Williams-Sonoma
Senior Information Security Engineer - Security Firewall Policy
Rocklin, California · Posted today
Opens ehac.fa.us6.oraclecloud.com
Get a version of your resume written for this job.
- Salary
- Not listed
- Job type
- Full-time
- Work mode
- Not specified
- Source
- Oracle (employer's hiring system)
Skills mentioned
Python, TCP/IP, IAM
About the role
About the Team
You will be part of the Enterprise Cyber Security organization responsible for protecting WSI systems, applications, and information assets. The Firewall Policy team governs enterprise firewall access and network segmentation, partnering with Security Engineering, Network Infrastructure, application owners, and business teams to enable secure connectivity.
About the Role
As a Senior Information Security Engineer - Security Firewall Policy, you will serve as the hands-on technical lead for a team of approximately 3-5 engineers and analysts. You will coordinate project intake, prioritize firewall policy work, and guide secure, consistent implementation of Palo Alto Networks firewall policies. This is an individual contributor role with technical leadership responsibilities and no formal supervisory duties.
Responsibilities
Coordinate the day-to-day technical work of the Firewall Policy team, providing guidance, mentoring, and escalation support without formal people-management responsibilities.
Own firewall policy project intake, assess requirements and dependencies, prioritize the backlog, coordinate delivery, and communicate status to stakeholders.
Lead review, approval coordination, implementation planning, validation, and lifecycle management of Palo Alto Networks firewall rules and access requests.
Drive policy optimization, rule recertification, cleanup of unused or overly permissive access, and continuous improvement of firewall governance.
Partner with Network Engineering and application owners to define application flows, troubleshoot connectivity, and implement least-privilege access.
Lead firewall policy work supporting network segmentation, PCI compliance, and secure separation of critical environments.
Coordinate production changes, risk reviews, maintenance windows, rollback plans, and incident-related firewall requests.
Develop repeatable processes, documentation, and automation to improve policy review, request handling, and audit readiness.
Collaborate with Security Architecture, Infrastructure, IAM, and project teams to align firewall policies with enterprise security standards.
Provide technical knowledge transfer and help develop team capabilities.
Criteria
5+ years of experience in network security, firewall engineering, or related information security roles.
Hands-on expertise with Palo Alto Networks firewall policies, rule lifecycle management, and troubleshooting.
Strong knowledge of TCP/IP, routing, DNS, NAT, segmentation, and enterprise application connectivity.
Experience coordinating technical workstreams, project intake, and cross-functional change activities.
Ability to lead technical decisions, resolve competing priorities, and communicate with technical and business partners.
Experience with PCI-related network segmentation and evidence collection preferred.
Experience automating firewall policy workflows with APIs, Python, PowerShell, or similar tools preferred.
Exposure to policy governance platforms, configuration analysis, and AI-assisted operational workflows preferred.
This role requires being onsite in the Rocklin, CA office Monday through Thursday.
Our Culture & Values
We believe that taking care of our people is vital to our success and we strive to offer equitable and transparent practices for all. We prioritize connection, growth, and wellbeing.
People First
Putting People First means investing in overall well-being and opportunities to grow and advance within the organization. Depending on the position and location, here are a few highlights of what benefits may be available:
Benefits
A generous discount on all WSI brands
A 401(k) plan and other investment opportunities
Paid vacations, holidays, and time off to volunteer
Health benefits, dental and vision insurance, including same-sex domestic partner benefits
Tax-free commuter benefits
A wellness program that supports your physical, financial and emotional health
Continued Learning
In-person and online learning opportunities through WSI University
Cross-brand and cross-function career opportunities
Resources for self-development
Advisor (Mentor) program
Career development workshops, learning programs, and speaker series
WSI will not now or in the future commence an immigration case or "sponsor" an individual for this position (for example, H-1B or other employment-based immigration).
This role is not eligible for relocation assistance.
Williams-Sonoma, Inc. is an Equal Opportunity Employer. Williams-Sonoma, Inc. will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of the San Francisco Fair Chance Ordinance, or other applicable state or local laws and ordinances.
The expected starting pay range for this position is $100,000 - $130,000. Applicable pay ranges may differ across markets. Actual pay will be determined based on experience and other job-related factors permitted by law. In addition to competitive pay, compensation may include a variety of other components like benefits, paid time off, merit, and bonus opportunities.
Job ID or-ehac-fa-us6-oraclecloud-com-cx-1-20680 · Original posting ↗
Visa sponsorship history
- 10 H-1B petitions approved for WILLIAMS SONOMA INC in fiscal year 2023 (USCIS).
From public government data. It shows this employer has sponsored workers before, not that this job offers sponsorship: check the job ad or ask the employer. More visa-friendly jobs
Similar jobs
Information Security Engineer - Security OperationsNewWilliams-SonomaRocklin, California
Information Security Engineer - Security OperationsNewWilliams-SonomaRocklin, California
Information Security Engineer - SOC and Incident ResponseNewWilliams-SonomaSan Jose, California
Information Security Engineer - DevSecOpsNewWilliams-SonomaRocklin, California
Information Security Engineer - Cyber Threat IntelligenceNewWilliams-SonomaSan Francisco, California