VMware vSphere Senior Engineer – ESXi Security Patching & Vulnerability Remediation

Job Description About the Project We are looking for a Senior VMware Infrastructure Specialist / Solutions Architect to analyze, plan, and execute a comprehensive vulnerability remediation plan for two of our production vSphere clusters. Security teams have reported critical vulnerabilities affecting our ESXi hosts. The main objective is to design a strict remediation timeline with controlled maintenance windows and mitigation strategies, minimizing operational impact and ensuring business continuity. Key Vulnerabilities & Associated Risks to Address The selected specialist will be responsible for mitigating risks that directly impact our infrastructure, specifically including: Information Leakage (Side-Channel Vulnerabilities): Addressing flaws like Foreshadow and Spectre that potentially allow unauthorized access to sensitive data in memory, including VM-adjacent data. Unauthorized Code Execution: Mitigating potential remote exploitation risks that could allow attackers to execute arbitrary code on ESXi hosts. VM Escape / Isolation Compromise: Eliminating risks that allow breakout from a virtual machine, compromising other workloads on the same host. Denial of Service (DoS): Hardening hosts against exploits designed to cause system instability or downtime. Out-of-Bounds Memory Read: Remediation of flaws exposing critical system memory boundaries. Scope of Work & Deliverables The consultant will be expected to guide us through three main phases: Technical & Operational Impact Assessment:Analyze the affected IP lists and current hardware/software versions against the VMware Compatibility Guide (HCL).Evaluate the performance impact (especially on CPU/memory overhead) of enabling hardware-level mitigations like Side-Channel Awareness (SCA).Perform capacity planning to ensure our clusters can support an $N+1$ or $N+2$ topology while hosts are in Maintenance Mode during live vMotion migrations. Remediation Plan & Controlled Schedule:Define a step-by-step remediation roadmap (e.g., vCenter updates prior to ESXi patching).Establish clear maintenance windows and a definitive rollback/contingency plan for each cluster.Propose temporary mitigation measures or official hardening guidelines for scenarios where immediate patching is not viable or a "does not apply" status needs formal justification. Execution & Validation:Apply the necessary security updates, patches, or configuration changes.Validate system stability post-patching and coordinate with our security team to confirm successful remediation. Required Profile / Qualifications Experience: 7+ years of Enterprise IT Infrastructure design and VMware administration. Proven track record managing critical maintenance windows in high-availability production environments. Technical Expertise: Deep knowledge of VMware vSphere (vLCM/Update Manager), cluster high availability (HA/DRS), live migrations (vMotion), and ESXi Kernel advanced configurations. Certifications (Highly Valued): VMware Certified Professional (VCP-DCV) or VMware Certified Advanced Professional (VCAP). Security-focused certifications (CISSP, CEH) are a big plus. Soft Skills: Strong documentation habits, risk management mindset, and ability to translate security requirements into low-impact operational procedures. Language: Spanish fluency is required for internal alignment, but technical command of English is expected for documentation and vendor support. If you have the senior expertise required to secure enterprise virtualization platforms without disrupting daily operations, please submit your proposal along with a brief summary of similar patching or hardening projects you have successfully completed.