Mainframe Logical Security Engineer
Core
Design, implement, and manage security controls across IBM z/OS environments, protecting enterprise systems and sensitive data while supporting regulatory requirements.
Role type
Mainframe Logical Security Engineer
Builds
Security controls for IBM z/OS systems, CICS, DB2, IMS, and MQ subsystems
Domain
Mainframe computing / Financial services / Highly regulated environments
Required skills
RACF administration, z/OS security concepts, SMF data analysis, access control modeling, security incident investigation, regulatory compliance (SOX, PCI, HIPAA), cryptographic services (ICSF), TLS/SSL configuration
Preferred skills
ACF2 or Top Secret experience, SIEM tools (Splunk, IBM QRadar), security automation (REXX, Python), identity governance, Zero Trust principles
Technologies
CICS, IBM IMS, Phoenix, Python, Splunk, TCP/IP, Unix
Responsibilities
Administer and maintain RACF security across IBM z/OS systems; Create, modify, and revoke user IDs, groups, resource profiles, and dataset permissions; Implement least-privilege access controls; Conduct access reviews, security audits, and compliance assessments; Analyze security logs and reports including SMF records; Investigate access violations and security incidents; Secure mainframe subsystems and integrations; Support integration with enterprise IAM solutions and SSO/MFA
Seniority
Mid-level, hands-on IC