Mainframe Security Engineer

Security Engineer: EZ Mainframe Security Tooling Team

Client is a leading global financial services firm providing a wide range of investment banking, securities, investment management and wealth management services. Client advises, originate, trade, manage and distribute capital for governments, institutions, and individuals. As a market leader, the talent and passion of client’s people is critical to client success. Together, client shares a common set of values rooted in integrity, excellence, and strong team ethic. Client provides candidates a superior foundation for building a professional career where you can learn, achieve, and grow.

Enterprise Technology & Services (ETS) delivers shared technology services for the Firm supporting all business applications and end users. ETS provides capabilities for all stages of the firm's software development lifecycle, enabling productive coding, functional and integration testing, application releases, and ongoing monitoring and support for over 3,000 production applications. The Enterprise Z Security team in ETS is responsible for engineering and managing various mainframe authentication and authorization systems.

This position is for a senior engineer in Tooling and Project team responsible to design and execute projects aligned to TopSecret security products and other platform integration solutions. The ideal candidate will be working closely with other infrastructure teams (CICS, Systems Programming, Db2, etc.) and business supporting technologists. The candidate should have a strong analytical, organizational and communication skills. The role requires periodic on-call support and maintenance outside of normal working hours as needed to support and resolve security issues.

Duties and responsibilities will include but are not limited to the following:

• Engineering support of MS Enterprise Z Mainframe Security products (CA/Broadcom-TSS, CA/Broadcom-Compliance Manager, IBM-RACF, IBM-ZSecure suite, TSS Admin Express) and project initiatives
• Design / support Firm’s Enterprise Z mainframe initiatives related to encryption, authentication, and authorization (Kerberos, Digital Certificates, Encryption, Pass tickets, and entitlement provision)
• Interaction with technology teams such as Systems Programming, DBA, CICS/MQ Support, etc.
• Scheduling/coordination and post implementation validation of software/OS upgrades/patches
• Leverage new technology features within new releases of security software products currently installed and integrate into client environment.
• Develop technical solutions to business problems based upon security best practices.
• Develop automation, tooling, reports, utilities, and batch programs.
• Troubleshoot and track issue tickets with various vendors.
• Participate in an on-call rotation and address questions / issues.
• Coordinate with Security Management team to review security proposals and assess technical feasibility.

Required Qualifications:

• College graduate with 5 plus years related work experience on the mainframe
• Experience with Mainframe security software configuration/ internals (Broadcom/CA-TSS)
• Ability to program in a command Mainframe batch and reporting languages (C, JCL, and REXX)
• Experience with distributed technology (such as: UNIX, USS file systems)
• Experience with z/OS utilities and facilities (such as: ISPF, TSO, SDSF, JES)
• Experience with database technology (such as: Sybase, DB2, SQL)
• Capable of working independently with limited oversight
• Good project planning, organization, time management skills and ability to multi-task
• MS Office business application experience (Excel, Word, Access, Power Point)
• Excellent verbal and written communication skills
• Must be a team player and foster a team first environment and culture

Desired Qualifications:

• Knowledge of PKI and experience working with the implementation and support of digital certificates, Kerberos, SSL, SSH Knowledge of PERL, shell scripting, OpenSSL, SSH.
• Systems Programming skills (such as: SMP, SYS1 datasets, assembler language programming)
• Mainframe Network knowledge
• Experience with middleware (such as: MQ Series, etc.