Mainframe Logical Security Engineer
About The Position
At Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day. We are seeking a skilled Mainframe Logical Security Engineer to design, implement, and manage security controls across IBM z/OS environments. The role ensures the confidentiality, integrity, and availability of enterprise systems and data by enforcing robust access controls and complying with regulatory requirements. This role requires employees to live in or around the Plano, TX, Charlotte, NC, Richmond, VA, Jacksonville, FL, Pennington, NJ, Chicago, IL area. You will be responsible to be onsite 3 days a week. We will consider candidates who are willing to relocate to any of these areas.
Requirements
- Strong hands-on experience with RACF administration on z/OS
- Deep knowledge of RACF profiles, classes, and dataset security
- User/group management and access control models
- Experience with SMF data analysis
- Security reporting and audit tools
- Strong understanding of z/OS security concepts and system internals
Nice To Haves
- Experience in banking or financial services environments
- Exposure to ACF2 or Top Secret
- Exposure to SIEM tools (Splunk, QRadar, etc.)
- Experience with Automation (REXX, Python)
- Identity governance tools
- Experience with enterprise-wide security transformations or IAM integration
- Knowledge of Zero Trust or modern security frameworks
- Experience supporting regulatory audits in large enterprises
Responsibilities
- Administer and maintain RACF security environment across z/OS systems
- Create, modify, and revoke: User IDs, Groups, Resource profiles, Dataset and subsystem access permissions
- Implement and maintain least-privilege access controls for: Datasets, Applications (CICS, DB2, IMS, MQ), System resources
- Configure and maintain security policies aligned with enterprise standards
- Perform periodic access reviews, audits, and compliance checks
- Support regulatory compliance (e.g., SOX, PCI, HIPAA where applicable)
- Implement data protection controls and access monitoring mechanisms
- Analyze security logs and reports: SMF records, RACF reports, SIEM alerts
- Investigate: Access violations, Unauthorized access attempts, Security incidents
- Troubleshoot and resolve: Authorization failures, RACF-related abends or access issues
- Secure mainframe subsystems and integrations: CICS, DB2, IMS, MQ, TCP/IP, USS
- Support integration with: Enterprise IAM solutions, Single Sign-On (SSO) / MFA (where applicable)
- Define and maintain RACF classes, profiles, and rules for system-wide protection
- Support: Digital certificates, TLS/SSL configuration, ICSF (crypto services) at a high level
- Ensure secure key management and encryption practices
Benefits
- Opportunities for Cloud Hyperscalers
- Hands-on experience
- Learning opportunities
- Chance to certify in all four major platforms
- Employee learning programs
- Access to certifications from Microsoft, Google, Amazon, Skillsoft, and many more
- Company-wide volunteering and giving platform
- Donation opportunities
- Fundraiser opportunities
- Volunteer opportunities
- Search over 2 million non-profit organizations
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Entry Level
Education Level
No Education Listed
