Principal Cyber Security Engineer - Senior Mainframe RACF Engineer (Remote)

First Citizens Bank•Raleigh, NC

8d•Remote

About The Position

The Senior Mainframe RACF Engineer leads the design, implementation, and governance of RACF security controls across complex z/OS environments. This role requires expert-level RACF engineering, strong programming skills (REXX, IBM Utilities and RACF utilities, SAS, JCL, Splunk), and hands-on experience with digital certificate rotation automation, Multi-Factor Authentication (MFA) implementation, and enterprise reporting. The engineer partners with engineering, security, audit, infrastructure, and application teams to ensure resilient, compliant, and scalable mainframe security. Remote eligible.

Requirements

Bachelor's Degree and 8 years of experience in Systems Engineering, Network, or Information Security OR High School Diploma or GED and 12 years of experience in Systems Engineering, Network, or Information Security
Expert-level RACF engineering
Strong programming skills (REXX, IBM Utilities and RACF utilities, SAS, JCL, Splunk)
Hands-on experience with digital certificate rotation automation
Hands-on experience with Multi-Factor Authentication (MFA) implementation
Hands-on experience with enterprise reporting

Nice To Haves

10+ years of mainframe experience with expert RACF knowledge (profiles, classes, permissions, command set).
Advanced proficiency in REXX, SAS, JCL, TSO/ISPF, and IBM utilities.
Hands-on experience with Vanguard specific tools.
Hands‑on experience with MFA for mainframe access, including integration with enterprise identity providers.
Experience with dataset encryption, and cryptographic modernization.
Strong background in digital certificates, rings, and cross‑platform authentication.
Proven ability to troubleshoot complex RACF issues and differentiate RACF vs. non‑RACF root causes.
Experience supporting SOX, HIPAA, PCI, and internal audit requirements.
Strong analytical, communication, and documentation skills.
Experience defining enterprise RACF standards and reference architectures.
Systems programming experience.
Financial industry experience.

Responsibilities

Architect, configure, and maintain RACF profiles, classes, permissions, and database structures across multi‑LPAR environments.
Support MFA for mainframe access, including integration with Enterprise Identity providers, enforcement of strong authentication policies, and modernization of legacy authentication flows.
Manage certificate creation, renewal, rotation, and ring assignments; ensure secure integration with SFTP, and cross‑platform authentication.
Develop automation and tooling using REXX, CLIST, and TSO/ISPF to streamline RACF administration, compliance evidence collection, and operational workflows.
Build and optimize SAS programs for compliance reporting, audit evidence generation, access analytics, and RACF database insights.
Integrate RACF with DB2, CICS, and enterprise applications to ensure end‑to‑end security coverage.
Diagnose and resolve RACF‑related issues; perform root‑cause analysis and lead remediation for security events.
Produce SOX/HIPAA/PCI evidence, lead reviews, and maintain defensible documentation for internal and external audits.
Drive modernization of authentication and cryptographic controls, including MFA and certificate lifecycle automation.
Train junior engineers; support processes, standards, and engineering design documentation.