Senior Virtualization Engineer - Fort Gordon, GA - TS/SCI clearance

About the Role

The customer is migrating its vSphere 8 estate to VMware Cloud Foundation 9.1. We need a mid-level engineer to help design the target environment, build it in a lab, and run the upgrade across classified enclaves. You'll report to a lead architect and own specific design artifacts and deployment workstreams. The role involves close collaboration with network, storage, and cybersecurity teams, as well as explaining design choices to government stakeholders. The environment is RMF-accredited, so design decisions must be defensible as control statements.

Scope

Current state includes vCenter, ESXi, vSAN, NSX, and Aria-era tooling on vSphere 8.x. VCF 9.x can import existing vCenter instances at 8.0 Update 3 or later as workload domains, making in-place conversion the preferred path. Early work involves assessing how much of the estate meets the 8.0 U3+ requirement, which drives the upgrade schedule.

Responsibilities

• Design:
  • Architecture artifacts: logical and physical designs, bill of materials, sizing and capacity models, design decision register with justification and risk, traceability to requirements.
  • Management and VI workload domain layout, availability zones, and cluster topology aligned with mission availability requirements.
  • vSAN ESA storage policies, fault domains, capacity strategy, and assessment of NVMe memory tiering on existing hardware.
  • NSX transport zones, edge clusters, T0/T1 routing, and segmentation policy matched to enclave boundaries.
  • Identity and PKI: Active Directory over LDAPS, CAC authentication, VMCA versus enterprise CA, least-privilege roles.
  • Lifecycle approach using vLCM image-based clusters, vSphere Configuration Profiles for desired-state enforcement, and the VCF depot model for offline patching.
• Deploy and Upgrade:
  • Deploy VCF 9.1 with VCF Installer, including greenfield and conversion of existing vSphere 8.0 U3+ vCenter instances.
  • Build and maintain the lab; rehearse every production change there first.
  • Write step-level runbooks: prerequisites, validation gates, decision points, rollback criteria, and rollback procedures.
  • Upgrade vCenter, ESX hosts, vSAN, and NSX in sequence; manage VM hardware and Tools remediation.
  • Pre- and post-upgrade validation: health checks, HCL and firmware verification, backup verification, performance baselines, functional testing of mission workloads.
  • Coordinate workload migration and outage windows with application owners.
  • Troubleshoot upgrade failures and performance regressions, including Broadcom case management and log bundle collection.
• Security and Compliance:
  • Apply and validate DISA STIGs for ESX, vCenter, NSX, and guest operating systems; document deviations and justifications for government review.
  • Remediate ACAS and Nessus findings; respond to IAVA notices within program timelines.
  • Write technical content for security control implementation statements and eMASS artifacts.
  • Implement encryption, secure boot, and TPM attestation where hardware supports it.
• Documentation and Handoff:
  • Produce as-built documentation, diagrams, and SOPs; conduct knowledge transfer to government operators.
  • Automate with PowerCLI and VCF/vSphere REST APIs; use Ansible or Terraform where applicable.
  • Design and test backup and disaster recovery for the virtualization layer.
  • Participate in CCB and technical exchange meetings; respond to RFIs.

Requirements

• Active, in-scope TS/SCI clearance at time of hire; U.S. citizenship; ability to work on-site in a SCIF.
• Current Security+ CE (DoD 8140 IAT Level II baseline), maintained throughout employment.
• Current VCP (VCP-VCF Administrator or Architect preferred; legacy-track VCP-DCV acceptable if VCF-track exam is taken within six months).
• Bachelor’s degree in computer science, information systems, or engineering plus 4–7 years in enterprise virtualization (or 8+ years of relevant experience in lieu of degree).
• VCF 9.x experience or VCF 5.x plus familiarity with VCF 9.x architecture (VCF Installer, VCF Operations, VCF Automation, SDDC Manager, and Aria integration).
• Experience executing multi-cluster vSphere major-version upgrades in change-controlled production.
• Working depth across ESX, vCenter, vSAN, NSX, vLCM, HA, DRS, and vMotion.
• Experience in RMF-accredited DoD/IC environments applying STIGs and closing vulnerabilities.
• Proficiency in PowerCLI and troubleshooting server hardware, SAN, and data center networking.
• Strong technical writing skills for government-approved documentation.

Benefits

• Comprehensive PPO medical coverage with HSA option, vision, and dental insurance (base plan premiums covered).
• Life Insurance, Short/Long-Term Disability, and Critical Illness insurance (premiums covered).
• Matching 401(k) plan and discount on pet insurance through ASPCA.
• Employee Assistance Program at no cost.
• Generous PTO and holidays; Education Assistance Program after 12 months.

Pay

$145,000–$170,000 annually.

About Pgtek

PGTEK is a consulting organization dedicated to helping clients achieve business and technology objectives through decades of experience and industry relationships. We invest in staff education and professional certifications. Our culture prioritizes employee well-being, treating our team like family.