Mainframe Security / RACF Specialist

Job Summary:

The Mainframe Security / RACF Specialist is responsible for administering and maintaining security controls across the IBM mainframe environment. The role focuses on RACF administration, privileged access management, audit and compliance support, security logging and monitoring, and adherence to regulatory requirements including IRS Publication 1075 controls. The individual ensures that mainframe systems, applications, and data remain secure while supporting operational, audit, and business requirements.

Key Responsibilities:

· Administer and maintain RACF security across the mainframe environment.

· Manage user IDs, groups, resource profiles, permissions, and access controls in accordance with security policies.

· Provision, modify, review, and revoke user access based on approved requests and business requirements.

· Manage privileged and elevated access accounts to ensure secure and compliant usage.

· Conduct regular access reviews and recertification activities for users and privileged accounts.

· Monitor RACF events, security logs, and system activities to identify unauthorized access or security risks.

· Investigate security incidents, access violations, and audit findings, and implement corrective actions.

· Support internal, external, regulatory, and customer audits by providing security evidence and documentation.

· Ensure compliance with IRS Publication 1075 requirements and other applicable security standards and regulations.

· Develop and maintain security policies, standards, procedures, and operational documentation.

· Coordinate with infrastructure, application, database, and operations teams to implement security controls.

· Support implementation of security enhancements, RACF rule changes, and access governance initiatives.

· Participate in incident, problem, change, and risk management activities related to mainframe security.

· Generate security reports, audit reports, compliance metrics, and management dashboards.

Required Qualifications:

· Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field.

· 5+ years of experience in Mainframe Security Administration, RACF Administration, or Information Security roles.

· Strong hands-on experience with IBM RACF security administration and access management.

· Experience managing privileged access controls, user provisioning, and entitlement reviews.

· Knowledge of IBM z/OS security architecture and mainframe security best practices.

· Experience supporting security audits, compliance reviews, and regulatory assessments.

· Familiarity with security logging, monitoring, and security incident investigation processes.

· Understanding of IRS Publication 1075 security requirements and data protection controls.

· Knowledge of TSO/ISPF, SDSF, JES2/JES3, z/OS, and related mainframe technologies.

· Strong analytical, problem-solving, and security risk management skills.

· Excellent communication and stakeholder management skills.

· Familiarity with ITIL-based Incident, Problem, Change, and Access Management processes.