Senior Mainframe Security Engineer (ACF2)

Role: Senior ACF2 Security Engineer

Location: Buffalo NY / Baltimore MD / Wilmington DE / Stamford CT (Hybrid)

Type of Employment: W2 Contract

Duration: 06+ Months

Job Summary:

Seeking a Senior ACF2 Security Engineer with strong Mainframe Security/ACF2 expertise to support security administration, access governance, compliance, IAM integration, and production support within a large enterprise environment.

Key Responsibilities:

• Administer and support CA ACF2, including security rules, CPF propagation, access controls, and reporting.
• Design and manage RBAC, entitlement governance, access recertification, privileged IDs, service accounts, and batch IDs.
• Support SailPoint IIQ integration, provisioning, and identity governance issues.
• Work with CyberArk/PAM, Mainframe MFA, SSL/TLS certificates, and enterprise IAM solutions.
• Support security audits, risk remediation, compliance controls, SIEM integration, and security monitoring.
• Troubleshoot complex Mainframe security issues and provide L2 production support.
• Develop security procedures, runbooks, documentation, and audit evidence while collaborating with Cybersecurity, IAM, Infrastructure, and application teams.

Must-Have Skills:

• 8–10+ years Mainframe Security / Security Administration
• Strong CA ACF2 / ACF2 Security Administration
• z/OS Mainframe Security
• SailPoint IIQ / IAM / Identity Governance
• PAM/CyberArk
• Experience with RBAC, access reviews, privileged access, MFA, and security compliance

Nice to Have: REXX/COBOL/Assembler, Splunk/QRadar/Elastic, Zero Trust, SSL/TLS certificates, API-based IAM integrations, and Financial Services experience