Senior VMWare Virtualization Architect/Engineer
Listed on 2026-09-12
-
IT/Tech
Systems Engineer, IT Infrastructure, Cloud Computing: Infrastructure & Operations, Cybersecurity
Overview
We are seeking a Senior VMWare Virtualization Architect/Engineer to drive the architecture, design, security, deployment, and lifecycle optimization of enterprise‑scale virtualization services supporting Defense Intelligence Agency’s mission‑critical operations under Solutions for the Information Technology Enterprise III (SITE III). You will lead infrastructure modernization initiatives across multiple enclaves, ensuring highly available, secure, and performant virtualized compute, storage, and networking platforms that integrate seamlessly with zero‑trust principles and hybrid cloud constructs.
Tek Synap is a fast‑growing high‑tech company that understands both the pace of technology today and the need to have a comprehensive well‑planned information management environment. “Technology moving at the speed of thought” embodies these principles – the need to nimbly utilize the best that information technology offers to meet the business needs of our Federal Government customers.
We offer our full‑time employees a competitive benefits package to include health, dental, vision, 401K, life insurance, short‑term and long‑term disability plans, vacation time and holidays.
Responsibilities & QualificationsThe Senior VMWare Virtualization Architect/Engineer is expected to be able to accomplish the following:
- Define reference architectures and multi‑year roadmaps for vSphere‑based platforms (on‑prem and hybrid), including ESXi clusters, vCenter, vSAN, and NSX‑based network/security services.
- Engineer highly available clusters, resource pools, and workload domains; design standard builds, host profiles, and image management; implement automation for provisioning, patching, and configuration drift remediation.
- Architect and operate NSX (distributed firewall, micro segmentation, overlay/underlay integration, load balancing) to meet DIA security objectives and enclave separation requirements.
- Integrate with enterprise services (INFOBLOX, ICAM services, PKI, DNS, NTP, SIEM) and extend to VMware Cloud/hyperscalers where applicable; leverage HCX/migration tooling to modernize and consolidate workloads.
- Establish SLOs, conduct performance baselining, right‑size clusters, forecast capacity (CPU/Mem/IOPS), and optimize storage/policy placement (vSAN Storage Policies).
- Design multi‑site replication, stretched clusters, and DR plans using SRM/array replication; run failover testing and document RTO/RPO.
- Implement least privilege, certificate management, secure baselines (STIG/SCAP), logging, and continuous compliance reporting; partner with cyber to close POA&Ms; implement Zero Trust & Compliance.
- Build reusable modules and pipelines using PowerCLI, Python, vRealize/Aria tools, and Git to standardize provisioning and day‑2 ops.
- Create SOPs/runbooks; mentor engineers; perform root‑cause analysis; lead change planning and maintenance windows.
- Conduct design reviews, cost‑benefit analyses, and briefings; advise on hardware/software selection and technology insertion for future deployment.
- Perform STIG hardening of VDI gold images.
- Develop FIPS/NIST‑compliant encryption configuration.
- Produce RMF artifact support for VDI environments.
- Provide ATO maintenance support.
- Active TS/SCI + CI Poly clearance
- BS, 12‑15 years of relevant experience; MS, 10‑13 years;
PhD, 10+ years - Proven expert with Forcepoint Trusted Thin Client (TTC), Power Shell, vSphere/ESXi (virtualization), vCenter, vSAN, NSX (DFW, micro segmentation, overlay networking), Citrix (Virtualization), Avocent (KVM), SRM, lifecycle and image management, and performance tuning at scale.
- Proven architecture of multi‑site, mission‑critical environments with HA/DR and STIG compliant baselines.
- Demonstrates a deep understanding of L2/L3,…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).