Vmware NSX Security Engineer

• Design, deploy, configure, and administer Client NSX environments.
• Implement security policies using:
• Distributed Firewall (DFW)
• Gateway Firewall
• Micro-segmentation strategies
• Enforce zero-trust network security principles to prevent lateral movement across workloads.
• Manage NSX security rules, policies, and access controls.

Network Virtualization & Infrastructure Management

• Configure and manage Client NSX components including:
• Tier-0 and Tier-1 logical routers
• Logical switching
• Distributed Load Balancers
• VPN services
• Edge Nodes
• Transport Nodes
• NSX Managers
• Support network virtualization across enterprise Client environments.
• Troubleshoot physical-to-virtual network connectivity and overlay issues.

Lifecycle Management & Operations

• Perform NSX upgrades, patching, scaling, and configuration management.
• Monitor platform health, capacity, and performance.
• Analyze security and network logs using:
• Client Aria Operations
• Client Network Insight
• SIEM platforms such as Splunk
• Support disaster recovery readiness and configuration consistency.

Automation & Integration

• Develop automation solutions using:
• PowerShell / PowerCLI
• Python
• Terraform
• NSX REST APIs
• Implement Infrastructure-as-Code (IaC) practices for repeatable deployments.
• Automate security policy deployment and operational tasks.

Security Operations Support

• Collaborate with SOC teams, network engineers, and infrastructure teams.
• Support security incident response activities.
• Perform packet inspection, network flow analysis, and troubleshooting.
• Apply emergency isolation rules during security events.

We are seeking an experienced Client NSX Security Engineer responsible for designing, deploying, configuring, and managing Client NSX network virtualization and security solutions. The ideal candidate will have strong hands-on experience with Client vSphere, ESXi, vCenter, NSX-T/NSX architecture, network virtualization, micro-segmentation, distributed firewalling, and hybrid cloud security., * Strong hands-on experience with:

• Client vSphere
• Client ESXi
• Client vCenter
• Client NSX-T / NSX architecture
• Expert knowledge of networking concepts:
• TCP/IP
• VLANs
• BGP
• OSPF
• Geneve/VXLAN overlay networking
• Strong experience with:
• Client Distributed Firewall
• Gateway Firewall
• IDS/IPS concepts
• Micro-segmentation
• Zero Trust security models
• Experience with automation and scripting:
• PowerShell / PowerCLI
• Python
• Terraform
• NSX REST APIs
• Experience integrating NSX with:
• Palo Alto Networks
• Check Point
• AWS/Azure networking environments

Preferred Certifications:

• Client Certified Professional Network Virtualization (VCP-NV)
• Client Certified Advanced Professional Network Virtualization (VCAP-NV Design/Deploy)
• Cisco Certified Network Associate (CCNA)
• Cisco Certified Network Professional (CCNP)