Description

We are seeking a skilled Mainframe Logical Security Engineer to manage and support logical security on IBM z/OS mainframe environments. The ideal candidate will have experience with mainframe security products such as RACF, ACF2, or Top Secret, and a strong understanding of access management, compliance, and security best practices.

Key Responsibilities

• Administer and maintain IBM z/OS security environments.
• Manage user IDs, groups, roles, and resource permissions.
• Configure and administer security products such as:
  • RACF (Resource Access Control Facility)
  • CA ACF2
  • CA Top Secret
• Implement and maintain password policies, Multi-Factor Authentication (MFA), and security controls.
• Perform access reviews, user provisioning, deprovisioning, and entitlement management.
• Monitor security violations and investigate unauthorized access attempts.
• Analyze SMF records and security logs for auditing and compliance.
• Support compliance initiatives (SOX, PCI-DSS, HIPAA, GDPR, ISO 27001, etc.).
• Collaborate with auditors during internal and external security audits.
• Develop and maintain security documentation, standards, and operating procedures.
• Support disaster recovery and business continuity planning from a security perspective.
• Automate routine security administration tasks using REXX, JCL, or other scripting tools.
• Work closely with application teams, infrastructure teams, and IAM teams to resolve security issues.
• Participate in security assessments, vulnerability remediation, and incident response activities.

Required Skills

• Strong knowledge of IBM z/OS operating system.
• Hands-on experience with RACF, ACF2, or Top Secret.
• Knowledge of:
  • TSO/ISPF
  • JCL
  • SDSF
  • JES2/JES3
  • VSAM
  • SMF
• Understanding of mainframe authentication and authorization concepts.
• Experience with security administration, user lifecycle management, and access control.
• Familiarity with Identity and Access Management (IAM) principles.
• Experience analyzing security logs and audit reports.
• Basic scripting skills using REXX, CLIST, or automation tools.
• Strong troubleshooting and problem-solving skills.

Preferred Skills

• Experience with IBM zSecure or similar compliance tools.
• Knowledge of IBM Z MFA implementation.
• Familiarity with LDAP, Active Directory integration, or enterprise IAM solutions.
• Experience with SIEM platforms such as Splunk or QRadar.
• Knowledge of DevSecOps practices in mainframe environments.
• Understanding of encryption, digital certificates, and PKI.
• Cloud security integration with hybrid mainframe environments is a plus.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• 3–8+ years of experience in IBM Mainframe Security Administration.
• Relevant certifications are a plus, such as:
  • IBM Security certifications
  • IBM z/OS certifications
  • CISSP
  • CISA
  • Security+

Key Competencies

• Analytical thinking
• Attention to detail
• Risk assessment and mitigation
• Communication and collaboration
• Incident management
• Documentation skills
• Time management
• Customer-focused approach

Typical Tools & Technologies

• IBM z/OS
• RACF / ACF2 / CA Top Secret
• TSO/ISPF
• JCL
• SDSF
• REXX
• SMF
• IBM zSecure
• IBM Z MFA
• Splunk / QRadar
• LDAP / Active Directory
• ServiceNow (for access requests and ticketing)

Key Skills

Education

Any Graduate