Mainframe Developer

Job Title: Mainframe Developer Location: Woodlawn/Baltimore, MD - Onsite

Role Description:
Provides agency-wide mainframe development and security engineering support to SSA s Office of Information Security, Division of Security Administration (OIS/DSA). The primary focus is the development, maintenance, and enhancement of SSA s Top Secret security environment on z/OS mainframe platforms, including JCL development, COBOL and REXX programming, automated batch job maintenance, and security risk model management. The specialist supports SSA s agency-wide security programming objectives in alignment with DISA STIG guidelines, generates audit and tracking reports, and maintains z/OS Risk Models across critical mainframe system resources, including TCPIP, FTP, WebSphere MQ, WAS, and Unix System Services. Work products include mainframe code releases, testing documentation, audit reports, and Confluence documentation updates.

Key Responsibilities:
Develop, modify, and maintain DSA s legacy Top Secret security code and z/OS Risk Models, ensuring compliance with agency-wide security requirements and DISA STIG security parameter guidelines.
Write and maintain COBOL and REXX programs, Job Control Language (JCL) jobs, and automated batch jobs to support new and existing security projects and audit reporting requirements.
Create, update, and maintain CICS Web Services in support of SSA s mainframe security infrastructure.
Update, modify, and maintain Top Secret Security screens; generate requested audit reports covering users, systems, and access to SSA resources and sensitive data within required timeframes.
Use CA-Auditor and z/OS Mainframe ISPF tools to generate z/OS system-level data reports in support of ongoing security monitoring and audit activities.
Maintain SSA s z/OS Security Risk Model as it pertains to z/OS Mainframe System resources including FTP, TCPIP, WebSphere MQ (WAS), and Unix System Services; update and maintain associated mainframe jobs and programs.
Generate periodic audit and tracking reports; deliver Software Release Change Logs and requirements documentation for every code release in coordination with the Work Order Manager (WOM).
Provide assistance with legacy Top Secret auditing and reporting, including support for audit findings remediation and documentation of resolution actions.
Document all project and task activity in JIRA prior to and after actions taken; maintain up-to-date Confluence documentation for all new and updated code releases.
Apply industry-standard mainframe development best practices and secure programmatic practices throughout all development, testing, and deployment activities.
Prepare and deliver weekly electronic work activity reports to the Work Order Manager; communicate technical developments in written and oral form to supervisory and executive audiences as requested.
Support development of testing documentation for every code release, ensuring quality and traceability of all changes to the Top-Secret security environment.

Required Qualifications:
Bachelor s degree in Computer Science, Information Systems, Information Technology, or a related technical field; equivalent experience may substitute.
5 7 years of experience in mainframe development or mainframe security engineering, with demonstrated proficiency in COBOL and REXX programming languages within IBM z/OS environments.
Hands-on experience developing, modifying, and maintaining Job Control Language (JCL) jobs and automated batch programs in a production mainframe environment.
Demonstrated experience with CA Top Secret or equivalent mainframe security software, including profile management, security screen administration, and audit report generation.
Experience using z/OS Mainframe ISPF tools and CA-Auditor or equivalent tools to generate system-level security and data reports.
Experience maintaining or supporting z/OS mainframe system resources including FTP, TCPIP, WebSphere MQ (WAS), and Unix System Services in an enterprise security context.
Working knowledge of DISA STIG security parameter guidelines as applied to mainframe and z/OS environments.
Experience with version control and code repository management using BitBucket or equivalent tools, with consistent documentation of change activity.
Experience using Jira for task tracking and Confluence for technical documentation and knowledge management across development and security operations activities.
Knowledge of industry-standard mainframe development best practices and secure programmatic practices applicable to agency-wide security systems.
Strong written and verbal communication skills, with the ability to communicate technical development activities and findings to multiple audiences including supervisory and executive staff.
Proficiency with Microsoft Office Suite including Word, PowerPoint, and Excel for reporting, status updates, and documentation deliverables.
Must be able to obtain and maintain a Public Trust or higher suitability clearance as required for access to Client mainframe systems and sensitive data.

Preferred Qualifications:
Prior experience supporting mainframe security development at a federal civilian agency, particularly within comparable large-scale COBOL/z/OS environment.
Familiarity with CICS (Customer Information Control System) Web Services development and maintenance on IBM z/OS platforms.
Experience generating, reviewing, and interpreting audit reports for user access, system resources, and sensitive data exposure within a Top Secret-managed mainframe security environment.
Working knowledge of NIST SP 800-53 security controls as they apply to mainframe and z/OS platforms, including relevant control families such as AU (Audit and Accountability), AC (Access Control), and SI (System and Information Integrity).
Experience with FISMA reporting requirements and supporting documentation related to mainframe security posture assessments.
Familiarity with DISA STIG implementation and validation processes for z/OS or IBM mainframe environments.
Experience creating and maintaining Software Release Change Logs, requirements documentation, and testing artifacts in alignment with SDLC standards.
Relevant certifications such as IBM Certified System Administrator z/OS, CompTIA Security+, or equivalent mainframe or cybersecurity credentials.
Experience with Agile or iterative development methodologies as applied to mainframe security engineering and risk model maintenance activities.