Mainframe Logical Security Engineer

Role Responsibilities Administer and maintain the RACF security environment across z/OS systems. Create, modify, and revoke User IDs, Groups, Resource profiles, dataset and subsystem access permissions. Implement and maintain least‑privilege access controls for datasets, applications (CICS, DB2, IMS, MQ) and system resources. Configure and maintain security policies aligned with enterprise standards. Perform periodic access reviews, audits and compliance checks. Support regulatory compliance (e.g., SOX, PCI, HIPAA where applicable). Implement data protection controls and access‑monitoring mechanisms. Monitor and respond to incidents: analyze security logs and reports (SMF records, RACF reports, SIEM alerts), investigate access violations, unauthorized access attempts, and security incidents. Troubleshoot and resolve authorization failures, RACF‑related abends or access issues. Secure mainframe subsystems and integrations (CICS, DB2, IMS, MQ, TCP/IP, USS). Support integration with Enterprise IAM solutions, Single Sign‑On (SSO) and MFA (where applicable). Define and maintain RACF classes, profiles, and rules for system‑wide protection. Support encryption and advanced security: digital certificates, TLS/SSL configuration, and cryptographic services (ICSF). Ensure secure key management and encryption practices. Required Qualifications Strong hands‑on experience administering RACF on z/OS. Deep knowledge of RACF profiles, classes, dataset security, user/group management and access‑control models. Experience with SMF data analysis and security reporting/audit tools. Strong understanding of z/OS security concepts and system internals. Preferred Experience Experience in banking or financial services environments. Exposure to ACF2 or Top Secret (nice to have). Familiarity with SIEM tools (Splunk, QRadar, etc.). Experience with automation (REXX, Python) and identity governance tools. Experience with enterprise‑wide security transformations or IAM integration. Knowledge of Zero Trust or modern security frameworks. Experience supporting regulatory audits in large enterprises. #J-18808-Ljbffr 1000 Kyndryl, Inc.