Architecture / architect

Position Summary:The Mainframe Security team is seeking an experienced RACF Architect Consultant to join the team and lead strategic security solutioning and implementation across the IBM Z platform for a key security projects. As a consultant embedded within the Mainframe Security team, the ideal candidate will lead the assessment, scoping, and design of multiple RACF and z/OS UNIX System Services (USS) related security project solutions, translating security, audit, and business requirements into robust, forward-looking architectures.The consultant will have deep hands-on expertise with IBM RACF, IBM zSecure, and USS security, along with a strong command of the broader IBM Z security ecosystem, and the ability to define target-state designs, guide engineering teams through implementation, and ensure solutions are secure, resilient, and operationally sustainable.This engagement requires strong analytical, architectural, organizational, and communication skills, as well as the ability to work independently and influence infrastructure, security, application development, and operations teams. The role may require occasional off-hours support for project implementations, production changes, and critical security initiatives.Key Responsibilities:12+ years of related experience, with demonstrated experience as a mainframe security architect or senior engineer leading the design and delivery of enterprise RACF and USS security solutions.Expert-level, hands-on knowledge of IBM RACF and IBM zSecure, including configuration, internals, reporting, administration, and the ability to architect and design end-to-end security solutions.Deep expertise in z/OS UNIX System Services (USS) security, including UNIXPRIV, file/directory permissions, BPX resources, and the design of least-privilege USS access models.Proven ability to lead solution architecture activities—assessing current state, defining scope, producing target-state designs, and creating architecture and design documentation for RACF and USS security projects.Experience with core z/OS utilities and facilities, including TSO, ISPF, SDSF, and related operational tooling.Working knowledge of database technologies and query tools such as DB2, Sybase, and SQL.Experience implementing and supporting mainframe authentication and encryption capabilities, including digital certificates, key management, multifactor authentication, and related controls.Broad understanding of z/OS infrastructure disciplines, including systems programming, storage, networking, UNIX System Services, CICS, DB2, performance, and enterprise tooling.Strong project planning, organization, time management, and multitasking skills.Proficiency with Microsoft Office business applications, including Excel, Word, Access, and PowerPoint.Lead the assessment, scoping, and architectural design of strategic RACF and USS security project solutions, covering authentication, authorization, encryption, privileged access, and sensitive data protection.Define target-state architectures and technical designs, produce solution and design documentation, and guide engineering teams through build, validation, testing, and implementation.Support deployment of security solutions, including process changes, operational handoff, documentation, and training for security operations teams.Collaborate with application development, security product owners, systems programming, database, CICS/MQ, business, and audit teams to gather requirements and implement effective security solutions.Create and maintain security monitoring, automation, and reporting solutions using tools such as IBM zSecure, Compliance Manager, Admin Express, multifactor authentication platforms, and key management capabilities.Monitor, analyze, and report on key performance indicators, control health, and operational trends; recommend preventative actions and process improvements as needed.Serve as the architectural subject matter expert on RACF, USS, and z/OS security controls, setting standards and guiding teams on mainframe security best practices for questions, issues, audit inquiries, and project requirements.We are the staffing arm of the Pride Global network, a minority-owned integrated human capital solutions firm, with additional offerings in vendor management, payroll programs, and business process optimization.Russell Tobin offers eligible employee's comprehensive healthcare coverage (medical, dental, and vision plans), supplemental coverage (accident insurance, critical illness insurance and hospital indemnity), 401(k)-retirement savings, life & disability insurance, an employee assistance program, legal support, auto, home insurance, pet insurance and employee discounts with preferred vendors.We do not discriminate on the basis of the race, religious creed, color, national origin, ancestry, physical disability, mental disability, reproductive health decision making, medical condition, genetic information, marital status, sex, gender, gender identity, gender expression, age, sexual orientation, veteran or military status, or any other characteristic protected by applicable federal, state, or local law.We consider all qualified applicants, including those with criminal histories, in a manner consistent with applicable state and local Fair Chance laws and ordinances, including, the California Fair Chance Act and all applicable local Fair Chance ordinances.AccommodationsWe are committed to providing reasonable accommodations to applicants and employees with disabilities. xhyhwjd If you require a reasonable accommodation to participate in the application or interview process, or to perform the essential functions of this role, please contact us.