Security Architect

At Bath & Body Works, we believe everybody deserves to feel good. When you join us, you're part of more than an iconic fragrance and personal care brand — you become part of Gingham Nation, where people are at the center of everything we do.

We believe great associate experiences create great consumer experiences. When our associates feel supported, inspired and empowered, consumers feel it. Whether you're starting your career or building your next chapter, we invest in your growth so you can learn, lead and help create feel good moments every day.

The Network Security Architect leads on-premises, cloud, and hybrid security, with primary ownership of Palo Alto firewalls and segmentation and Fastly/HUMAN WAF and bot protection. Set strategy, standards, and roadmaps; advise on enterprise and omni-channel projects; and communicate technical decisions and business risk to engineers and executives.

Partners with Cybersecurity, Infrastructure, Networking, App/Web Development, and Incident Response. Lead projects, delegate tasks, and oversee Managed Services Partner administration, rule changes, tuning, and upgrades, validating work and providing hands-on elevation support!

Responsibilities

Primary ownership\:
• Traditional Firewalls and Network Segmentation (Palo Alto)\: Own architecture, policy/rule governance, Panorama standards, lifecycle planning, and segmentation/micro-segmentation across stores, distribution centers, corporate, and cloud environments.
• WAF and Bot Protection (Fastly & HUMAN)\: Own edge security and mitigation strategy with app/web development, eCommerce, and service partners to counter attacks and malicious automation and protect the customer experience.

Project
• Guide secure designs and deployments using Zero Trust, micro-segmentation, VPNs, DNS, SASE, ASGs/NSGs, IDS/IPS, DLP, and SWG, aligned with business objectives and NIST, PCI-DSS, and SOX.
• Translate approved data classifications and flows into firewall zones and segmentation; document decisions, controls, and audit evidence.
• Partner with software and web engineers to secure CI/CD and application connectivity.

Steady-State
• Maintain and help test policies, diagrams, and standards; approve firewall, VPN gateway, load balancer, SIEM, and encryption configurations.
• Assess emerging threats, especially in retail, using threat modeling, vulnerability assessments, and testing; support incident/breach response, including high-priority, all-hands efforts.

Team Building
• Mentor and guide early-career engineers, contributing to career development and leveling discussions!