Senior Security Engineer- Senior RACF Engineer

The position is described below. If you want to apply, click the Apply Now button at the top or bottom of this page. After you click Apply Now and complete your application, you'll be invited to create a profile, which will let you see your application status and any communications. If you already have a profile with us, you can log in to check status.

Need Help?

If you have a disability and need assistance with the application, you can request a reasonable accommodation. Send an email to Accessibility (accommodation requests only; other inquiries won't receive a response).Regular or Temporary:

Regular Language Fluency:  English (Required)

Work Shift:

1st shift (United States of America)
Please review the following job description:

Senior RACF Engineer is responsible for designing and maintaining RACF profiles, groups, and resource classes to support both business operations and regulatory compliance.

 
ESSENTIAL DUTIES AND RESPONSIBILITIES Following is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time.

This role leads RACF administration activities, including user provisioning, access reviews, and the cleanup of obsolete IDs and datasets. The engineer implements and manages advanced RACF features such as password phrases, digital certificates, and program control to enhance system security.  The engineer will monitor and audit RACF activity using SMF records, IRRDBU
00 utilities, and zSecure tools to ensure accurate tracking and reporting. Collaboration with application, infrastructure, and compliance teams is essential to enforce least-privilege access across the organization.   The engineer develops and maintains automation scripts for RACF provisioning and reporting using REXX, CLIST, and JCL, and provides expert-level support for security incidents, access issues, and RACF-related outages.  This position participates in RACF migrations, system upgrades, and integration with external identity systems such as LDAP.

The engineer documents RACF policies, procedures, and standards, and contributes to audit and compliance reporting efforts.   Candidates must have hands-on experience with RACF on IBM z/OS and possess a deep understanding of RACF classes including DATASET, GENERAL, FACILITY, OPERCMDS, and UNIXPRIV.  Proficiency with IRRDBU
00, DSMON, and SMF record analysis is preferred, along with expertise in zSecure Admin, Audit, and Alert modules. Strong scripting skills in REXX, CLIST, and JCL is essential. Familiarity with USS environments, including OMVS segments, BPX.DAEMON, and program control, is expected.  The ideal candidate will have working knowledge of compliance frameworks such as SOX, HIPAA, and PCI-DSS, and demonstrate strong communication and documentation skills.  

Experience integrating RACF into SIEM platforms like QRadar or Splunk is highly desirable and prior involvement in RACF migrations or enterprise-wide cleanup initiatives will be considered an asset.  Responsible for developing and maintaining the technical IT / cyber security capabilities necessary for safeguarding the firm's information systems and applications (software development lifecycle), including every phase of the SDLC and software stack.

Design, plan, test and implement phases of cybersecurity technology projects.  This role seeks an experienced Cybersecurity Senior Engineer in the Mainframe Security team to ensure secure access control, across our mainframes including identity management, certificate administration, encryption controls.   This role is critical in ensuring secure and compliant access requiring the successful candidate to understand the complete user access…