Vmware NSX Security Engineer

Client NSX Security Engineer

We are seeking an experienced Client NSX Security Engineer responsible for designing, deploying, configuring, and managing Client NSX network virtualization and security solutions. The ideal candidate will have strong hands-on experience with Client vSphere, ESXi, vCenter, NSX-T/NSX architecture, network virtualization, micro-segmentation, distributed firewalling, and hybrid cloud security.

This role will focus on implementing zero-trust security strategies, managing logical networking components, automating infrastructure operations, and supporting enterprise security initiatives across virtualized and hybrid cloud environments.

• Design, deploy, configure, and administer Client NSX environments.
• Implement security policies using:
  • Distributed Firewall (DFW)
  • Gateway Firewall
  • Micro-segmentation strategies
• Enforce zero-trust network security principles to prevent lateral movement across workloads.
• Manage NSX security rules, policies, and access controls.

• Configure and manage Client NSX components including:
  • Tier-0 and Tier-1 logical routers
  • Logical switching
  • Distributed Load Balancers
  • VPN services
  • Edge Nodes
  • Transport Nodes
  • NSX Managers
• Support network virtualization across enterprise Client environments.
• Troubleshoot physical-to-virtual network connectivity and overlay issues.

• Perform NSX upgrades, patching, scaling, and configuration management.
• Monitor platform health, capacity, and performance.
• Analyze security and network logs using:
  • Client Aria Operations
  • Client Network Insight
  • SIEM platforms such as Splunk
• Support disaster recovery readiness and configuration consistency.

• Develop automation solutions using:
  • Power Shell / PowerCLI
  • Python
  • Terraform
  • NSX REST APIs
• Implement Infrastructure-as-Code (IaC) practices for repeatable deployments.
• Automate security policy deployment and operational tasks.

• Collaborate with SOC teams, network engineers, and infrastructure teams.
• Support security incident response activities.
• Perform packet inspection, network flow analysis, and troubleshooting.
• Apply emergency isolation rules during security events.

• Strong hands-on experience with:
  • Client vSphere
  • Client ESXi
  • Client vCenter
  • Client NSX-T / NSX architecture
• Expert knowledge of networking concepts:
  • TCP/IP
  • VLANs
  • BGP
  • OSPF
  • Geneve/VXLAN overlay networking
• Strong experience with:
  • Client Distributed Firewall
  • Gateway Firewall
  • IDS/IPS concepts
  • Micro-segmentation
  • Zero Trust security models
• Experience with automation and scripting:
  • Power Shell / PowerCLI
  • Python
  • Terraform
  • NSX REST APIs
• Experience integrating NSX with:
  • Palo Alto Networks
  • Check Point
  • AWS/Azure networking environments

• Client Certified Professional – Network Virtualization (VCP-NV)
• Client Certified Advanced Professional – Network Virtualization (VCAP-NV Design/Deploy)
• Cisco Certified Network Associate (CCNA)
• Cisco Certified Network Professional (CCNP)