Role: VMware vDefend Architect – Solution Architect (LOCALS Only)
Location: SFO Bay Area, CA (Onsite)
Duration: 12+ months
Visa: H1B/ (Locals with Valid ID)
Key Responsibilities
· Design enterprise security architectures using VMware vDefend.
· Develop Zero Trust security frameworks.
· Create micro-segmentation strategies for data centers and cloud environments.
· Design East-West traffic protection models.
· Define security zones and policy frameworks.
· Develop security reference architectures.
· VMware vDefend Security
Design and implement:
· Distributed Firewall (DFW)
· Gateway Firewall
· Security Intelligence
· IDS/IPS
· Malware Prevention
· Network Detection & Response (NDR)
· Lateral Security
· Design advanced threat protection architectures.
· Develop application-centric security policies.
· NSX Security Architecture
· NSX-T Design and Deployment
· Multi-site NSX Architectures
· Federation Designs
· Disaster Recovery Architectures
· Multi-Tenant Security Designs
· Migration Programs
Lead migrations from
· Traditional Firewalls
· Physical Security Appliances
· Legacy Segmentation Models
Specific experience with:
· F5 to VMware migrations
· NSX-V to NSX-T migrations
· VMware NSX Security Modernization
· Cisco ACI security integration
· Palo Alto integrations
· Check Point integrations
· Fortinet integrations
· Security Policy Design
· Security policy assessment
· Rule optimization
· Rule consolidation
· Security governance
· Compliance mapping
· Customer Consulting
· Security assessments
· Architecture workshops
· Executive presentations
· Security strategy roadmaps
· Risk analysis
Automation & Infrastructure as Code
· Terraform
· Ansible
· Python Automation
· NSX APIs
· CI/CD Integration
· Cloud Security
Design security for:
· VMware Cloud Foundation (VCF)
· VMware Cloud on AWS
· Azure VMware Solution
· Google Cloud VMware Engine
· Hybrid Cloud Environments
· Required Technical Skills
· VMware Technologies
· VMware vDefend
· VMware NSX-T
· VMware Cloud Foundation (VCF)
· VMware Aria Suite
· VMware Avi Load Balancer
· Networking
· Switching
· Routing
· BGP
· OSPF
· VXLAN
· EVPN
· MPLS
· SD-WAN
· Security
· Zero Trust Architecture
· Micro-Segmentation
· IDS/IPS
· NDR
· SIEM Integration
· Firewall Technologies
· SASE
· Cloud Platforms
· AWS
· Azure
· Google Cloud Platform
· Automation
· Python
· Terraform
· Ansible
· REST APIs