Senior Information Security Engineer - Security Firewall Policy

About the Team

You will be part of the Enterprise Cyber Security organization responsible for protecting WSI systems, applications, and information assets. The Firewall Policy team governs enterprise firewall access and network segmentation, partnering with Security Engineering, Network Infrastructure, application owners, and business teams to enable secure connectivity.

As a Senior Information Security Engineer - Security Firewall Policy, you will serve as the hands-on technical lead for a team of approximately 3-5 engineers and analysts. You will coordinate project intake, prioritize firewall policy work, and guide secure, consistent implementation of Palo Alto Networks firewall policies. This is an individual contributor role with technical leadership responsibilities and no formal supervisory duties.

• Coordinate the day-to-day technical work of the Firewall Policy team, providing guidance, mentoring, and escalation support without formal people-management responsibilities.
• Own firewall policy project intake, assess requirements and dependencies, prioritize the backlog, coordinate delivery, and communicate status to stakeholders.
• Lead review, approval coordination, implementation planning, validation, and lifecycle management of Palo Alto Networks firewall rules and access requests.
• Drive policy optimization, rule recertification, cleanup of unused or overly permissive access, and continuous improvement of firewall governance.
• Partner with Network Engineering and application owners to define application flows, troubleshoot connectivity, and implement least-privilege access.
• Lead firewall policy work supporting network segmentation, PCI compliance, and secure separation of critical environments.
• Coordinate production changes, risk reviews, maintenance windows, rollback plans, and incident-related firewall requests.
• Develop repeatable processes, documentation, and automation to improve policy review, request handling, and audit readiness.
• Collaborate with Security Architecture, Infrastructure, IAM, and project teams to align firewall policies with enterprise security standards.
• Provide technical knowledge transfer and help develop team capabilities.

Criteria

• 5+ years of experience in network security, firewall engineering, or related information security roles.
• Hands-on expertise with Palo Alto Networks firewall policies, rule lifecycle management, and troubleshooting.
• Strong knowledge of TCP/IP, routing, DNS, NAT, segmentation, and enterprise application connectivity.
• Experience coordinating technical work streams, project intake, and cross-functional change activities.
• Ability to lead technical decisions, resolve competing priorities, and communicate with technical and business partners.
• Experience with PCI-related network segmentation and evidence collection preferred.
• Experience automating firewall policy workflows with APIs, Python, Power Shell, or similar tools preferred.
• Exposure to policy governance platforms, configuration analysis, and AI-assisted operational workflows preferred.
• This role requires being onsite in the Rocklin, CA office Monday through Thursday.

We believe that taking care of our people is vital to our success and we strive to offer equitable and transparent practices for all. We prioritize connection, growth, and wellbeing.

Putting People First means investing in overall well-being and opportunities to grow and advance within the organization. Depending on the position and location, here are a few highlights of what benefits may be available:

• A generous discount on all WSI brands
• A 401(k) plan and other investment opportunities
• Paid vacations, holidays, and time off to volunteer
• Health benefits, dental and vision insurance, including same-sex domestic partner benefits
• Tax-free commuter benefits
• A wellness program that supports your physical, financial and emotional health

• In-person and online learning opportunities through WSI University
• Cross-brand and cross-function career opportunities
• Resources for self-development
• Advisor (Mentor) program
• Career development workshops, learning programs, and speaker series

WSI will not now or in the future commence an immigration case or "sponsor" an individual for this position (for example, H-1B or other employment-based immigration).

This role is not eligible for relocation assistance.

Williams-Sonoma, Inc. is an Equal Opportunity Employer. Williams-Sonoma, Inc. will consider for…