Drive secure network segmentation and firewall compliance as a hands-on technical lead for the Firewall Policy team.

Coordinate day-to-day technical execution for the Firewall Policy team, including guidance, mentoring, and escalation support (no formal people-management responsibilities).
Own firewall policy project intake: assess requirements and dependencies, prioritize the backlog, coordinate delivery, and communicate progress to stakeholders.
Lead review and approval coordination, implementation planning, validation, and lifecycle management for Palo Alto Networks firewall rules and related access requests.
Improve firewall governance through policy optimization, rule recertification, and cleanup of unused or overly permissive access.
Partner with Network Engineering and application owners to define application flows, troubleshoot connectivity, and implement least-privilege access.
Deliver firewall policy work that supports network segmentation, PCI compliance, and secure separation of critical environments.
Coordinate production change activity, including risk reviews, maintenance windows, rollback plans, and incident-related firewall requests.
Create repeatable processes, documentation, and automation to enhance policy review, request handling, and audit readiness.
Collaborate with Security Architecture, Infrastructure, IAM, and project teams to align firewall policies with enterprise security standards.
Provide technical knowledge transfer and support the development of team capabilities.

5+ years of experience in network security, firewall engineering, or related information security roles.
Hands-on expertise with Palo Alto Networks firewall policies, rule lifecycle management, and troubleshooting.
Strong knowledge of TCP/IP, routing, DNS, NAT, segmentation, and enterprise application connectivity.
Experience coordinating technical workstreams, project intake, and cross-functional change initiatives.
Ability to lead technical decisions, resolve competing priorities, and communicate clearly with technical and business partners.
PCI-related network segmentation and evidence collection experience preferred.
Automation experience for firewall policy workflows using APIs, Python, PowerShell, or similar tools preferred.
Exposure to policy governance platforms, configuration analysis, and AI-assisted operational workflows preferred.
Onsite requirement: located in Rocklin, CA; onsite Monday through Thursday.

Enterprise Cyber Security organization responsible for protecting WSI systems, applications, and information assets.
Firewall Policy team governs enterprise firewall access and network segmentation, partnering with Security Engineering, Network Infrastructure, application owners, and business teams to enable secure connectivity.

Generous discount on all WSI brands
401(k) plan and other investment opportunities
Paid vacations, holidays, and time off to volunteer
Health benefits, dental and vision insurance, including same-sex domestic partner benefits
Tax-free commuter benefits
Wellness program supporting physical, financial, and emotional health

Compensation: USD 100,000 - 130,000 per year.

Senior Information Security Engineer - Security Firewall Policy

Job Description