Print
ISL Education Lending is looking for a network analyst to design, monitor and update core information system infrastructure to maintain corporate standards for security and performance. The position is responsible for architecture of network topology and serves as the technical lead for routing, switching, security, data center networking, storage connectivity and WAN services. The ideal candidate possesses deep understanding in Cisco networking and security technologies, including Cisco Secure Service Edge (SSE), Cisco Firepower Threat Defense (FTD), Catalyst switching and remote platforms, Cisco NX-OS environments, Fiber Channel (FC) storage networking, Cisco UCS and NetApp storage systems. Additionally, project work includes advancing cloud utilization and mentoring teammates on network principles that factor into cloud-based design and migrations.
ISL Education Lending is the name under which Iowa Student Loan Liquidity Corporation does business. We are all about success — students looking for funding, borrowers needing assistance repaying loans and consumers navigating the student loan landscape. That success starts with you.
As an employee at ISL:
- You will receive in-house training, mentoring and opportunities for advancement.
- You will be empowered to share your ideas and creativity.
- You will earn a competitive wage with excellent workplace benefits.
- You will enjoy a casual workplace with opportunities for fun and team-building.
Job Responsibilities
The qualified candidate will:
- Patch and maintain hardware infrastructure (routers, switches, firewalls) to latest supported versions. This includes collecting and reviewing logs from appliances that monitor the network to handle alerts and identify errors or anomalies. For potential security risks, work with the Information Security Office to respond and disclose details.
- Design and maintain logical network topology to meet evolving business requirements. Document network designs and technical procedures to corporate standards.
- Evaulate emerging technologies and recommend strategic improvements.
- Configure and optimize access controls to restrict network traffic access between network zones in accordance with security standards and approved configurations.
- Collaborate and/or drive cloud initiative to methodically build online hosted presence.
- Plan, schedule and manage network projects. Projects may occur outside normal business hours to reduce impact to corporate resources and customer traffic.
- Continually update technical knowledge to provide guidance on industry best practices for secure performance of core architecture (on-premises and cloud).
Secondary responsibilities include:
- Mentoring staff on networking concepts to grow bench strength and identify areas where automation is possible.
- Participation in disaster recovery exercises and business continuity planning.
- Assisting with regular internal/external security audits as needed.
- Performing other duties as assigned.
Competencies
The qualified candidate will:
- Have strong analytical and problem-solving skills with the ability to think creatively.
- Possess excellent verbal and written communication skills and demonstrate attention to detail.
- Be able to prioritize and be self-motivated with a strong sense of urgency.
- Understand principles of secure networking.
- Be able to collaborate with others.
Qualifications
The qualified candidate must have:
- 3+ years' work experience designing/implementing network architectures and security controls in a corporate environment.
- Experience with the following:
- Cisco ASA & FTD firewalls
- Cisco Nexus and MDS switches operating NX-OS with support for Fiber Channel (FC) storage networks
- Cisco Catalyst switches and routers
- Cisco UCS and Fiber Interconnect (FI)
- Cisco Secure Service Edge (SSE) Solutions (Duo, Secure Endpoints, Secure Client, Secure Access, ThousandEyes, ZTA, VPNaaS)
- F5 LTM, APM and WAF
- Standard network protocols (TCP/IP, DNS, IPsec, SSL/TLS, SIP, VRF, QoS, etc.) and L2/L3 architectures
- Standard routing protocols (BGP, OSPF, HSRP)
- Virtualization: VMware or other hypervisors
- Software: Solarwinds Orion; SPLUNK, Wireshark and/or tcpdump; PuTTY; Microsoft Visio and Office; Atlassian Confluence
- Cloud computing technology and infrastructure
Familiarity with the following is a plus:
- Experience with public cloud environments (Azure or AWS) and service models (SaaS, PaaS, and IaaS)
- Hybrid cloud
- Automation tools and scripting (Ansible or Python)
- RedHat Linux, Windows OS
- Java applications and software deployments
Active CISCO certifications (e.g., CCNA or CCNP) preferred
Physical Activities/Working Conditions
The position requires the employee to:
- Work regularly in front of a computer.
- Interact frequently with others in person, over the phone, and via email and other devices.
- Occasionally work in a data center environment.
- Occasionally lift up to 50 pounds.
- Occasionally work variable hours as required to meet deadlines.
To apply for this position, please complete the employment application (PDF) and send it with a cover letter and resume to itrecruitment@studentloan.org
Iowa Student Loan Liquidity Corporation is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability or veteran status.
