V-Defend Architect

V-Defend Principal Architect & Engineers (Contract)

A large-scale UK transformation programme is looking for a V-Defend Principal Architect to shape and deliver VMware NSX vDefend security across an enterprise environment.

We're also hiring V-Defend Engineers to support the build, policy rollout, and day-two operations.

You’ll work under the direction of the Prime Contractor and/or End Customer, driving both implementation and operational readiness
.

This role spans two parallel work streams:

• Workstream 1: Design + deployment of vDefend Advanced Threat Protection (ATP)
• Workstream 2: Architecture + rollout of vDefend Firewall / Distributed Firewall (DFW) and security controls

• Support platform deployment to enable NSX/vDefend capabilities (incl. NSXi integration as required)
• Architect and implement DFW policy structure and scalable rule frameworks
• Lead DFW rule creation and rule migration activities
• Define the target operating model (process, ownership, governance, day-2)
• Set standardisation goals and build a repeatable policy approach
• Build and scale policy layers:
  • Common Services Policy (Macro)
  • Infrastructure Policy (Meso)
  • Application Policy (Micro)
• Implement and/or support Identity Firewall
• Design for visibility
  , logging
  , monitoring
  , and operational metrics
• Support capacity management and operational reporting

• Enable and configure ATP
• Design and implement IPS/IDS policy enablement
• Lead testing and validation of controls and detection outcomes
• Tune malware prevention and detection policies
• Perform threat assessment and develop advanced detection use cases
• Support investigations using an attack lifecycle / evidence chain approach
• Build threat scenario development and response-ready operational patterns
• Produce custom dashboards
  , reporting, and measurable security KPIs
• Support product upgrades and patching
• Drive "day two" operational readiness and enablement

• Strong hands‑on architecture and delivery experience with VMware NSX vDefend
• Deep knowledge of:
  • Distributed Firewall (DFW) design, policy modelling, and rule migrations
  • Micro‑segmentation strategy and scalable policy frameworks (macro/meso/micro)
  • Logging/monitoring/visibility design and operational KPI definition
• Experience enabling and tuning ATP
  , including IPS/IDS and malware prevention controls
• Ability to translate security requirements into practical designs, runbooks, and operating models
• Comfortable working in complex, regulated enterprise environments with structured governance

• Roles available: Principal Architect and Engineer (rates vary by level)
• Rate: £450-£700 per day (Inside IR35), depending on experience
• Location: Hybrid - London
• Contract: 6-12 months initial term

Please apply for immediate consideration.