RACF Engineer

Job Title: RACF Engineer
Location: Remote
Duration: 12-18+ Months Contract
Client: Morgan Stanley
Rate: 60 on c2c
We are NOT looking an Architect here
Job Description
RACF database analysis, restructuring, and cleanup
User ID, group, and role rationalization
Dataset, general resource, and subsystem profile remediation
Implementation of least-privilege access controls
Elimination of orphaned and excessive access
Standardization of security naming conventions and models
Alignment of RACF controls with z/OS system configurations
Implementation of enhanced auditing, SMF logging, and monitoring controls
Support for audit findings and regulatory remediation "
"Qualifications:
15+ years of z/OS security experience with progressive leadership responsibilities
Demonstrated track record architecting security solutions for large-scale enterprises
Experience presenting to and advising executive leadership and board committees
Industry certifications preferred: CISSP, CISM, IBM Certified z/OS Security Expert
Architect-level mastery of RACF / ESM security design, implementation, and governance
Expert knowledge of:
Advanced USS security architecture (UIDs, GIDs, OMVS, POSIX, superuser controls)
FACILITY, UNIXPRIV, STARTED, CSFSERV, CRYPTOZ classes and their strategic application zFS/HFS architecture, mount security, enterprise auditing and SIEM integration
Multi-LPAR, Sysplex, and cross-platform security architecture
Extensive experience with:
Security architecture frameworks (SABSA, TOGAF, NIST CSF)
Enterprise risk management and security governance
Regulatory compliance architecture (SOX, PCI-DSS, GDPR, industry-specific regulations)"