Nutanix Infrastructure Hardening Engineer :: Remote

Nutanix Infrastructure Hardening Engineer Location :: Remote Job Overview We are seeking an experienced Nutanix Infrastructure Hardening Engineer with strong expertise in Nutanix cluster administration, networking, virtualization, and infrastructure security hardening. The consultant will be responsible for defining, implementing, and validating security hardening baselines across Nutanix infrastructure environments. Key responsibilities include securing administrative access, configuring authentication and access controls, enabling security monitoring, restricting SSH connectivity, disabling unnecessary services, and coordinating infrastructure patching activities. The ideal candidate must have hands-on experience working with Nutanix infrastructure components, including Prism Central, AHV Hypervisors, and Controller Virtual Machines (CVMs). The candidate should also be capable of collaborating with infrastructure, networking, and security teams to implement security controls while minimizing operational risks. This is primarily a remote engagement, with approximately 20–30% travel to Chicago, IL, for onsite infrastructure administration and security hardening activities.

Key Responsibilities

Administer and manage Nutanix clusters and associated infrastructure components. Define and implement infrastructure security hardening baselines for Nutanix environments. Configure and validate security settings across Prism Central, AHV hosts, and Controller VMs (CVMs). Review and strengthen Prism Central authentication, session management, and administrative access controls. Implement SSH access restrictions using approved jump hosts, authorized IP addresses, and controlled administrative accounts. Work with networking teams to implement IP-based access restrictions and secure management interfaces. Identify and disable unnecessary services and protocols across supported infrastructure components. Enable and validate AIDE (Advanced Intrusion Detection Environment) on supported AHV hosts and CVMs. Configure infrastructure log forwarding to SIEM platforms for centralized security monitoring. Coordinate and execute infrastructure patching activities while minimizing service disruption. Validate security configurations and ensure compliance with established hardening standards. Perform infrastructure troubleshooting, security assessments, and post-implementation validation. Develop change plans, implementation documentation, testing procedures, and rollback strategies. Coordinate with infrastructure, networking, cybersecurity teams, vendors, and other stakeholders. Provide onsite support in Chicago, IL, as required. Required Technical Skills Nutanix Administration: Hands-on experience administering Nutanix clusters and managing infrastructure components. Nutanix Security Hardening: Experience implementing and validating security hardening configurations within Nutanix environments. Prism Central: Knowledge of Prism Central administration, authentication settings, session management, and access controls. AHV Hypervisor: Experience with Nutanix AHV administration, security configurations, and service management. Controller VMs (CVMs): Familiarity with CVM administration, security configurations, and infrastructure services. Networking: Strong understanding of TCP/IP, network connectivity, management interfaces, IP restrictions, and network security. SSH Security: Experience restricting SSH access through approved jump servers, authorized IPs, and controlled administrative accounts. Infrastructure Hardening: Ability to disable unnecessary services, implement security controls, and validate configurations. AIDE: Knowledge of enabling, configuring, and validating AIDE on supported AHV hosts and CVMs. Log Forwarding / SIEM: Experience configuring infrastructure log forwarding to centralized SIEM platforms. Patch Management: Experience planning, coordinating, and applying infrastructure patches. Change Management: Experience preparing implementation plans, conducting validation, and establishing rollback procedures.

Required Qualifications

Minimum 5+ years of experience in infrastructure administration, systems engineering, virtualization, or infrastructure security. Hands-on Nutanix infrastructure administration experience. Experience working on at least 1–2 Nutanix implementation, administration, or hardening projects. Strong knowledge of networking and secure infrastructure management. Practical experience administering Nutanix clusters and implementing platform-level security configurations. Ability to independently perform technical implementation, testing, troubleshooting, and documentation. Strong communication and coordination skills to work with infrastructure, security, networking teams, and vendors. Willingness to travel to Chicago, IL, approximately 20–30% of the time. Ability to provide onsite infrastructure support when required. Preferred Candidate Profile The ideal candidate will be a hands-on Nutanix Infrastructure Engineer with practical experience in Nutanix AHV, Prism Central, CVM administration, SSH hardening, AIDE, SIEM log forwarding, and infrastructure patch management. Candidates with a combination of Nutanix administration, networking, virtualization, and infrastructure security hardening experience will be strongly preferred.