Network Analyst

AIU; Kuwait; On-site; KWD 10,000 - 15,000; Full time

Job summary

An international educational institution in Kuwait is seeking a skilled Network Analyst to ensure high availability and compliance in network operations. The role involves monitoring performance, troubleshooting issues, and enforcing security practices. Ideal candidates will have 3–6 years in networking, robust security knowledge, and familiarity with tools like Splunk and Cisco vManage. Join a dynamic team to help maintain resilient services.

Qualifications

• 3–6 years in enterprise networking or network operations.
• Strong security background with IPsec, SSL/TLS.
• Demonstrated SD-WAN experience, preferably with Cisco vManage.

Responsibilities

• Proactively monitor health and performance using various tools.
• Perform packet- and flow-level analysis.
• Administer Cisco SD-WAN policies and configurations.

Skills

Hands-on diagnostics

Performance troubleshooting

Security implementation

Education

Bachelor's degree in Computer Science

Tools

Splunk

Cisco DNA Center

Cisco vManage

Wireshark

Nmap

Job description

Overview

Network Analyst — American International University, Kuwait

Job Description

We are seeking a skilled and motivated Network Analyst to join our dynamic team. This role blends deep hands-on diagnostics with strong security practices, ensuring high availability, low latency, and adherence to compliance frameworks (SOX, NIST, ISO 27001). You’ll work closely with IT operations, security, and vendors to keep services resilient and auditable.

Responsibilities

• Monitoring & Observability: Proactively monitor health and performance using Splunk, Cisco DNA Center/vManage, SevOne; tune alerts, create dashboards, and define SLOs.
• Troubleshooting & Diagnostics: Perform packet- and flow-level analysis with Wireshark; run targeted discovery/scans with Nmap; isolate issues (latency, jitter, throughput, loss), and drive root-cause analysis (RCA) with clear corrective actions.
• SD-WAN Operations: Administer Cisco SD-WAN (vManage) policies, application-aware routing, QoS, path selection, and performance baselining across sites.
• Configuration & Change: Implement and document network changes (ACLs, VLANs, routing, IPsec tunnels); follow change control and rollback plans.
• Security Enforcement: Maintain controls across firewalls (Check Point, Juniper), EDR (CrowdStrike, SentinelOne), MFA (Okta, Azure AD), PAM (CyberArk, SailPoint); uphold RBAC and GPO policies; validate SSL/TLS, IPsec posture.
• Compliance & Audit Readiness: Map controls and evidence to SOX, NIST, ISO 27001; assist with audits, vulnerability remediation, and policy exceptions.
• Capacity & Reliability: Track utilization trends, forecast growth, and recommend upgrades; improve resiliency via redundancy, HA, and incident drills.
• Automation & Documentation: Script repetitive tasks (e.g., Ansible/Python/PowerShell), maintain runbooks, diagrams, and knowledge articles.
• Incident Response: Lead or participate in on-call rotation; meet MTTR/SLAs, communicate status to stakeholders, and publish post-incident RCAs.

Qualifications

• 3–6 years in enterprise networking or network operations, including hands-on diagnostics and performance troubleshooting.
• Strong security background implementing/operating: IPsec, SSL/TLS, ACLs, VLANs, RBAC, GPOs; familiarity with MFA, PAM, EDR, and enterprise firewalls.
• Demonstrated SD-WAN experience (preferably Cisco vManage) in multi-site environments.
• Proficiency with monitoring/analysis tools: Splunk, Cisco DNA Center/vManage, SevOne, Wireshark, Nmap.
• Working knowledge of compliance frameworks: SOX, NIST, ISO 27001 and associated evidence collection.
• Clear, concise documentation and stakeholder communication skills.

Tools & Tech Stack

• Monitoring/Analysis: Splunk, Cisco DNA Center, Cisco vManage, SevOne, Wireshark, Nmap
• Security: IPsec, SSL/TLS, ACLs, VLANs, MFA (Okta, Azure AD), PAM (CyberArk, SailPoint), EDR (CrowdStrike, SentinelOne), Firewalls (Check Point, Juniper), RBAC, GPOs

Education

• Bachelor's degree in Computer Science, Information Technology, or a related field.