Sr VMware vSphere & NSX-T Engineer
Title Principal VMware vSphere & NSX-T Engineer
Location India
Experience 8+ years
Reports to Engineering / Delivery Leadership
Type Hands-on technical lead - architect, builder and troubleshooter
About Zappsec
Zappsec is a platform-led services company specializing in cloud, networking, cybersecurity, and identity. We combine deep engineering expertise, reusable platforms, and automation to modernize and secure enterprise infrastructure across hybrid and multi-cloud environments.
Our teams design, build, migrate, and operate production environments for enterprise customers. We value engineers who can defend an architecture, execute the configuration, troubleshoot complex failures, and own the final outcome.
Mission
Own the architecture and hands-on delivery of complex VMware vSphere and NSX-T environments, from design and build through migration, security hardening, production cutover, and operational handover. You must be comfortable at the ESXi host, vCenter, NSX Edge, routing, distributed firewall, and packet-capture layers, and able to resolve high-severity issues independently.
Responsibilities
Architect, deploy, upgrade, and operate ESXi and vCenter estates, including clusters, HA, DRS, vMotion, vSphere Distributed Switches, performance, capacity, and resilience.
Design and implement VMware NSX-T / NSX 4.x: Manager, transport nodes and zones, TEPs, overlay and VLAN segments, Edge clusters, Tier-0/Tier-1 gateways, NAT, and high availability.
Own end-to-end underlay and overlay connectivity: VLANs, MTU, BGP, routing advertisements, DNS, north-south/east-west flows, upstream network integration, and failover.
Build enforceable Zero Trust policies using NSX Distributed Firewall, groups/tags, service definitions, gateway firewall, and workload microsegmentation; validate traffic before and after policy changes.
Lead VMware modernization, upgrades, migrations, and cutovers using vMotion and HCX where applicable; create dependency maps, migration waves, test plans, rollback steps, and hypercare plans.
Troubleshoot production outages using NSX Traceflow, packet captures, CLI, ESXi/vCenter logs, esxtop, route tables, and policy realization to isolate and fix root causes.
Produce HLDs/LLDs, as-built diagrams, security rule matrices, runbooks, change records, and operational handover evidence; automate repeatable work with PowerCLI, APIs, or IaC.
Lead technical discussions with customer VMware, network, security, storage, and cloud teams. Own design decisions, risk mitigation, and successful implementation.
Required Experience
8+ years in enterprise infrastructure, vSphere and deploying and troubleshooting NSX-T / VMware NSX.
Personally designed and built production VMware environments. Must explain exact configuration, scale, dependencies, change windows, incident history, and individual contribution.
Expertise across ESXi, vCenter, HA/DRS, vDS, vSAN or enterprise storage, lifecycle upgrades, availability design, workload performance, and host/VM recovery.
Strong NSX-T engineering: Tier-0/Tier-1 routing, Edge clusters, BGP, overlay/TEP, transport zones, DFW, service groups, segmentation, and north-south traffic inspection.
Hands-on L2-L7 problem isolation across VMware, physical networking, routing, firewalls, and storage. Must be able to whiteboard a complete packet path.
Proven ownership of enterprise migrations or major production incidents, including root-cause analysis, rollback decisions, risk controls, and customer-facing execution.
Strongly Preferred - Cloud & Security
Amazon Elastic VMware Service (Amazon EVS) and VMware Cloud Foundation: environment planning, VCF bring-up/lifecycle, NSX overlay design, AWS VPC underlay, VPC Route Server/BGP, and workload connectivity.
AWS hybrid networking: Amazon VPC, Transit Gateway, Direct Connect, route tables, DNS, security groups/NACLs, and integration between VMware workloads, AWS-native services, and on-premises networks.
Enterprise security…