IBM Connect:Direct Security Consultant
Remote
Role Overview
The IBM Connect:Direct Security Consultant will lead a comprehensive security assessment across approximately 15 z/OS LPARs for a large US enterprise mainframe environment. The consultant will evaluate the security posture, configuration, and governance of IBM Connect:Direct, identify risks, validate existing configurations, and deliver actionable recommendations aligned with IBM and industry best practices.
This is a consulting-focused role requiring deep expertise in IBM Connect:Direct on z/OS, mainframe security, and enterprise security controls.
Responsibilities
Security Assessment & Validation
- Perform a comprehensive security assessment of IBM Connect:Direct environments across ~15 z/OS LPARs.
- Validate:
- Node inventory
- Software versions
- Configuration parameters
- Connectivity models
- Operational roles and responsibilities
Enterprise Security Manager (ESM) Integration Review
- Assess integration with RACF, ACF2, or Top Secret, including:
- Started Task security
- Administrative authorities
- Process submission permissions
- Dataset access controls
- Privileged operations
Authentication & Secure Communications
- Evaluate:
- TLS/SSL implementation
- Digital certificate management
- Secure protocol configuration
- Remote node definitions
- Trusted relationships
- Credential management practices
Configuration & Operational Review
- Review Connect:Direct configuration datasets and operational settings.
- Evaluate logging, audit capabilities, monitoring, and operational security procedures.
Risk Identification
Identify:
- Excessive privileges
- Weak access controls
- Insecure file transfer paths
- Weak/outdated cryptographic configurations
- Configuration inconsistencies
- Security misconfigurations
Analysis & Reporting
- Analyze findings against IBM and industry security best practices.
- Develop a prioritized assessment report including:
- Findings
- Risk ratings
- Remediation recommendations
- Implementation guidance
- Present findings and recommendations to client technical stakeholders.
Required Skills & Experience
Technical Expertise
- 8+ years administering or securing IBM Connect:Direct for z/OS.
- Strong knowledge of:
- IBM Connect:Direct architecture
- Managed File Transfer (MFT)
- Connect:Direct configuration & administration
- Node definitions and process management
Mainframe Security
- Experience with one or more ESMs:
- RACF (Preferred)
- CA Top Secret (TSS)
- CA ACF2
- Strong understanding of:
- Started Task security
- Dataset security
- Resource profiles
- User provisioning
- Least-privilege access models
- Security auditing
Security Technologies
Experience assessing:
- TLS/SSL
- Digital certificates
- Cryptographic configurations
- Secure communications
- Authentication & authorization models
- Security monitoring and audit logging
Preferred Qualifications
- Experience performing security assessments or audits in enterprise mainframe environments.
- Familiarity with IBM z/OS infrastructure and enterprise networking.
- Knowledge of IBM security best practices for Connect:Direct.
- Experience in regulated industries (banking, insurance, healthcare, government).
- Security certifications such as CISSP, CISA, or equivalent.
Deliverables
- Complete Connect:Direct security assessment
- Configuration validation report
- Security findings with risk ratings
- Prioritized remediation roadmap
- Executive summary and technical recommendations
- Knowledge transfer session with client team
Never miss an opportunity! Create an alert based on the job you applied for.
