{"schemaVersion":"jobsearcher.job.v1","id":"466ca538191d4999d93097a1","url":"https://jobsearcher.com/jobs/466ca538191d4999d93097a1","canonicalUrl":"https://jobsearcher.com/jobs/466ca538191d4999d93097a1","title":"Mainframe Security Engineer","description":"Job Description – Mainframe Security EngineerLocation - Phoenix, AZ The Role:We are seeking a skilled Mainframe Logical Security Engineer to design, implement, and manage security controls across IBM z/OS environments. The role ensures the confidentiality, integrity, and availability of enterprise systems and data by enforcing robust access controls and complying with regulatory requirements.* This role requires employees to live in or around the Phoenix, AZ area. You will be responsible to be onsite 3 days a week. We will consider candidates who are willing to relocate to the area.Responsibilities:Administer and maintain RACF security environment across z/OS systemsCreate, modify, and revoke:User IDsGroupsResource profilesDataset and subsystem access permissionsImplement and maintain least-privilege access controls for:DatasetsApplications (CICS, DB2, IMS, MQ)System resourcesSecurity Controls & ComplianceConfigure and maintain security policies aligned with enterprise standardsPerform periodic access reviews, audits, and compliance checksSupport regulatory compliance (e.g., SOX, PCI, HIPAA where applicable)Implement data protection controls and access monitoring mechanismsMonitoring & Incident ResponseAnalyze security logs and reports:SMF recordsRACF reportsSIEM alertsInvestigate:Access violationsUnauthorized access attemptsSecurity incidentsTroubleshoot and resolve:Authorization failuresRACF-related abends or access issuesSecurity Architecture & IntegrationSecure mainframe subsystems and integrations:CICS, DB2, IMS, MQ, TCP/IP, USSSupport integration with:Enterprise IAM solutionsSingle Sign-On (SSO) / MFA (where applicable)Define and maintain RACF classes, profiles, and rules for system-wide protectionEncryption & Advanced SecuritySupport:Digital certificatesTLS/SSL configurationICSF (crypto services) at a high levelEnsure secure key management and encryption practicesRequired Qualifications:Strong hands-on experience with:RACF administration on z/OSDeep knowledge of:RACF profiles, classes, and dataset securityUser/group management and access control modelsExperience with:SMF data analysisSecurity reporting and audit toolsStrong understanding of:z/OS security concepts and system internals","company":"Tech Observer","rawCompany":"tech observer","city":"Phoenix","state":"AZ","isRemote":false,"isActive":false,"createdAt":"2026-07-01T10:38:22.120Z","occupations":[{"code":"15-1299.05","title":"Information Security Engineers","slug":"information-security-engineers"},{"code":"15-1299.08","title":"Computer Systems Engineers/Architects","slug":"computer-systems-engineers-architects"},{"code":"15-1212.00","title":"Information Security Analysts","slug":"information-security-analysts"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"561621","title":"Security Systems Services (except Locksmiths)","slug":"security-systems-services-except-locksmiths"},{"code":"541511","title":"Custom Computer Programming Services","slug":"custom-computer-programming-services"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"Mainframe Security Engineer","description":"Job Description – Mainframe Security EngineerLocation - Phoenix, AZ The Role:We are seeking a skilled Mainframe Logical Security Engineer to design, implement, and manage security controls across IBM z/OS environments. The role ensures the confidentiality, integrity, and availability of enterprise systems and data by enforcing robust access controls and complying with regulatory requirements.* This role requires employees to live in or around the Phoenix, AZ area. You will be responsible to be onsite 3 days a week. We will consider candidates who are willing to relocate to the area.Responsibilities:Administer and maintain RACF security environment across z/OS systemsCreate, modify, and revoke:User IDsGroupsResource profilesDataset and subsystem access permissionsImplement and maintain least-privilege access controls for:DatasetsApplications (CICS, DB2, IMS, MQ)System resourcesSecurity Controls & ComplianceConfigure and maintain security policies aligned with enterprise standardsPerform periodic access reviews, audits, and compliance checksSupport regulatory compliance (e.g., SOX, PCI, HIPAA where applicable)Implement data protection controls and access monitoring mechanismsMonitoring & Incident ResponseAnalyze security logs and reports:SMF recordsRACF reportsSIEM alertsInvestigate:Access violationsUnauthorized access attemptsSecurity incidentsTroubleshoot and resolve:Authorization failuresRACF-related abends or access issuesSecurity Architecture & IntegrationSecure mainframe subsystems and integrations:CICS, DB2, IMS, MQ, TCP/IP, USSSupport integration with:Enterprise IAM solutionsSingle Sign-On (SSO) / MFA (where applicable)Define and maintain RACF classes, profiles, and rules for system-wide protectionEncryption & Advanced SecuritySupport:Digital certificatesTLS/SSL configurationICSF (crypto services) at a high levelEnsure secure key management and encryption practicesRequired Qualifications:Strong hands-on experience with:RACF administration on z/OSDeep knowledge of:RACF profiles, classes, and dataset securityUser/group management and access control modelsExperience with:SMF data analysisSecurity reporting and audit toolsStrong understanding of:z/OS security concepts and system internals","datePosted":"2026-07-01T10:38:22.120Z","dateModified":"2026-07-01T10:38:22.120Z","hiringOrganization":{"@type":"Organization","name":"Tech Observer","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Phoenix","addressRegion":"AZ","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"466ca538191d4999d93097a1"},"url":"https://jobsearcher.com/jobs/466ca538191d4999d93097a1"}}