RACF Security Engineer/Mainframe Security Admin

Senior Mainframe Security Administrator/RACF Security Engineer.  This is a long term, remote contracting position.  Candidates must live in the United States and have a minimum of 10 years of RACF administration experience.

This role is focused on administering, securing, and supporting IBM z/OS mainframe environments. The position is responsible for managing RACF security, identity and access management processes, compliance and audit requirements, and providing advanced (Tier 3) support for security-related issues. The ideal candidate has extensive experience with RACF administration, zSecure, mainframe security controls, and regulatory compliance in large enterprise environments.

Description:

• Responsible for maintaining the mainframe security environment with experience using RACF (Resource Access Control Facility) and zSecure, while ensuring identity management processes are followed using proper user access controls to comply with and industry standards. Including but not limited to the configuration and management of User, Group, Resource (including CICS & DB2), Dataset RACF Security profiles, and modification of SETROPTS settings.
• Deep understanding of RACF required for managing access to mainframe resources and strong understanding of security concepts like access control, least privilege, and data protection and strong familiarity with mainframe system commands and utilities (TSO, ISPF, JCL, REXX)
• Provide Tier 3 support for mainframe security inquiries/service requests. Review and approve access requests based on established security policies. Ensuring robust user access controls, overseeing identity management processes, and maintaining strict adherence to compliance standards.
• Previous experience working with zSecure and ServiceNow is preferred.
• Troubleshooting: Excellent problem-solving skills to identify and resolve RACF-related issues.
• Compliance and Auditing: Familiarity with compliance requirements and auditing processes related to mainframe security.
• Communication Skills: Strong verbal and written communication skills to effectively collaborate with team members and stakeholders

Please indicate next to each line below your years of professional experience:

Overall professional experience

RACF Administration (managing User, Group, Resource, Dataset, CICS, and DB2 security profiles;  modifying and maintaining RACF SETROPTS settings; deep understanding of RACF security architecture)

Mainframe Security & Access Control (identity management, access provisioning, least-privilege principles, segregation of duties, and data protection; enforcing security policies and standards)

IBM zSecure (using zSecure for security administration, reporting, auditing, compliance monitoring, and security analysis)

z/OS Mainframe Utilities & Commands (TSO, ISPF, JCL, REXX)

IAM (reviewing and approving access requests, managing user lifecycle processes, maintaining compliance with security and governance requirements)

Compliance, Audit & Risk Management (supporting audits and regulatory requirements; security controls, audit evidence, compliance reporting, and governance standards)

Troubleshooting & Tier 3 Support (advanced problem-solving skills for RACF and mainframe security issues; investigate access problems, security violations, and system-related incidents)

ServiceNow