REMOTE RACF Architect || Remote

REMOTE RACF Architect

12 month project
Visa- Open

" RACF database analysis, restructuring, and cleanup

User ID, group, and role rationalization

Dataset, general resource, and subsystem profile remediation

Implementation of least-privilege access controls

Elimination of orphaned and excessive access

Standardization of security naming conventions and models

Alignment of RACF controls with z/OS system configurations

Implementation of enhanced auditing, SMF logging, and monitoring controls

Support for audit findings and regulatory remediation "

Qualifications:

15+ years of z/OS security experience with progressive leadership responsibilities

Demonstrated track record architecting security solutions for large-scale enterprises

Experience presenting to and advising executive leadership and board committees

Industry certifications preferred: CISSP, CISM, IBM Certified z/OS Security Expert

Architect-level mastery of RACF / ESM security design, implementation, and governance

Expert knowledge of:

Advanced USS security architecture (UIDs, GIDs, OMVS, POSIX, superuser controls)

FACILITY, UNIXPRIV, STARTED, CSFSERV, CRYPTOZ classes and their strategic application

zFS/HFS architecture, mount security, enterprise auditing and SIEM integration

Multi-LPAR, Sysplex, and cross-platform security architecture

Extensive experience with:

Security architecture frameworks (SABSA, TOGAF, NIST CSF)

Enterprise risk management and security governance

Regulatory compliance architecture (SOX, PCI-DSS, GDPR, industry-specific regulations)"