Senior VMWare Virtualization Architect/Engineer

About the role

The Senior VMWare Virtualization Architect/Engineer is responsible for defining reference architectures and multiyear roadmaps for vSphere-based platforms, designing highly available clusters, and architecting and operating NSX for security objectives.

Responsibilities

• Define reference architectures and multiyear roadmaps for vSphere-based platforms (on-prem and hybrid).
• Engineer highly available clusters, resource pools, and workload domains; design standard builds, host profiles, and image management; implement automation for provisioning, patching, and configuration drift remediation.
• Architect and operate NSX (distributed firewall, micro segmentation, overlay/network integration, load balancing) to meet DIA security objectives and enclave separation requirements.
• Integrate with enterprise services (INFOBLOX, ICAM services, PKI, DNS, NTP, SIEM) and extend to VMware Cloud/hyperscalers where applicable; leverage HCX/migration tooling to modernize and consolidate workloads.
• Establish Service Level Objectives (SLOs), conduct performance baselining, rightsize clusters, forecast capacity (CPU/Mem/IOPS), and optimize storage/policy placement (vSAN Storage Policies).
• Design multisite replication, stretched clusters, and disaster recovery plans using SRM/array replication; run failover testing and document Recovery Time Objective (RTO)/Recovery Point Objective (RPO).
• Implement least privilege, certificate management, secure baselines (STIG/SCAP), logging, and continuous compliance reporting; partner with cyber to close POA&Ms; implement Zero Trust & Compliance.
• Create SOPs/runbooks; mentor engineers; perform root cause analysis; lead change planning and maintenance windows.
• Conduct design reviews, cost benefit analyses, and briefings; advise on hardware/software selection and technology insertion for future deployment.
• Perform STIG hardening of VDI gold images. Develop FIPS/NIST-compliant encryption configuration. Produce RMF artifact support for VDI environments. Provide ATO maintenance support.

Requirements

• Active TS/SCI + CI Poly clearance
• Bachelor's degree, 12-15 years of relevant experience; Master's degree, 10-13 years; Doctorate, 10+ years
• Proven expert with Forcepoint Trusted Thin Client (TTC), PowerShell, vSphere/ESXi (virtualization), vCenter, vSAN, NSX (DFW, micro segmentation, overlay networking), Citrix (Virtualization), Avocent (KVM), SRM, lifecycle and image management, and performance tuning at scale.
• Proven architecture of multi-site, mission-critical environments with HA/DR and STIG compliant baselines.
• Demonstrates a deep understanding of L2/L3, routing, firewalls, load balancing, segmentation, and integration with enterprise security stacks—consistent with the broader Senior Network Engineer remit.
• Must meet the IAT Level III baseline cert plus any environment-specific or computing environment (CE) certifications required (CISSP, CCNP/CCIE, JNCIP, etc)
• CISSP or CASP+ VMware VCP-DCV (or equivalent virtualization cert)
• Windows Server certification AWS Solutions Architect Associate/Professional certification

Desired Qualifications

• VCAPDCV or VCIX/Design certificaton is strongly preferred.
• VMware Certified Professional - Data Center Virtualization (VCP-DCV)
• Citrix Certified Associate / Professional (CCA-V / CCP-V)
• Microsoft Certified Windows Server Hybrid Administrator Azure Administrator Windows Server Certification
• RHCSA / LPIC-1

Benefits

Competitive benefits package including health, dental, vision, 401K, life insurance, short-term and long-term disability plans, vacation time and holidays.