Senior VMWare Virtualization Architect/Engineer

Senior VMWare Virtualization Architect/Engineer

The Senior VMWare Virtualization Architect/Engineer is expected to be able to accomplish the following:

• Define reference architectures and multiyear roadmaps for vSphere-based platforms (on-prem and hybrid), including ESXi clusters, vCenter, vSAN, and NSX-based network/security services.
• Engineer highly available clusters, resource pools, and workload domains; design standard builds, host profiles, and image management; implement automation for provisioning, patching, and configuration drift remediation.
• Architect and operate NSX (distributed firewall, micro segmentation, overlay/underlay integration, load balancing) to meet DIA security objectives and enclave separation requirements.
• Integrate with enterprise services (INFOBLOX, ICAM services, PKI, DNS, NTP, SIEM) and extend to VMware Cloud / hyperscalers where applicable; leverage HCX / migration tooling to modernize and consolidate workloads.
• Establish SLOs, conduct performance baselining, rightsize clusters, forecast capacity (CPU/Mem/IOPS), and optimize storage/policy placement (vSAN Storage Policies).
• Design multisite replication, stretched clusters, and DR plans using SRM/array replication; run failover testing and document RTO/RPO.
• Implement least privilege, certificate management, secure baselines (STIG/SCAP), logging, and continuous compliance reporting; partner with cyber to close POA&Ms implement ZeroTrust & Compliance
• Build reusable modules and pipelines using PowerCLI, Python, vRealize/Aria tools, and Git to standardize provisioning and day2 ops.
• Create SOPs/runbooks; mentor engineers; perform root cause analysis; lead change planning and maintenance windows.
• Conduct design reviews, cost benefit analyses, and briefings; advise on hardware/software selection and technology insertion for future deployment.
• Perform STIG hardening of VDI gold images.
• Develop FIPS/NIST-compliant encryption configuration.
• Produce RMF artifact support for VDI environments.
• Provide ATO maintenance support.

Required qualifications include:

• Active TS/SCI + CI Poly clearance
• BS, 12-15 years of relevant experience; MS, 10-13 years; PhD, 10+ years
• Proven expert with Forcepoint Trusted Thin Client (TTC), Powershell, vSphere/ESXi (virtualization), vCenter, vSAN, NSX (DFW, micro segmentation, overlay networking), CITRIX (Virtualization), Avocent (KVM), SRM, lifecycle and image management, and performance tuning at scale.
• Proven architecture of multi-site, mission critical environments with HA/DR and STIG compliant baselines.
• Demonstrates a deep understanding of L2/L3, routing, firewalls, load balancing, segmentation, and integration with enterprise security stacks—consistent with the broader Senior Network Engineer remit.
• Must meet the IAT Level III baseline cert plus any environment-specific or computing environment (CE) certifications required (CISSP, CCNP/CCIE, JNCIP, etc):
• CISSP or CASP+
• VMware VCP-DCV (or equivalent virtualization cert)
• Windows Server certification
• AWS Solutions Architect Associate/Professional certification

Desired qualifications include:

• VCAPDCV or VCIX/Design certification is strongly preferred.
• VMware Certified Professional – Data Center Virtualization (VCP-DCV)
• Citrix Certified Associate / Professional (CCA-V / CCP-V)
• Microsoft Certified: Windows Server Hybrid Administrator
• Azure Administrator
• Windows Server Certification
• RHCSA / LPIC-1