Mainframe Logical Security Engineer

About the role

This role is ideal for a logical security engineer with 5+ years of experience in IBM Mainframe (z/OS) environments. The position involves strong hands-on experience with RACF administration (or ACF2 / Top Secret), user and group management, dataset and subsystem security, and security audits and access reviews.

Responsibilities

• Maintain and administer RACF (or ACF2 / Top Secret) for secure system access
• Manage user and group permissions within the mainframe environment
• Ensure compliance with security policies and regulations
• Conduct and participate in security audits and access reviews
• Monitor and analyze security logs for potential threats and anomalies
• Support the implementation and maintenance of security controls
• Collaborate with cross-functional teams to ensure secure and reliable operations

Requirements

• At least 5 years of experience in IBM Mainframe (z/OS) environments
• Strong hands-on experience with RACF administration (or ACF2 / Top Secret)
• Experience with user and group management, dataset, and subsystem security
• Experience with security audits and access reviews
• Understanding of z/OS security architecture, access control models, and compliance practices
• Excellent troubleshooting and analytical skills

Preferred Qualifications

• Experience with ACF2 or Top Secret
• Familiarity with SIEM tools such as Splunk, QRadar, or similar
• Experience supporting enterprise audits and compliance initiatives
• Exposure to IAM integration, Single Sign-On (SSO), and Multi-Factor Authentication (MFA) solutions
• Automation or scripting experience (REXX, Python, Shell)
• Experience in financial services or regulated environments