Senior RACF Engineer – Director

This is a fully remote position, open to applicants in United States.

📋 Description

• Design, develop, and assist with mainframe security initiatives encompassing authentication, authorization, encryption, privileged access, sensitive data protection, automation, reporting, utilities, and batch processes.

• Collaborate with the Mainframe Security Architecture and Engineering teams to create technical solutions, validate designs, conduct testing, and facilitate implementation.

• Aid in the deployment of security solutions, which includes process modifications, operational handover, documentation, and training for security operations teams.

• Evaluate technical feasibility and suggest approaches that fulfill security, operational, audit, and resiliency standards.

• Work alongside application development, security product owners, systems programming, database, CICS/MQ, business, and audit teams.

• Develop and maintain security monitoring, automation, and reporting solutions.

• Track, analyze, and report on key performance indicators, control health, and operational trends.

• Propose preventative measures and process enhancements.

• Offer subject matter expertise on RACF, z/OS security controls, and mainframe security best practices.

• Address questions, issues, audit inquiries, and project requirements.

• Provide occasional off-hours support for project implementations, production changes, and critical security initiatives.

⛳️ Requirements

• Over 10 years of relevant experience as a RACF engineer, security engineer, or senior mainframe security administrator.

• Advanced practical knowledge of IBM RACF and IBM zSecure, covering configuration, internals, reporting, administration, and engineering support.

• Proficient in JCL, REXX, and CARLa.

• Familiarity with core z/OS utilities and facilities, such as TSO, ISPF, and SDSF.

• Working knowledge of DB2, Sybase, and SQL.

• Experience in implementing and supporting mainframe authentication and encryption features, including digital certificates, key management, and multifactor authentication.

• Comprehensive understanding of z/OS infrastructure disciplines, including systems programming, storage, networking, UNIX System Services, CICS, DB2, performance, and enterprise tooling.

• Strong grasp of Identity and Access Management best practices, such as least privilege, privileged access management, access certification, segregation of duties, and vulnerability management.

• Capability to work independently and manage competing priorities with minimal supervision.

• Excellent project planning, organization, time management, and multitasking abilities.

• Proficient in Microsoft Office, including Excel, Word, Access, and PowerPoint.

• Exceptional verbal and written communication skills.

• Ability to convey technical concepts to both technical and non-technical stakeholders.

• Team-oriented mindset with a commitment to fostering an inclusive and respectful culture.

🏝️ Benefits

• Comprehensive employee benefits and perks.

• Support for employees and their families throughout their work-life journey.

• Opportunities for internal mobility across the organization.

• Incentive compensation, discretionary bonuses, and various short- and long-term incentive packages may be part of the overall compensation.

• Morgan Stanley-sponsored benefit programs.