VCF vDefend Senior Engineer - US or Canadian Resident Required

Job Description

Senior VMware vDefend Engineer

Who We Are:

27 Virtual Consulting, established in 2017, is a VMware-focused VMware by Broadcom Pinnacle Partner. We provide corporate and strategic customers with world-class IT solutions across three pillars: Education, Professional Services, and customized VMware by Broadcom software solutions. Since the Broadcom acquisition, we have doubled down on VMware Cloud Foundation (VCF) 9, helping customers design, deploy, configure, secure, and consume VCF as a true private cloud platform. Our goal is to help customers maximize their investment while solving real-world business and technology challenges.

Who You Are:

As a 27 Virtual Senior VMware vDefend Engineer, you possess extensive hands-on experience designing, deploying, configuring, and operationalizing enterprise lateral security solutions within VMware Cloud Foundation environments. You understand VMware vDefend Firewall, Distributed Firewall, Gateway Firewall, Micro-segmentation, Zero Trust principles, how to deploy and leverage SSP and ATP (Advanced Threat Prevention) capabilities. You must be able to leverage these various tools to translate application dependencies and security requirements into practical policy designs that protect virtual machines, containers, and bare-metal workloads while supporting operational scale and business continuity.

What You'll Do:

• Lead assigned VMware vDefend engagements from discovery through design, deployment, configuration, validation, documentation, and knowledge transfer.

• Assess existing VCF and NSX environments, application flows, security requirements, and operational processes to develop implementation and remediation plans.

• Design and implement vDefend Distributed Firewall and Gateway Firewall policies for workload segmentation, micro-segmentation, zone-based controls, and protection against lateral movement.

• Configure and operationalize VMware vDefend Advanced Threat Prevention capabilities, including IDS/IPS, Network Detection and Response (NDR), Network Traffic Analysis (NTA), and Malware Prevention Service (MPS), when included in the customer solution.

• Use SSP (Security Intelligence Platform) to learn flow data, application context, and policy analysis to recommend, validate, and refine least-privilege security policies.

• Create implementation runbooks, low-level designs, test plans, rollback plans, as-built documentation, and operational procedures.

• Integrate vDefend solutions with existing VCF, NSX, identity, logging, monitoring, SIEM, and security operations processes.

• Troubleshoot complex firewall, policy, traffic-flow, threat-detection, performance, and service-insertion issues across production environments.

• Lead customer workshops and clearly communicate architecture decisions, risks, dependencies, and recommended practices to technical and non-technical stakeholders.

• Perform solution validation, policy testing, operational readiness reviews, and customer knowledge-transfer sessions.

• Maintain current VMware by Broadcom certifications and strong working knowledge of the VCF, NSX, and vDefend product lines.

• Contribute to internal standards, reusable delivery assets, lab validation, mentoring, and continuous improvement of 27 Virtual security services.

What We Offer:

• Available on the first of the month after 30 days of employment: full medical, vision, and dental coverage, with employee-only plans available at no cost to the employee.

• 10 days of paid time off per year for the first three years of employment, with additional PTO after three years of tenure; 12 floating holidays that may be used once per month; 5 sick days; 10 paid holidays; and a flexible schedule culture.

• Up to 6 weeks of paid maternity leave and 2 weeks of paid paternity leave.

• $100 monthly home-office expense allowance.

• Health Savings Account, Flexible Spending Account, and Dependent Care Account options.

• 401(k) retirement savings plan with a guaranteed employer contribution.

• A collaborative, supportive environment with opportunities to develop expertise in the latest software-defined data center, private cloud, networking, and security technologies.

What You Bring:

• High integrity, strong personal accountability, and the ability to independently lead customer-facing technical engagements.

• 5+ years of experience in network security, data center security, or VMware infrastructure, including 3+ years in a customer-facing technical role.

• Hands-on experience with VMware NSX and VMware vDefend, including Distributed Firewall, Gateway Firewall, security groups, tags, policy objects, rule design, and troubleshooting.

• Experience designing and implementing micro-segmentation and Zero Trust strategies for enterprise applications and private cloud environments.

• Working knowledge of vDefend threat prevention technologies such as IDS/IPS, NDR, NTA, and malware prevention.

• Strong understanding of TCP/IP, routing, switching, VLANs, overlays, stateful firewalls, Layer 2-7 security controls, DNS, DHCP, load balancing, and common application protocols.

• Experience analyzing application dependencies and network flows and converting findings into scalable, least-privilege policy models.

• Experience with VCF and NSX architecture, lifecycle management, upgrades, certificates, logging, monitoring, and operational troubleshooting.

• Familiarity with automation and infrastructure-as-code using REST APIs, PowerCLI, Python, Terraform, Ansible, or equivalent tools.

• Ability to integrate security events and telemetry with enterprise logging, SIEM, SOC, and incident-response workflows.

• Operational lab experience demonstrating deployment, configuration, testing, and lifecycle management of VMware vDefend capabilities.

• Ability to communicate complex security and infrastructure concepts to technical and non-technical audiences.

• Strong technical writing and documentation habits for designs, runbooks, as-built records, and knowledge transfer.

• Proven record of completing projects on time and within budget.

• Bachelor's degree in computer science, cybersecurity, information technology, or a related field plus 3+ years of relevant experience, or 8+ years of relevant professional experience.

• VMware certifications related to VCF, NSX, networking, or security are strongly preferred. Relevant industry certifications such as CISSP, CCNP Security, or equivalent are a plus.

Job Type: Full-time

Salary: $130,000 - $160,000 per year, plus bonuses and incentives