Senior Information Security Engineer - Security Firewall Policy

Williams-Sonoma, Inc.; Rocklin (CA); On-site; USD 100,000 - 130,000; Full time

Benefits offered by this job

Discount on Williams-Sonoma brands

401(k) plan

Paid vacations and holidays

Health benefits and insurance

Commuter benefits

Job summary

Williams-Sonoma, Inc. in Rocklin, CA is seeking a Senior Information Security Engineer to lead the Firewall Policy team, implementing Palo Alto Networks firewall policies and ensuring secure, least-privilege connectivity.

This hands-on, individual-contributor role guides 3–5 engineers, collaborates with network, security architecture and application owners, and focuses on policy lifecycle, audit readiness, and PCI compliance.

Qualifications

• 5+ years of experience in network security, firewall engineering, or related information security roles.
• Hands-on experience with Palo Alto Networks firewall policies, rule lifecycle management, and troubleshooting.
• Strong knowledge of TCP/IP, routing, DNS, NAT, segmentation, and enterprise application connectivity.
• Experience coordinating technical workstreams, project intake, and cross-functional change activities.
• Ability to lead technical decisions, resolve competing priorities, and communicate with technical and business partners.
• Experience with PCI-related network segmentation and evidence collection preferred.
• Experience automating firewall policy workflows with APIs, Python, PowerShell, or similar tools preferred.
• Exposure to policy governance platforms, configuration analysis, and AI-assisted operational workflows preferred.
• This role requires being onsite in the Rocklin, CA office Monday through Thursday.

Responsibilities

• Coordinate the day-to-day technical work of the Firewall Policy team, providing guidance, mentoring, and escalation support without formal people-management responsibilities.
• Own firewall policy project intake, assess requirements and dependencies, prioritize the backlog, coordinate delivery, and communicate status to stakeholders.
• Lead review, approval coordination, implementation planning, validation, and lifecycle management of Palo Alto Networks firewall rules and access requests.
• Drive policy optimization, rule recertification, cleanup of unused or overly permissive access, and continuous improvement of firewall governance.
• Partner with Network Engineering and application owners to define application flows, troubleshoot connectivity, and implement least-privilege access.
• Lead firewall policy work supporting network segmentation, PCI compliance, and secure separation of critical environments.
• Coordinate production changes, risk reviews, maintenance windows, rollback plans, and incident-related firewall requests.
• Develop repeatable processes, documentation, and automation to improve policy review, request handling, and audit readiness.
• Collaborate with Security Architecture, Infrastructure, IAM, and project teams to align firewall policies with enterprise security standards.
• Provide technical knowledge transfer and help develop team capabilities.

Skills

Palo Alto Networks

Firewall policy management

Network security

TCP/IP & routing

PCI compliance

APIs

Python

PowerShell

Change management

Stakeholder communication

Tools

Palo Alto Networks

Python

PowerShell

Job description

Job Description

About the Team

You will be part of the Enterprise Cyber Security organization responsible for protecting WSI systems, applications, and information assets. The Firewall Policy team governs enterprise firewall access and network segmentation, partnering with Security Engineering, Network Infrastructure, application owners, and business teams to enable secure connectivity.

About The Role

As a Senior Information Security Engineer - Security Firewall Policy, you will serve as the hands-on technical lead for a team of approximately 3-5 engineers and analysts. You will coordinate project intake, prioritize firewall policy work, and guide secure, consistent implementation of Palo Alto Networks firewall policies. This is an individual contributor role with technical leadership responsibilities and no formal supervisory duties.

Responsibilities

• Coordinate the day-to-day technical work of the Firewall Policy team, providing guidance, mentoring, and escalation support without formal people-management responsibilities.
• Own firewall policy project intake, assess requirements and dependencies, prioritize the backlog, coordinate delivery, and communicate status to stakeholders.
• Lead review, approval coordination, implementation planning, validation, and lifecycle management of Palo Alto Networks firewall rules and access requests.
• Drive policy optimization, rule recertification, cleanup of unused or overly permissive access, and continuous improvement of firewall governance.
• Partner with Network Engineering and application owners to define application flows, troubleshoot connectivity, and implement least-privilege access.
• Lead firewall policy work supporting network segmentation, PCI compliance, and secure separation of critical environments.
• Coordinate production changes, risk reviews, maintenance windows, rollback plans, and incident-related firewall requests.
• Develop repeatable processes, documentation, and automation to improve policy review, request handling, and audit readiness.
• Collaborate with Security Architecture, Infrastructure, IAM, and project teams to align firewall policies with enterprise security standards.
• Provide technical knowledge transfer and help develop team capabilities.

Criteria

• 5+ years of experience in network security, firewall engineering, or related information security roles.
• Hands-on expertise with Palo Alto Networks firewall policies, rule lifecycle management, and troubleshooting.
• Strong knowledge of TCP/IP, routing, DNS, NAT, segmentation, and enterprise application connectivity.
• Experience coordinating technical workstreams, project intake, and cross-functional change activities.
• Ability to lead technical decisions, resolve competing priorities, and communicate with technical and business partners.
• Experience with PCI-related network segmentation and evidence collection preferred.
• Experience automating firewall policy workflows with APIs, Python, PowerShell, or similar tools preferred.
• Exposure to policy governance platforms, configuration analysis, and AI-assisted operational workflows preferred.
• This role requires being onsite in the Rocklin, CA office Monday through Thursday.

Our Culture & Values

We believe that taking care of our people is vital to our success and we strive to offer equitable and transparent practices for all. We prioritize connection, growth, and wellbeing.

People First

Putting People First means investing in overall well-being and opportunities to grow and advance within the organization. Depending on the position and location, here are a few highlights of what benefits may be available:

Benefits

• A generous discount on all WSI brands
• A 401(k) plan and other investment opportunities
• Paid vacations, holidays, and time off to volunteer
• Health benefits, dental and vision insurance, including same-sex domestic partner benefits
• Tax-free commuter benefits
• A wellness program that supports your physical, financial and emotional health

Continued Learning

• In-person and online learning opportunities through WSI University
• Cross-brand and cross-function career opportunities
• Resources for self-development
• Advisor (Mentor) program
• Career development workshops, learning programs, and speaker series

WSI will not now or in the future commence an immigration case or "sponsor" an individual for this position (for example, H-1B or other employment-based immigration).

This role is not eligible for relocation assistance.

Williams-Sonoma, Inc. is an Equal Opportunity Employer. Williams-Sonoma, Inc. will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of the San Francisco Fair Chance Ordinance, or other applicable state or local laws and ordinances.

The expected starting pay range for this position is $100,000 - $130,000. Applicable pay ranges may differ across markets. Actual pay will be determined based on experience and other job-related factors permitted by law. In addition to competitive pay, compensation may include a variety of other components like benefits, paid time off, merit, and bonus opportunities.

About Us

Our Company

Founded in 1956, Williams-Sonoma, Inc. is the premier specialty retailer of high-quality products for the kitchen and home in the United States. Our family of brands are Williams Sonoma, Williams Sonoma Home, Pottery Barn, Pottery Barn Kids, Pottery Barn Teen, Rejuvenation, West Elm, Mark & Graham, Outward, and GreenRow. These brands are among the best known and most respected in the industry. We offer beautifully-designed, stylish and functional products for every area of the home, including the kitchen, living room, bedroom, home office, closet, laundry room and even outdoor spaces. We've seen some big changes since our first brick-and-mortar store opened more than half of a century ago. What hasn't changed is our passion for high-quality products, functional design, outstanding customer service, and enhancing the lives of our customers and the communities where we operate. Today, we're a multi-brand, multi-channel, global enterprise supported by state-of-the-art technology and some of the most talented teams in retailing - and we're always looking for new energy and ideas.