RACF Architect Consultant / Engineering

Job Title: ( RACF Architect Consultant  )  Engineering | Level 4 (USD)

Location: Open to Remote (Don’t look for California candidate for remote CA candidate not consider)
Client: Investment Banking

Job Description

We are seeking a RACF Architect Consultant to join our Mainframe Security team. The ideal candidate will have strong experience in IBM RACF, IBM zSecure, and z/OS UNIX System Services (USS) security and a proven ability to lead assessment, scoping, and target-state architecture design, and guide implementation for enterprise mainframe security solutions. This is an architect role, not an engineer role. Candidates must be able to speak to projects they led.

Responsibilities:

• Lead assessment, scoping, and architectural design for RACF and USS security solutions across authentication, authorization, encryption, and privileged access.
• Define target-state architectures and produce solution and design documentation.
• Guide engineering teams through build, validation, testing, and implementation.
• Support deployments, process changes, operational handoffs, documentation, and training.
• Assess feasibility and trade-offs and recommend approaches that meet security, operational, audit, and resiliency requirements.
• Collaborate with development, security product owners, systems programming, database, CICS/MQ, business, and audit teams.
• Create and maintain security monitoring, automation, and reporting using IBM zSecure, Compliance Manager, Admin Express, multifactor platforms, and key management.
• Monitor and report on KPIs, control health, and operational trends, recommending preventative actions and improvements.
• Serve as subject matter expert for RACF, USS, and z/OS security controls and best practices.

Required Skills & Qualifications:

• 12+ years of related experience as a mainframe security architect or senior engineer leading enterprise RACF and USS security solutions.
• Expert, hands-on knowledge of IBM RACF and IBM zSecure, including configuration, internals, reporting, and administration.
• Deep expertise in z/OS UNIX System Services security, including UNIXPRIV, file and directory permissions, and BPX resources.
• Proven ability to assess current state, define scope, and produce target-state architectures and design documentation.
• Proficiency with JCL, REXX, and CARLa for automation, reporting, utilities, and tooling development.
• Experience with z/OS utilities and facilities such as TSO, ISPF, and SDSF.
• Working knowledge of database technologies and query tools including DB2, Sybase, and SQL.
• Experience with authentication and encryption on mainframe, including digital certificates, key management, and multifactor authentication.
• Broad understanding of z/OS disciplines: systems programming, storage, networking, USS, CICS, DB2, performance, and enterprise tooling.
• Strong understanding of IAM practices: least privilege, privileged access management, access certification, segregation of duties, and vulnerability management.
• Ability to work independently, manage competing priorities, and deliver with limited oversight, including occasional off-hours support.
• Strong project planning, organization, time management, and multitasking skills.
• Proficiency with Microsoft Excel, Word, Access, and PowerPoint.
• Excellent verbal and written communication skills for technical and non-technical stakeholders.
• Collaborative team player who promotes an inclusive, respectful culture.

Preferred Skills:

• Experience leading audit engagements or responses related to mainframe security controls.
• Background in designing least-privilege USS access models at enterprise scale.