Senior Engineer- Senior Engineer 2- Firewall Policy Man

Publix Super Markets, Inc. is the largest privately-owned food retailer in the nation with more than 1,200 stores and more than 200,000 associates throughout the Southeast. We are associate-owned, proud of our family atmosphere, and consistently named as one of the best companies to work for in America. We are largely debt-free and renowned for our financial performance as well as our premier customer service. Publixs Information Services (I/S) department is located in Lakeland, Florida and Alpharetta, Georgia and employs over 1000 associates. I/S provides the information technology required for all Publix business units including retail stores and all office and warehouse environments. The Publix I/S mission is to maximize the value of information technology to Publix associates and customers. The job responsibilities for this position are:

• implement enterprise network security segmentation policies including micro-segmentation of applications and systems as well as zone-based segmentation of areas of the network with the goal of discovery and disruption of lateral threat actor movement,
• design and implement firewall policies using industry best practices in an enterprise environment,
• participate in security and compliance audits, assessments, and remediation efforts to ensure Publix is meeting all regulatory requirements,
• develop security compliance metrics for senior management,
• consultation with application SMEs on firewall policy design and compliance,
• develop standards, best practices, processes, and support guides for firewall policy management,
• identify issues that conflict with security and compliance requirements; work with system owners, architects, and auditors to define and execute action plans to address root causes,
• foster and maintain working relationships with internal customers to provide technical solutions to business problems,
• provide off hours or on-call support as needed.

• must have a bachelors degree in management information systems, computer science, or equivalent analytical discipline, or equivalent experience,
• must have knowledge and understanding of Zero Trust Architecture and Enterprise Network Security Segmentation, to include micro-segmentation and macro-segmentation using security zones
• must have at least 2 years (4 years for SR. 2) enterprise firewall policy management experience with Checkpoint, VMware Distributed firewalls and/or Palo Alto firewalls,
• must have good knowledge and understanding of network and security technologies,
• must demonstrate ability to work under minimal supervision,
• must have strong analytical, problem-solving, and conceptual skills.

• advanced degree in computer science or equivalent analytical discipline, or equivalent experience,
• 5 years of enterprise firewall policy management experience with Checkpoint, VMware Distributed firewalls and/or Palo Alto firewalls,
• 1 years of experience with Publix,
• firewall policy management experience with Tufin,
• multiple certifications in networking or security,
• experience with compliance and regulatory security requirements (SOX, PCI, HIPAA),
• 1 year of automation/scripting experience in any of the following: Azure DevOps, Python, Ansible, PowerShell, Yaml, Terraform
• experience with hybrid public/private cloud, micro-segmentation, and Infrastructure as Code (IaC) security technologies.

• Employee stock ownership plan that contributes Publix stock to associates each year at no cost
• An opportunity to purchase additional shares of our privately-held stock
• 401(k) retirement savings plan
• Group health plan (with prescription benefits)
• Group dental plan
• Group vision plan
• Sick pay
• Paid Parental Leave
• Long-term disability insurance
• Company-paid life insurance (with accidental death & dismemberment benefits)
• Tuition reimbursement
• Vacation pay
• Free hot lunches (buffet-style) at facilities with a cafeteria
• Paycheck direct deposit
• Credit union
• Access to over 50 discount offers including discounts on computer, vehicle and wireless purchases
• 6 paid holidays (associates can exchange the following holidays with their managers approval: New Years Day, Memorial Day, Fourth of July, and Labor Day).