Network Analyst

Reports To: Lead Network & Security ArchitectDepartment: Information TechnologyLocation/Schedule: Hybrid (prefer candidates located in Chicago, IL; Minnetonka, MN or Tampa, FL)Classification: Full-Time / ExemptWho We Are:Old Republic is a leading specialty insurer that operates diverse property & casualty and title insurance companies. Founded in 1923 and a member of the Fortune 500, we are a leader in underwriting and risk management services for business partners across the United States and Canada. Our specialized operating companies are experts in their fields, enabling us to provide tailored solutions that set us apart.Position Overview:We are seeking a Network Analyst to monitor, maintain, and troubleshoot the enterprise network infrastructure that connects our data centers, corporate offices, and subsidiary branch locations. The role combines hands-on network support with foundational knowledge of Zscaler for secure internet and private application access.This is a hands-on network operations and support role focused on connectivity, availability, and incident resolution. You will support Cisco routing and switching, SD-WAN (Silver Peak / Aruba EdgeConnect), Meraki, and routine Zscaler connectivity issues. Working alongside subsidiary engineering teams, infrastructure teams, and the Network and Security Architecture CoE, you will implement approved changes, maintain documentation, and escalate complex issues across a federated, multi-company environment Essential Job Functions:Monitor and troubleshoot Layer 3 connectivity, review routing tables and BGP/OSPF neighbor status, and assist network engineers with approved routing changes.Support Cisco Catalyst switching (9200/9300/9500 class), including port configuration, VLAN assignments, trunking, stacking, port channels, and basic spanning tree troubleshooting.Monitor Silver Peak / Aruba EdgeConnect SD-WAN appliance, circuit, and tunnel health; investigate connectivity or performance issues and assist with branch deployments using established standards.Support Cisco Meraki (MX, MS, MR, Z-series) for branch, teleworker, and wireless connectivity, including dashboard monitoring, AutoVPN troubleshooting, and approved SSID or device configuration changes.Monitor and troubleshoot site-to-site IPsec VPNs and cloud connectivity, including Azure ExpressRoute and VPN gateways, and coordinate escalations with network engineers and service providers.Provide initial support for Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), and Zscaler Client Connector, including client status checks, log collection, and basic internet or private application access troubleshooting. Coordinate policy, App Connector, tunnel, or firewall issues with the network and security teams.Implement approved network changes using documented procedures, peer review, change records, maintenance windows, validation steps, and rollback plans.Investigate Layer 1 through Layer 3 incidents using interface counters, routing tables, ping, traceroute, packet captures, and logs. Document findings, resolve issues within scope, and escalate complex problems with supporting evidence.Assist with site builds, hardware refreshes, circuit turn-ups, and branch cutovers, including pre-change checks, implementation tasks, and post-change connectivity testing.Maintain DNS, DHCP, and IPAM (DDI) records and IP address space in support of routed environments.Monitor network health, availability, and capacity; investigate alerts, identify recurring issues, and recommend operational improvements.Maintain network diagrams, device inventories, configuration records, runbooks, and troubleshooting guides in alignment with established enterprise standards.Partner with subsidiary engineers, service desk teams, carriers, and vendors to resolve support tickets, track escalations, and coordinate circuit and hardware maintenance.Qualifications:3 to 5 years of hands-on enterprise network support, administration, or operations experience, with a focus on routing, switching, and connectivity troubleshooting.Working knowledge of TCP/IP, subnetting, static routing, and BGP/OSPF fundamentals, including the ability to interpret routing tables and identify common connectivity issues.Hands-on experience supporting Cisco IOS-XE switching and routing platforms (Catalyst 9000 series, ISR/C8300 or similar), including CLI-based troubleshooting and routine configuration changes.Familiarity with SD-WAN operations, including circuit monitoring, tunnel status, and basic troubleshooting; Silver Peak / Aruba EdgeConnect experience is a plus.Familiarity with Cisco Meraki dashboard monitoring and basic branch, AutoVPN, or wireless troubleshooting.Working knowledge of VLANs, trunking, spanning tree, and link aggregation, with familiarity with VRFs, first hop redundancy, and QoS concepts.Understanding of IPsec VPNs and hybrid cloud connectivity concepts, such as Azure ExpressRoute and VPN gateways.Experience with DNS, DHCP, and IPAM in an enterprise environment.Foundational knowledge of Zscaler ZIA, ZPA, and Client Connector, with some exposure to client status checks, log collection, or access troubleshooting. Familiarity with firewall traffic flow and basic Palo Alto troubleshooting is a plus; advanced Zscaler design or policy ownership is not required.Structured troubleshooting skills using network monitoring tools, logs, and basic packet capture analysis with Wireshark or equivalent.Comfortable with structured change management and off-hours maintenance windows.Strong written and verbal communication and documentation skills.PreferredBachelor's degree in computer science, Information Systems, Network Engineering, or a related field, or equivalent experience.CCNA certification or progress toward certification preferred; CCNP Enterprise is a plus but not required.Zscaler training or certification, or Aruba EdgeConnect (Silver Peak) or Meraki certification.Experience working within federated or multi-entity organizations (holding companies, subsidiaries, or M&A environments).Scripting or automation experience (Python, Ansible, or network config templating).Exposure to NIST CSF, PCI-DSS, or NYDFS-500 environments. ORI is an Equal Opportunity Employer. ORI provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.