Certifications are very important, the CISSP being sort of the gold standard at this point that will open every door. However, another thing to consider are security clearances. I'm on the East coast near DC, so with all the federal agencies and defense contractors there is a huge need for people who are cleared to work with classified data. It actually opens up a lane for retired military because depending on their specialty they can leave the service with Top Secret and above clearances that qualify them for ITSec work, whether they have the skillset or not. Once they're onboard the government will just pay to send them to training damn near indefinitely until they get their skills up.