Senior Information Security Engineer - Security Firewall Policy

Williams-Sonoma•Rocklin, CA

13h•Onsite

About The Position

The Senior Information Security Engineer - Security Firewall Policy is part of the Enterprise Cyber Security organization, which protects WSI systems, applications, and information assets. The Firewall Policy team governs enterprise firewall access and network segmentation, partnering with Security Engineering, Network Infrastructure, application owners, and business teams to enable secure connectivity. This is a hands-on individual contributor role with technical leadership responsibilities and no formal supervisory duties. The role coordinates the day-to-day technical work of approximately 3–5 engineers and analysts, provides guidance and mentoring, manages firewall policy project intake and priorities, and guides secure, consistent implementation of Palo Alto Networks firewall policies. The position is onsite in the Rocklin, California office Monday through Thursday.

Requirements

At least 5 years of experience in network security, firewall engineering, or related information security roles.
Hands-on expertise with Palo Alto Networks firewall policies, rule lifecycle management, and troubleshooting.
Strong knowledge of TCP/IP, routing, DNS, NAT, segmentation, and enterprise application connectivity.
Experience coordinating technical workstreams, project intake, and cross-functional change activities.
Ability to lead technical decisions, resolve competing priorities, and communicate with technical and business partners.

Nice To Haves

Experience with PCI-related network segmentation and evidence collection.
Experience automating firewall policy workflows with APIs, Python, PowerShell, or similar tools.
Exposure to policy governance platforms, configuration analysis, and AI-assisted operational workflows.

Responsibilities

Coordinate the Firewall Policy team’s day-to-day technical work, providing guidance, mentoring, and escalation support without formal people-management responsibilities.
Own firewall policy project intake, assess requirements and dependencies, prioritize the backlog, coordinate delivery, and communicate status to stakeholders.
Lead review, approval coordination, implementation planning, validation, and lifecycle management of Palo Alto Networks firewall rules and access requests.
Drive policy optimization, rule recertification, cleanup of unused or overly permissive access, and continuous improvement of firewall governance.
Partner with Network Engineering and application owners to define application flows, troubleshoot connectivity, and implement least-privilege access.
Lead firewall policy work supporting network segmentation, PCI compliance, and secure separation of critical environments.
Coordinate production changes, risk reviews, maintenance windows, rollback plans, and incident-related firewall requests.
Develop repeatable processes, documentation, and automation to improve policy review, request handling, and audit readiness.
Collaborate with Security Architecture, Infrastructure, IAM, and project teams to align firewall policies with enterprise security standards.
Provide technical knowledge transfer and help develop team capabilities.

Benefits

A generous discount on all WSI brands.
A 401(k) plan and other investment opportunities.
Paid vacations, holidays, and time off to volunteer.
Health benefits, including dental and vision insurance and same-sex domestic partner benefits.
Tax-free commuter benefits.
A wellness program supporting physical, financial, and emotional health.
In-person and online learning opportunities through WSI University.
Cross-brand and cross-function career opportunities.
Resources for self-development.
Advisor (Mentor) program.
Career development workshops, learning programs, and speaker series.
Compensation may include benefits, paid time off, merit, and bonus opportunities.