Senior NSX Engineer

Location: [Remote / Hybrid]

Clearance Level Required: Active DoD Secret or Top Secret

Citizenship: U.S. Citizenship Required

Overview

We are seeking a highly skilled Senior NSX Engineer with at least 5 years of experience to design, implement, migrate, secure, and manage complex VMware NSX environments within our new on-premises secure federal infrastructure. In this role, you will act as the Subject Matter Expert (SME) for software-defined networking (SDN) and micro-segmentation, ensuring all architectures align tightly with DoD, DISA, and Risk Management Framework (RMF) guidelines. The ideal candidate has deep technical expertise in VMware Cloud Foundation (VCF) and a proven track record of securing networks in normal operational environments as well as air-gapped, tactical edge, or classified environments.

Responsibilities

• Architecture & Deployment: Lead the installation, configuration, testing, and migration of VMware NSX-T / VCF networking spaces, including overlay/VLAN segments, Tier-0 and Tier-1 gateways, and distributed firewalls.
• Physical Network Integration: Securely integrate virtualized NSX environments with physical enterprise network infrastructure, such as Juniper MX, Juniper SRX, and F5 load balancers.
• DoD & DISA Compliance: Implement, review, and remediate DISA STIGs (Security Technical Implementation Guides) across all VMware components. Ensure absolute compliance with RMF controls and Authority to Operate (ATO) guidelines. [2, 9]
• Vulnerability & Log Management: Conduct SCAP scanning and utilize ACAS/Nessus to identify network vulnerabilities. Mitigate findings through Plan of Action and Milestones (POA&M) workflows. Monitor and integrate NSX telemetry with Splunk or Elastic log systems.
• Automation: Develop Infrastructure as Code (IaC) templates and deployment workflows using Ansible, PowerShell/PowerCLI, and VMware Aria Automation to optimize infrastructure delivery.
• Troubleshooting & Maintenance: Resolve highly complex, multi-tier system outages across compute, storage, and networking layers under strict change control parameters.

Experience

• Experience: Minimum 5+ years of enterprise-scale experience designing, implementing, and supporting VMware NSX and vSphere infrastructure (ESXi, vCenter, vSphere Distributed Switches).
• DoD Environment Experience: At least 3–5 years working within a heavily regulated DoD, DISA, or Intelligence Community environment.
• Networking Mastery: Deep knowledge of TCP/IP, BGP underlay/overlay routing, VXLAN/Geneve, OSPF, VRFs, MTU adjustments, and micro-segmentation.
• Cybersecurity Baseline: Must possess an active DoD 8570/8140 IAT Level II certification (e.g., CompTIA Security+ CE) or higher on or before day one. · Tools: Proficiency with DISA STIG Viewer, Microsoft Visio (for technical mapping), and Git.

Pay: $137,099.90 - $148,610.00 per year

Benefits:

• 401(k) matching
• Dental insurance
• Health insurance
• Life insurance
• Paid time off
• Professional development assistance
• Retirement plan
• Vision insurance

License/Certification:

• CCNP (Preferred)

Security clearance:

• Secret (Preferred)

Work Location: Remote