RACF Security Administrator

Key Responsibilities:

• Administer and maintain the IBM z/OS mainframe security environment using RACF.
• Create, modify, and maintain RACF User, Group, Resource, Dataset, CICS, and DB2 security profiles.
• Configure and manage SETROPTS and other RACF security settings to ensure compliance with organizational policies.
• Manage user provisioning, deprovisioning, and role-based access while enforcing the principle of least privilege.
• Review, approve, and process access requests in accordance with established security policies and compliance requirements.
• Utilize IBM zSecure to perform security reporting, auditing, compliance monitoring, and access reviews.
• Provide Tier 3 support for RACF-related incidents, service requests, and production issues.
• Troubleshoot and resolve complex RACF security and authorization issues.
• Collaborate with infrastructure, application, audit, and compliance teams to implement and maintain secure access controls.
• Participate in security audits, compliance assessments, and remediation activities.
• Maintain documentation for security procedures, standards, and operational processes.
• Support access management workflows through ServiceNow or other ITSM platforms.
• Recommend and implement security improvements and process automation where appropriate.

Qualifications:

• 5+ years of hands-on experience administering RACF in an IBM z/OS mainframe environment.
• Strong experience with IBM zSecure administration and reporting.
• Deep understanding of RACF User, Group, Resource, Dataset, CICS, and DB2 security administration.
• Experience configuring and maintaining RACF SETROPTS.
• Strong knowledge of Identity and Access Management (IAM) concepts, including user provisioning and least-privilege access.
• Proficiency with TSO, ISPF, JCL, and familiarity with REXX scripting.
• Experience supporting compliance and audit activities related to mainframe security.
• Excellent analytical, troubleshooting, and problem-solving skills.
• Strong verbal and written communication skills with the ability to collaborate across technical and business teams.

Preferred Qualifications

• Experience with ServiceNow or other IT Service Management (ITSM) tools.
• Experience in banking, financial services, insurance, or other highly regulated industries.
• Knowledge of regulatory frameworks such as SOX, PCI-DSS, NIST, or ISO 27001.
• Experience with security automation and scripting.
• Familiarity with IBM z/OS system administration and security best practices.