Mainframe Engineer

Senior Mainframe Security Engineer

Location: Pittsburgh, PA or Lake Mary, FL preferred; remote candidates may be considered

Position Overview

A leading financial services organization is seeking a Senior Mainframe Security Engineer to support enterprise mainframe security and vulnerability management initiatives. This is a highly technical, hands-on role focused on mainframe security controls, vulnerability scanning and remediation, security database analysis, and automation.

The ideal candidate will bring extensive mainframe security experience with RACF, ACF2, and/or Top Secret (TSS), along with strong expertise in IBM zSecure, REXX, and CARLa. RACF experience is particularly valuable as the organization continues migration efforts.

Key Responsibilities

• Serve as a subject matter expert for RACF, ACF2, and Top Secret (TSS) within mainframe vulnerability management initiatives.
• Develop, mature, and automate mainframe security scanning processes.
• Create and maintain REXX-based programs and automation and schedule recurring security scans.
• Use IBM zSecure and CARLa to analyze mainframe security environments and identify vulnerabilities.
• Investigate security findings and coordinate remediation of mainframe vulnerabilities.
• Perform rescans and retesting to validate remediation and support vulnerability closure.
• Support z/OS hardening, security controls, STIG requirements, and least-privilege initiatives.
• Manage and validate user, batch, service, client, and administrative IDs.
• Partner directly with clients and internal engineering/security teams to resolve vulnerabilities and access-related issues.
• Develop process documentation, flowcharts, and materials within tools such as Confluence, JIRA, and SharePoint.
• Support and improve internal vulnerability management and security utility tools.

Required Qualifications

• Significant experience with IBM zSecure, including security auditing, analysis, and vulnerability identification.
• Proficiency with REXX for scripting, programming, and security process automation.
• Knowledge of z/OS security controls, STIG hardening, vulnerability management, and remediation practices.
• Familiarity with mainframe utilities such as IBM Syncsort and ICETOOL.
• Ability to analyze security findings, troubleshoot access issues, and validate remediation through rescanning and testing.
• Strong communication and documentation skills with the ability to collaborate with technical teams, security stakeholders, and clients.
• Bachelor’s degree or equivalent combination of education and extensive mainframe security experience.