Senior Firewall Policy Engineer: Lead Secure Network Policy

Williams-Sonoma, Inc.; Rocklin (CA); On-site; USD 100,000 - 130,000; Full time

Benefits offered by this job

Discount on Williams-Sonoma brands

401(k) plan

Paid vacations and holidays

Health benefits and insurance

Commuter benefits

Job summary

Williams-Sonoma, Inc. in Rocklin, CA is seeking a Senior Information Security Engineer to lead the Firewall Policy team, implementing Palo Alto Networks firewall policies and ensuring secure, least-privilege connectivity.

This hands-on, individual-contributor role guides 3–5 engineers, collaborates with network, security architecture and application owners, and focuses on policy lifecycle, audit readiness, and PCI compliance.

Qualifications

• 5+ years of experience in network security, firewall engineering, or related information security roles.
• Hands-on experience with Palo Alto Networks firewall policies, rule lifecycle management, and troubleshooting.
• Strong knowledge of TCP/IP, routing, DNS, NAT, segmentation, and enterprise application connectivity.
• Experience coordinating technical workstreams, project intake, and cross-functional change activities.
• Ability to lead technical decisions, resolve competing priorities, and communicate with technical and business partners.
• Experience with PCI-related network segmentation and evidence collection preferred.
• Experience automating firewall policy workflows with APIs, Python, PowerShell, or similar tools preferred.
• Exposure to policy governance platforms, configuration analysis, and AI-assisted operational workflows preferred.
• This role requires being onsite in the Rocklin, CA office Monday through Thursday.

Responsibilities

• Coordinate the day-to-day technical work of the Firewall Policy team, providing guidance, mentoring, and escalation support without formal people-management responsibilities.
• Own firewall policy project intake, assess requirements and dependencies, prioritize the backlog, coordinate delivery, and communicate status to stakeholders.
• Lead review, approval coordination, implementation planning, validation, and lifecycle management of Palo Alto Networks firewall rules and access requests.
• Drive policy optimization, rule recertification, cleanup of unused or overly permissive access, and continuous improvement of firewall governance.
• Partner with Network Engineering and application owners to define application flows, troubleshoot connectivity, and implement least-privilege access.
• Lead firewall policy work supporting network segmentation, PCI compliance, and secure separation of critical environments.
• Coordinate production changes, risk reviews, maintenance windows, rollback plans, and incident-related firewall requests.
• Develop repeatable processes, documentation, and automation to improve policy review, request handling, and audit readiness.
• Collaborate with Security Architecture, Infrastructure, IAM, and project teams to align firewall policies with enterprise security standards.
• Provide technical knowledge transfer and help develop team capabilities.

Skills

Palo Alto Networks

Firewall policy management

Network security

TCP/IP & routing

PCI compliance

APIs

Python

PowerShell

Change management

Stakeholder communication

Tools

Palo Alto Networks

Python

PowerShell

Job description

Williams-Sonoma, Inc. in Rocklin, CA is seeking a Senior Information Security Engineer to lead the Firewall Policy team, implementing Palo Alto Networks firewall policies and ensuring secure, least-privilege connectivity.

This hands-on, individual-contributor role guides 3–5 engineers, collaborates with network, security architecture and application owners, and focuses on policy lifecycle, audit readiness, and PCI compliance.