At Bath & Body Works, we believe everybody deserves to feel good. When you join us, you're part of more than an iconic fragrance and personal care brand — you become part of Gingham Nation, where people are at the center of everything we do.
We believe great associate experiences create great consumer experiences. When our associates feel supported, inspired and empowered, consumers feel it. Whether you're starting your career or building your next chapter, we invest in your growth so you can learn, lead and help create feel good moments every day.
The Network Security Architect leads on-premises, cloud, and hybrid security, with primary ownership of Palo Alto firewalls and segmentation and Fastly/HUMAN WAF and bot protection. Set strategy, standards, and roadmaps; advise on enterprise and omni-channel projects; and communicate technical decisions and business risk to engineers and executives.
Partners with Cybersecurity, Infrastructure, Networking, App/Web Development, and Incident Response. Lead projects, delegate tasks, and oversee Managed Services Partner administration, rule changes, tuning, and upgrades, validating work and providing hands-on elevation support!
Responsibilities
Primary ownership:
• Traditional Firewalls and Network Segmentation (Palo Alto): Own architecture, policy/rule governance, Panorama standards, lifecycle planning, and segmentation/micro-segmentation across stores, distribution centers, corporate, and cloud environments.
• WAF and Bot Protection (Fastly & HUMAN): Own edge security and mitigation strategy with app/web development, eCommerce, and service partners to counter attacks and malicious automation and protect the customer experience.
Project
• Guide secure designs and deployments using Zero Trust, micro-segmentation, VPNs, DNS, SASE, ASGs/NSGs, IDS/IPS, DLP, and SWG, aligned with business objectives and NIST, PCI-DSS, and SOX.
• Translate approved data classifications and flows into firewall zones and segmentation; document decisions, controls, and audit evidence.
• Partner with software and web engineers to secure CI/CD and application connectivity.
Steady-State
• Maintain and help test policies, diagrams, and standards; approve firewall, VPN gateway, load balancer, SIEM, and encryption configurations.
• Assess emerging threats, especially in retail, using threat modeling, vulnerability assessments, and testing; support incident/breach response, including high-priority, all-hands efforts.
Team Building
• Mentor and guide early-career engineers, contributing to career development and leveling discussions!
At Bath & Body Works, we believe everybody deserves to feel good. When you join us, you're part of more than an iconic fragrance and personal care brand — you become part of Gingham Nation, where people are at the center of everything we do.
We believe great associate experiences create great consumer experiences. When our associates feel supported, inspired and empowered, consumers feel it. Whether you're starting your career or building your next chapter, we invest in your growth so you can learn, lead and help create feel good moments every day.
The Network Security Architect leads on-premises, cloud, and hybrid security, with primary ownership of Palo Alto firewalls and segmentation and Fastly/HUMAN WAF and bot protection. Set strategy, standards, and roadmaps; advise on enterprise and omni-channel projects; and communicate technical decisions and business risk to engineers and executives.
Partners with Cybersecurity, Infrastructure, Networking, App/Web Development, and Incident Response. Lead projects, delegate tasks, and oversee Managed Services Partner administration, rule changes, tuning, and upgrades, validating work and providing hands-on elevation support!
Responsibilities
Primary ownership:
• Traditional Firewalls and Network Segmentation (Palo Alto): Own architecture, policy/rule governance, Panorama standards, lifecycle planning, and segmentation/micro-segmentation across stores, distribution centers, corporate, and cloud environments.
• WAF and Bot Protection (Fastly & HUMAN): Own edge security and mitigation strategy with app/web development, eCommerce, and service partners to counter attacks and malicious automation and protect the customer experience.
Project
• Guide secure designs and deployments using Zero Trust, micro-segmentation, VPNs, DNS, SASE, ASGs/NSGs, IDS/IPS, DLP, and SWG, aligned with business objectives and NIST, PCI-DSS, and SOX.
• Translate approved data classifications and flows into firewall zones and segmentation; document decisions, controls, and audit evidence.
• Partner with software and web engineers to secure CI/CD and application connectivity.
Steady-State
• Maintain and help test policies, diagrams, and standards; approve firewall, VPN gateway, load balancer, SIEM, and encryption configurations.
• Assess emerging threats, especially in retail, using threat modeling, vulnerability assessments, and testing; support incident/breach response, including high-priority, all-hands efforts.
Team Building
• Mentor and guide early-career engineers, contributing to career development and leveling discussions!
%3Ch2 style=%22margin-bottom%5C:8px;margin-top%5C:3px;%22%3E%26nbsp;%3Cspan style=%22color%5C:#365f91;font-family%5C:Calibri,sans-serif;font-size%5C:13pt;%22%3E%3Cspan style=%22font-weight%5C:normal;%22%3EQualifications%3C/span%3E%3C/span%3E%3C/h2%3E%3Cp%3E•%26nbsp;%26nbsp;%26nbsp;%26nbsp;8+ years in enterprise network security architecture, engineering, or administration.%3Cbr%3E•%26nbsp;%26nbsp;%26nbsp;%26nbsp;Deep hands-on expertise in Palo Alto firewalls, Panorama, segmentation, and WAF/bot protection (ideally Fastly/HUMAN or equivalent).%3Cbr%3E•%26nbsp;%26nbsp;%26nbsp;%26nbsp;Advanced knowledge of VPNs, DNS, ZTNA, IDS/IPS, DLP, SWG, ASGs/NSGs, protocols, authentication, and CI/CD. Experience with SIEM, security orchestration/automation, forensics, and SaaS/IaaS/PaaS security; scripting or KQL a plus.%3Cbr%3E•%26nbsp;%26nbsp;%26nbsp;%26nbsp;Proficiency with PCI-DSS, SOX, NIST, ISO/IEC 27001/27002, CMMC, GDPR, CCPA, and GLBA; familiarity with ITIL.%3Cbr%3E•%26nbsp;%26nbsp;%26nbsp;%26nbsp;Define strategy and roadmaps; guide technical design, configuration, and diagnosing; explain business risk to executives; and create clear documentation, diagrams, and standards for technical and non-technical audiences.%3Cbr%3E%26nbsp;%3C/p%3E%3Ch2 style=%22margin-bottom%5C:8px;margin-top%5C:3px;%22%3E%26nbsp;%3Cspan style=%22color%5C:#365f91;font-family%5C:Calibri,sans-serif;font-size%5C:13pt;%22%3E%3Cspan style=%22font-weight%5C:normal;%22%3EEducation%3C/span%3E%3C/span%3E%3C/h2%3E%3Cp style=%22font-family%5C:Calibri,sans-serif;font-size%5C:12pt;line-height%5C:1.25;margin-bottom%5C:8px;%22%3E%26nbsp;•%26nbsp;%26nbsp;%26nbsp;%26nbsp;Bachelor’s degree in engineering, cybersecurity, computer science, or a related field preferred; or equivalent combination or relevant education and experience.%3Cbr%3E•%26nbsp;%26nbsp;%26nbsp;%26nbsp;Relevant certifications preferred, such as Palo Alto Networks (e.g., PCNSE), CISSP, CCSP, GSEC, GDSA, Cisco, or other SANS/GIAC certifications.%3Cbr%3E%26nbsp;%3C/p%3E%3Ch2 style=%22margin-bottom%5C:8px;margin-top%5C:3px;%22%3E%26nbsp;%3Cspan style=%22color%5C:#365f91;font-family%5C:Calibri,sans-serif;font-size%5C:13pt;%22%3E%3Cspan style=%22font-weight%5C:normal;%22%3ECore Competencies%3C/span%3E%3C/span%3E%26nbsp;%3C/h2%3E%3Cul style=%22font-family%5C:Calibri,sans-serif;font-size%5C:12pt;line-height%5C:1.25;%22%3E%3Cli%3EDrives Results%3C/li%3E%3Cli%3EAction Oriented%3C/li%3E%3Cli%3ECollaborates%3C/li%3E%3Cli%3EDecision Making%3C/li%3E%3Cli%3ENimble Learning%3C/li%3E%3C/ul%3E%3Ch2 style=%22margin-bottom%5C:8px;margin-top%5C:3px;%22%3E%26nbsp;%3Cspan style=%22color%5C:#365f91;font-family%5C:Calibri,sans-serif;font-size%5C:13pt;%22%3E%3Cspan style=%22font-weight%5C:normal;%22%3EBenefits%3C/span%3E%3C/span%3E%3C/h2%3E%3Cp style=%22font-family%5C:Calibri,sans-serif;font-size%5C:12pt;line-height%5C:1.25;margin-bottom%5C:8px;%22%3EFeeling good starts with you. We invest in benefits that support your well-being, growth and future, helping you thrive as a creator of feel good — every day. Benefits for eligible associates include%5C:%3C/p%3E%3Cul style=%22font-family%5C:Calibri,sans-serif;font-size%5C:12pt;line-height%5C:1.25;%22%3E%3Cli%3ERobust medical, dental, vision and pharmacy coverage. Plus, access to our onsite wellness center and pharmacy located at the Columbus, OH home office.%3C/li%3E%3Cli%3ENo-cost mental health and well-being support through our Employee Assistance Program (EAP).%3C/li%3E%3Cli%3E401(k) with company match and Associate Stock Purchase Program with discount.%3C/li%3E%3Cli%3EOpportunity for paid time off, paid parental leave and access to family building benefits.%3C/li%3E%3Cli%3EHome, auto and pet insurance and a company-provided Care.com subscription.%3C/li%3E%3Cli%3ETuition reimbursement and scholarship opportunities for post-secondary education.%3C/li%3E%3Cli%3EEnjoy complimentary products and a 40% merchandise discount so you can experience and share the brand you love.%3C/li%3E%3Cli%3EVisit %3Ca href=%22https%5C://careers.bathandbodyworks.com/benefits%22 target=%22_blank%22%3Ebbwbenefits.com%3C/a%3E for more details.%3C/li%3E%3C/ul%3E%3Cp style=%22font-family%5C:Calibri,sans-serif;font-size%5C:12pt;line-height%5C:1.25;margin-bottom%5C:8px;%22%3EThe above statements are intended to describe the general nature and level of work being performed by people assigned to this job. They are not intended to be an exhaustive list of all responsibilities, duties and skills required.%3C/p%3E%3Cp style=%22font-family%5C:Calibri,sans-serif;font-size%5C:12pt;line-height%5C:1.25;margin-bottom%5C:8px;%22%3EWe will consider for employment all qualified applicants, including those with arrest records, conviction records, or other criminal histories, in a manner consistent with the requirements of any applicable state and local laws. Please see links%5C: %3Ca href=%22https%5C://bca.lacity.gov/sites/default/files/Uploads/fciho/FCIHO%20Notice%20to%20Applicants%20for%20Private%20Employers%20-%20English%20ADA%20Final.pdf%22 target=%22_blank%22%3ELos Angeles Fair Chance In Hiring Ordinance%3C/a%3E, %3Ca href=%22https%5C://www.phila.gov/media/20260428133610/Fair-Criminal-Records-Screening-Standards-Ordinance-amendments-2026.pdf?ogbsw7y28sd%22 target=%22_blank%22%3EPhiladelphia Fair Chance Law%3C/a%3E, %3Ca href=%22https%5C://media.api.sf.gov/documents/2025_FCO_Poster_June2025.pdf%22 target=%22_blank%22%3ESan Francisco Fair Chance Ordinance%3C/a%3E, %3Ca href=%22https%5C://agportal-s3bucket.s3.us-west-2.amazonaws.com/Civil%20Rights%20Division/Fair%20Chance%20Act/FCA-Flyer_June%202026_English_Update.pdf?VersionId=mmfHLJ9an2.w58wsyA2a.Buxej.FZ06Y%22 target=%22_blank%22 rel=%22noopener noreferrer%22%3EWashington Fair Chance Act Guide%3C/a%3E%3C/p%3E%3Cp style=%22font-family%5C:Calibri,sans-serif;font-size%5C:12pt;line-height%5C:1.25;margin-bottom%5C:8px;%22%3EWe are an equal opportunity employer. We do not make employment decisions based on an individual’s race, color, religion, gender, gender identity, national origin, citizenship, age, disability, sexual orientation, marital status, pregnancy, genetic information, protected veteran status or any other legally protected status, and we comply with all laws concerning nondiscriminatory employment practices. We are committed to providing reasonable accommodations for associates and job applicants with disabilities. Our management team is dedicated to ensuring fulfillment of this policy with respect to recruitment, hiring, placement, promotion, transfer, training, compensation, benefits, associate activities and general treatment during employment. We only hire individuals authorized for employment in the United States.%3C/p%3E%3Cp style=%22font-family%5C:Calibri,sans-serif;font-size%5C:12pt;line-height%5C:1.25;margin-bottom%5C:8px;%22%3EApplication window will close when all vacancy/vacancies are filled.%3C/p%3E %3Ch2 style=%22margin-bottom%5C:8px;margin-top%5C:3px;%22%3E%26nbsp;%3Cspan style=%22color%5C:#365f91;font-family%5C:Calibri,sans-serif;font-size%5C:13pt;%22%3E%3Cspan style=%22font-weight%5C:normal;%22%3EQualifications%3C/span%3E%3C/span%3E%3C/h2%3E%3Cp%3E•%26nbsp;%26nbsp;%26nbsp;%26nbsp;8+ years in enterprise network security architecture, engineering, or administration.%3Cbr%3E•%26nbsp;%26nbsp;%26nbsp;%26nbsp;Deep hands-on expertise in Palo Alto firewalls, Panorama, segmentation, and WAF/bot protection (ideally Fastly/HUMAN or equivalent).%3Cbr%3E•%26nbsp;%26nbsp;%26nbsp;%26nbsp;Advanced knowledge of VPNs, DNS, ZTNA, IDS/IPS, DLP, SWG, ASGs/NSGs, protocols, authentication, and CI/CD. Experience with SIEM, security orchestration/automation, forensics, and SaaS/IaaS/PaaS security; scripting or KQL a plus.%3Cbr%3E•%26nbsp;%26nbsp;%26nbsp;%26nbsp;Proficiency with PCI-DSS, SOX, NIST, ISO/IEC 27001/27002, CMMC, GDPR, CCPA, and GLBA; familiarity with ITIL.%3Cbr%3E•%26nbsp;%26nbsp;%26nbsp;%26nbsp;Define strategy and roadmaps; guide technical design, configuration, and diagnosing; explain business risk to executives; and create clear documentation, diagrams, and standards for technical and non-technical audiences.%3Cbr%3E%26nbsp;%3C/p%3E%3Ch2 style=%22margin-bottom%5C:8px;margin-top%5C:3px;%22%3E%26nbsp;%3Cspan style=%22color%5C:#365f91;font-family%5C:Calibri,sans-serif;font-size%5C:13pt;%22%3E%3Cspan style=%22font-weight%5C:normal;%22%3EEducation%3C/span%3E%3C/span%3E%3C/h2%3E%3Cp style=%22font-family%5C:Calibri,sans-serif;font-size%5C:12pt;line-height%5C:1.25;margin-bottom%5C:8px;%22%3E%26nbsp;•%26nbsp;%26nbsp;%26nbsp;%26nbsp;Bachelor’s degree in engineering, cybersecurity, computer science, or a related field preferred; or equivalent combination or relevant education and experience.%3Cbr%3E•%26nbsp;%26nbsp;%26nbsp;%26nbsp;Relevant certifications preferred, such as Palo Alto Networks (e.g., PCNSE), CISSP, CCSP, GSEC, GDSA, Cisco, or other SANS/GIAC certifications.%3Cbr%3E%26nbsp;%3C/p%3E%3Ch2 style=%22margin-bottom%5C:8px;margin-top%5C:3px;%22%3E%26nbsp;%3Cspan style=%22color%5C:#365f91;font-family%5C:Calibri,sans-serif;font-size%5C:13pt;%22%3E%3Cspan style=%22font-weight%5C:normal;%22%3ECore Competencies%3C/span%3E%3C/span%3E%26nbsp;%3C/h2%3E%3Cul style=%22font-family%5C:Calibri,sans-serif;font-size%5C:12pt;line-height%5C:1.25;%22%3E%3Cli%3EDrives Results%3C/li%3E%3Cli%3EAction Oriented%3C/li%3E%3Cli%3ECollaborates%3C/li%3E%3Cli%3EDecision Making%3C/li%3E%3Cli%3ENimble Learning%3C/li%3E%3C/ul%3E%3Ch2 style=%22margin-bottom%5C:8px;margin-top%5C:3px;%22%3E%26nbsp;%3Cspan style=%22color%5C:#365f91;font-family%5C:Calibri,sans-serif;font-size%5C:13pt;%22%3E%3Cspan style=%22font-weight%5C:normal;%22%3EBenefits%3C/span%3E%3C/span%3E%3C/h2%3E%3Cp style=%22font-family%5C:Calibri,sans-serif;font-size%5C:12pt;line-height%5C:1.25;margin-bottom%5C:8px;%22%3EFeeling good starts with you. We invest in benefits that support your well-being, growth and future, helping you thrive as a creator of feel good — every day. Benefits for eligible associates include%5C:%3C/p%3E%3Cul style=%22font-family%5C:Calibri,sans-serif;font-size%5C:12pt;line-height%5C:1.25;%22%3E%3Cli%3ERobust medical, dental, vision and pharmacy coverage. Plus, access to our onsite wellness center and pharmacy located at the Columbus, OH home office.%3C/li%3E%3Cli%3ENo-cost mental health and well-being support through our Employee Assistance Program (EAP).%3C/li%3E%3Cli%3E401(k) with company match and Associate Stock Purchase Program with discount.%3C/li%3E%3Cli%3EOpportunity for paid time off, paid parental leave and access to family building benefits.%3C/li%3E%3Cli%3EHome, auto and pet insurance and a company-provided Care.com subscription.%3C/li%3E%3Cli%3ETuition reimbursement and scholarship opportunities for post-secondary education.%3C/li%3E%3Cli%3EEnjoy complimentary products and a 40% merchandise discount so you can experience and share the brand you love.%3C/li%3E%3Cli%3EVisit %3Ca href=%22https%5C://careers.bathandbodyworks.com/benefits%22 target=%22_blank%22%3Ebbwbenefits.com%3C/a%3E for more details.%3C/li%3E%3C/ul%3E%3Cp style=%22font-family%5C:Calibri,sans-serif;font-size%5C:12pt;line-height%5C:1.25;margin-bottom%5C:8px;%22%3EThe above statements are intended to describe the general nature and level of work being performed by people assigned to this job. They are not intended to be an exhaustive list of all responsibilities, duties and skills required.%3C/p%3E%3Cp style=%22font-family%5C:Calibri,sans-serif;font-size%5C:12pt;line-height%5C:1.25;margin-bottom%5C:8px;%22%3EWe will consider for employment all qualified applicants, including those with arrest records, conviction records, or other criminal histories, in a manner consistent with the requirements of any applicable state and local laws. Please see links%5C: %3Ca href=%22https%5C://bca.lacity.gov/sites/default/files/Uploads/fciho/FCIHO%20Notice%20to%20Applicants%20for%20Private%20Employers%20-%20English%20ADA%20Final.pdf%22 target=%22_blank%22%3ELos Angeles Fair Chance In Hiring Ordinance%3C/a%3E, %3Ca href=%22https%5C://www.phila.gov/media/20260428133610/Fair-Criminal-Records-Screening-Standards-Ordinance-amendments-2026.pdf?ogbsw7y28sd%22 target=%22_blank%22%3EPhiladelphia Fair Chance Law%3C/a%3E, %3Ca href=%22https%5C://media.api.sf.gov/documents/2025_FCO_Poster_June2025.pdf%22 target=%22_blank%22%3ESan Francisco Fair Chance Ordinance%3C/a%3E, %3Ca href=%22https%5C://agportal-s3bucket.s3.us-west-2.amazonaws.com/Civil%20Rights%20Division/Fair%20Chance%20Act/FCA-Flyer_June%202026_English_Update.pdf?VersionId=mmfHLJ9an2.w58wsyA2a.Buxej.FZ06Y%22 target=%22_blank%22 rel=%22noopener noreferrer%22%3EWashington Fair Chance Act Guide%3C/a%3E%3C/p%3E%3Cp style=%22font-family%5C:Calibri,sans-serif;font-size%5C:12pt;line-height%5C:1.25;margin-bottom%5C:8px;%22%3EWe are an equal opportunity employer. We do not make employment decisions based on an individual’s race, color, religion, gender, gender identity, national origin, citizenship, age, disability, sexual orientation, marital status, pregnancy, genetic information, protected veteran status or any other legally protected status, and we comply with all laws concerning nondiscriminatory employment practices. We are committed to providing reasonable accommodations for associates and job applicants with disabilities. Our management team is dedicated to ensuring fulfillment of this policy with respect to recruitment, hiring, placement, promotion, transfer, training, compensation, benefits, associate activities and general treatment during employment. We only hire individuals authorized for employment in the United States.%3C/p%3E%3Cp style=%22font-family%5C:Calibri,sans-serif;font-size%5C:12pt;line-height%5C:1.25;margin-bottom%5C:8px;%22%3EApplication window will close when all vacancy/vacancies are filled.%3C/p%3E
