network analyst

ISL Education Lending is looking for a network analyst to design, monitor and update core information system infrastructure to maintain corporate standards for security and performance. The position is responsible for architecture of network topology and serves as the technical lead for routing, switching, security, data center networking, storage connectivity and WAN services. The ideal candidate possesses deep understanding in Cisco networking and security technologies, including Cisco Secure Service Edge (SSE), Cisco Firepower Threat Defense (FTD), Catalyst switching and remote platforms, Cisco NX-OS environments, Fiber Channel (FC) storage networking, Cisco UCS and NetApp storage systems. Additionally, project work includes advancing cloud utilization and mentoring teammates on network principles that factor into cloud-based design and migrations.

ISL Education Lending is the name under which Iowa Student Loan Liquidity Corporation does business. We are all about success - students looking for funding, borrowers needing assistance repaying loans and consumers navigating the student loan landscape. That success starts with you., The qualified candidate will:

• Patch and maintain hardware infrastructure (routers, switches, firewalls) to latest supported versions. This includes collecting and reviewing logs from appliances that monitor the network to handle alerts and identify errors or anomalies. For potential security risks, work with the Information Security Office to respond and disclose details.

• Design and maintain logical network topology to meet evolving business requirements. Document network designs and technical procedures to corporate standards.

• Evaulate emerging technologies and recommend strategic improvements.

• Configure and optimize access controls to restrict network traffic access between network zones in accordance with security standards and approved configurations.

• Collaborate and/or drive cloud initiative to methodically build online hosted presence.

• Plan, schedule and manage network projects. Projects may occur outside normal business hours to reduce impact to corporate resources and customer traffic.

• Continually update technical knowledge to provide guidance on industry best practices for secure performance of core architecture (on-premises and cloud).

Secondary responsibilities include:

• Mentoring staff on networking concepts to grow bench strength and identify areas where automation is possible.

1

• Participation in disaster recovery exercises and business continuity planning.
• Assisting with regular internal/external security audits as needed.
• Performing other duties as assigned.

The qualified candidate will:

• Have strong analytical and problem-solving skills with the ability to think creatively.

• Possess excellent verbal and written communication skills and demonstrate attention to detail.

• Be able to prioritize and be self-motivated with a strong sense of urgency.
• Understand principles of secure networking.
• Be able to collaborate with others., The qualified candidate must have:

• 3+ years’ work experience designing/implementing network architectures and security controls in a corporate environment.

• Experience with the following:
• Cisco ASA & FTD firewalls

• Cisco Nexus and MDS switches operating NX-OS with support for Fiber Channel (FC) storage networks

• Cisco Catalyst switches and routers
• Cisco UCS and Fiber Interconnect (FI)

• Cisco Secure Service Edge (SSE) Solutions (Duo, Secure Endpoints, Secure Client, Secure Access, ThousandEyes, ZTA, VPNaaS)

• F5 LTM, APM and WAF

• Standard network protocols (TCP/IP, DNS, IPsec, SSL/TLS, SIP, VRF, QoS, etc.) and L2/L3 architectures

• Standard routing protocols (BGP, OSPF, HSRP)
• Virtualization: VMware or other hypervisors

• Software: Solarwinds Orion; SPLUNK, Wireshark and/or tcpdump; PuTTY; Microsoft Visio and Office; Atlassian Confluence

• Cloud computing technology and infrastructure

Familiarity with the following is a plus:

• Public cloud environments (Azure or AWS) and service models (SaaS, PaaS, and IaaS)

• Hybrid cloud
• Automation tools and scripting (Ansible or Python)
• RedHat Linux, Windows OS
• Java applications and software deployments

Active CISCO certifications (e.g., CCNA or CCNP) preferred

• You will receive in-house training, mentoring and opportunities for advancement.
• You will be empowered to share your ideas and creativity.
• You will earn a competitive wage with excellent workplace benefits.
• You will enjoy a casual workplace with opportunities for fun and team-building.