OverviewJob Title: Firewall Administrator
Location: Arnold AFB, TN
Job Family Code: P – IT / Cyber Security
Function/Branch: Engineering / Infrastructure
Directorate: Engineering Tech & Support
Position Type: Regular, Full-Time
Pay Type: Exempt
Grade: L08 (PA0809) – L09 (PA0911)
Salary Range: L08: $98,000 – $135,000; L09: $110,000 - $151,000 / year
Overview
Beyond New Horizons, LLC (BNH) has an exciting opportunity for a Firewall Administrator, supporting TOS II, at Arnold Air Force Base, TN. As a Firewall Administrator, you will be working as a member of an integrated team responsible for design, support and maintenance of Firewalls for the United States Air Force Test Operations and Sustainment efforts.
Open to internal and external candidates. The selected candidate for this requisition may be required to occasionally work outside normal business hours.
Job Summary
Beyond New Horizons, LLC (BNH) is the team selected by the U.S. Air Force to conduct Test and Operations Sustainment at the Arnold Engineering Development Complex (AEDC) at Arnold Air Force Base in Tennessee. AEDC operates several aerodynamic and propulsion wind tunnels, rocket and turbine engine test cells, space environmental chambers, arc heaters, ballistic ranges and other specialized units located in six states. Many of the complex's test units have capabilities unmatched elsewhere in the United States; some are unique in the world. AEDC is one of three installations which are part of the Air Force Test Center (AFTC), one of six subordinate commands of the Air Force Materiel Command organization, and an important national resource.
AEDC’s mission is to conduct developmental test and evaluation for the Nation through modeling, simulation, and ground and flight test. Execution of the mission requires a large team of highly qualified and dedicated professionals from multiple technical disciplines to effectively accomplish the objectives of our test customers.
Job Duties:
- Firewall & VPN Administration: Deploy, configure, manage, and troubleshoot enterprise firewalls (FortiGate, Forcepoint) and Cisco ASA VPN gateways to ensure secure, highly available, and reliable network connectivity.
- NGFW Policy Administration: Configuring and managing Next-Generation Firewall (NGFW) policies, including application control, deep packet inspection, web filtering, and Intrusion Prevention Systems (IPS).
- Network Security & STIG Compliance: Implement robust access control lists (ACLs), firewall rules, and security policies; configure, monitor, and harden network security appliances in strict compliance with Security Technical Implementation Guides (STIGs) and DoD policies.
- Change Management: Adhere to strict IT change management best practices and approval workflows for all network configuration modifications, firewall rule updates, and infrastructure deployments.
- Monitoring & Incident Response: Monitor network traffic, analyze firewall logs to identify security threats or anomalies, and resolve Helpdesk tickets related to network connectivity, routing, and secure remote access.
- Vulnerability & Patch Management: Perform routine maintenance, firmware upgrades, and vulnerability patching for all firewall and VPN infrastructure to maintain an optimal security posture.
- Cybersecurity Collaboration: Ensure network security requirements are consistently documented and evaluated; collaborate with the Information System Security Manager (ISSM) to maintain Air Force IT/Government network compliance and information assurance.
- Documentation & SOPs: Author and maintain comprehensive Standard Operating Procedures (SOPs), detailed network topology diagrams, and strict records of firewall rule approvals and configurations.
- Operational Availability: Maintain availability outside of standard working hours to remediate critical network/IT infrastructure issues as required.
- It is a condition of employment to wear company issued PPE (Personal Protective Equipment) in accordance with supervisory direction and company policy.
- Perform other duties as assigned by the supervisor.
Basic Qualifications:
- Bachelor’s degree in IT-related field or in lieu of bachelor’s degree, 4+ years of IT-related experience in addition to the minimum experience listed below.
- L08: A minimum of 5 years of progressively relevant experience.
- L09: A minimum of 8 years of progressively relevant experience.
- Current US Citizenship required.
- Must be able to obtain and maintain security clearance and secure access to the AEDC local area network (LAN).
- Must currently possess or commit to obtaining requisite certifications in accordance with DoD 8140 within 6 months of hiring.
Preferred Qualifications
- Certifications: Active baseline certification (e.g., CompTIA Security+) to meet DoD 8140 IAT requirements, along with vendor-specific certifications such as Fortinet NSE, Cisco CCNA/CCNP Security, or equivalent.
- Core Technical Expertise: Proven hands-on experience administering, troubleshooting, and maintaining FortiGate, Forcepoint Firewalls, and Cisco ASA VPNs in an enterprise or government environment.
- Network Foundations: Strong understanding of network protocols, routing, switching, subnetting, and VPN technologies (IPSec, SSL/TLS, Cisco AnyConnect).
- Security & Vulnerability Management: Demonstrated experience with continuous network monitoring, vulnerability remediation, and applying DoD STIGs to network appliances.
- Analytical & Soft Skills: Strong analytical and problem-solving abilities to diagnose complex network traffic and routing issues; excellent oral and written communication skills to effectively collaborate with peers, end-users, and management.
What We Offer
- Competitive salaries
- Continuing education assistance
- Multiple healthcare benefits packages
- 401K with employer matching
- Paid time off (PTO) along with a federally recognized holiday schedule
