> Markdown version of [/jobs/ext/2199896-senior-virtualization-engineer-fort-gordon-ga-ts-sci-clearance](https://www.wearedevelopers.com/jobs/ext/2199896-senior-virtualization-engineer-fort-gordon-ga-ts-sci-clearance). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Virtualization Engineer - Fort Gordon, GA - TS/SCI clearance - **Company:** THE PODMILSAK GROUP, INC. - **Location:** Augusta, GA, United States - **Experience:** Expert - **Salary:** $145,000.0 - $170,000.0 - **Contract:** Permanent contract - **Skills:** Active Directory, Cyber Security, Information Systems, VMware ESX Servers, Firmware, Hardware Compatibility (Software Requirements), Lightweight Directory Access Protocols (LDAP), Public Key Infrastructure, PowerCLI, Broadcom, Ansible, Storage Virtualization, VCloud, Virtualization Technology, VMware VSphere, Data Center Networking, Information Technology, Vcenter, Nessus, Hardware Infrastructure, U-Boot, Restful APIs, Terraform, Nvme - **Published:** August 23, 2026 - **Apply:** https://www.careerjet.com/jobad/us2d54f7afb66b0ca82aa73138fde7c630 ## About the Role Active, in-scope TS/SCI at time of hire. U.S. citizenship. Able to work on-site in a SCIF. Current Security+ CE, meeting the DoD 8140 IAT Level II baseline, maintained throughout employment. Current VCP. We're looking for VCP-VCF Administrator or Architect. A current legacy-track VCP such as VCP-DCV works at hire if you'll sit the VCF-track exam within six months. Bachelor's degree in computer science, information systems, or engineering plus 4 to 7 years in enterprise virtualization. Four additional years of relevant experience substitutes for the degree. You should be able to walk us through VCF instances you designed and built yourself, and what you'd do differently now. Administration experience alone won't cover this role. Also: * VCF 9.x experience, or VCF 5.x plus real currency on the 9.x architecture: VCF Installer, VCF Operations, VCF Automation, and how SDDC Manager and Aria functions were absorbed * At least one multi-cluster vSphere major-version upgrade executed in change-controlled production * Working depth across ESX, vCenter, vSAN, NSX, vLCM, HA, DRS, vMotion * Time in an RMF-accredited DoD or IC environment applying STIGs and closing vulnerabilities * PowerCLI * Enough server hardware, SAN, and data center networking knowledge to troubleshoot past your own layer * Technical writing. This role produces documents the government has to approve, This role is not remote, but supports a site that is not yet announced. Candidates must be able to work onsite 5 days a week. Minimum qualifications: Bachelor's degree in Elect… ## Description Customer is moving its vSphere 8 estate to VMware Cloud Foundation 9.1. We need a mid-level engineer to help design the target environment, build it in a lab, and run the upgrade across classified enclaves. You'll report to a lead architect and own specific design artifacts and deployment workstreams. A lot of the job is spent with the network, storage, and cybersecurity teams, and in front of government stakeholders explaining your choices. The environment is RMF-accredited, so design decisions turn into control statements someone has to defend. Scope Current state is vCenter, ESXi, vSAN, NSX, and Aria-era tooling on vSphere 8.x. VCF 9.x can import existing vCenter instances at 8.0 Update 3 or later as workload domains. That makes in-place conversion the preferred path over a greenfield build with workload migration. It only works for clusters already at U3, though. Determining how much of the estate sits below that line is early work and it drives the schedule. From there the work covers: * Assessing conversion eligibility: build levels, hardware compatibility, vSAN OSA versus ESA, NSX version alignment, certificate and identity dependencies * Producing the target-state design: management domain, VCF Management Services runtime, workload domain topology, network and storage, lifecycle and patching model * Standing up VCF 9.1 in a lab enclave and proving both the runbook and the rollback * Executing production upgrades in maintenance windows against an approved change plan * Moving off Aria-era tooling onto VCF Operations and VCF Automation, including log management, which now lives inside VCF Operations * STIG compliance and the authorization package updates that a major version change forces open, Design * Architecture artifacts: logical and physical designs, bill of materials, sizing and capacity models, a design decision register with justification and risk, traceability to stated requirements * Management and VI workload domain layout, availability zones, and cluster topology against mission availability requirements * vSAN ESA storage policies, fault domains, capacity strategy, and an assessment of whether NVMe memory tiering earns its place on the hardware in hand * NSX transport zones, edge clusters, T0/T1 routing, and segmentation policy matched to enclave boundaries * Identity and PKI: Active Directory over LDAPS, CAC authentication, VMCA versus enterprise CA, least-privilege roles * Lifecycle approach using vLCM image-based clusters, vSphere Configuration Profiles for desired-state enforcement, and the VCF depot model for offline patching Deploy and upgrade * Deploy VCF 9.1 with VCF Installer, both greenfield and conversion of existing vSphere 8.0 U3+ vCenter instances * Build and maintain the lab. Every production change gets rehearsed there first * Write step-level runbooks: prerequisites, validation gates, decision points, rollback criteria, rollback procedure * Upgrade vCenter, ESX hosts, vSAN, and NSX in sequence, and manage VM hardware and Tools remediation. Note that VM hardware versions advance automatically during reduced-downtime upgrades * Pre- and post-upgrade validation: health checks, HCL and firmware verification, backup verification, performance baselines, functional testing of mission workloads * Workload migration and outage window coordination with application owners * Troubleshooting upgrade failures and performance regressions, including Broadcom case management and log bundle collection Security and compliance * Apply and validate DISA STIGs for ESX, vCenter, NSX, and guest operating systems. Document deviations and write the justifications the government reviews * Remediate ACAS and Nessus findings, respond to IAVA notices inside program timelines * Write technical content for security control implementation statements and eMASS artifacts * Implement encryption, secure boot, and TPM attestation where hardware supports it Documentation and handoff * As-built documentation, diagrams, and SOPs, plus knowledge transfer to the government operators who run this long-term * Automation with PowerCLI and the VCF and vSphere REST APIs. Ansible or Terraform where it fits * Backup and disaster recovery design and testing for the virtualization layer * CCB and technical exchange meeting participation, RFI responses ## Related Videos - [Navigating the Corporate Jungle: Life as a Developer in a large Company](https://www.wearedevelopers.com/videos/621-navigating-the-corporate-jungle-life-as-a-developer-in-a-large-company) - [Shipping Faster with Less: Render on Cloud Hosting, AI Workloads, and the Future of DevOps](https://www.wearedevelopers.com/videos/1894-shipping-faster-with-less-render-on-cloud-hosting-ai-workloads-and-the-future-of-devops) - [Unlocking the potential of Digital & IT at Vodafone](https://www.wearedevelopers.com/videos/602-unlocking-the-potential-of-digital-it-at-vodafone) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline) - [6 Emerging Technologies We’ll Learn About in 2025](https://www.wearedevelopers.com/magazine/381-6-emerging-technologies-we-ll-learn-about-in-2025) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer)