Senior VMWare Virtualization Architect/Engineer

TekSynap•Reston, VA

5d•Onsite

About The Position

We are seeking a Senior VMWare Virtualization Architect/Engineer to drive the architecture, design, security, deployment, and lifecycle optimization of enterprise scale virtualization services supporting Defense Intelligence Agency’s mission critical operations under Solutions for the Information Technology Enterprise III (SITE III). You will lead infrastructure modernization initiatives across multiple enclaves, ensuring highly available, secure, and performant virtualized compute, storage, and networking platforms that integrate seamlessly with zero trust principles and hybrid cloud constructs. TekSynap is a fast-growing high-tech company that understands both the pace of technology today and the need to have a comprehensive well planned information management environment. “Technology moving at the speed of thought” embodies these principles – the need to nimbly utilize the best that information technology offers to meet the business needs of our Federal Government customers. We offer our full-time employees a competitive benefits package to include health, dental, vision, 401K, life insurance, short-term and long-term disability plans, vacation time and holidays. Visit us at www.TekSynap.com. Apply now to explore jobs with us! The safety and health of our employees is of the utmost importance. Employees are required to comply with any vaccination requirements mandated by contract, applicable law or regulation. By applying to a role at TekSynap you are providing consent to receive text messages regarding your interview and employment status. If at any time you would like to opt out of text messaging, respond "STOP". As part of the application process, you agree that TekSynap Corporation may retain and use your name, e-mail, and contact information for purposes related to employment consideration.

Requirements

Active TS/SCI + CI Poly clearance
BS, 12-15 years of relevant experience; MS, 10-13 years; PhD, 10+ years
Proven expert with Forcepoint Trusted Thin Client (TTC), Powershell, vSphere/ESXi (virtualization), vCenter, vSAN, NSX (DFW, micro segmentation, overlay networking), CITRIX (Virtualization), Avocent (KVM), SRM, lifecycle and image management, and performance tuning at scale.
Proven architecture of multi-site, mission critical environments with HA/DR and STIG compliant baselines.
Demonstrates a deep understanding of L2/L3, routing, firewalls, load balancing, segmentation, and integration with enterprise security stacks—consistent with the broader Senior Network Engineer remit.
Must meet the IAT Level III baseline cert plus any environment-specific or computing environment (CE) certifications required (CISSP, CCNP/CCIE, JNCIP, etc) :
CISSP or CASP+
VMware VCP-DCV (or equivalent virtualization cert)
Windows Server certification
AWS Solutions Architect Associate/Professional certification

Nice To Haves

VCAPDCV or VCIX/Design certificaton is strongly preferred.
VMware Certified Professional – Data Center Virtualization (VCP-DCV)
Citrix Certified Associate / Professional (CCA-V / CCP-V)
Microsoft Certified: Windows Server Hybrid Administrator
Azure Administrator
Windows Server Certification
RHCSA / LPIC-1

Responsibilities

Define reference architectures and multiyear roadmaps for vSpherebased platforms (onprem and hybrid), including ESXi clusters, vCenter, vSAN, and NSXbased network/security services.
Engineer highly available clusters, resource pools, and workload domains; design standard builds, host profiles, and image management; implement automation for provisioning, patching, and configuration drift remediation.
Architect and operate NSX (distributed firewall, micro segmentation, overlay/underlay integration, load balancing) to meet DIA security objectives and enclave separation requirements.
Integrate with enterprise services (INFOBLOX, ICAM services, PKI, DNS, NTP, SIEM) and extend to VMware Cloud / hyperscalers where applicable; leverage HCX / migration tooling to modernize and consolidate workloads.
Establish SLOs, conduct performance baselining, rightsize clusters, forecast capacity (CPU/Mem/IOPS), and optimize storage/policy placement (vSAN Storage Policies).
Design multisite replication, stretched clusters, and DR plans using SRM/array replication; run failover testing and document RTO/RPO.
Implement least privilege, certificate management, secure baselines (STIG/SCAP), logging, and continuous compliance reporting; partner with cyber to close POA&Ms; implement ZeroTrust & Compliance
Build reusable modules and pipelines using PowerCLI, Python, vRealize/Aria tools, and Git to standardize provisioning and day2 ops.
Create SOPs/runbooks; mentor engineers; perform root cause analysis; lead change planning and maintenance windows.
Conduct design reviews, cost benefit analyses, and briefings; advise on hardware/software selection and technology insertion for future deployment.
Perform STIG hardening of VDI gold images.
Develop FIPS/NIST-compliant encryption configuration.
Produce RMF artifact support for VDI environments.
Provide ATO maintenance support.