FedRAMP Security Consultant

Senior IBM Connect: Direct Security Consultant Remote Long Term

We are looking for an experienced IBM Connect: Direct Security Consultant to support a security assessment engagement for a large US enterprise mainframe environment. The consultant will lead the security review of approximately 15 z/OS LPARs, focusing on the security posture, configuration, and governance of IBM Connect: Direct. The engagement will identify security risks, validate existing configurations, and provide actionable recommendations to improve the client's security posture. This is a consulting-focused role requiring deep expertise in IBM Connect: Direct on z/OS, enterprise security controls, and mainframe security best practices.

• Perform a comprehensive security assessment of IBM Connect: Direct environments across approximately 15 z/OS LPARs.
• Validate Connect: Direct node inventory, versions, configurations, connectivity models, and operational roles.
• Review security integration with Enterprise Security Managers (RACF, ACF2, or Top Secret), including: Started Task security, Administrative authorities, Process submission permissions, Dataset access controls, Privileged operations.
• Assess authentication mechanisms and secure communications, including: TLS/SSL implementation, Digital certificate management, Secure protocol configuration, Remote node definitions, Trusted relationships, Credential management practices.
• Review Connect: Direct configuration datasets and operational settings.
• Evaluate logging, audit capabilities, monitoring, and operational security procedures.
• Identify: Excessive privileges, Weak access controls, Insecure file transfer paths, Weak or outdated cryptographic configurations, Configuration inconsistencies, Security misconfigurations.
• Analyze findings against IBM and industry security best practices.
• Develop a prioritized assessment report including findings, risk ratings, remediation recommendations, and implementation guidance.
• Present findings and recommendations to client technical stakeholders.

Required Skills & Experience Technical Expertise

• 8+ years of experience administering or securing IBM Connect: Direct for z/OS
• Strong knowledge of: IBM Connect: Direct architecture, Secure File Transfer (Managed File Transfer), Connect: Direct configuration and administration, Node definitions and process management, Deep understanding of z/OS security.
• Mainframe Security Experience with one or more Enterprise Security Managers: RACF (Preferred), CA Top Secret (TSS), CA ACF2
• Strong understanding of: Started Task security, Dataset security, Resource profiles, User provisioning, Least-privilege access models, Security auditing
• Security Technologies Experience assessing: TLS/SSL, Digital certificates, Cryptographic configurations, Secure communications, Authentication mechanisms, Authorization models, Security monitoring and audit logging

Preferred Qualifications

• Experience performing security assessments or security audits in enterprise mainframe environments.
• Familiarity with IBM z/OS infrastructure and enterprise networking.
• Knowledge of IBM security best practices for Connect: Direct.
• Experience in regulated industries such as banking, insurance, healthcare, or government.
• Security certifications (CISSP, CISA, or equivalent) are advantageous.

Deliverables

• Complete Connect: Direct security assessment
• Configuration validation report
• Security findings with risk ratings
• Prioritized remediation roadmap
• Executive summary and technical recommendations
• Knowledge transfer session with the client team

Ideal Candidate Profile

The ideal candidate is a senior mainframe security consultant with extensive hands-on experience securing IBM Connect: Direct environments. They should have a strong understanding of z/OS security architecture, Enterprise Security Managers (RACF/ACF2/TSS), secure file transfer technologies, and enterprise security governance, with the ability to translate technical findings into clear, actionable recommendations for both technical and management stakeholders.

For applications and inquiries, contact:View email address on us.fitly.work