Mainframe Logical Security Engineer

Role 1 : Mainframe Logical Security Engineer
Location - Phoenix, AZ | Plano, TX | Charlotte, NC | Richmond, VA | Jacksonville, FL | Pennington, NJ | Chicago, IL
Working Mode: Hybrid

The Role:


We are seeking a skilled Mainframe Logical Security Engineer to design, implement, and manage security controls across IBM z/OS environments. The role ensures the confidentiality, integrity, and availability of enterprise systems and data by enforcing robust access controls and complying with regulatory requirements.

Responsibilities:


Administer and maintain RACF security environment across z/OS systems


Create, modify, and revoke:


User IDs


Groups


Resource profiles


Dataset and subsystem access permissions


Implement and maintain least-privilege access controls for:


Datasets


Applications (CICS, DB2, IMS, MQ)


System resources

Security Controls & Compliance


Configure and maintain security policies aligned with enterprise standards


Perform periodic access reviews, audits, and compliance checks


Support regulatory compliance (e.g., SOX, PCI, HIPAA where applicable)


Implement data protection controls and access monitoring mechanisms

Monitoring & Incident Response


Analyze security logs and reports:


SMF records


RACF reports


SIEM alerts


Investigate:


Access violations


Unauthorized access attempts


Security incidents


Troubleshoot and resolve:


Authorization failures


RACF-related abends or access issues

Security Architecture & Integration


Secure mainframe subsystems and integrations:


CICS, DB2, IMS, MQ, TCP/IP, USS


Support integration with:


Enterprise IAM solutions


Single Sign-On (SSO) / MFA (where applicable)


Define and maintain RACF classes, profiles, and rules for system-wide protection

Encryption & Advanced Security


Support:


Digital certificates


TLS/SSL configuration


ICSF (crypto services) at a high level


Ensure secure key management and encryption practices

Required Qualifications:


Strong hands-on experience with:


RACF administration on z/OS


Deep knowledge of:


RACF profiles, classes, and dataset security


User/group management and access control models


Experience with:


SMF data analysis


Security reporting and audit tools


Strong understanding of:


z/OS security concepts and system internals

Preferred Experience:


Experience in banking or financial services environments


Exposure to:


ACF2 or Top Secret (nice to have)


SIEM tools (Splunk, QRadar, etc.)


Experience with:


Automation (REXX, Python)


Identity governance tools


Experience with enterprise-wide security transformations or IAM integration


Knowledge of Zero Trust or modern security frameworks


Experience supporting regulatory audits in large enterprises