Lead Info Sec Ops Specialist - IAM Unix Specialist

TIAA•Frisco, TX

3d•$108,000 - $130,000•Onsite

About The Position

The Lead Information Security Specialist safeguards critical enterprise Unix, Linux, and mainframe systems through expertise in privileged access management, sudo administration, and RACF administration. The role designs and maintains complex IAM access-control solutions; conducts security audits for regulatory compliance; develops automated security scripts; connects Unix and RACF privileged access controls with enterprise IAM solutions; and preserves institutional knowledge through documentation and mentorship. It requires expertise in Unix/Linux fundamentals, sudo policy management, Unix privileged access management, and modern security framework implementation.

Requirements

At least 5 years of experience in information technology and/or cybersecurity.
At least 3 years of Unix/Linux experience.
Experience with scripting, such as Bash, KSH, Python, or Perl.

Nice To Haves

University degree preferred.
At least 7 years of work experience preferred.
RACF administration experience.
Hands-on experience with BoKS ServerControl or similar centralized Unix access-control solutions.
Privileged access management experience, such as BeyondTrust EPM.
Experience in a containerized environment.

Responsibilities

Design and maintain sudo access-control policies across enterprise Unix/Linux environments, including sudoers files, command restrictions, and privilege-escalation controls to enforce least privilege.
Administer and optimize Unix privileged access management infrastructure, including centralized authentication policies, access rules, host groups, and privileged session management across the Unix/Linux server fleet.
Manage the mainframe RACF environment, including user management, dataset permissions, batch job maintenance, and general resource profile management.
Conduct Unix and RACF security audits for compliance with SOX, GLBA, and PCI-DSS, and collaborate with internal and external auditors to demonstrate control effectiveness.
Develop security scripts and tools using shell scripting, Python, and Perl to streamline access reviews, policy enforcement, and compliance reporting.
Serve as the technical bridge between BoKS/sudo privileged access controls and enterprise IAM solutions, designing integrations aligned with the cybersecurity architecture.
Identify, assess, and remediate access-control gaps, including sudo misconfigurations, privilege-escalation risks, and BoKS policy gaps, through regular access reviews and risk assessments.
Guide and mentor team members on Unix access control and maintain documentation of sudo policies, BoKS configurations, and security procedures.