Mainframe Security Engineer
ARCHIVED
We can't find an active application page for this role right now. It may reopen or be listed elsewhere. Use Next Steps to search for an active apply link and similar live jobs.
Job Description: Mainframe Security Engineer
Location: Phoenix, AZ The Role:
We are seeking a skilled Mainframe Logical Security Engineer to design, implement, and manage security controls across IBM z/OS environments. The role ensures the confidentiality, integrity, and availability of enterprise systems and data by enforcing robust access controls and complying with regulatory requirements.* This role requires employees to live in or around the Phoenix, AZ area. You will be responsible to be onsite 3 days a week. We will consider candidates who are willing to relocate to the area.
Responsibilities:
Administer and maintain RACF security environment across z/OS systems
Create, modify, and revoke:
- User IDsGroupsResource profiles
- Dataset and subsystem access permissions
- Implement and maintain least-privilege access controls for:
- Datasets
- Applications (CICS, DB2, IMS, MQ)
- System resources
- Security Controls & Compliance
- Configure and maintain security policies aligned with enterprise standards
- Perform periodic access reviews, audits, and compliance checks
- Support regulatory compliance (e.g., SOX, PCI, HIPAA where applicable)
- Implement data protection controls and access monitoring mechanisms
- Monitoring & Incident Response
- Analyze security logs and reports:
- SMF recordsRACF reportsSIEM alerts
- Investigate:
- Access violations
- Unauthorized access attempts
- Security incidents
- Troubleshoot and resolve:
- Authorization failuresRACF-related abends or access issues
- Security Architecture & Integration
- Secure mainframe subsystems and integrations:
- CICS, DB2, IMS, MQ, TCP/IP, USSSupport integration with:
- Enterprise IAM solutions
- Single Sign-On (SSO) / MFA (where applicable)
- Define and maintain RACF classes, profiles, and rules for system-wide protection
- Encryption & Advanced Security
- Support:
- Digital certificatesTLS/SSL configurationICSF (crypto services) at a high level
- Ensure secure key management and encryption practices
Required Qualifications: Strong hands-on experience with:
- RACF administration on z/OSDeep knowledge of:
- RACF profiles, classes, and dataset security
- User/group management and access control models
- Experience with:
- SMF data analysis
- Security reporting and audit tools
- Strong understanding of:z/OS security concepts and system internals