Mainframe Logical Security Engineer

Mainframe Logical Security Engineer

At Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day. We are always moving forward – always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities.

We are seeking a skilled Mainframe Logical Security Engineer to design, implement, and manage security controls across IBM z/OS environments. The role ensures the confidentiality, integrity, and availability of enterprise systems and data by enforcing robust access controls and complying with regulatory requirements. This role requires employees to live in or around the Plano, TX, Charlotte, NC, Richmond, VA, Jacksonville, FL, Pennington, NJ, Chicago, IL area.

You will be responsible to be onsite 3 days a week. We will consider candidates who are willing to relocate to any of these areas.

• Administer and maintain RACF security environment across z/OS systems
• Create, modify, and revoke:
  User IDs, Groups, Resource profiles, Dataset and subsystem access permissions
• Implement and maintain least-privilege access controls for:
  Datasets, Applications (CICS, DB2, IMS, MQ), System resources
• Configure and maintain security policies aligned with enterprise standards
• Perform periodic access reviews, audits, and compliance checks
• Support regulatory compliance (e.g., SOX, PCI, HIPAA where applicable)
• Implement data protection controls and access monitoring mechanisms
• Analyze security logs and reports: SMF records, RACF reports, SIEM alerts
• Investigate:
  Access violations, Unauthorized access attempts, Security incidents
• Troubleshoot and resolve:
  Authorization failures, RACF-related abends or access issues
• Secure mainframe subsystems and integrations: CICS, DB2, IMS, MQ, TCP/IP, USS
• Support integration with:
  Enterprise IAM solutions, Single Sign-On (SSO) / MFA (where applicable)
• Define and maintain RACF classes, profiles, and rules for system-wide protection
• Support:
  Digital certificates, TLS/SSL configuration, ICSF (crypto services) at a high level
• Ensure secure key management and encryption practices

One of the benefits of Kyndryl is that we work with clients in a variety of industries, from banking to retail. Whether you want to broaden your knowledge base or narrow your scope and specialize in a specific sector, you can find your opportunity here. You'll also get the chance to share your expertise by recommending modernization options, identifying new business opportunities, and cultivating relationships with other teams and stakeholders.

Does the work get challenging at times? Yes! But you'll collaborate with a diverse group of talented people and gain invaluable management and organizational skills, which will come in handy as you move forward in your career.

Your future at Kyndryl Every position at Kyndryl offers a way forward to grow your career, from Junior System Administrator to Architect. We have opportunities for Cloud Hyperscalers that you won't find anywhere else, including hands-on experience, learning opportunities, and the chance to certify in all four major platforms.

Kyndryl currently does not require employees to be fully vaccinated against COVID-19, however, if you are hired to work at a client, customer, or partner location, you may be required to show proof of vaccination to align with their respective COVID-19 vaccination policies. Those who believe they are eligible may apply for a medical or religious accommodation prior to the start of employment.

You're good at what you do and possess the required experience to prove it. However, equally as important – you have a growth mindset; keen to drive your own personal and professional development. You are customer-focused – someone who prioritizes customer success in their work. And finally, you're open and borderless – naturally inclusive in how you work with others.

• Strong hands-on experience with: RACF administration on z/OS
• Deep knowledge of: RACF profiles, classes, and dataset security, User/group management and access control models
• Experience…