Mainframe Security Engineer

Key Responsibilities

• Design, implement, and maintain mainframe security controls to protect sensitive payroll data.
• Administer and manage RACF (or equivalent ACF2/Top Secret) security, including user access, resource profiles, and permissions.
• Ensure data security, integrity, and confidentiality across payroll applications, files, databases, and interfaces.
• Monitor, audit, and enforce security compliance with organizational policies, regulatory requirements, and industry standards.
• Support secure development and maintenance of payroll applications using mainframe technologies.
• Collaborate with payroll application developers, system administrators, and compliance teams to ensure secure system operations.
• Analyze and remediate security vulnerabilities, access violations, and audit findings.
• Secure batch and online payroll processes, including JCL jobs, CICS transactions, and DB2/IMS data access.
• Review and approve security changes related to payroll system releases, enhancements, and production migrations.
• Support internal and external security audits, risk assessments, and compliance reporting.
• Troubleshoot and resolve security‑related production incidents affecting payroll processing.

• Strong proficiency in mainframe security concepts and administration, including:
• RACF (user IDs, groups, profiles, datasets, CICS, DB2, and IMS security)
• Data security and access control
• Mainframe network protocols and security controls
• Hands‑on experience with mainframe payroll system environments.
• Expertise in common mainframe technologies, including but not limited to:
• COBOL
• Assembler
• Easytrieve
• CICS and CICS Maps (BMS / CICS Map / CA‑TELON)
• JCL
• DB2
• IMS (DB/DC)
• CA Scheduler (or equivalent)
• Rocket Software Mobius
• Understanding batch and online payroll processing, file structures, VSAM, and database security.
• Experience securing payroll interfaces and integrations between mainframe and external systems.

• Experience supporting government or large enterprise payroll systems with strict security and compliance requirements.
• Familiarity with audit frameworks, internal controls, and regulatory standards related to payroll data (e.g., SOX, data privacy).
• Exposure to security modernization, encryption, or access governance initiatives in mainframe environments.
• Knowledge of production support and on‑call procedures during payroll processing cycles.