
Senior Information Security Engineer - Security Firewall Policy
Required skills
- Palo Alto Networks
- firewall policies
- rule lifecycle management
- TCP/IP
- routing
- DNS
- NAT
- segmentation
- enterprise application connectivity
- project intake
Nice to have
- PCI-related network segmentation
- evidence collection
- automating firewall policy workflows
- APIs
- Python
- PowerShell
Role summary
The Senior Information Security Engineer - Security Firewall Policy will be a hands-on technical lead for a team of 3-5 engineers and analysts within the Enterprise Cyber Security organization. This role focuses on governing enterprise firewall access and network segmentation, primarily using Palo Alto Networks firewalls. Responsibilities include managing firewall policy project intake, prioritizing backlog, coordinating implementation, and ensuring secure connectivity. The role requires 5+ years of experience in network security or firewall engineering, with expertise in Palo Alto Networks policies, TCP/IP, and related network protocols. Preferred qualifications include experience with PCI compliance, automation tools like Python, and policy governance platforms. This is an individual contributor role with technical leadership responsibilities, requiring onsite presence in Rocklin, CA Monday through Thursday.
About the Team
You will be part of the Enterprise Cyber Security organization responsible for protecting WSI systems, applications, and information assets. The Firewall Policy team governs enterprise firewall access and network segmentation, partnering with Security Engineering, Network Infrastructure, application owners, and business teams to enable secure connectivity.
About the Role
As a Senior Information Security Engineer - Security Firewall Policy, you will serve as the hands-on technical lead for a team of approximately 3-5 engineers and analysts. You will coordinate project intake, prioritize firewall policy work, and guide secure, consistent implementation of Palo Alto Networks firewall policies. This is an individual contributor role with technical leadership responsibilities and no formal supervisory duties.
Responsibilities
Coordinate the day-to-day technical work of the Firewall Policy team, providing guidance, mentoring, and escalation support without formal people-management responsibilities.
Own firewall policy project intake, assess requirements and dependencies, prioritize the backlog, coordinate delivery, and communicate status to stakeholders.
Lead review, approval coordination, implementation planning, validation, and lifecycle management of Palo Alto Networks firewall rules and access requests.
Drive policy optimization, rule recertification, cleanup of unused or overly permissive access, and continuous improvement of firewall governance.
Partner with Network Engineering and application owners to define application flows, troubleshoot connectivity, and implement least-privilege access.
Lead firewall policy work supporting network segmentation, PCI compliance, and secure separation of critical environments.
Coordinate production changes, risk reviews, maintenance windows, rollback plans, and incident-related firewall requests.
Develop repeatable processes, documentation, and automation to improve policy review, request handling, and audit readiness.
Collaborate with Security Architecture, Infrastructure, IAM, and project teams to align firewall policies with enterprise security standards.
Provide technical knowledge transfer and help develop team capabilities.
Criteria
5+ years of experience in network security, firewall engineering, or related information security roles.
Hands-on expertise with Palo Alto Networks firewall policies, rule lifecycle management, and troubleshooting.
Strong knowledge of TCP/IP, routing, DNS, NAT, segmentation, and enterprise application connectivity.
Experience coordinating technical workstreams, project intake, and cross-functional change activities.
Ability to lead technical decisions, resolve competing priorities, and communicate with technical and business partners.
Experience with PCI-related network segmentation and evidence collection preferred.
Experience automating firewall policy workflows with APIs, Python, PowerShell, or similar tools preferred.
Exposure to policy governance platforms, configuration analysis, and AI-assisted operational workflows preferred.
This role requires being onsite in the Rocklin, CA office Monday through Thursday.
Our Culture & Values
We believe that taking care of our people is vital to our success and we strive to offer equitable and transparent practices for all. We prioritize connection, growth, and wellbeing.
People First
Putting People First means investing in overall well-being and opportunities to grow and advance within the organization. Depending on the position and location, here are a few highlights of what benefits may be available:
Benefits
A generous discount on all WSI brands
A 401(k) plan and other investment opportunities
Paid vacations, holidays, and time off to volunteer
Health benefits, dental and vision insurance, including same-sex domestic partner benefits
Tax-free commuter benefits
A wellness program that supports your physical, financial and emotional health
Continued Learning
In-person and online learning opportunities through WSI University
Cross-brand and cross-function career opportunities
Resources for self-development
Advisor (Mentor) program
Career development workshops, learning programs, and speaker series
WSI will not now or in the future commence an immigration case or "sponsor" an individual for this position (for example, H-1B or other employment-based immigration).
This role is not eligible for relocation assistance.
Williams-Sonoma, Inc. is an Equal Opportunity Employer. Williams-Sonoma, Inc. will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of the San Francisco Fair Chance Ordinance, or other applicable state or local laws and ordinances.
The expected starting pay range for this position is $100,000 - $130,000. Applicable pay ranges may differ across markets. Actual pay will be determined based on experience and other job-related factors permitted by law. In addition to competitive pay, compensation may include a variety of other components like benefits, paid time off, merit, and bonus opportunities.
| Our Company Founded in 1956, Williams-Sonoma, Inc. is the premier specialty retailer of high-quality products for the kitchen and home in the United States. Our family of brands are Williams Sonoma, Williams Sonoma Home, Pottery Barn, Pottery Barn Kids, Pottery Barn Teen, Rejuvenation, West Elm, Mark & Graham, Outward, and GreenRow. These brands are among the best known and most respected in the industry. We offer beautifully-designed, stylish and functional products for every area of the home, including the kitchen, living room, bedroom, home office, closet, laundry room and even outdoor spaces. We've seen some big changes since our first brick-and-mortar store opened more than half of a century ago. What hasn't changed is our passion for high-quality products, functional design, outstanding customer service, and enhancing the lives of our customers and the communities where we operate. Today, we're a multi-brand, multi-channel, global enterprise supported by state-of-the-art technology and some of the most talented teams in retailing - and we're always looking for new energy and ideas. |
Similar roles
Head Design Manager, Furniture - Pottery Barn KidsWilliams-Sonoma, Inc. · San Francisco, CA · Onsite
Junior Copywriter, Brand Editorial - Pottery BarnWilliams-Sonoma, Inc. · San Francisco, CA · Hybrid- Information Security Engineer | Corporate TechnologyRed Ventures · Remote · Remote
- Senior Information Security EngineerClarity Innovations · Herndon Va · Onsite
Information Security EngineerTTEC · Remote · Remote
Information Security EngineerPercepta · Remote · Remote
