The Role
Designs, secures, deploys, and supports VMware-based virtualized infrastructure for intelligence community missions. Responsibilities include architecture, patching, upgrades, troubleshooting, security compliance, testing, documentation, Tier 2/3 support, Aria Operations and Log Insight deployment, stakeholder engagement, and technical leadership. The role also mentors junior engineers and supports systems engineering projects across onsite and remote environments.
Summary Generated by Built In
About INflow Federal - founded in 2013, INflow Federal is a mission-driven small business delivering cutting-edge solutions to the Department of War (DoW) and Joint Force operations across 20+ states. Our strength comes from our people - especially the Veterans who make up over 50% of our workforce. Through our Veteran Outreach Program and employee-first culture, we invest deeply in professional growth, well-being, and innovation. Known for our agility, transparency, and integrity, INflow combines real-world experience with emerging technologies like AI/ML to help our customers lead in a rapidly evolving defense landscape. We empower both our employees and mission partners to stay ahead - driving smarter, faster, and more secure outcomes.
Job Overview:INflow is seeking an experienced Senior Vmware (NSX) Engineer to design, implement, operate, secure, and troubleshoot VMware NSX-based network virtualization solutions supporting a mission-critical U.S. Department of War environment. Candidates must possess an active Top Secret/SCI (TS/SCI) security clearance with a current CI Polygraph. The ideal candidate brings 5+ years of hands-on VMware NSX engineering experience, strong VMware vSphere and VMware Cloud Foundation (VCF) integration knowledge, and the ability to own the full NSX lifecycle from architecture and deployment through security hardening, automation, upgrades, and Tier 3 incident resolution.
Here, your work is more than a job—it's a journey in innovation. With opportunities to work on high-impact projects, access to the latest technologies, and a culture that thrives on creativity and collaboration, INflow Federal is where your expertise can truly make a difference.
Specific Duties and Responsibilities:
- Design, deploy, configure, operate, and sustain VMware NSX-T / VMware Cloud Foundation Networking across production, development, test, and mission environments.
- Engineer NSX Manager clusters, transport nodes/profiles, transport zones, uplink profiles, VDS/N-VDS networking, and NSX Edge clusters.
- Design and administer overlay and VLAN-backed segments, Tier-0/Tier-1 gateways, distributed routing, BGP, static routing, ECMP, route redistribution, and north-south/east-west connectivity.
- Implement microsegmentation and Zero Trust-aligned controls using Distributed Firewall, Gateway Firewall, security groups, dynamic membership, tags, context profiles, and policy-based security.
- Develop auditable, least-privilege firewall policies in coordination with cybersecurity, ISSO/ISSM, RMF, application, and network teams.
- Integrate NSX with vCenter, vSphere, VCF, vSAN, VMware Aria Operations/Logs, PKI, identity, SIEM, vulnerability-management, and enterprise monitoring platforms.
- Troubleshoot BGP/routing adjacency failures, MTU/TEP/Geneve issues, asymmetric routing, firewall processing, packet loss, performance degradation, and NSX Edge failures.
- Perform packet-level analysis using NSX CLI/nsxcli, vmkping, pktcap-uw, tcpdump-uw, Traceflow, flow monitoring, and distributed firewall analysis.
- Lead NSX upgrades, patching, certificate replacement, migrations, backup/recovery validation, and lifecycle-management activities with formal implementation, test, validation, and backout plans.
- Maintain engineering standards, configuration baselines, diagrams, firewall matrices, runbooks, and as-built documentation; provide Tier 3 escalation support and mentor junior engineers.
Required Qualifications:
- 5+ years of hands-on VMware NSX experience in enterprise-scale environments and 5+ years of VMware vSphere experience, including ESXi, vCenter Server, VDS, virtual networking, cluster operations, and troubleshooting.
- Advanced NSX-T / VCF Networking expertise: overlay/VLAN segments, Tier-0/Tier-1 gateways, Edge Nodes/clusters, BGP, static routing, ECMP, route redistribution, Distributed Firewall, Gateway Firewall, dynamic groups/tagging, NAT, VPN, DHCP, and lifecycle operations.
- Strong enterprise networking fundamentals: TCP/IP, DNS, DHCP, ARP, VLANs, VXLAN/Geneve, MTU, BGP, OSPF, VRFs, link aggregation, firewalling, NAT, load balancing, and network troubleshooting.
- Experience in DoW, federal civilian, intelligence community, or other highly regulated environments with formal change control, security approval, documentation, and audit requirements.
- Working knowledge of RMF, ATO, DISA STIGs, POA&Ms, vulnerability management, security controls, continuous monitoring, and remediation of applicable security findings.
- Strong written and verbal communication skills, including technical diagrams, implementation plans, SOPs, security documentation, and executive-ready status updates.
- One current VMware/Broadcom networking, security, or VMware Cloud Foundation certification, such as VCP-NV, VMware Cloud Foundation Administrator, VMware Cloud Foundation Architect, or a comparable current NSX/VCF networking certification.
Desired Skills:
- Experience designing or supporting VMware Cloud Foundation, including SDDC Manager, workload domains, lifecycle management, vSphere, and NSX integration.
- Experience integrating NSX with Cisco Nexus, Juniper, Palo Alto Networks, F5, or similar enterprise technologies.
- Experience with VXLAN/Geneve overlays, BGP underlay/overlay routing, multi-rack architectures, and highly available network services.
- Automation / Infrastructure as Code experience using PowerShell/PowerCLI, Ansible, VMware Aria Automation, REST APIs, Git, YAML, and JSON.
- Experience integrating NSX telemetry and logs with Splunk, Elastic, or comparable SIEM/observability platforms.
- Experience with enterprise PKI, certificate lifecycle management, Active Directory, LDAP, identity federation, RBAC, privileged-access management, and MFA.
- Experience supporting classified, disconnected, air-gapped, or tactical-edge environments.
- Familiarity with Dell PowerEdge, Cisco UCS, HPE, DISA STIG Viewer, SCAP scanning, ACAS/Nessus, and POA&M remediation workflows.
- NSX Architecture: NSX Manager clusters, transport zones/nodes, Edge clusters, segments, gateways, and security policies.
- Routing: BGP, static routing, ECMP, route redistribution, Tier-0/Tier-1 routing, and physical-network integration.
- Network Security: Microsegmentation, Distributed/Gateway Firewall, dynamic groups, tagging, rule analysis, and least-privilege policies.
- vSphere Networking: vCenter, ESXi, VDS, VMkernel, vmnic, port groups, cluster networking, and host-level troubleshooting.
- Advanced Troubleshooting: Traceflow, NSX CLI, ESXi packet capture, BGP diagnostics, flow analysis, logs, and packet-level troubleshooting.
- Operations & Compliance: Upgrades, backup/recovery, certificates, lifecycle management, RMF, STIGs, ATO support, vulnerability remediation, and change control.
- Automation & Documentation: PowerCLI, Ansible, REST APIs, Git; diagrams, runbooks, firewall matrices, test plans, validation procedures, and backout plans.
Required Clearance
- Active DoD TS/SCI
Certification Requirements
Most of our contracts require DoD 8140 (formerly 8570) compliance. We built 8140.study - our certification training platform - to help. This helps you study for certifications such as the CompTIA Security+.
Other Notes
Other Notes
- Some travel may be required: Must have valid driver’s license and transportation. This is subject to change at the direction of the customer.
- If accommodation is needed with your application or the interview process for applicants with disabilities, please contact Human Resources at 703-594-8601.
- Candidate must have the ability to lift up to 50 lbs.
- Must have willingness to perform duties not listed in the job description as required by INflow and our customer.
Citizenship Requirements
* Please note that INflow Federal is a defense contractor. Pursuant to our government contracts, candidates must be US Citizens to be considered for employment.
Equal Opportunity Employer Diversity and Inclusion
INflow provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws.
This commitment applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, leaves of absence, compensation, and training. Job applicants and employees are evaluated solely on job-related qualifications and experience.
Skills Required
- Bachelor’s degree in computer science, computer engineering, systems engineering, or a related field, or four additional years of information technology experience
- At least 5 years of hands-on systems engineering experience focused on VMware virtualization technologies
- Expertise with VMware vSphere, ESXi versions 6.7, 7.0, or 8.0, NSX/NSX-T, Aria Operations, and Aria Automation
- Experience with Windows Server 2016, 2019, or 2022; Windows 10/11; and Unix/Linux systems
- Proficiency in TCP/IP, DNS, Active Directory, and Group Policy Objects
- Active Department of Defense TS/SCI clearance
- U.S. citizenship
- Valid driver’s license and transportation
- Ability to lift up to 50 pounds
- Experience with AWS or Azure
- Familiarity with Cisco UCS Cloud Platform and Cisco UCS infrastructure
- VMware or UCS certifications
- VMware Aria Automation workflow and blueprint development experience
- ServiceNow integration and ticketing workflow experience
- Experience supporting intelligence community or Department of Defense clients
- Strong technical communication and documentation skills
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
INflow Federal was founded in 2013. The “INflow difference” begins with a simple belief encompassing the importance of employee culture. We are obsessed with our people and have demonstrated year-over-year that our employee-focused approach leads to customer success. As a leading Small Disadvantaged Business (SDB) innovator, we offer proven expertise in Network Modernization, Cybersecurity, Digital Modernization and Joint Force Mission Operations. We serve our federal government customers in over 20 states domestically to include the United States Navy (USN), United States Marine Corps (USMC), National Reconnaissance Office (NRO) and Joint Forces. At INflow, US Military Veterans have continuously paved the path ahead for our customers. We developed a homegrown “Veteran Outreach Program” focused around attracting and hiring transitioning military personnel and has resulted in veterans representing over 50% of our company. Simplifying the customer experience requires everyone within our organization to work together. Our leadership communicates transparently with our team on a regular basis with a commitment to do the right thing for all those we serve. Our customers recognize doing business with INflow means working with people who consistently deliver with agility, passion and integrity. This is how INflow continues to evolve, grow and accompany our customers into the future of mission systems and operations. Visit us at www.INflowFed.com.
