Sr VMware vSphere & NSX-T Engineer Title
Principal VMware vSphere & NSX-T Engineer
Location India
Experience 8+ years
Reports to Engineering / Delivery Leadership
Type Hands-on technical lead - architect, builder and troubleshooter
About Zappsec
Zappsec is a platform-led services company specializing in cloud, networking, cybersecurity, and identity. We combine deep engineering expertise, reusable platforms, and automation to modernize and secure enterprise infrastructure across hybrid and multi-cloud environments.
Our teams design, build, migrate, and operate production environments for enterprise customers. We value engineers who can defend an architecture, execute the configuration, troubleshoot complex failures, and own the final outcome.
Mission
Own the architecture and hands-on delivery of complex VMware vSphere and NSX-T environments, from design and build through migration, security hardening, production cutover, and operational handover. You must be comfortable at the ESXi host, vCenter, NSX Edge, routing, distributed firewall, and packet-capture layers, and able to resolve high-severity issues independently.
Responsibilities
- Architect, deploy, upgrade, and operate ESXi and vCenter estates, including clusters, HA, DRS, vMotion, vSphere Distributed Switches, performance, capacity, and resilience.
- Design and implement VMware NSX-T / NSX 4.x: Manager, transport nodes and zones, TEPs, overlay and VLAN segments, Edge clusters, Tier-0/Tier-1 gateways, NAT, and high availability.
- Own end-to-end underlay and overlay connectivity: VLANs, MTU, BGP, routing advertisements, DNS, north-south/east-west flows, upstream network integration, and failover.
- Build enforceable Zero Trust policies using NSX Distributed Firewall, groups/tags, service definitions, gateway firewall, and workload microsegmentation; validate traffic before and after policy changes.
- Lead VMware modernization, upgrades, migrations, and cutovers using vMotion and HCX where applicable; create dependency maps, migration waves, test plans, rollback steps, and hypercare plans.
- Troubleshoot production outages using NSX Traceflow, packet captures, CLI, ESXi/vCenter logs, esxtop, route tables, and policy realization to isolate and fix root causes.
- Produce HLDs/LLDs, as-built diagrams, security rule matrices, runbooks, change records, and operational handover evidence; automate repeatable work with PowerCLI, APIs, or IaC.
- Lead technical discussions with customer VMware, network, security, storage, and cloud teams. Own design decisions, risk mitigation, and successful implementation.
Required Experience
- 8+ years in enterprise infrastructure, vSphere and deploying and troubleshooting NSX-T / VMware NSX.
- Personally designed and built production VMware environments. Must explain exact configuration, scale, dependencies, change windows, incident history, and individual contribution.
- Expertise across ESXi, vCenter, HA/DRS, vDS, vSAN or enterprise storage, lifecycle upgrades, availability design, workload performance, and host/VM recovery.
- Strong NSX-T engineering: Tier-0/Tier-1 routing, Edge clusters, BGP, overlay/TEP, transport zones, DFW, service groups, segmentation, and north-south traffic inspection.
- Hands-on L2-L7 problem isolation across VMware, physical networking, routing, firewalls, and storage. Must be able to whiteboard a complete packet path.
- Proven ownership of enterprise migrations or major production incidents, including root-cause analysis, rollback decisions, risk controls, and customer-facing execution.
Strongly Preferred - Cloud & Security
- Amazon Elastic VMware Service (Amazon EVS) and VMware Cloud Foundation: environment planning, VCF bring-up/lifecycle, NSX overlay design, AWS VPC underlay, VPC Route Server/BGP, and workload connectivity.
- AWS hybrid networking: Amazon VPC, Transit Gateway, Direct Connect, route tables, DNS, security groups/NACLs, and integration between VMware workloads, AWS-native services, and on-premises networks.
- Enterprise security experience: NSX DFW and gateway policies, microsegmentation, least privilege, firewall change control, and integration with Palo Alto, Fortinet, or Check Point.
- VMware HCX, SDDC Manager / VCF Operations, Aria Operations, PowerCLI, Terraform, Ansible, and API-driven automation for build, compliance, and operations.
Relevant Certifications
- Core VMware: VMware Certified Professional - Network Virtualization (VCP-NV); VCP - Data Center Virtualization (VCP-DCV); VCP - VMware Cloud Foundation Administrator (VCP-VCF Administrator).
- Advanced / security: VCAP - VMware Cloud Foundation Networking; VCAP-DCV (Deploy or Design); VCP - Private Cloud Security Administrator / vDefend, or comparable NSX security credentials.
- AWS (strongly preferred): AWS Certified Solutions Architect - Professional or Associate; AWS Certified Security - Specialty; AWS Certified Advanced Networking - Specialty (if held).
You Will Do Well Here If
- You can diagram the packet path from a VM through NSX DFW, Tier-1, Tier-0, Edge, BGP, and upstream firewalls, then prove where traffic fails.
- You have personally recovered broken VMware hosts, networks, or migrations and can explain exactly how you diagnosed and fixed them.
- You move from HLD to working configuration without waiting for another engineer to do the difficult parts.
- You write rollback plans before changes, verify the result, and leave behind a supportable production environment.
Technology Stack
| Category | Platforms and technologies |
| Virtualization & Storage | VMware vSphere, ESXi, vCenter, HA/DRS, vMotion, vDS, vSAN |
| Networking & Security | NSX-T / NSX 4.x, Edge, Tier-0/Tier-1, BGP, DFW, Traceflow |
| Cloud & Hybrid (preferred) | Amazon EVS, VCF, Amazon VPC, VPC Route Server, TGW, Direct Connect, HCX |
| Automation & Operations | PowerCLI, APIs, Terraform, Ansible, VCF/Aria Operations, logs and captures |
Strong candidates understand how compute, overlay networking, routing, security, storage, and AWS connectivity work together, rather than treating each as a separate tower.
Career Growth
Help shape Zappsec's VMware, cloud migration, and Zero Trust engineering practice. Strong performers can grow into practice architecture and technical leadership while remaining close to hands-on delivery.