Firewall/Network Security Administrator

Job Description

Job Description

Job Title

Network Security Engineer III (Boundary Protection) – JBSA

The Network Security Engineer III (Boundary Protection) provides advanced cybersecurity and network defense support for the Air Force Intranet Control (AFINC) III program in support of the 26th Network Operations Squadron (26 NOS), with duty location at Joint Base San Antonio.

This role is responsible for protecting Air Force Network (AFNet) resources by implementing, operating, and maintaining enterprise boundary protection systems in accordance with Department of Defense (DoD) cybersecurity standards. The engineer will install, configure, monitor, troubleshoot, upgrade, patch, and harden intrusion detection/prevention systems (IDS/IPS), firewalls, load balancers, and web proxies to defend against internal and external threats.

The candidate will perform complex analytics on boundary protection systems to identify vulnerabilities, prevent system compromise, and mitigate data loss risks. Responsibilities include executing Defensive Cyberspace Operations (DCO) and supporting DoDIN operations to ensure mission assurance.

This position operates within a 24x7x365 mission environment and requires adherence to established cybersecurity policies, procedures, and operational standards.

• Install, configure, monitor, troubleshoot, upgrade, patch, and harden:
  • Firewalls
  • IDS/IPS systems
  • Load balancers
  • Web proxies
• Protect AFNet resources from internal and external threats in accordance with DoD standards
• Perform advanced analytics on boundary protection systems to detect and mitigate threats
• Conduct Defensive Cyberspace Operations (DCO) and support DoDIN operations
• Monitor system health and respond to anomalous activity and cyber incidents
• Ensure systems comply with DoD cybersecurity requirements and security configurations
• Document system changes, troubleshooting actions, and incident response activities
• Coordinate with Government stakeholders and other technical teams to maintain mission readiness

• IAT Level II compliant certification (e.g., CompTIA Security+)

Preferred Certifications:

• Palo Alto Networks Certified Network Security Administrator (PCNSA)
• Palo Alto Networks Certified Network Security Engineer (PCNSE)

• High School Diploma or GED required

• Minimum 7+ years of experience in enterprise network security or cybersecurity operations
• At least 7+ years of experience supporting DoD boundary protection and/or Cybersecurity Service Provider (CSSP) operations
• Demonstrated experience with:
  • Firewalls, IDS/IPS, proxies, and load balancers
  • Network security monitoring and threat detection
  • Performing complex analytics to identify and mitigate threats
• Experience supporting Defensive Cyberspace Operations (DCO) and DoDIN operations
• Strong understanding of DoD cybersecurity standards and enterprise network security architecture

• Active Top Secret clearance required
• SCI eligibility required

Why Join Sumaria Systems

• Supporting critical Air Force missions
• Over 40 years supporting the Department of Defense
• Expertise across:
  • Lifecycle Systems Engineering
  • SETA / Advisory & Analysis
  • C5ISR
  • Enterprise IT

Additional Information

• No agency submissions accepted
• Learn more:

Equal Opportunity Employer

Sumaria Systems is an Equal Opportunity Employer and considers all qualified applicants without regard to race, color, religion, sex, national origin, age, disability, or veteran status.