V-Defend Architect

V-Defend Principal Architect & Engineers (Contract)

A large-scale UK transformation programme is looking for a V-Defend Principal Architect to shape and deliver VMware NSX vDefend security across an enterprise environment.

We're also hiring V-Defend Engineers to support the build, policy rollout, and day-two operations.

You'll work under the direction of the Prime Contractor and/or End Customer, driving both implementation and operational readiness.

This role spans two parallel work streams:

Workstream 1:
Design + deployment of vDefend Advanced Threat Protection (ATP)
Workstream 2:
Architecture + rollout of vDefend Firewall / Distributed Firewall (DFW) and security controls

What you'll deliver

Workstream 2 - vDefend Firewall (DFW) & Policy Architecture

Support platform deployment to enable NSX/vDefend capabilities (incl. NSXi integration as required)
Architect and implement DFW policy structure and scalable rule frameworks
Lead DFW rule creation and rule migration activities
Define the target operating model (process, ownership, governance, day-2)
Set standardisation goals and build a repeatable policy approach
Build and scale policy layers:
Common Services Policy (Macro)
Infrastructure Policy (Meso)
Application Policy (Micro)
Implement and/or support Identity Firewall
Design for visibility, logging, monitoring, and operational metrics
Support capacity management and operational reporting

Workstream 1 - vDefend Advanced Threat Protection (ATP)

Enable and configure ATP
Design and implement IPS/IDS policy enablement
Lead testing and validation of controls and detection outcomes
Tune malware prevention and detection policies
Perform threat assessment and develop advanced detection use cases
Support investigations using an attack lifecycle / evidence chain approach
Build threat scenario development and response-ready operational patterns
Produce custom dashboards, reporting, and measurable security KPIs
Support product upgrades and patching
Drive "day two" operational readiness and enablement

Skills & experience (must-have)

Strong hands-on architecture and delivery experience with VMware NSX vDefend
Deep knowledge of:
Distributed Firewall (DFW) design, policy modelling, and rule migrations
Micro-segmentation strategy and scalable policy frameworks (macro/meso/micro)
Logging/monitoring/visibility design and operational KPI definition
Experience enabling and tuning ATP, including IPS/IDS and malware prevention controls
Ability to translate security requirements into practical designs, runbooks, and operating models
Comfortable working in complex, regulated enterprise environments with structured governance

Contract Details:

Roles available:
Principal Architect and Engineer (rates vary by level)
Rate: £450-£700 per day (Inside IR35), depending on experience

Location:

Hybrid - London

Contract:

6-12 months initial term Please apply for immediate consideration