Description

Job Description – RACF Architect

We are seeking an experienced RACF Architect with 15+ years of z/OS security experience to support a long-term engagement with a financial services client. The ideal candidate will have architect-level expertise in RACF security design, database restructuring, access control remediation, and enterprise security governance.

The candidate will be responsible for analyzing and optimizing RACF databases, rationalizing user IDs and groups, remediating dataset and general resource profiles, and implementing least-privilege security controls. Strong expertise in USS security, UID/GID management, OMVS, POSIX, FACILITY, UNIXPRIV, STARTED, CSFSERV, and CRYPTOZ is required.

The role also involves securing zFS/HFS environments, supporting Multi-LPAR and Sysplex architectures, enhancing SMF auditing and monitoring, and integrating security controls with enterprise SIEM platforms. Candidates should have experience with security architecture frameworks such as SABSA, TOGAF, and NIST CSF, along with enterprise risk management, regulatory compliance, and audit remediation.

The ideal candidate will demonstrate progressive leadership experience, the ability to architect security solutions for large-scale enterprises, and strong communication skills when presenting to executive leadership and board committees. CISSP, CISM, or IBM Certified z/OS Security Expert certifications are preferred.

Key Skills

Education

15+ years of z/OS Security experience, Progressive Leadership Experience, Enterprise Security Architecture, RACF/ESM Security Design & Governance, Large-Scale Enterprise Security Solutions, Executive Leadership & Board-Level Presentations, Advanced RACF Expertise, USS Security Architecture, Multi-LPAR & Sysplex Security, Enterprise Risk Management, Security Governance, Regulatory Compliance (SOX, PCI-DSS, GDPR), Audit Remediation, CISSP (Preferred), CISM (Preferred), IBM Certified z/OS Security Expert (Preferred).