Mainframe Security/Tools Specialist

Mainframe Security/Tools Specialist

The Financial Information Services Agency has a vacancy for a Mainframe Security/Tools Specialist reporting to the Application Security Manager. The ideal candidate should have extensive hands-on experience using CA's mainframe security software, ACF2. Candidates with equivalent experience in Top Secret or RACF are also encouraged to apply. Substitute experience includes mainframe environments (z/OS, JES2, SMP/E, TSO, IOF, JCL, IOCP/HCD), monitoring tools (TMON, Mainview, OMEGAMON), development and automation (COBOL, REXX, JCL, PROCS, CTLCARDS), and database systems (IMS, DB2). The selected candidate will be responsible for using ACF2 control access to TSO (ISPF), application data, and system files including JCL libraries, program libraries, etc. The ACF2 support staff updates the ACF2 rules based on authorization from end user agency security officers. Access is granted to sequential datasets, DB2 databases, IMS databases and transactions, LDAP, the CA-Scheduler and systems services (e.g. JES2). The team maintains the groups to which new users are added or removed. When an upgrade is made to the ACF2 product, they are responsible for testing its success. ACF2 staff is on a rotating duty roster during off-hours with remote mainframe access to handle emergencies. Other areas of responsibility include documentation of product usage and procedures; installation of certificates- end-user recertification; password rests; review of access violations; reports detailing user access; rules libraries backup and restore; ongoing product education; conforming to industry standards for product use and training new staff.

Preferred Skills - Experience using ACF2 to create security profiles, establish user-IDs, and reset passwords - Experience with Top Secret or RACF - In-depth understanding of information security policies, practices, regulatory, and industry compliance issues - Experience in responding to audit and investigatory requests securely, promptly, and accurately - Experience maintaining SSL certificates - Knowledge of role-based security models and enterprise-wide security administration - Experience working with z/OS, JES2, SMP/E, TSO, IOF, JCL, IOCP/HCD - Experience using monitoring tools such as TMON, Mainview, OMEGAMON - Experience with COBOL, REXX, JCL, PROCS, and CTLCARDS - Experience with IMS and DB2 - Familiarity with file transfer protocols such as FTPS and Connect:Direct - Experience with Rational Tools (ClearQuest and ClearCase) - Knowledge of CA Scheduler, Workload Automation dSeries, or similar tools - Familiarity with PeopleSoft PeopleTools - Strong troubleshooting experience in a production environment - Hands-on experience with enterprise-wide projects in large-scale financial/government environments - Strong understanding of standard SDLC methodologies - Excellent communication skills (oral and written), interpersonal skills, and organizational skills - Ability to adapt to changing workloads and evolving security requirements -Strong analytical thinking and problem-solving for troubleshooting security and system issues