Mainframe Security Engineer

Role Title: Mainframe Security Engineer

Employment Type: Contract

Duration: 6 months to start, could extend or convert

Preferred Location: Remote, ET hours

Role Description:

• The Mainframe Security Engineer serves as an advanced technical resource responsible for designing, implementing, and supporting security solutions across enterprise IBM mainframe environments.
• This role provides subject matter expertise in ACF2 security architecture, access controls, CPF propagation, identity governance, privileged access management, and role-based access control (RBAC). The engineer partners with Cybersecurity, Infrastructure, Application Development, and Identity teams to ensure mainframe security capabilities align with enterprise security standards and regulatory requirements.
• Responsibilities include supporting access recertification, compliance reporting, audits, security monitoring, incident response, encryption, digital certificates, and data protection controls. The position also supports and troubleshoots SailPoint IIQ and related identity governance solutions, including complex provisioning and entitlement issues.
• This individual identifies security risks and control gaps, develops mitigation strategies, and participates in disaster recovery, cyber recovery, and resiliency testing. The engineer provides Level 2 support for IAM and Mainframe Security services and assists with high-severity production incidents when required.
• As a senior technical contributor, this individual also mentors less experienced team members and helps drive the ongoing development of the organization''s Mainframe Security strategy and roadmap.

Requirements:

• Minimum of 6-8 years experience in mainframe security administration, mainframe infrastructure, systems management and/or mainframe architecture
• Ability to lead technical initiatives spanning multiple teams and organizations
• Ability to influence technical decisions without direct authority
• Ability to govern service accounts, batch logon IDs, privileged IDs, and other non human identities throughout their lifecycle.
• Demonstrated ability to translate technical risks into business impact for leadership audiences
• Strong analytical and problem solving skills with focus on root cause analysis and remediation
• Experience with Zero Trust, privileged access governance, and security monitoring concepts
• Experience managing SSL/TLS digital certificates for internal and external mainframe services.