Senior Firewall Policy Engineer — Palo Alto & PCI

Cybersecurity Jobs; Rocklin (CA); On-site; USD 100,000 - 130,000; Full time

Benefits offered by this job

Discount on Williams-Sonoma brands

401(k) plan and other investment opps

Paid vacations, holidays, and time off

Health benefits, dental and vision, DP

Tax-free commuter benefits

Wellness program

Job summary

Williams-Sonoma, Inc. in Rocklin, CA is seeking an on-site technical lead for the Firewall Policy team to strengthen enterprise security controls and PCI compliance through hands-on policy management.

You will own policy intake, manage Palo Alto Networks rules, drive governance, and collaborate with Network Engineering, IAM, Security Architecture and project teams to raise audit readiness and implement least-privilege access.

Qualifications

• 5+ years of experience in network security or related information security roles.
• Hands-on expertise with Palo Alto Networks firewall policies, rule lifecycle management, and troubleshooting.
• Strong knowledge of TCP/IP, routing, DNS, NAT, segmentation, and enterprise application connectivity.
• Experience coordinating technical workstreams, project intake, and cross-functional change activities.
• Ability to lead technical decisions, resolve competing priorities, and communicate with both technical and business partners.
• Experience with PCI-related network segmentation and evidence collection is preferred.
• Experience automating firewall policy workflows with APIs, Python, PowerShell, or similar tools is preferred.
• Onsite requirement: be in the Rocklin, CA office Monday through Thursday.

Responsibilities

• Coordinate the day-to-day technical work of the Firewall Policy team, offering guidance, mentoring, and escalation support (without formal supervisory responsibilities).
• Own firewall policy project intake by assessing requirements and dependencies, prioritizing the backlog, coordinating delivery, and communicating status to stakeholders.
• Lead the review, approval coordination, implementation planning, validation, and lifecycle management for Palo Alto Networks firewall rules and access requests.
• Drive policy optimization, including rule recertification and cleanup of unused or overly permissive access, while improving firewall governance continuously.
• Partner with Network Engineering and application owners to define application flows, troubleshoot connectivity, and implement least-privilege access.
• Support network segmentation and PCI compliance, focusing on secure separation of critical environments.
• Coordinate production changes, risk reviews, maintenance windows, rollback plans, and incident-related firewall requests.
• Develop repeatable processes, documentation, and automation that improve policy review, request handling, and audit readiness.
• Collaborate with Security Architecture, Infrastructure, IAM, and project teams to align firewall policies with enterprise security standards.
• Provide technical knowledge transfer and help develop team capabilities.

Skills

Firewall engineering

TCP/IP

Routing

DNS

NAT

Segmentation

5+ years experience

Stakeholder communication

Tools

Palo Alto Networks

APIs

Python

PowerShell

Job description

Williams-Sonoma, Inc. in Rocklin, CA is seeking an on-site technical lead for the Firewall Policy team to strengthen enterprise security controls and PCI compliance through hands-on policy management.

You will own policy intake, manage Palo Alto Networks rules, drive governance, and collaborate with Network Engineering, IAM, Security Architecture and project teams to raise audit readiness and implement least-privilege access.