Senior Mainframe Security Engineer (RACF)
About The Position
CTG is seeking a Senior Mainframe Security Engineer specializing in RACF for a client. This remote role has a six-month duration with a possible extension; occasional travel to Raleigh, North Carolina, may be required at the client’s expense. The engineer will maintain and enhance IBM z/OS mainframe security, administer RACF and related security services, manage encryption and certificates, assess and remediate audit findings, and develop compliance and security-status reports. The role partners with infrastructure, application, and security teams to plan, implement, and test security changes and initiatives. The engineer will contribute to risk analysis, disaster recovery planning, security training, and policy development; support internal and external audits; and resolve security requests within established SLAs while supporting a 24x7 production environment. The position requires independent work as well as collaboration and communication with technical teams, business stakeholders, management, and auditors. The expected base salary is $64.00 to $70.00 per hour. CTG states that a competitive benefit package is also offered.
Requirements
- At least 5 years of experience in systems architecture, technology risk, information security, or a related discipline.
- Strong expertise in IBM RACF and mainframe security administration.
- Hands-on experience with UNIX, z/Linux, Db2, CICS, and IBM Trusted Key Entry (TKE).
- Proficiency with JCL, REXX, CLIST, and mainframe utilities.
- Knowledge of Public Key Infrastructure (PKI), encryption technologies, key management, and certificate management.
- Expertise in audit assessments, interpreting audit results, developing remediation plans, and tracking findings through resolution.
- Working knowledge of network security and client-server applications.
- Demonstrated experience designing, implementing, and maintaining IBM mainframe security controls.
- Ability to manage audit assessments, evaluate results, coordinate remediation, and communicate security and compliance status.
- Experience developing security reports and presenting findings to technical and nontechnical stakeholders.
- Strong analytical, problem-solving, documentation, and communication skills, including the ability to present technical information to management, business stakeholders, and audit teams.
- Ability to work independently with minimal supervision and contribute effectively in a collaborative team environment.
- Ability to support a 24x7 production environment and follow established work schedules and attendance requirements.
- Excellent verbal and written English communication skills and the ability to interact professionally with a diverse group.
- Bachelor’s degree, associate’s degree, or CCUE certification preferred; alternatively, 5 consecutive years of full-time service with SECU.
Nice To Haves
- 7 years of systems architecture experience focused on technology risk and information security.
- SailPoint integration and Venafi experience.
- Experience mentoring and coaching junior technical resources.
- CISSP or CISA certification.
- Bachelor’s degree, associate’s degree, or CCUE certification.
Responsibilities
- Maintain and enhance IBM z/OS mainframe security, including RACF installation, configuration, administration, and security control implementation.
- Manage mainframe encryption, key management, certificate management, and related security services.
- Conduct security assessments, analyze audit results, identify gaps, and lead remediation of audit findings.
- Develop and maintain reports on policy compliance, security posture, project progress, and audit remediation status.
- Plan and implement security initiatives based on risk assessments, organizational policies, and audit findings.
- Coordinate security changes, implementation plans, and testing with infrastructure, application, and security teams.
- Lead security discussions and contribute to risk analysis, disaster recovery planning, security training, and policy development.
- Support internal and external audits by providing technical documentation, responding to auditor inquiries, and addressing findings.
- Resolve security issues and service requests within established SLAs while supporting a 24x7 production environment.
Benefits
- Competitive benefit package
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Career Level
Senior
Education Level
Associate degree
