Senior NSX Automation Engineer

About the job

Senior NSX Automation Engineer: Become the Newest Member of the VF Family

NSX-T provides networking and security services for the Data Center (Private Cloud) allowing us to create and follow, micro-segmentation patterns. The adoption of micro-segmentation, allows us to isolate network access directly at the endpoint itself as required, excluding traditional Layer 3 boundaries, and allowing the application of applied security policy in unique and adaptive ways.

As a Senior NSX Automation Engineer you are responsible for the creation and maintenance of the architectural standards and design of the NSX platform. You will aid in the documentation, automation, and operations of our NSX-T platform, as well as being a mentor to peers to aid in cross-functional skills development. The skills required to be successful in this job are focused on Security and Network. The ideal candidate is a strong team player and leader with a background in one of the relevant fields, with relevant experience deploying and operating an NSX-T platform. A background in automation with experience using Ansible and Terraform is required.

How You Will Make a Difference:

• Mentor teammates and peers, driving the adoption of automated service delivery.
• Develop Architectural Decision Records (ADRs) supporting the architecture of the NSX platform.
• Manage NSX infrastructure, overseeing the execution of upgrades and maintenance of the platform.
• Create, maintain and support security policy ensuring appropriate enforcement per VF policy.
• Create, maintain and network policy utilizing VXLAN extension as necessary per VF policy.
• Monitor the health of NSX Manager, network, and systems participating in NSX network.
• Develops and maintains automation scripts in Terraform to support:
• Segments and Routing
• Distributed Firewall Policy
• Gateway Firewall Policy
• Grouping and Tagging
• Develops and maintains scripts in Ansible to support:
• Automated Deployment
• Management and Upgrades
• Contributes to technical design and evolution of NSX platforms and services.
• Support operational teams in development and deployment, using our Terraform modules.
• Participates with Cloud Center of Excellence to help drive automated deployment of like services and security across our Public Cloud and Data Centers (Private Cloud).
• Supports Cyber Security Incident Response activities as necessary.

Years of Related Professional Experience: 5+ years

Educational/ Position Requirements:

Position Requirements:

• Strong understanding of data center infrastructure, and directory services structures and use cases (Active Directory, LDAP).
• Strong knowledge of Networking fundamentals including but not limited to; The OSI Model, TCP/IP, DNS, HTTP, SMTP), System Administration and/or Architecture.
• Expert level knowledge and experience managing firewalls and IPS policy either with NSX or other well-known firewall providers.
• Proficient understanding of VMware with a focus on NSX-T networking and security fundamentals.
• Experience using CI/CD and automation tools such as GitLab, Jenkins is a plus.
• Automation experience utilizing Ansible and Terraform preferred.
• Strong communication skills with the ability to work in a highly collaborative team environment.
• Strong relationship skills and collaborative style to enable success across multiple business partners with a focus on building partnerships.
• Excellent analytical and problem-solving skills.
• Scripting capabilities in bash, PowerShell, python, considered a plus.
• Ability to multi-task, be a strong team player, and have organizational and time management skills.
• Strong knowledge of ITIL, SDLC, DevOps and agile processes and practices preferred.
• Experience following enterprise change and release management processes.

Educational Requirements:

• A bachelor’s degree in computer science, information systems or other related field or equivalent work experience.
• VMware Certified Professional (VCP), VMware Certified Professional 6 – Network Virtualization (VCP6-NV), VMware Certified Advanced Professional 6 – Network Virtualized Deployment (VCAP6-NV) preferred.
• Cisco Certified Network Associate (CCNA) required, Cisco Certified Network Professional (CCNP), Cisco Certified Internetwork Expert (CCIE), preferred.

Special Physical and/or Mental Requirements:

• Requires some degree of sitting (for prolonged periods of time), standing, lifting, carrying pushing, pulling more than 20 lbs.
• May require extended work hours including participation in on-call rotations.
• Travel by air and overnight, as required 25% amount of time.