VMware NSX Security Engineer / Administrator

Job Summary

The VMware NSX Security Engineer / Administrator is responsible for the architecture, deployment, configuration, and day-to-day administration of network virtualization and security policies within a VMware infrastructure.

This role bridges the gap between traditional networking, cloud infrastructure, and cybersecurity. The primary objective is to enforce a Zero Trust network posture by configuring advanced logical routing, distributed firewalls, and micro-segmentation strategies across hybrid cloud workloads.

Key Responsibilities

1. Security Architecture & Micro-Segmentation

• Design and enforce granular Distributed Firewall (DFW) and Gateway Firewall rules.

• Implement micro-segmentation to isolate virtual machines and applications.

• Prevent lateral east-west threat propagation across virtualized workloads.

• Develop and maintain security policies aligned with Zero Trust principles.

2. Network Virtualization Management

• Deploy and manage logical switching and Tier-0 / Tier-1 routing within VMware NSX environments.

• Configure and administer distributed load balancers and VPN services.

• Manage network overlays and virtual networking components across VMware environments.

3. Lifecycle Management

• Perform regular maintenance, scaling, upgrades, and patching of VMware NSX components.

• Manage and maintain:

  • NSX Managers

  • Edge Nodes

  • Transport Nodes

• Ensure system configurations remain secure, stable, and highly available.

4. Infrastructure Automation

• Develop and maintain Infrastructure-as-Code (IaC) solutions.

• Create automation scripts to streamline security rule deployment and network configuration.

• Utilize automation to improve consistency, operational efficiency, and disaster recovery readiness.

5. Monitoring & Log Analysis

• Monitor infrastructure health, capacity, and security events.

• Analyze network and security logs using tools such as:

  • VMware Aria Operations (formerly vRealize)

  • VMware Aria Operations for Networks / Network Insight

  • Splunk

  • Other third-party SIEM platforms

• Identify performance, connectivity, and security issues and assist with remediation.

6. Cross-Team Collaboration

• Collaborate with:

  • Systems Engineers

  • Network Administrators

  • Cloud Infrastructure Teams

  • Security Operations Center (SOC)

• Troubleshoot connectivity and networking issues across physical and virtual network overlays.

7. Incident Response Support

• Support security incident response teams during active security events.

• Perform deep-packet inspection and network-flow tracing.

• Investigate suspicious network traffic and connectivity patterns.

• Apply emergency isolation and security rules during active security incidents.

Technical Requirements & Skills

VMware Ecosystem

• Strong hands-on experience with:

  • VMware vSphere

  • VMware ESXi

  • VMware vCenter

  • VMware NSX-T / NSX

• Strong understanding of NSX architecture, deployment, and administration.

Core Networking

• Expert-level knowledge of:

  • BGP

  • OSPF

  • GENEVE / VXLAN

  • VLANs

  • TCP/IP

• Strong understanding of network overlays, routing, switching, and network virtualization.

Firewall & Security

• Strong knowledge of Layer 4–7 firewall rules.

• Experience with Distributed Firewall (DFW) and Gateway Firewall.

• Understanding of IDS/IPS technologies.

• Strong knowledge of Zero Trust security concepts.

• Experience with micro-segmentation and network security policies.

Automation & Scripting

• Proficiency in one or more of the following:

  • PowerShell / PowerCLI

  • Python

  • Terraform

  • NSX REST APIs

• Experience automating network and security configurations is highly preferred.

Third-Party Integration

• Experience integrating VMware NSX with physical next-generation firewalls such as:

  • Palo Alto Networks

  • Check Point

• Familiarity with cloud networking environments such as:

  • AWS

  • Microsoft Azure

Preferred Certifications

• VMware Certified Professional – Network Virtualization (VCP-NV)

• VMware Certified Advanced Professional – Network Virtualization (VCAP-NV) – Design or Deploy

• Cisco Certified Network Associate (CCNA)

• Cisco Certified Network Professional (CCNP)