTEK. Life Insurance, Short and Long‑Term disability, and Critical Illness insurance have premiums covered. Additionally, PGTEK offers a matching 401(k) plan and a discount on pet insurance through ASPCA Pet Insurance.

An Employee Assistance Program is available at no cost to all employees. PGTEK offers a generous amount of PTO and Holidays, and an Education Assistance Program is available after 12 months of employment.

EOE, including disability/veterans