[Hiring] Lead VMware Engineer @EPAM Systems

Role Description

We are seeking a Lead VMware Engineer to design and build automation, self-service provisioning, and disaster-recovery capabilities across a complex VMware estate, working closely with network and platform teams to deliver hybrid cloud infrastructure at scale.

Responsibilities

• Build the automation and self-service provisioning model for the VMware estate, including vSphere VM provisioning, placement/resource-pool modules, cloud-init/cloudbase-init integration, and Ansible post-provisioning handoff.
• Design Infrastructure as Code modules for VMware DRS affinity/anti-affinity rules, resource pools, and automation levels, as well as vSAN storage policies and cluster storage configuration.
• Configure VMware SRM protection groups, recovery plans, and inventory mappings, along with VMware HCX site pairing, service mesh, network extension, and migration-profile templates to support disaster-recovery and workload-mobility automation.
• Collaborate with the Network Architect on VMware NSX-T network segments, distributed firewall rules/groups/tags, and load balancing/NAT, providing VMware-specific placement and compute context.
• Setup the integration pattern between VMware infrastructure and Azure VMware Solution, ensuring consistent identity and RBAC across hybrid environments, working with the Network Architect on ExpressRoute connectivity.
• Implement testing and validation approaches appropriate to VMware's longer, environment-dependent test cycles, such as paired-site testing for HCX and failover testing for SRM, and design harnesses to support repeatable validation.
• Assist in development of Terraform modules and wrappers for VMware resource types.

Qualifications

• 5+ years of hands-on VMware engineering experience across vSphere, vSAN, SRM, and HCX in enterprise or service-provider environments.
• Demonstrated experience automating VMware infrastructure via Infrastructure as Code (Terraform/OpenTofu) and Configuration as Code (Ansible), including dynamic inventory integration.
• Working knowledge of NSX-T network segmentation and distributed firewall concepts sufficient to collaborate with the Network Architect on VMware networking.
• Experience implementing disaster-recovery automation, including protection groups and recovery plans, and workload-migration tooling such as site pairing and network extension.
• Familiarity with hybrid cloud connectivity patterns, including Azure VMware Solution.
• Experience integrating VMware provisioning workflows with golden-image pipelines.
• English proficiency at B2 level or higher.

Requirements

• Experience exposing VMware provisioning and lifecycle operations through a self-service developer portal (Backstage or equivalent).
• Familiarity with certificate and secrets integration for VMware workloads (Venafi, Key Vault/OpenBao).
• Knowledge of Windows guest customization (cloudbase-init) and Linux cloud-init patterns within VMware environments.
• Experience with change-control processes for network/security modifications in regulated or critical-infrastructure environments.
• Exposure to GenAI-assisted IaC/module development practices to accelerate Terraform/Ansible authoring.