{"id":2107047,"url":"https://alion.io/job/d2-consulting-senior-vmware-nsx-engineer","title":"Senior VMware NSX Engineer","company":{"id":673019,"name":"D2 Consulting","domain":"d2consulting.com","url":"https://alion.io/company/d2consulting","size_band":"11-50","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":75,"open_postings":24,"ghost_share":0.417,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":58,"computed_at":"2026-10-27T05:46:45Z"}},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Springfield, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":150000,"max":165000,"currency":"USD","period":"year","gross":null,"usd_annual":165000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"BGP","optional":false},{"name":"DHCP","optional":false},{"name":"DNS","optional":false},{"name":"Least Privilege","optional":false},{"name":"OSPF","optional":false},{"name":"PKI","optional":false},{"name":"SIEM","optional":false},{"name":"TCP/IP","optional":false},{"name":"Tcpdump","optional":false},{"name":"VLAN","optional":false},{"name":"VMWare","optional":false},{"name":"VPN","optional":false},{"name":"Zero Trust","optional":false},{"name":"Active Directory","optional":true},{"name":"Ansible","optional":true},{"name":"Git","optional":true},{"name":"LDAP","optional":true},{"name":"Nessus","optional":true},{"name":"PowerShell","optional":true},{"name":"Rest API","optional":true},{"name":"Splunk","optional":true}],"status":"live","first_seen_at":"2026-10-08T19:04:09Z","employer_posted_date":"2026-10-08","last_verified_at":"2026-10-27T22:34:56Z","board_verified":true,"closed_at":null,"days_open":19,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":18},"description":"**ACTIVE TS/SCI SECURITY CLEARANCE REQUIRED**\nWe are seeking an experienced Senior NSX Engineer to design, implement, operate, secure, and troubleshoot VMware NSX-based network virtualization solutions supporting a mission-critical U.S. Department of War environment. Candidates must possess an active Top Secret/SCI (TS/SCI) security clearance with a current CI Polygraph. The ideal candidate brings 5+ years of hands-on VMware NSX engineering experience, strong VMware vSphere and VMware Cloud Foundation (VCF) integration knowledge, and the ability to own the full NSX lifecycle from architecture and deployment through security hardening, automation, upgrades, and Tier 3 incident resolution.\nKey Responsibilities\nDesign, deploy, configure, operate, and sustain VMware NSX-T / VMware Cloud Foundation Networking across production, development, test, and mission environments.\nEngineer NSX Manager clusters, transport nodes/profiles, transport zones, uplink profiles, VDS/N-VDS networking, and NSX Edge clusters.\nDesign and administer overlay and VLAN-backed segments, Tier-0/Tier-1 gateways, distributed routing, BGP, static routing, ECMP, route redistribution, and north-south/east-west connectivity.\nImplement microsegmentation and Zero Trust-aligned controls using Distributed Firewall, Gateway Firewall, security groups, dynamic membership, tags, context profiles, and policy-based security.\nDevelop auditable, least-privilege firewall policies in coordination with cybersecurity, ISSO/ISSM, RMF, application, and network teams\nIntegrate NSX with vCenter, vSphere, VCF, vSAN, VMware Aria Operations/Logs, PKI, identity, SIEM, vulnerability-management, and enterprise monitoring platforms\nTroubleshoot BGP/routing adjacency failures, MTU/TEP/Geneve issues, asymmetric routing, firewall processing, packet loss, performance degradation, and NSX Edge failures\nPerform packet-level analysis using NSX CLI/nsxcli, vmkping, pktcap-uw, tcpdump-uw, Traceflow, flow monitoring, and distributed firewall analysis\nLead NSX upgrades, patching, certificate replacement, migrations, backup/recovery validation, and lifecycle-management activities with formal implementation, test, validation, and backout plans.\nMaintain engineering standards, configuration baselines, diagrams, firewall matrices, runbooks, and as-built documentation; provide Tier 3 escalation support and mentor junior engineers.\n\nRequired Qualifications\nActive Top Secret/SCI (TS/SCI) security clearance with current CI Polygraph\nBachelor's degree in Information Technology, Computer Science, Engineering, Cybersecurity, or a related discipline; equivalent relevant experience may be substitute\n5+ years of hands-on VMware NSX experience in enterprise-scale environments and 5+ years of VMware vSphere experience, including ESXi, vCenter Server, VDS, virtual networking, cluster operations, and troubleshooting\nAdvanced NSX-T / VCF Networking expertise: overlay/VLAN segments, Tier-0/Tier-1 gateways, Edge Nodes/clusters, BGP, static routing, ECMP, route redistribution, Distributed Firewall, Gateway Firewall, dynamic groups/tagging, NAT, VPN, DHCP, and lifecycle operations\nStrong enterprise networking fundamentals: TCP/IP, DNS, DHCP, ARP, VLANs, VXLAN/Geneve, MTU, BGP, OSPF, VRFs, link aggregation, firewalling, NAT, load balancing, and network troubleshooting\nExperience in DoW, federal civilian, intelligence community, or other highly regulated environments with formal change control, security approval, documentation, and audit requirements.\nWorking knowledge of RMF, ATO, DISA STIGs, POA&Ms, vulnerability management, security controls, continuous monitoring, and remediation of applicable security findings\nStrong written and verbal communication skills, including technical diagrams, implementation plans, SOPs, security documentation, and executive-ready status updates.\nRequired Certifications\nCertification requirements should align with the assigned DoW Cyber Workforce Framework / DoW 8140 work role and applicable contract requirements.\nCurrent CompTIA Security+ CE or another approved DoW 8140-aligned baseline certification appropriate to the assigned work role\nOne current VMware/Broadcom networking, security, or VMware Cloud Foundation certification, such as VCP-NV, VMware Cloud Foundation Administrator, VMware Cloud Foundation Architect, or a comparable current NSX/VCF networking certification.\nPreferred Qualifications\nExperience designing or supporting VMware Cloud Foundation, including SDDC Manager, workload domains, lifecycle management, vSphere, and NSX integration.\nExperience integrating NSX with Cisco Nexus, Juniper, Palo Alto Networks, F5, or similar enterprise technologies\nExperience with VXLAN/Geneve overlays, BGP underlay/overlay routing, multi-rack architectures, and highly available network services\nAutomation / Infrastructure as Code experience using PowerShell/PowerCLI, Ansible, VMware Aria Automation, REST APIs, Git, YAML, and JSON\nExperience integrating NSX telemetry and logs with Splunk, Elastic, or comparable SIEM/observability platforms\nExperience with enterprise PKI, certificate lifecycle management, Active Directory, LDAP, identity federation, RBAC, privileged-access management, and MFA\nExperience supporting classified, disconnected, air-gapped, or tactical-edge environments\nFamiliarity with Dell PowerEdge, Cisco UCS, HPE, DISA STIG Viewer, SCAP scanning, ACAS/Nessus, and POA&M remediation workflows.\nCore Technical Competencies\nNSX Architecture: NSX Manager clusters, transport zones/nodes, Edge clusters, segments, gateways, and security policies\nRouting: BGP, static routing, ECMP, route redistribution, Tier-0/Tier-1 routing, and physical-network integration\nNetwork Security: Microsegmentation, Distributed/Gateway Firewall, dynamic groups, tagging, rule analysis, and least-privilege policies\nvSphere Networking: vCenter, ESXi, VDS, VMkernel, vmnic, port groups, cluster networking, and host-level troubleshooting\nAdvanced Troubleshooting: Traceflow, NSX CLI, ESXi packet capture, BGP diagnostics, flow analysis, logs, and packet-level troubleshooting\nOperations & Compliance: Upgrades, backup/recovery, certificates, lifecycle management, RMF, STIGs, ATO support, vulnerability remediation, and change control\nAutomation & Documentation: PowerCLI, Ansible, REST APIs, Git; diagrams, runbooks, firewall matrices, test plans, validation procedures, and backout plans.\nIdeal Candidate is a senior-level engineer who combines deep VMware NSX expertise with strong traditional networking fundamentals and experience operating within classified DoW environments. The successful candidate can independently own complex NSX issues while collaborating across virtualization, networking, cybersecurity, systems, storage, application, and program teams.\nAdditional Information\nAll your information will be kept confidential according to EEO guidelines.\nCompensation is unique to each candidate and relative to the skills and experience they bring to the position. The salary range for this position is typically $150-165k. This does not guarantee a specific salary as compensation is based upon multiple factors such as education, experience, certifications, and other requirements, and may fall outside of the above-stated range.\nHighlights of our benefits include Health/Dental/Vision, 401(k) match, Accrued PTO, STD/LTD/Life Insurance, Referral Bonuses, professional development reimbursement, and more!\nD2 Technical Services is committed to a merit-based recruitment process and encourages applications from all qualified individuals. As a Veteran-Owned Small Business, we particularly welcome applications from veterans who have the requisite skills and experience. Job applicants that are interested in one of our openings and may require a reasonable accommodation to participate in the job application or interview process, should contact us to request an accommodation.","description_format":"text","description_chars":7907,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["Life insurance","Professional development"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Digital Government","Information Security","IT Consulting & Digital Transformation"],"lifecycle":[{"event":"open","at":"2026-10-08T20:47:18Z"}],"visa":[],"liveness":{"score":79,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.789,"p_room":1,"age_days":18,"expected_fill_days":58,"reasons":["conf:1","win:early"],"computed_at":"2026-10-27T05:46:45Z"},"pay":{"stated_usd_annual":165000,"is_top_pay":true},"html_url":"https://alion.io/job/d2-consulting-senior-vmware-nsx-engineer","json_url":"https://alion.io/job/d2-consulting-senior-vmware-nsx-engineer.json","meta":{"generated_at":"2026-10-28T03:08:54Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4223,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-29T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":673019},"rest":"https://alion.io/mcp/rest/get_company?id=673019"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fd2-consulting-senior-vmware-nsx-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fd2-consulting-senior-vmware-nsx-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fd2-consulting-senior-vmware-nsx-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/d2-consulting-senior-vmware-nsx-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fd2-consulting-senior-vmware-nsx-engineer"}]}