Senior Network & Security Engineer

Senior Network & Security Engineer (VCF / NSX-T / Automation) – Inside IR35 – London – Central (Hybrid)

We’re looking for an experienced Senior Network & Security Engineer to support the design, delivery, automation, and security hardening of a complex VMware Cloud Foundation (VCF) / NSX-T estate within a high-security environment.

Role Details:
Contract length: 6 months (rolling)
Daily rate: £500-£600 per day (Inside IR35)
IR35 status: Inside IR35
Location: Hybrid – on-site in London
Start date: ASAP
Clearance: SC Cleared required (DV preferred) – DV Eligible

Key Responsibilities:

• Lead end-to-end NSX-T design within VCF environments (multi-site / multi-tenant)
• Own architecture across advanced SDN patterns including multi-Edge Cluster, multi-VRF, multiple NSX instances, and NSX Federation
• Produce clear, defensible HLDs / LLDs and supporting architecture documentation
• Deploy and configure NSX-T components: fabrics, Edge nodes, transport zones, T0/T1 gateways, VRFs, NAT, routing
• Support migrations, policy transformations, upgrades, and best-practice implementation
• Implement security hardening and zero-trust controls, including:
  • Distributed Firewall (DFW), Gateway Firewall, micro-segmentation
  • Hardening across SDDC Manager / vSphere / NSX-T, RBAC, certificate management, and logging
• Build automation using PowerShell and NSX-T Policy/Manager APIs (deployment, policy configuration, compliance checks, ops automation)
• Produce runbooks, troubleshooting guides, and BAU handover documentation

Skills & Experience:

• Strong hands-on experience with VMware Cloud Foundation (VCF)
• Deep NSX-T expertise (incl. multi-Edge, multi-VRF, Federation, complex routing/segmentation)
• Strong PowerShell scripting and API-driven automation experience (NSX-T)
• Proven delivery experience in high-security / regulated environments
• Strong documentation capability (HLD/LLD + operational artefacts)

Nice to Have:

• NSX PowerShell Policy modules
• Terraform / Ansible automation exposure
• VMware certifications
• SIEM / logging integrations