Virtualization Architect with Security Clearance

• Company: Northrop Grumman
• Location: 997 Federal Drive, Colorado Springs
• Duration: long term, ongoing contract – we are a direct sub to the C2BMC program
• Clearance: Secret, will hold TS if you already have it
• Program – C2BMC "Position Responsibilities

In this role, the candidate will support the design, implementation, and operation of modern virtualized and software-defined networking environments. This role will focus on deploying and managing VMware vSphere and VMware NSX infrastructures, ensuring secure, scalable, and highly available compute and network services. The ideal candidate will collaborate across infrastructure, storage, and security teams to troubleshoot issues, optimize system performance, enforce micro-segmentation, and maintain reliable connectivity across virtual and physical environments. The candidate will work within an agile scrum team and plan work based on customer requirements and program contractual agreements. Deploy, configure, and maintain VMware NSX environments, including transport zones, segments, edge nodes, and logical networking components (Tier-0/Tier-1 gateways, NAT, routing protocols such as BGP). Design and enforce network security policies using NSX distributed firewall (DFW), gateway firewall, and micro-segmentation techniques. Design, deploy, and manage VMware vSphere virtual infrastructure, including ESXi hosts, clusters, and vCenter, ensuring high availability (HA), Distributed Resource Scheduler (DRS), and storage integration. Monitor and troubleshoot connectivity, performance, capacity, and security issues using tools such as Traceflow, packet capture, NSX CLI, and other VMware monitoring utilities. Integrate VMware NSX and vSphere with underlying physical network and storage infrastructure, collaborating with cross-functional teams to support upgrades, deployments, and infrastructure projects. Travel to remote locations to lead and perform network and virtualization installations, independently perform troubleshooting, and provide status updates to program personnel. Support critical activities outside of standard business hours, including evenings and weekends, as needed. Perform any other tasks required by the program.

Basic Qualifications
Generally has 8+ years of related experience and may have a post-secondary degree or training in a related discipline. Must have an 8570 Compliant Certification such as Security+, GSEC, SCNP, SSCP, CISSP, CISA, GSE, SCNA, etc. Must have an active Secret Security Clearance. Must be a US Citizen and have/maintain a valid US passport. Must have an Active VCP – VCF Administrator and/or Architect Certification. Active legacy certifications such as VMware Certified Professional (VCP) in Data Center Virtualization (DCV) and/or Network Virtualization (NV) are also acceptable.

Hands-on experience deploying, managing, and troubleshooting VMware NSX and vSphere environments, including ESXi hosts, vCenter, NetApp NAS/SAN, Windows Server, and SQL Server. Strong understanding of virtualization concepts: vMotion, HA, DRS, storage integration, SW containerization. In-depth understanding of networking: OSI Model, TCP/IP, routing protocols, network traffic analysis, and troubleshooting. Effective communication, writing, and presentation skills, including proficiency with Microsoft PowerPoint and Visio.

Ability to work collaboratively in a team environment and independently on large field projects. Experience with agile frameworks and applying agile fundamentals in engineering work.

Preferred Qualifications
Top Secret Clearance. Has an active VCAP – VCF Automation, Networking, Administrator, and/or Architect certification. Active legacy certifications such as VMware Certified Advanced Professional (VCAP) in Network Virtualization (NV) and/or Data Center Virtualization – Design or Deploy are also acceptable. Experience with VMware storage solutions: vSAN, Site Recovery Manager (SRM), and Storage Area Networks.

Knowledge of automation tools or scripting for VMware administration (PowerCLI, Python, or Ansible).Familiarity with hybrid cloud environments (VMware Cloud on AWS, Azure VMware Solution). Exposure to monitoring and reporting tools (vRealize Operations, vROps, or similar). Experience mentoring junior staff or leading virtualization projects. Experience creating VM deployment templates and automated deployments. Microsoft Windows Server and Red Hat Server experience with multi-user applications. Understanding of standard DoD security practices (STIG compliance, system accreditation).

Knowledge of authentication and encryption methods/capabilities (ACS, Active Directory, GEM-X). Experience with Photon OS. Prior experience with C2BMC or similar command-and-control systems.

Other
About C2BMC: The Command and Control, Battle Management, and Communications (C2BMC) program is the integrating element of the Missile Defense System. It is a vital operational system that enables the U.S. president, secretary of defense and combatant commanders at strategic, regional and operational levels to systematically plan ballistic missile defense operations, to collectively see the battle develop, and to dynamically manage designated networked sensors and weapons systems to achieve global and regional mission objectives.

C2BMC supports a layered missile defense capability that enables an optimized response to threats of all ranges in all phases of flight. C2BMC is the force multiplier that globally and regionally networks, integrates and synchronizes autonomous sensor and weapon systems and operations to optimize performance. C2BMC is an integral part of all system ground and flight tests which verify and exercise all current and future missile defense system capabilities."