DirectJobHub
Jobs · Art & Creative · Maryland

Senior VMWare Virtualization Architect/Engineer

TekSynap · Montgomery County, MD · 3 mo ago
Art & Creative$160k–$170k/yrFull-time

About the role

The Senior VMWare Virtualization Architect/Engineer is responsible for defining reference architectures and multi-year roadmaps for vSphere-based platforms, including ESXi clusters, vCenter, vSAN, and NSX-based network/security services. They also engineer highly available clusters, resource pools, and workload domains; design standard builds, host profiles, and image management; implement automation for provisioning, patching, and configuration drift remediation. They architect and operate NSX (distributed firewall, micro-segmentation, overlay/integration, load balancing) to meet DIA security objectives and enclave separation requirements. They integrate with enterprise services (INFOBLOX, ICAM services, PKI, DNS, NTP, SIEM) and extend to VMware Cloud/hyperscalers where applicable; leverage HCX/migration tooling to modernize and consolidate workloads. They establish Service Level Objectives (SLOs), conduct performance baselining, right-size clusters, forecast capacity (CPU/Mem/IOPS), and optimize storage/policy placement (vSAN Storage Policies). They design multi-site replication, stretched clusters, and disaster recovery plans using SRM/array replication; run failover testing and document Recovery Time Objective (RTO)/Recovery Point Objective (RPO).

Responsibilities

  • Define reference architectures and multi-year roadmaps for vSphere based platforms (on-prem and hybrid), including ESXi clusters, vCenter, vSAN, and NSX based network/security services.
  • Engineer highly available clusters, resource pools, and workload domains; design standard builds, host profiles, and image management; implement automation for provisioning, patching, and configuration drift remediation.
  • Architect and operate NSX (distributed firewall, micro-segmentation, overlay/network integration, load balancing) to meet DIA security objectives and enclave separation requirements.
  • Integrate with enterprise services (INFOBLOX, ICAM services, PKI, DNS, NTP, SIEM) and extend to VMware Cloud/hyperscalers where applicable; leverage HCX/migration tooling to modernize and consolidate workloads.
  • Establish SLOs, conduct performance baselining, right-size clusters, forecast capacity (CPU/Mem/IOPS), and optimize storage/policy placement (vSAN Storage Policies).
  • Design multi-site replication, stretched clusters, and disaster recovery plans using SRM/array replication; run failover testing and document RTO/RPO.
  • Implement least privilege, certificate management, secure baselines (STIG/SCAP), logging, and continuous compliance reporting; partner with cyber to close POA&Ms; implement Zero Trust & Compliance.
  • Create SOPs/runbooks; mentor engineers; perform root cause analysis; lead change planning and maintenance windows.
  • Conduct design reviews, cost-benefit analyses, and briefings; advise on hardware/software selection and technology insertion for future deployment.
  • Perform STIG hardening of VDI gold images.
  • Develop FIPS/NIST-compliant encryption configuration.
  • Produce RMF artifact support for VDI environments.
  • Provide ATO maintenance support.

Qualifications

  • Active TS/SCI + CI Poly clearance
  • BS, 12-15 years of relevant experience; MS, 10-13 years; PhD, 10+ years
  • Proven expertise with Forcepoint Trusted Thin Client (TTC), PowerShell, vSphere/ESXi (virtualization), vCenter, vSAN, NSX (DFW, micro-segmentation, overlay networking), Citrix (Virtualization), Avocent (KVM), SRM, lifecycle and image management, and performance tuning at scale.
  • Proven architecture of multi-site, mission-critical environments with HA/DR and STIG compliant baselines.
  • Demonstrated deep understanding of L2/L3, routing, firewalls, load balancing, segmentation, and integration with enterprise security stacks—consistent with the broader Senior Network Engineer remit.
  • Must meet the IAT Level III baseline certification plus any environment-specific or computing environment (CE) certifications required (CISSP, CCNP/CCIE, JNCIP, etc): CISSP or CASP+ VMware VCP-DCV (or equivalent virtualization cert); Windows Server certification; AWS Solutions Architect Associate/Professional certification.
  • VCAP DCV or VCIX/Design certification is strongly preferred.

Benefits

Competitive benefits package including health, dental, vision, 401K, life insurance, short-term and long-term disability plans, vacation time and holidays. TekSynap is a drug-free workplace and offers a non-smoking environment. The company is committed to ensuring a safe and compliant working environment. TekSynap is an Equal Employment Opportunity employer and does not discriminate on the basis of race, color, creed, religion, sex, sexual orientation, gender identity, protected veteran status, national origin, disability, age, genetic information or any other characteristic protected by law.

Similar jobs