Sr.

VMware NSX-T Engineer About Zappsec Zappsec is a global digital engineering partner helping high-growth enterprises modernize their cloud, network, and security infrastructure.

We combine deep technology expertise, automation-first methodologies, and AI-driven innovation to deliver secure, scalable, and intelligent modernization outcomes.

Role Overview The Sr.

VMware NSX-T Engineer designs, builds, and supports VMware vSphere and NSX environments for Zappsec clients.

You will own the software-defined data center from the hypervisor through the overlay network.

That means deploying NSX-T fabrics, building Tier-0 and Tier-1 routing, enforcing micro-segmentation, and connecting on-premises environments to public cloud.

This is a hands-on engineering role for someone who builds and troubleshoots these platforms personally.

A background in cloud or security is strongly preferred.

Key Responsibilities VMware vSphere Platform Engineering Design, deploy, and administer vSphere environments, including ESXi hosts, vCenter Server, clusters, and vSphere Distributed Switches.

Configure and tune HA, DRS, vMotion, storage policies, and resource pools for production workloads.

Plan and run vSphere upgrades and patching through vSphere Lifecycle Manager.

Troubleshoot compute, storage, and network performance issues across the virtual infrastructure.

NSX-T Design and Implementation Deploy and operate NSX Manager clusters, transport zones, transport nodes, and host preparation.

Build Geneve overlay networks, segments, and Edge node clusters.

Design and configure Tier-0 and Tier-1 gateways, including BGP and OSPF peering with the physical network, ECMP, and route redistribution.

Implement NAT, IPsec and L2 VPN, DHCP,



and load balancing services.

Support multi-site and NSX Federation designs where required.

Micro-segmentation and Network Security Design and enforce Distributed Firewall and Gateway Firewall policies based on security groups, tags, and application tiers.

Build Zero Trust segmentation models and move clients from flat networks to application-centric policy.

Configure NSX IDS/IPS and identity-based firewall rules where in scope.

Maintain the firewall policy lifecycle, including rule reviews, cleanup, and audit evidence.

Cloud and Hybrid Connectivity Design hybrid connectivity between vSphere/NSX environments and AWS or Azure.

Support workload migration and VMware exit programs, including migrations with VMware HCX.

Align NSX segmentation and routing with cloud network and security controls so policy stays consistent across environments.

Operations, Automation, and Documentation Lead NSX upgrades, including NSX-T 3.x to NSX 4.x, and NSX-V to NSX-T migrations.

Automate configuration and day-two tasks with the NSX REST API, PowerCLI, Terraform, or Ansible.

Monitor and troubleshoot with NSX Traceflow, packet capture, and VMware Aria Operations for Networks.

Produce high-level and low-level designs, runbooks, and handover documentation for client teams.





Qualifications 8+ years of hands-on experience in data center infrastructure, with at least 5 years deploying and operating NSX-T or VMware NSX in production.

Expert-level knowledge of VMware vSphere 7 and 8, including ESXi, vCenter, and vSphere Distributed Switches.

Deep understanding of NSX-T architecture, including the management, control, and data planes, overlay networking, Edge services, and Tier-0 and Tier-1 routing.

Strong routing and switching fundamentals, including BGP, OSPF, VLANs, MTU, and spine-leaf designs.

Hands-on experience designing and enforcing Distributed Firewall micro-segmentation.

Ability to troubleshoot complex issues across the hypervisor, overlay, and physical network.

Strong ownership mindset and ability to work independently with client teams.

Strongly Preferred Cloud background in AWS or Azure networking and security, such as VPC or VNet design, Transit Gateway, Virtual WAN, and hybrid connectivity.

Security background, including Zero Trust architecture, next-generation firewalls (Palo Alto Networks, Fortinet, or Check Point), and segmentation for compliance requirements.

Experience with VMware Cloud Foundation (VCF) and VMware HCX.

Scripting and automation experience with Python, Power Shell/PowerCLI, or Terraform.

Certifications Preferred (one or more): VMware Certified Skilled, Network Virtualization 2024 (VCP-NV, exam 2V0-41.24) VMware Certified Professional, VMware Cloud Foundation Administrator (VCP-VCF Admin, exam 2V0-17.25) AWS Certified Advanced Networking Specialty, or Microsoft Certified: Azure Network Engineer Associate A security certification such as CISSP, or a firewall vendor certification 60; Powered by JazzHR

📌 Sr. VMware NSX-T Engineer (India)
🏢 Zappsec
📍 India