VMware NSX Security Engineer

Job Title: VMware NSX Security Engineer

Location: 100%Remote

Duration: 12+ months contract

Job Description:

We are seeking a highly skilled VMware NSX Security Engineer/Architect (vDefend) to design, implement, and manage advanced network security solutions within VMware private cloud environments. This role will focus on securing workloads through micro-segmentation, firewalling, threat detection, and malware prevention using VMware NSX and vDefend security services.

The ideal candidate will have deep hands-on expertise with NSX security components and a strong understanding of enterprise security architecture and zero-trust principles.

Key Responsibilities

• Design and implement NSX Distributed Firewall (DFW) architectures and manage security policies across enterprise environments.
• Configure and administer NSX Gateway Firewall for north-south traffic protection.
• Develop and execute micro-segmentation strategies to enforce Zero Trust security models.
• Deploy, tune, and maintain NSX IDS/IPS for real-time threat detection and prevention.
• Implement and manage NSX Malware Prevention and Network Detection & Response (NDR) capabilities.
• Lead security policy migration from legacy firewall platforms to NSX and perform rule optimization and cleanup.
• Conduct security assessments and recommend improvements to enhance overall network security posture.
• Troubleshoot complex security issues related to firewalling, segmentation, and threat detection.
• Produce technical documentation, security architecture diagrams, and operational runbooks.
• Collaborate with infrastructure, application, and security teams to deliver compliant and resilient solutions.

Required Skills & Experience

• Strong hands-on experience with VMware NSX Security / vDefend solutions.

PROVEN EXPERTISE IN:

• NSX Distributed Firewall (DFW) design and policy management
• Gateway Firewall configuration
• Micro-segmentation strategy and implementation
• NSX IDS/IPS deployment and tuning
• NSX Malware Prevention and Network Detection & Response (NDR)
• Security policy migration and firewall rule optimization
• Solid understanding of enterprise security concepts: Zero Trust, segmentation, threat detection, and compliance.
• Advanced troubleshooting and performance optimization skills.

Certifications (Required / Preferred)

• VMware Certified Professional – Private Cloud Security Administrator (VCP-PCS) or equivalent.
• VCAP-NV+(or VCIX-NV) preferred.
• Security certifications such as CISSP, CISM, CEH, or similar are a plus.