Senior Information Security Engineer - Security Firewall Policy

Cybersecurity Jobs; Rocklin (CA); On-site; USD 100,000 - 130,000; Full time

Benefits offered by this job

Discount on Williams-Sonoma brands

401(k) plan and other investment opps

Paid vacations, holidays, and time off

Health benefits, dental and vision, DP

Tax-free commuter benefits

Wellness program

Job summary

Williams-Sonoma, Inc. in Rocklin, CA is seeking an on-site technical lead for the Firewall Policy team to strengthen enterprise security controls and PCI compliance through hands-on policy management.

You will own policy intake, manage Palo Alto Networks rules, drive governance, and collaborate with Network Engineering, IAM, Security Architecture and project teams to raise audit readiness and implement least-privilege access.

Qualifications

• 5+ years of experience in network security or related information security roles.
• Hands-on expertise with Palo Alto Networks firewall policies, rule lifecycle management, and troubleshooting.
• Strong knowledge of TCP/IP, routing, DNS, NAT, segmentation, and enterprise application connectivity.
• Experience coordinating technical workstreams, project intake, and cross-functional change activities.
• Ability to lead technical decisions, resolve competing priorities, and communicate with both technical and business partners.
• Experience with PCI-related network segmentation and evidence collection is preferred.
• Experience automating firewall policy workflows with APIs, Python, PowerShell, or similar tools is preferred.
• Onsite requirement: be in the Rocklin, CA office Monday through Thursday.

Responsibilities

• Coordinate the day-to-day technical work of the Firewall Policy team, offering guidance, mentoring, and escalation support (without formal supervisory responsibilities).
• Own firewall policy project intake by assessing requirements and dependencies, prioritizing the backlog, coordinating delivery, and communicating status to stakeholders.
• Lead the review, approval coordination, implementation planning, validation, and lifecycle management for Palo Alto Networks firewall rules and access requests.
• Drive policy optimization, including rule recertification and cleanup of unused or overly permissive access, while improving firewall governance continuously.
• Partner with Network Engineering and application owners to define application flows, troubleshoot connectivity, and implement least-privilege access.
• Support network segmentation and PCI compliance, focusing on secure separation of critical environments.
• Coordinate production changes, risk reviews, maintenance windows, rollback plans, and incident-related firewall requests.
• Develop repeatable processes, documentation, and automation that improve policy review, request handling, and audit readiness.
• Collaborate with Security Architecture, Infrastructure, IAM, and project teams to align firewall policies with enterprise security standards.
• Provide technical knowledge transfer and help develop team capabilities.

Skills

Firewall engineering

TCP/IP

Routing

DNS

NAT

Segmentation

5+ years experience

Stakeholder communication

Tools

Palo Alto Networks

APIs

Python

PowerShell

Job description

Williams-Sonoma, Inc. is building and operating enterprise security capabilities through its Enterprise Cyber Security organization, protecting systems, applications, and information assets. In Rocklin, CA, this onsite role supports secure network segmentation and compliance by leading the Firewall Policy effort with a hands-on, technical focus.

As the technical lead for the Firewall Policy team, you will coordinate firewall policy intake and delivery, manage the lifecycle of Palo Alto Networks firewall rules, and drive governance improvements that strengthen access control and audit readiness. This individual contributor position includes technical leadership without formal people-management responsibilities.

What you’ll do

• Coordinate the day-to-day technical work of the Firewall Policy team, offering guidance, mentoring, and escalation support (without formal supervisory responsibilities).
• Own firewall policy project intake by assessing requirements and dependencies, prioritizing the backlog, coordinating delivery, and communicating status to stakeholders.
• Lead the review, approval coordination, implementation planning, validation, and lifecycle management for Palo Alto Networks firewall rules and access requests.
• Drive policy optimization, including rule recertification and cleanup of unused or overly permissive access, while improving firewall governance continuously.
• Partner with Network Engineering and application owners to define application flows, troubleshoot connectivity, and implement least-privilege access.
• Support network segmentation and PCI compliance, focusing on secure separation of critical environments.
• Coordinate production changes, risk reviews, maintenance windows, rollback plans, and incident-related firewall requests.
• Develop repeatable processes, documentation, and automation that improve policy review, request handling, and audit readiness.
• Collaborate with Security Architecture, Infrastructure, IAM, and project teams to align firewall policies with enterprise security standards.
• Provide technical knowledge transfer and help develop team capabilities.

Requirements

• 5+ years of experience in network security, firewall engineering, or related information security roles.
• Hands-on expertise with Palo Alto Networks firewall policies, rule lifecycle management, and troubleshooting.
• Strong knowledge of TCP/IP, routing, DNS, NAT, segmentation, and enterprise application connectivity.
• Experience coordinating technical workstreams, project intake, and cross-functional change activities.
• Ability to lead technical decisions, resolve competing priorities, and communicate with both technical and business partners.
• Experience with PCI-related network segmentation and evidence collection is preferred.
• Experience automating firewall policy workflows with APIs, Python, PowerShell, or similar tools is preferred.
• Exposure to policy governance platforms, configuration analysis, and AI-assisted operational workflows is preferred.
• Onsite requirement: be in the Rocklin, CA office Monday through Thursday.

Technologies

• Palo Alto Networks
• TCP/IP
• DNS
• NAT
• Python
• PowerShell
• APIs

Compensation

• USD 100,000 - 130,000 per year

Benefits

• A generous discount on all WSI brands
• A 401(k) plan and other investment opportunities
• Paid vacations, holidays, and time off to volunteer
• Health benefits, dental and vision insurance, including same-sex domestic partner benefits
• Tax-free commuter benefits
• A wellness program that supports your physical, financial and emotional health

Learning and growth

• In-person and online learning opportunities through WSI University
• Cross-brand and cross-function career opportunities
• Resources for self-development
• Advisor (Mentor) program
• Career development workshops, learning programs, and speaker series