Lead VMware Engineer

Job description

We are seeking a Lead VMware Engineer to design and build automation, self-service provisioning, and disaster-recovery capabilities across a complex VMware estate, working closely with network and platform teams to deliver hybrid cloud infrastructure at scale.

Responsibilities

- Build the automation and self-service provisioning model for the VMware estate, including vSphere VM provisioning, placement/resource-pool modules, cloud-init/cloudbase-init integration, and Ansible post-provisioning handoff

- Design Infrastructure as Code modules for VMware DRS affinity/anti-affinity rules, resource pools, and automation levels, as well as vSAN storage policies and cluster storage configuration

- Configure VMware SRM protection groups, recovery plans, and inventory mappings, along with VMware HCX site pairing, service mesh, network extension, and migration-profile templates to support disaster-recovery and workload-mobility automation

- Collaborate with the Network Architect on VMware NSX-T network segments, distributed firewall rules/groups/tags, and load balancing/NAT, providing VMware-specific placement and compute context

- Setup the integration pattern between VMware infrastructure and Azure VMware Solution, ensuring consistent identity and RBAC across hybrid environments, working with the Network Architect on ExpressRoute connectivity

- Implement testing and validation approaches appropriate to VMware's longer, environment-dependent test cycles, such as paired-site testing for HCX and failover testing for SRM, and design harnesses to support repeatable validation

- Assist in development of Terraform modules and wrappers for VMware resource types

Requirements

- 5+ years of hands-on VMware engineering experience across vSphere, vSAN, SRM, and HCX in enterprise or service-provider environments

- Demonstrated experience automating VMware infrastructure via Infrastructure as Code (Terraform/OpenTofu) and Configuration as Code (Ansible), including dynamic inventory integration

- Working knowledge of NSX-T network segmentation and distributed firewall concepts sufficient to collaborate with the Network Architect on VMware networking

- Experience implementing disaster-recovery automation, including protection groups and recovery plans, and workload-migration tooling such as site pairing and network extension

- Familiarity with hybrid cloud connectivity patterns, including Azure VMware Solution

- Experience integrating VMware provisioning workflows with golden-image pipelines

- English proficiency at B2 level or higher

Nice to have

- Experience exposing VMware provisioning and lifecycle operations through a self-service developer portal (Backstage or equivalent)

- Familiarity with certificate and secrets integration for VMware workloads (Venafi, Key Vault/OpenBao)

- Knowledge of Windows guest customization (cloudbase-init) and Linux cloud-init patterns within VMware environments

- Experience with change-control processes for network/security modifications in regulated or critical-infrastructure environments

- Exposure to GenAI-assisted IaC/module development practices to accelerate Terraform/Ansible authoring