Firewall Administrator

• Firewall & VPN Administration: Deploy, configure, manage, and troubleshoot enterprise firewalls (FortiGate, Forcepoint) and Cisco ASA VPN gateways to ensure secure, highly available, and reliable network connectivity.
• NGFW Policy Administration: Configuring and managing Next-Generation Firewall (NGFW) policies, including application control, deep packet inspection, web filtering, and Intrusion Prevention Systems (IPS).
• Network Security & STIG Compliance: Implement robust access control lists (ACLs), firewall rules, and security policies; configure, monitor, and harden network security appliances in strict compliance with Security Technical Implementation Guides (STIGs) and DoD policies.
• Change Management: Adhere to strict IT change management best practices and approval workflows for all network configuration modifications, firewall rule updates, and infrastructure deployments.
• Monitoring & Incident Response: Monitor network traffic, analyze firewall logs to identify security threats or anomalies, and resolve Helpdesk tickets related to network connectivity, routing, and secure remote access.
• Vulnerability & Patch Management: Perform routine maintenance, firmware upgrades, and vulnerability patching for all firewall and VPN infrastructure to maintain an optimal security posture.
• Cybersecurity Collaboration: Ensure network security requirements are consistently documented and evaluated; collaborate with the Information System Security Manager (ISSM) to maintain Air Force IT/Government network compliance and information assurance.
• Documentation & SOPs: Author and maintain comprehensive Standard Operating Procedures (SOPs), detailed network topology diagrams, and strict records of firewall rule approvals and configurations.
• Operational Availability: Maintain availability outside of standard working hours to remediate critical network/IT infrastructure issues as required.
• It is a condition of employment to wear company issued PPE (Personal Protective Equipment) in accordance with supervisory direction and company policy.
• Perform other duties as assigned by the supervisor.

• Bachelor’s degree in IT-related field or in lieu of bachelor’s degree, 4+ years of IT-related experience in addition to the minimum experience listed below.
• L08: A minimum of 5 years of progressively relevant experience.
• L09: A minimum of 8 years of progressively relevant experience.
• Current US Citizenship required.
• Must be able to obtain and maintain security clearance and secure access to the AEDC local area network (LAN).
• Must currently possess or commit to obtaining requisite certifications in accordance with DoD 8140 within 6 months of hiring.

• Certifications: Active baseline certification (e.g., CompTIA Security+) to meet DoD 8140 IAT requirements, along with vendor-specific certifications such as Fortinet NSE, Cisco CCNA/CCNP Security, or equivalent.
• Core Technical Expertise: Proven hands-on experience administering, troubleshooting, and maintaining FortiGate, Forcepoint Firewalls, and Cisco ASA VPNs in an enterprise or government environment.
• Network Foundations: Strong understanding of network protocols, routing, switching, subnetting, and VPN technologies (IPSec, SSL/TLS, Cisco AnyConnect).
• Security & Vulnerability Management: Demonstrated experience with continuous network monitoring, vulnerability remediation, and applying DoD STIGs to network appliances.
• Analytical & Soft Skills: Strong analytical and problem-solving abilities to diagnose complex network traffic and routing issues; excellent oral and written communication skills to effectively collaborate with peers, end-users, and management.

• Competitive salaries
• Continuing education assistance
• Multiple healthcare benefits packages
• 401K with employer matching
• Paid time off (PTO) along with a federally recognized holiday schedule

Beyond New Horizons (BNH) is a fully populated joint venture of Astrion and Fluor Federal Services, Inc. formed to provide unmatched Test Operations and Sustainment services for the Arnold Engineering and Development Complex.

We chose our name to serve as an enduring reminder of our commitment to AEDC’s rich aerospace research and development legacy anchored in AEDC’s Towards New Horizons founding study and the unprecedented opportunities to greatly expand AEDC’s capabilities and capacity Beyond those existing today. Leveraging the capabilities of our parent companies, BNH specializes in testing and evaluation for military and space systems combined with proven capability in large-scale Government program management, integration, engineering, and construction services for specialized and technically advanced high-hazard facilities.

Join our Team!

U.S.

Citizenship is required.

At this time BNH will not sponsor any applicants for employment authorization or offer any immigration related support for this position (i.e.

H1b, F1 OPT, F-1 STEM OPT, F-1 CPT, J-1, E-2, E-3, L-1, or other forms of work authorization that require immigration support from an employer).

The minimum and maximum full-time annual salaries for this role are listed below, by location.

Please note that this salary information is solely for candidates hired to perform work within one of these locations and refers to the amount BNH is willing to pay at the time of this posting.

Salaries for part-time jobs will be adjusted based upon the number of hours agreed to work at the Tennessee location.

L08: $98,000 – $135,000; L09: $110,000 - $151,000 / year at Arnold Air Force, TN.

BNH is an Equal Employment Opportunity Employer.

We provide equal employment opportunities to all employees and applicants for employment and prohibit discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, veteran status, and any other grounds for discrimination prohibited by applicable law.

This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.