{"id":2474023,"url":"https://alion.io/job/atr-sr-nsx-engineer","title":"Sr. NSX Engineer","company":{"id":2572760,"name":"Arena Technical Resources","domain":"atr.com","url":"https://alion.io/company/atr-com","size_band":null,"is_staffing_agency":true,"employer_type":"agency","is_intermediary":false,"listed_via":null,"ats_vendor":"Schema","truth_index":{"grade":"C","score":65,"open_postings":122,"ghost_share":0.582,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-15T05:46:00Z"}},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Springfield, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":160000,"max":180000,"currency":"USD","period":"year","gross":null,"usd_annual":180000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Ansible","optional":false},{"name":"BGP","optional":false},{"name":"DHCP","optional":false},{"name":"DNS","optional":false},{"name":"Git","optional":false},{"name":"LDAP","optional":false},{"name":"Least Privilege","optional":false},{"name":"Nessus","optional":false},{"name":"OSPF","optional":false},{"name":"PKI","optional":false},{"name":"Platform Engineering","optional":false},{"name":"PowerShell","optional":false},{"name":"Rest API","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"TCP/IP","optional":false},{"name":"Tcpdump","optional":false},{"name":"VLAN","optional":false},{"name":"VMWare","optional":false},{"name":"VPN","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-09-14T14:31:10Z","employer_posted_date":"2026-10-13","last_verified_at":"2026-10-15T10:50:49Z","board_verified":true,"closed_at":null,"days_open":30,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":30},"description":"Job Title: Sr. NSX EngineerJob Location: Springfield, VA\nCompensation: $160,000 - $180,000\nEligibility/Clearance: Candidate must possess an active TS/SCI clearance\nand be willing to obtain a CI Polygraph\nJob Description:\nWe are seeking a Senior NSX Engineer to design, implement, operate,\nsecure, and troubleshoot VMware NSX-based network virtualization in a\nmission-critical U.S. Department of Defense environment. The ideal\ncandidate brings at least 5 years of hands-on VMware NSX engineering\nexperience, strong vSphere/VCF integration knowledge, and a proven\nrecord working within DoD security, compliance, and operational\nprocesses.\nThis role is suited to an engineer who can own the full NSX\nlifecycle-from architecture and deployment through operational support,\nhardening, automation, upgrades, and incident resolution-while\ncollaborating effectively with network, cybersecurity, systems, storage,\nand program teams.\nKey Responsibilities\n· · Design, deploy, configure, and sustain VMware NSX-T / VCF Networking\nsolutions supporting production, development, test, and mission\nenvironments.\n· Engineer and maintain NSX management, control, and data planes,\nincluding NSX Managers, transport nodes, transport node profiles, host\nand edge transport zones, uplink profiles, N-VDS or VDS-backed\nconfigurations as applicable, and NSX Edge clusters.\n· Design and administer logical networking services, including overlay\nsegments, VLAN-backed segments, Tier-0 and Tier-1 gateways, distributed\nrouting, BGP, static routing, ECMP, north-south connectivity, and\neast-west traffic flows.\n· Implement and maintain microsegmentation and zero-trust-aligned\ncontrols using NSX Distributed Firewall, Gateway Firewall, groups, tags,\nservice insertion, context profiles, and policy-based security controls.\n· Develop and manage firewall rulesets in coordination with\ncybersecurity, ISSO/ISSM, RMF, application, and network teams; ensure\npolicies follow least-privilege principles and are documented, reviewed,\napproved, and auditable.\n· Integrate NSX with VMware vCenter Server, vSphere clusters, VMware\nCloud Foundation, vSAN, VMware Aria Operations/Logs, identity platforms,\nPKI/certificate services, SIEM platforms, vulnerability-management\ntools, and enterprise monitoring systems.\n· Troubleshoot complex issues across virtual and physical networking\nlayers, including routing adjacency failures, BGP peering, MTU\nmismatches, tunnel\nendpoint connectivity, Geneve encapsulation, multicast or unicast\nreplication behavior, firewall rule processing, asymmetric routing,\npacket loss, performance degradation, and Edge-node failures.\n· Perform packet-level troubleshooting using NSX CLI, nsxcli, ESXi\ncommands, vmkping, pktcap-uw, tcpdump-uw, distributed firewall rule\nanalysis, logical-port inspection, traceflow, flow monitoring, and\nphysical-switch diagnostics.\n· Lead planning and execution for NSX upgrades, patches, certificate\nreplacement, configuration changes, migrations, backup/restore\nvalidation, and lifecycle-management activities while minimizing\noperational risk and service interruption.\n· Develop implementation plans, maintenance-window procedures, backout\nplans, test plans, validation checklists, and post-change documentation\nfor production changes.\n· Support migration efforts from legacy NSX-V, traditional VLAN-based\nnetworks, legacy firewall architectures, or standalone NSX environments\ninto VMware Cloud Foundation and modern NSX-based architectures.\n· Build and maintain standardized NSX configuration baselines, naming\nconventions, network diagrams, IP address-management documentation,\nfirewall-policy matrices, operational runbooks, and as-built\ndocumentation.\n· Participate in architecture reviews, design discussions, technical\ninterchange meetings, engineering change reviews, compliance\nassessments, and operational readiness reviews.\n· Provide Tier 3 escalation support for NSX, vSphere networking,\ndistributed firewalling, routing, and virtual network security\nincidents.\n· Mentor junior engineers and administrators; establish repeatable\nengineering standards and operational procedures for NSX support.\nSkills/Qualifications:\nRequired:\n· Bachelor’s degree in Information Technology, Computer Science,\nEngineering, Cybersecurity, or a related discipline; equivalent\nrelevant experience may be substituted.\n· At least 5 years of hands-on experience designing, implementing,\noperating, or supporting VMware NSX in enterprise-scale environments.\n· At least 5 years of experience with VMware vSphere, including ESXi,\nvCenter Server, vSphere Distributed Switches, virtual networking,\ncluster operations, host lifecycle management, and troubleshooting.\n· Demonstrated expertise with NSX-T / VMware Cloud Foundation\nNetworking capabilities, including:\no Overlay and VLAN-backed segments\no Tier-0 and Tier-1 gateways\no Distributed routing and centralized services\no NSX Edge Nodes and Edge clusters\no BGP, static routing, ECMP, and route redistribution\no Distributed Firewall and Gateway Firewall\no Security groups, dynamic membership, tagging, and policy automation\no North-south and east-west traffic design\no VPN, NAT, load-balancing, DHCP, DNS forwarding, and other NSX\nservices as applicable\no NSX Manager clustering, backups, certificates, upgrades, and\nrecovery procedures\n· Strong understanding of enterprise networking fundamentals,\nincluding TCP/IP, DNS, DHCP, ARP, VLANs, VXLAN/Geneve, MTU, routing,\nBGP, OSPF, VRFs, link aggregation, firewalling, NAT, load balancing,\nand network troubleshooting.\n· Hands-on experience operating in DoD, federal civilian, intelligence\ncommunity, or other heavily regulated environments with formal change\ncontrol, documentation, security approval, and audit requirements.\n· Working knowledge of DoD cybersecurity processes and terminology,\nincluding RMF, ATO, STIGs, POA&Ms, vulnerability management, DISA\nguidance, security controls, and continuous monitoring.\n· Ability to review, interpret, and remediate applicable DISA STIGs\nand security findings for VMware components, operating systems, and\nsupporting infrastructure.\n· Strong written and verbal communication skills, including the\nability to create technical diagrams, implementation plans, security\ndocumentation, standard operating procedures, and executive-ready\nstatus updates.\nRequired certifications\nThe final certification requirement should align with the contract’s\nassigned DoD Cyber Workforce Framework role and component-specific\nguidance. A practical baseline for this role is:\n· Current CompTIA Security+ CE or another approved DoD 8140-aligned\nbaseline certification appropriate to the assigned work role.\n· One current VMware/Broadcom networking, security, or\ncloud-foundation certification, such as:\no VMware Certified Professional - Network Virtualization / VCP-NV, if\nheld and applicable\no VMware Certified Professional - VMware Cloud Foundation\nAdministrator\no VMware Certified Professional - VMware Cloud Foundation Architect\no Comparable current Broadcom/VMware certification focused on NSX, VCF\nnetworking, or network virtualization\nDesired:\n· 5+ years of enterprise network virtualization, virtual\ninfrastructure, network security, or cloud-platform engineering\nexperience.\n· Experience designing or supporting VMware Cloud Foundation\nenvironments, including VCF lifecycle management, SDDC Manager,\nworkload domains, vSphere, and NSX integration.\n· Experience integrating NSX with physical enterprise networks,\nincluding Cisco Nexus, Juniper, Palo Alto Networks, F5, or similar\ntechnologies.\n· Familiarity with data-center architectures such as VXLAN, BGP\nunderlay/overlay routing, multi-rack design, and high-availability\nnetwork services.\n· Experience with automation and infrastructure as code using\nPowerShell/PowerCLI, Ansible, VMware Aria Automation, REST APIs, Git,\nYAML, and JSON.\n· Experience integrating NSX telemetry and logs with Splunk and\nElastic.\n· Experience with enterprise PKI, certificate lifecycle management,\nActive Directory, LDAP, identity federation, RBAC, privileged-access\nmanagement, and multifactor authentication.\n· Experience supporting disconnected, air-gapped, tactical edge, or\nclassified environments.\n· Experience with Dell PowerEdge, Cisco UCS, HPE and storage/network\nperformance troubleshooting.\n· Familiarity with DISA STIG Viewer, SCAP scanning, ACAS/Nessus and\nPOA&M remediation workflows.\nEducation:\nBachelors Degree in Computer Science or a related field\nATR is an Equal Opportunity Employer (EOE) who will provide equal\nemployment opportunity to employees and applicants for employment\nwithout regard to race, ethnicity, religion, color, sex, pregnancy,\nnational origin, age, veteran status, ancestry, sexual orientation,\ngender identity or expression, marital status, family structure, genetic\ninformation, or mental or physical disability","description_format":"text","description_chars":8829,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security"],"lifecycle":[{"event":"open","at":"2026-10-13T20:44:47Z"}],"visa":[],"liveness":{"score":18,"band":"cold","label":"Long shot","p_open":1,"p_active":0.324,"p_room":0.55,"age_days":30,"expected_fill_days":23,"reasons":["conf:4","agency","stale_co","urgency","velocity","win:tail","comp:brand"],"computed_at":"2026-10-15T05:46:00Z"},"pay":{"stated_usd_annual":180000,"is_top_pay":true},"html_url":"https://alion.io/job/atr-sr-nsx-engineer","json_url":"https://alion.io/job/atr-sr-nsx-engineer.json","meta":{"generated_at":"2026-10-15T12:16:34Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":18865,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2572760},"rest":"https://alion.io/mcp/rest/get_company?id=2572760"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fatr-sr-nsx-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fatr-sr-nsx-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fatr-sr-nsx-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/atr-sr-nsx-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fatr-sr-nsx-engineer"}]}