Mainframe Logical Security Engineer

Who We AreAt Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day. So why work at Kyndryl? We are always moving forward – always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities.The RoleJob DescriptionWe are seeking a skilled Mainframe Logical Security Engineer to design, implement, and manage security controls across IBM z/OS environments. The role ensures the confidentiality, integrity, and availability of enterprise systems and data by enforcing robust access controls and complying with regulatory requirements.This role requires employees to live in or around thePlano, TX, Charlotte, NC, Richmond, VA, Jacksonville, FL, Pennington, NJ, Chicago, ILarea. You will be responsible to be onsite 3 days a week. We will consider candidates who are willing to relocate to any of these areas. Responsibilities Include:Administer and maintain RACF security environment across z/OS systemsCreate, modify, and revoke:User IDsGroupsResource profilesDataset and subsystem access permissionsImplement and maintain least-privilege access controls for:DatasetsApplications (CICS, DB2, IMS, MQ)System resourcesSecurity Controls & ComplianceConfigure and maintain security policies aligned with enterprise standardsPerform periodic access reviews, audits, and compliance checksSupport regulatory compliance (e.g., SOX, PCI, HIPAA where applicable)Implement data protection controls and access monitoring mechanismsMonitoring & Incident ResponseAnalyze security logs and reports:SMF recordsRACF reportsSIEM alertsInvestigate:Access violationsUnauthorized access attemptsSecurity incidentsTroubleshoot and resolve:Authorization failuresRACF-related abends or access issuesSecurity Architecture & IntegrationSecure mainframe subsystems and integrations:CICS, DB2, IMS, MQ, TCP/IP, USSSupport integration with:Enterprise IAM solutionsSingle Sign-On (SSO) / MFA (where applicable)Define and maintain RACF classes, profiles, and rules for system-wide protectionEncryption & Advanced SecuritySupport:Digital certificatesTLS/SSL configurationICSF (crypto services) at a high levelEnsure secure key management and encryption practicesOne of the benefits of Kyndryl is that we work with clients in a variety of industries, from banking to retail. Whether you want to broaden your knowledge base or narrow your scope and specialize in a specific sector, you can find your opportunity here. You’ll also get the chance to share your expertise by recommending modernization options, identifying new business opportunities, and cultivating relationships with other teams and stakeholders. Does the work get challenging at times? Yes! But you’ll collaborate with a diverse group of talented people and gain invaluable management and organizational skills, which will come in handy as you move forward in your career.Your future at KyndrylEvery position at Kyndryl offers a way forward to grow your career, from Junior System Administrator to Architect. We have opportunities for Cloud Hyperscalers that you won’t find anywhere else, including hands-on experience, learning opportunities, and the chance to certify in all four major platforms. One of the benefits of Kyndryl is that we work with clients in a variety of industries, from banking to retail. Whether you want to broaden your knowledge base or narrow your scope and specialize in a specific sector, you can find your opportunity here.Kyndryl currently does not require employees to be fully vaccinated against COVID-19, however, if you are hired to work at a client, customer, or partner location, you may be required to show proof of vaccination to align with their respective COVID-19 vaccination policies. Those who believe they are eligible may apply for a medical or religious accommodation prior to the start of employment.Who You AreYou’re good at what you do and possess the required experience to prove it. However, equally as important – you have a growth mindset; keen to drive your own personal and professional development. You are customer-focused – someone who prioritizes customer success in their work. And finally, you’re open and borderless – naturally inclusive in how you work with others.Required Qualifications:Strong hands-on experience with:RACF administration on z/OSDeep knowledge of:RACF profiles, classes, and dataset securityUser/group management and access control modelsExperience with:SMF data analysisSecurity reporting and audit toolsStrong understanding of:z/OS security concepts and system internalsPreferred Experience:Experience in banking or financial services environmentsExposure to:ACF2 or Top Secret (nice to have)SIEM tools (Splunk, QRadar, etc.)Experience with:Automation (REXX, Python)Identity governance toolsExperience with enterprise-wide security transformations or IAM integrationKnowledge of Zero Trust or modern security frameworksExperience supporting regulatory audits in large enterprisesBeing YouDiversity is a whole lot more than what we look like or where we come from, it’s how we think and who we are. We welcome people of all cultures, backgrounds, and experiences. But we’re not doing it single-handily: Our Kyndryl Inclusion Networks are only one of many ways we create a workplace where all Kyndryls can find and provide support and advice. This dedication to welcoming everyone into our company means that Kyndryl gives you – and everyone next to you – the ability to bring your whole self to work, individually and collectively, and support the activation of our equitable culture. That’s the Kyndryl Way.What You Can ExpectWith state-of-the-art resources and Fortune 100 clients, every day is an opportunity to innovate, build new capabilities, new relationships, new processes, and new value. Kyndryl cares about your well-being and prides itself on offering benefits that give you choice, reflect the diversity of our employees and support you and your family through the moments that matter – wherever you are in your life journey. Our employee learning programs give you access to the best learning in the industry to receive certifications, including Microsoft, Google, Amazon, Skillsoft, and many more. Through our company-wide volunteering and giving platform, you can donate, start fundraisers, volunteer, and search over 2 million non-profit organizations. At Kyndryl, we invest heavily in you, we want you to succeed so that together, we will all succeed.Get Referred!If you know someone that works at Kyndryl, when asked ‘How Did You Hear About Us’ during the application process, select ‘Employee Referral’ and enter your contact's Kyndryl email address.SummaryLocation: Phoenix, AZ, USA; VA, USA; Research Triangle Park, NC, USA; CIO KPop-Dallas (US152527); Chicago, IL, USA; Newark, DE, USA; FL, USAType: Full time