SUMMARYArmor is seeking a highly skilled Network Engineer. The ideal candidate has strong experience with VMware NSX-T, enterprise networking fundamentals, virtualization, and hybrid cloud networking. Experience with F5, VMware vCloud Director, Infrastructure as Code, Kubernetes, and other cloud networking technologies are highly desirable and will enable the engineer to contribute more quickly within Armor's environment.
This role operates in a hybrid structure with on-site presence three days a week, specifically Tuesday, Wednesday, and Thursday, based in the Plano, Texas area, OR on-site presence four days a week, specifically Monday, Tuesday, Wednesday, and Thursday, based in Pune, India.ESSENTIAL DUTIES AND RESPONSIBILITIES (Additional duties may be assigned as required)
- Design, deploy, and manage VMware NSX-T network virtualization solutions, including micro-segmentation, distributed firewall, and network automation.
- Design and implement networking in Oracle OCI, AWS, and Azure, including Compartments, VPCs, VNets, subnets, security groups, route tables, VPNs, FastConnect, Direct Connect, ExpressRoute, load balancing, DRG, Transit Gateway, Virtual WAN, PrivateLink, Private Endpoints, and cloud-native DNS.
- Architect and maintain hybrid cloud connectivity between on-premises virtualization environments and public cloud providers (OCI, AWS, Azure).
- Configure and optimize F5 BIG-IP (LTM, GTM, APM, ASM) to ensure high availability, redundancy, and security, and evaluate and deploy open-source load balancing and WAF alternatives (NGINX, HAProxy, Envoy, ModSecurity, Coraza, or equivalent) where appropriate.
- Implement and manage Layer 2 and Layer 3 VPN (L2L) solutions for secure connectivity between data centers and cloud environments.
- Configure and maintain BGP routing for dynamic network communication and optimized traffic flows across multi-site deployments.
- Manage and optimize VMware vCloud Director (vCD) for multi-tenant cloud environments, including resource provisioning and networking.
- Administer VMware vSphere and adjacent VMware products (vRealize, vSAN, Horizon) to ensure performance, scalability, and security for virtualized workloads.
- Conduct VMware NSX V-to-T migrations and support SDDC and hardware refresh activities.
- Configure and manage cloud-native network security services, including WAF, DDoS protection (AWS Shield, Azure DDoS Protection, OCI WAF), PrivateLink and Private
- Endpoints, and Network Security Groups across cloud environments.
- Build and maintain infrastructure-as-code (Terraform, Ansible, CloudFormation, ARM) for networking configurations, and contribute to GitOps and pipeline automation workflows.
- Collaborate with SRE, Platform Architecture, Security, and Product Engineering teams to enforce compliance, improve network security posture, and support customer-facing reliability.
- Troubleshoot and resolve complex networking and virtualization issues across hybrid cloud and on-prem environments, and provide Level 2 and Level 3 support for networking, incidents, escalations, and performance tuning.
- Document network architectures, configurations, runbooks, and operational procedures so launched capabilities are support-ready.
- Use AI-assisted tools (Claude Code, GitHub Copilot, or equivalent) as a daily part of design, scripting, documentation, and troubleshooting work, critically evaluating AI generated outputs for accuracy, security, and operational fit.
REQUIRED SKILLS- 4+ years of Network Engineering experience supporting enterprise production environments.
- Hands-on experience with VMware NSX-T and VMware vSphere.
- Strong networking fundamentals including BGP routing, Layer 2/Layer 3 VPNs, routing, and network segmentation.
- Experience with networking in at least ONE major cloud platform (Oracle OCI, AWS, or Azure), including hybrid connectivity.
- Strong troubleshooting skills, customer-facing production support experience, and excellent communication/documentation skills.
PREFERRED SKILLS & CERTIFICATIONS (Not Mandatory):- VMware vCloud Director (vCD)
- F5 BIG-IP (LTM, GTM, APM, ASM)
- Open-source load balancing/WAF (NGINX, HAProxy, Envoy, ModSecurity, Coraza)
- Proxmox, KVM, or other open-source virtualization
- Infrastructure as Code (Terraform, CloudFormation, ARM, Ansible)
- Python, Bash, or PowerShell scripting
- Git and CI/CD
- Kubernetes, Docker, Istio, Calico, Cilium
- SD-WAN
- Zero Trust networking
- Multi-cloud networking (AWS, Azure, OCI, GCP)
- Network observability and monitoring (Datadog, Grafana, Prometheus, ELK, vRealize Network Insight)
- Firewall platforms (Palo Alto, Fortinet, Check Point)
- Cloud-native WAF, DDoS protection, and CDN integration
- AI-assisted development tools and AI security awareness
- All preferred certifications (VMware, OCI, AWS, Azure, F5, Proxmox)
- VMware Certified Advanced Professional (VCAP) - NSX-T
- VMware Certified Professional (VCP-DCV, VCP-NV, or VCP-Cloud).
- Oracle Cloud Infrastructure Certified Networking Professional.
- F5 Certified Technology Specialist (F5-CTS LTM, GTM, or APM).
- AWS Certified Advanced Networking - Specialty.
- Microsoft Certified Azure Network Engineer Associate.
- Proxmox VE Certified Professional, or equivalent open-source virtualization certification.
Work EnvironmentThe work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. The noise level in the work environment is usually low to moderate. The work environment can be either in an office setting or remotely from anywhere.
