Network Engineer

Job Description

Job Description

Job Title:

Network Engineer

Location:

Pune, MAHARASHTRA | Dallas, TX

Armor is seeking a highly skilled Network Engineer to design, implement, and manage networking solutions across on-premises, hybrid, and public cloud environments. The role sits on Armor’s Platform team and supports Armor Enterprise Cloud (AEC), Armor’s customer-facing private cloud hosting product. The ideal candidate brings deep expertise in VMware NSX-T, F5 BIG-IP, Layer 2 and Layer 3 VPN (L2L), BGP routing, VMware vCloud Director (vCD), vSphere, and Oracle Cloud Infrastructure (OCI) networking, with working experience in AWS and Azure cloud networking.

The role exercises independent judgment in network architecture, incident response, and operational support, and operates as a hands‑on technical contributor within Armor’s AI‑first engineering culture.

• Design, deploy, and manage VMware NSX-T network virtualization solutions, including micro‑segmentation, distributed firewall, and network automation.
• Design and implement networking in Oracle OCI, AWS, and Azure, including Compartments, VPCs, VNets, subnets, security groups, route tables, VPNs, Fast Connect, Direct Connect, Express Route, load balancing, DRG, Transit Gateway, Virtual WAN, Private Link, Private Endpoints, and cloud‑native DNS.
• Architect and maintain hybrid cloud connectivity between on‑premises virtualization environments and public cloud providers (OCI, AWS, Azure).
• Configure and optimize F5 BIG‑IP (LTM, GTM, APM, ASM) to ensure high availability, redundancy, and security, and evaluate and deploy open‑source load balancing and WAF alternatives (NGINX, HAProxy, Envoy, Mod Security, Coraza, or equivalent) where appropriate.
• Implement and manage Layer 2 and Layer 3 VPN (L2L) solutions for secure connectivity between data centers and cloud environments.
• Configure and maintain BGP routing for dynamic network communication and optimized traffic flows across multi‑site deployments.
• Manage and optimize VMware vCloud Director (vCD) for multi‑tenant cloud environments, including resource provisioning and networking.
• Administer VMware vSphere and adjacent VMware products (vRealize, vSAN, Horizon) to ensure performance, scalability, and security for virtualized workloads.
• Conduct VMware NSX V‑to‑T migrations and support SDDC and hardware refresh activities.
• Configure and manage cloud‑native network security services, including WAF, DDoS protection (AWS Shield, Azure DDoS Protection, OCI WAF), Private Link and Private Endpoints, and Network Security Groups across cloud environments.
• Build and maintain infrastructure‑as‑code (Terraform, Ansible, Cloud Formation, ARM) for networking configurations, and contribute to Git Ops and pipeline automation workflows.
• Collaborate with SRE, Platform Architecture, Security, and Product Engineering teams to enforce compliance, improve network security posture, and support customer‑facing reliability.
• Troubleshoot and resolve complex networking and virtualization issues across hybrid cloud and on‑prem environments, and provide Level 2 and Level 3 support for networking incidents, escalations, and performance tuning.
• Document network architectures, configurations, runbooks, and operational procedures so launched capabilities are support‑ready.
• Use AI‑assisted tools (Claude Code, Git Hub Copilot, or equivalent) as a daily part of design, scripting, documentation, and troubleshooting work, critically evaluating AI‑generated outputs for accuracy, security, and operational fit.

• 4+ years of experience in network engineering with a focus on VMware NSX networking and the VMware virtualization suite (vCloud Director, vSphere).
• Hands‑on expertise with VMware NSX‑T, including micro‑segmentation, edge nodes, and service‑defined firewalling.
• Strong experience with F5 BIG‑IP (LTM, GTM, APM, ASM) for traffic management and security.
• Hands‑on experience with open‑source load balancing and WAF platforms (NGINX, HAProxy, Envoy, Mod Security, Coraza, or equivalent).
• Hands‑on experience with Proxmox, KVM, or other open‑source virtualization platforms, or demonstrated ability to acquire…