Mainframe Security Administrator

Peraton•,

9d•$66,000 - $106,000•Remote

About The Position

Peraton is hiring a Mainframe Security Administrator for a remote position supporting its CMS program. The role ensures compliance with CMS ARS, DISA STIG, and FISMA security policies, procedures, and directives. It maintains oversight of information systems through technical reviews and audits, coordinates with program management and customers on security requirements and documentation, and provides security guidance, awareness, and training. The administrator develops and maintains security plans, standard operating procedures, security tests, and evaluation plans; collaborates with security and IT teams to sustain compliant, secure systems; and monitors industry practices and technologies to advise on implementation. The position provides mainframe account-based access management and reporting, including access administration, recertification, security violation monitoring, and review of active and inactive logon IDs. It also supports customers by assessing security requirements, recommending process and documentation improvements, assisting with product design and testing, identifying security exposures, supporting audits and investigations, and helping maintain compliance with client standards.

Requirements

Strong written and verbal communication skills and ability to coordinate with and support technicians, system administrators, developers, business analysts, and on-call staff.
Two years of experience with a bachelor's degree, no years with a master's degree, or six years with a high school diploma or equivalent.
U.S. citizenship.
Ability to obtain a Public Trust clearance.
Working z/OS RACF and ACF2 security skills, including the ability to review, correct, and coach others on mainframe security.
Working knowledge of z/OS JCL, TSO, batch processing, and job troubleshooting.
Hands-on experience with Vanguard security tools.
Ability to create and interpret detailed security reports.

Nice To Haves

Knowledge of z/OS security compliance, including DISA STIG and FISMA controls.
Experience participating in security compliance audits, discussing policy, presenting evidence, and researching noncompliance.
Experience provisioning and maintaining SSL certificates.
Experience with SNOW ticketing systems.

Responsibilities

Follow CMS ARS, DISA STIG, and FISMA security policies, procedures, and directives.
Maintain oversight and compliance of information systems through technical reviews and system auditing.
Coordinate with program management and customers on security requirements, required documentation, and classification management.
Provide information systems security guidance, awareness, and training.
Participate in customer security inspections, audits, and reviews.
Develop, prepare, implement, and maintain security plans, SOPs, security tests, and evaluation plans.
Collaborate with internal and external security teams and IT staff to ensure continued compliance and secure operation of accredited information systems.
Monitor industry practices, trends, and technologies, and advise on implementation.
Manage account-based information security access for data sets, user IDs, CICS transactions and applications, resources, and certificates.
Produce account and access control administration reports, conduct recertification reviews, and monitor security violations for mainframe role-based access control.
Review logon-ID reports for active and inactive IDs.
Analyze customer security requirements and recommend improvements to information security processes and documentation.
Support technical groups in designing and testing information security products and solutions, ensuring conformance to requirements.
Identify and recommend program or system modifications to prevent security exposures.
Promote compliance with client information security standards.
Participate in security audits, attend interviews, and provide requested sample reports or extracts.
Work with System Security Officers to investigate noncompliance and alerts, escalating issues appropriately.
Assist with migrations, implementations, and investigations.