Firewall Administrator

Overview

Job Title: Firewall Administrator

Location: Arnold AFB, TN

Job Family Code: P - IT / Cyber Security

Function/Branch: Engineering / Infrastructure

Directorate: Engineering Tech & Support

Position Type: Regular, Full-Time

Pay Type: Exempt

Grade : L08 (PA0809) - L09 (PA0911)

Salary Range: L08: $98,000 - $135,000; L09: $110,000 - $151,000 / year

Overview

Beyond New Horizons, LLC (BNH) has an exciting opportunity for a Firewall Administrator, supporting TOS II, at Arnold Air Force Base, TN. As a Firewall Administrator, you will be working as a member of an integrated team responsible for design, support and maintenance of Firewalls for the United States Air Force Test Operations and Sustainment efforts.

Open to internal and external candidates. The selected candidate for this requisition may be required to occasionally work outside normal business hours.

Job Summary

Beyond New Horizons, LLC (BNH) is the team selected by the U.S. Air Force to conduct Test and Operations Sustainment at the Arnold Engineering Development Complex (AEDC) at Arnold Air Force Base in Tennessee. AEDC operates several aerodynamic and propulsion wind tunnels, rocket and turbine engine test cells, space environmental chambers, arc heaters, ballistic ranges and other specialized units located in six states. Many of the complex's test units have capabilities unmatched elsewhere in the United States; some are unique in the world. AEDC is one of three installations which are part of the Air Force Test Center (AFTC), one of six subordinate commands of the Air Force Materiel Command organization, and an important national resource.

AEDC’s mission is to conduct developmental test and evaluation for the Nation through modeling, simulation, and ground and flight test. Execution of the mission requires a large team of highly qualified and dedicated professionals from multiple technical disciplines to effectively accomplish the objectives of our test customers.

Job Duties:

• Firewall & VPN Administration: Deploy, configure, manage, and troubleshoot enterprise firewalls (FortiGate, Forcepoint) and Cisco ASA VPN gateways to ensure secure, highly available, and reliable network connectivity.
• NGFW Policy Administration: Configuring and managing Next-Generation Firewall (NGFW) policies, including application control, deep packet inspection, web filtering, and Intrusion Prevention Systems (IPS).
• Network Security & STIG Compliance: Implement robust access control lists (ACLs), firewall rules, and security policies; configure, monitor, and harden network security appliances in strict compliance with Security Technical Implementation Guides (STIGs) and DoD policies.
• Change Management: Adhere to strict IT change management best practices and approval workflows for all network configuration modifications, firewall rule updates, and infrastructure deployments.
• Monitoring & Incident Response: Monitor network traffic, analyze firewall logs to identify security threats or anomalies, and resolve Helpdesk tickets related to network connectivity, routing, and secure remote access.
• Vulnerability & Patch Management: Perform routine maintenance, firmware upgrades, and vulnerability patching for all firewall and VPN infrastructure to maintain an optimal security posture.
• Cybersecurity Collaboration: Ensure network security requirements are consistently documented and evaluated; collaborate with the Information System Security Manager (ISSM) to maintain Air Force IT/Government network compliance and information assurance.
• Documentation & SOPs: Author and maintain comprehensive Standard Operating Procedures (SOPs), detailed network topology diagrams, and strict records of firewall rule approvals and configurations.
• Operational Availability: Maintain availability outside of standard working hours to remediate critical network/IT infrastructure issues as required.
• It is a condition of employment to wear company issued PPE (Personal Protective Equipment) in accordance with supervisory direction and company policy.
• Perform other duties as assigned by the supervisor.

Basic Qualifications:

• Bachelor’s degree in IT-related field or in lieu of bachelor’s degree, 4+ years of IT-related experience in addition to the minimum experience listed below.
• L08: A minimum of 5 years of progressively relevant experience.
• L09: A minimum of 8 years of progressively relevant experience.
• Current US Citizenship required.
• Must be able to obtain and maintain security clearance and secure access to the AEDC local area network (LAN).
• Must currently possess or commit to obtaining requisite certifications in accordance with DoD 8140 within 6 months of hiring.

Preferred Qualifications

• Certifications: Active baseline certification (e.g., CompTIA Security+) to meet DoD 8140 IAT requirements, along with vendor-specific certifications such as Fortinet NSE, Cisco CCNA/CCNP Security, or equivalent.
• Core Technical Expertise: Proven hands-on experience administering, troubleshooting, and maintaining FortiGate, Forcepoint Firewalls, and Cisco ASA VPNs in an enterprise or government environment.
• Network Foundations: Strong understanding of network protocols, routing, switching, subnetting, and VPN technologies (IPSec, SSL/TLS, Cisco AnyConnect).
• Security & Vulnerability Management: Demonstrated experience with continuous network monitoring, vulnerability remediation, and applying DoD STIGs to network appliances.
• Analytical & Soft Skills: Strong analytical and problem-solving abilities to diagnose complex network traffic and routing issues; excellent oral and written communication skills to effectively collaborate with peers, end-users, and management.

What We Offer

• Competitive salaries
• Continuing education assistance
• Multiple healthcare benefits packages
• 401K with employer matching
• Paid time off (PTO) along with a federally recognized holiday schedule

Who We Are

Beyond New Horizons (BNH) is a fully populated joint venture of Astrion and Fluor Federal Services, Inc. formed to provide unmatched Test Operations and Sustainment services for the Arnold Engineering and Development Complex.

We chose our name to serve as an enduring reminder of our commitment to AEDC’s rich aerospace research and development legacy anchored in AEDC’s Towards New Horizons founding study and the unprecedented opportunities to greatly expand AEDC’s capabilities and capacity Beyond those existing today. Leveraging the capabilities of our parent companies, BNH specializes in testing and evaluation for military and space systems combined with proven capability in large-scale Government program management, integration, engineering, and construction services for specialized and technically advanced high-hazard facilities.

Join our Team!

U.S. Citizenship is required. At this time BNH will not sponsor any applicants for employment authorization or offer any immigration related support for this position (i.e. H1b, F1 OPT, F-1 STEM OPT, F-1 CPT, J-1, E-2, E-3, L-1, or other forms of work authorization that require immigration support from an employer).

The minimum and maximum full-time annual salaries for this role are listed below, by location. Please note that this salary information is solely for candidates hired to perform work within one of these locations and refers to the amount BNH is willing to pay at the time of this posting. Salaries for part-time jobs will be adjusted based upon the number of hours agreed to work at the Tennessee location.

L08: $98,000 - $135,000; L09: $110,000 - $151,000 / year at Arnold Air Force, TN.

BNH is an Equal Employment Opportunity Employer. We provide equal employment opportunities to all employees and applicants for employment and prohibit discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, veteran status, and any other grounds for discrimination prohibited by applicable law.

This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.