Senior Security Engineer- Senior RACF Engineer

Regular or Temporary:
Regular Language Fluency:
English (Required)

Work Shift:

1st shift (United States of America)

Responsible for designing and maintaining RACF profiles, groups, and resource classes to support both business operations and regulatory compliance.

ESSENTIAL DUTIES AND RESPONSIBILITIES

Summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time. This role leads RACF administration activities, including user provisioning, access reviews, and the cleanup of obsolete IDs and datasets. The engineer implements and manages advanced RACF features such as password phrases, digital certificates, and program control to enhance system security.

The engineer will monitor and audit RACF activity using SMF records, IRRDBU
00 utilities, and zSecure tools to ensure accurate tracking and reporting. Collaboration with application, infrastructure, and compliance teams is essential to enforce least-privilege access across the organization. The engineer develops and maintains automation scripts for RACF provisioning and reporting using REXX, CLIST, and JCL, and provides expert-level support for security incidents, access issues, and RACF-related outages. This position participates in RACF migrations, system upgrades, and integration with external identity systems such as LDAP.

The engineer documents RACF policies, procedures, and standards, and contributes to audit and compliance reporting efforts.

Candidates must have hands‑on experience with RACF on IBM z/OS and possess a deep understanding of RACF classes including DATASET, GENERAL, FACILITY, OPERCMDS, and UNIXPRIV. Proficiency with IRRDBU
00, DSMON, and SMF record analysis is preferred, along with expertise in zSecure Admin, Audit, and Alert modules. Strong scripting skills in REXX, CLIST, and JCL is essential. Familiarity with USS environments, including OMVS segments, BPX.DAEMON, and program control, is expected. The ideal candidate will have working knowledge of compliance frameworks such as SOX, HIPAA, and PCI‑DSS, and demonstrate strong communication and documentation skills.

Experience integrating RACF into SIEM platforms like QRadar or Splunk is highly desirable and prior involvement in RACF migrations or enterprise‑wide cleanup initiatives will be considered an asset.

Responsible for developing and maintaining the technical IT / cyber security capabilities necessary for safeguarding the firm's information systems and applications (software development lifecycle), including every phase of the SDLC and software stack. Design, plan, test and implement phases of cybersecurity technology projects. This role seeks an experienced Cybersecurity Senior Engineer in the Mainframe Security team to ensure secure access control, across our mainframes including identity management, certificate administration, encryption controls.

This role is critical in ensuring secure and compliant access requiring the successful candidate to understand the complete user access lifecycle, privileged access administration, and risk management. This role is responsible for implementing and supporting capabilities described by industry best practices such as NIST and CRI. This includes administering and maintaining policies and profiles, ensuring proper role-based access control (RBAC), segregation of duties, controls and auditing mechanisms.

The team member will collaborate across IAM, other cybersecurity, infrastructure, application development, risk and audit teams. This position may lead related projects in this space, and you will build and maintain automation scripts and custom tools to streamline provisioning,…