Background

ASA Microfinance Uganda Ltd (ASA Uganda) is a for-profit, non-deposit taking Microfinance Institution, operating as a microfinance company and regulated by the Uganda Microfinance Regulatory Authority (UMRA). ASA Microfinance Uganda Ltd is also a member of the Association of Microfinance Institutions of Uganda (AMFIU). ASA Uganda commenced operations in 2013. ASA Uganda is a subsidiary of ASA International, one of the world’s largest international microfinance institutions globally and operates in 13 countries in Africa and Asia. The company was listed in the premium segment on the London Stock Exchange in July ’2018. ASA Microfinance (U) Ltd is seeking for professional, confident, self-motivated, and committed team players to reinforce its capacity by filling the following vacant positions:

Job Title: Network Operations Officer

Reports to: Infrastructure Operations Manager

Department: IT

Grade: VI

Direct Reports: N/A

Internal: All departments.

External: Vendors & Consultants

Job Purpose:

To administer and optimize ASA Microfinance Uganda Ltd.'s network infrastructure, supporting all branches, data centres, and digital channels, ensuring high availability, performance, and security.

Key Duties and Responsibilities:

• Network Monitoring, NOC Operations & Availability Support (25% weighting): Support 24/7 monitoring of LAN/WAN links, internet gateways, and branch connectivity. Operate within a structured NOC model with event correlation, alert triaging, and escalation procedures. Track network SLAs/SLIs (latency, jitter, packet loss, uptime) for critical services. Implement proactive monitoring thresholds and anomaly detection.
• Network Configuration, Change & Release Management (15% weighting): Configure and maintain routers, switches, firewalls, load balancers, and wireless controllers. Execute network changes under formal change management (approved, rollback plans, testing). Maintain configuration baselines, version control, and standard builds. Document and update logical and physical network topology diagrams.
• Network Security & Segmentation (20% weighting): Implement and maintain network segmentation (DMZ, core banking zone, user LAN, PCI zones where applicable). Enforce firewall policies, ACLs, NAT rules, and secure routing. Support IDS/IPS, DDoS protection, and secure remote access (VPN, zero-trust concepts where applicable). Collaborate with cybersecurity teams on vulnerability remediation and penetration test findings.
• Incident, Problem & Root Cause Management (25% weighting): Lead troubleshooting of complex network outages and degradation (L2). Conduct deep-dive RCA and produce post-incident reports with corrective actions. Maintain known error databases and preventive controls. Coordinate with ISPs, telcos, and vendors for fault resolution.
• Capacity Planning & Performance Optimization (15% weighting): Analyze bandwidth trends and forecast growth (branches, digital channels, integrations). Optimize QoS policies for latency-sensitive applications (CBS transactions, USSD sessions). Recommend infrastructure upgrades and redundancy improvements. Manage telecom providers, ISPs, and network vendors. Track SLA compliance, service credits, and performance reviews. Participate in contract and technical evaluations for network services.

Ideal Job Specifications:

• Academic qualifications: University degree in Information technology/Computer Science/Electrical Engineering/Telecommunications or related field.
• Professional training: Training and/or certification in below is added advantage: Routing, switching, DevOpsSec e.g. CCNA / CCNP (preferred), CompTIA Network, Security+, etc.
• Desired work experience: Two years' experience of enterprise network integration, administration, monitoring & support in medium-to-large organizations.
• Technical Competencies: Strong understanding of Enterprise Network Architecture & Protocols. Practical hands-on knowledge in Network Security Engineering & Segmentation. Network Monitoring, Observability, Performance Optimization & Automation experience. Troubleshooting, Incident Resolution, root cause analysis reporting skills.
• Behavioural Competencies: Ability to take control during outages, prioritize actions, and coordinate stakeholders under pressure to restore services timely and effectively. Structured, hypothesis-driven troubleshooting with strong attention to root cause rather than symptoms. Strict adherence to change control, documentation, and configuration accuracy to avoid service disruption. Clear communication with ISPs, vendors, and internal teams during incidents and maintenance activities. Capacity to operate in high-pressure, always-on environments with accountability for uptime.

• Support 24/7 monitoring of LAN/WAN links, internet gateways, and branch connectivity.
• Operate within a structured NOC model with event correlation, alert triaging, and escalation procedures.
• Track network SLAs/SLIs (latency, jitter, packet loss, uptime) for critical services.
• Implement proactive monitoring thresholds and anomaly detection.
• Configure and maintain routers, switches, firewalls, load balancers, and wireless controllers.
• Execute network changes under formal change management (approved, rollback plans, testing).
• Maintain configuration baselines, version control, and standard builds.
• Document and update logical and physical network topology diagrams.
• Implement and maintain network segmentation (DMZ, core banking zone, user LAN, PCI zones where applicable).
• Enforce firewall policies, ACLs, NAT rules, and secure routing.
• Support IDS/IPS, DDoS protection, and secure remote access (VPN, zero-trust concepts where applicable).
• Collaborate with cybersecurity teams on vulnerability remediation and penetration test findings.
• Lead troubleshooting of complex network outages and degradation (L2).
• Conduct deep-dive RCA and produce post-incident reports with corrective actions.
• Maintain known error databases and preventive controls.
• Coordinate with ISPs, telcos, and vendors for fault resolution.
• Analyze bandwidth trends and forecast growth (branches, digital channels, integrations).
• Optimize QoS policies for latency-sensitive applications (CBS transactions, USSD sessions).
• Recommend infrastructure upgrades and redundancy improvements.
• Manage telecom providers, ISPs, and network vendors.
• Track SLA compliance, service credits, and performance reviews.
• Participate in contract and technical evaluations for network services.

• Strong understanding of Enterprise Network Architecture & Protocols.
• Practical hands-on knowledge in Network Security Engineering & Segmentation.
• Network Monitoring, Observability, Performance Optimization & Automation experience.
• Troubleshooting, Incident Resolution, root cause analysis reporting skills.
• Ability to take control during outages, prioritize actions, and coordinate stakeholders under pressure to restore services timely and effectively.
• Structured, hypothesis-driven troubleshooting with strong attention to root cause rather than symptoms.
• Strict adherence to change control, documentation, and configuration accuracy to avoid service disruption.
• Clear communication with ISPs, vendors, and internal teams during incidents and maintenance activities.
• Capacity to operate in high-pressure, always-on environments with accountability for uptime.

• University degree in Information technology/Computer Science/Electrical Engineering/Telecommunications or related field.
• Training and/or certification in Routing, switching, DevOpsSec e.g. CCNA / CCNP (preferred), CompTIA Network, Security+, etc. is an added advantage.