IBM Connect:Direct Security Consultant

IBM Connect:Direct Security Consultant

Remote

Role Overview

The IBM Connect:Direct Security Consultant will lead a comprehensive security assessment across approximately 15 z/OS LPARs for a large US enterprise mainframe environment. The consultant will evaluate the security posture, configuration, and governance of IBM Connect:Direct, identify risks, validate existing configurations, and deliver actionable recommendations aligned with IBM and industry best practices.

This is a consulting-focused role requiring deep expertise in IBM Connect:Direct on z/OS, mainframe security, and enterprise security controls.

Responsibilities

Security Assessment & Validation

• Perform a comprehensive security assessment of IBM Connect:Direct environments across ~15 z/OS LPARs.
• Validate:
• Node inventory
• Software versions
• Configuration parameters
• Connectivity models
• Operational roles and responsibilities

Enterprise Security Manager (ESM) Integration Review

• Assess integration with RACF, ACF2, or Top Secret, including:
• Started Task security
• Administrative authorities
• Process submission permissions
• Dataset access controls
• Privileged operations

Authentication & Secure Communications

• Evaluate:
• TLS/SSL implementation
• Digital certificate management
• Secure protocol configuration
• Remote node definitions
• Trusted relationships
• Credential management practices

Configuration & Operational Review

• Review Connect:Direct configuration datasets and operational settings.
• Evaluate logging, audit capabilities, monitoring, and operational security procedures.

Risk Identification

Identify:

• Excessive privileges
• Weak access controls
• Insecure file transfer paths
• Weak/outdated cryptographic configurations
• Configuration inconsistencies
• Security misconfigurations

Analysis & Reporting

• Analyze findings against IBM and industry security best practices.
• Develop a prioritized assessment report including:
• Findings
• Risk ratings
• Remediation recommendations
• Implementation guidance
• Present findings and recommendations to client technical stakeholders.

Required Skills & Experience

Technical Expertise

• 8+ years administering or securing IBM Connect:Direct for z/OS.
• Strong knowledge of:
• IBM Connect:Direct architecture
• Managed File Transfer (MFT)
• Connect:Direct configuration & administration
• Node definitions and process management

Mainframe Security

• Experience with one or more ESMs:
• RACF (Preferred)
• CA Top Secret (TSS)
• CA ACF2
• Strong understanding of:
• Started Task security
• Dataset security
• Resource profiles
• User provisioning
• Least-privilege access models
• Security auditing

Security Technologies

Experience assessing:

• TLS/SSL
• Digital certificates
• Cryptographic configurations
• Secure communications
• Authentication & authorization models
• Security monitoring and audit logging

Preferred Qualifications

• Experience performing security assessments or audits in enterprise mainframe environments.
• Familiarity with IBM z/OS infrastructure and enterprise networking.
• Knowledge of IBM security best practices for Connect:Direct.
• Experience in regulated industries (banking, insurance, healthcare, government).
• Security certifications such as CISSP, CISA, or equivalent.

Deliverables

• Complete Connect:Direct security assessment
• Configuration validation report
• Security findings with risk ratings
• Prioritized remediation roadmap
• Executive summary and technical recommendations
• Knowledge transfer session with client team