IT Engineer (Mainframe Security) PAM

Job ID: JP00016326

Experience Level: 10+ Years

The IT Engineer PAM is responsible for maintaining and securing the enterprise mainframe security environment, ensuring compliance with identity and access management (IAM) standards and industry best practices. This role provides advanced (Tier 3) support for mainframe security operations, with deep expertise in RACF administration, zSecure tooling, and mainframe access controls. The engineer ensures robust governance, compliance, and protection of critical systems and data.

• Administer and maintain the mainframe security environment using RACF (Resource Access Control Facility) and zSecure.

• Configure, manage, and audit RACF security profiles, including:

  • User, Group, and Resource profiles

  • Dataset, CICS, and DB2 security profiles

  • SETROPTS configuration and maintenance

• Enforce identity and access management controls aligned with least privilege, segregation of duties, and data protection principles.

• Provide Tier 3 support for mainframe security incidents, inquiries, and service requests.

• Review, validate, and approve access requests in accordance with established security policies and compliance requirements.

• Monitor and troubleshoot RACF-related issues; perform root cause analysis and remediation.

• Support compliance, audit, and regulatory requirements by preparing evidence, responding to findings, and implementing corrective actions.

• Collaborate with IAM, infrastructure, and audit teams to ensure consistent access governance across platforms.

• Document security configurations, procedures, and operational standards.

• 10+ years of experience in mainframe security engineering or IAM-focused roles.

• Deep expertise in RACF, including administration of users, groups, resources, datasets, CICS, and DB2.

• Strong hands-on experience with zSecure for security management, auditing, and reporting.

• Advanced knowledge of mainframe system utilities and commands:

  • TSO, ISPF, JCL, REXX

• Strong understanding of security concepts, including access control, least privilege, identity lifecycle management, and data protection.

• Proven troubleshooting and analytical skills for complex RACF and mainframe security issues.

• Experience supporting audits and compliance initiatives related to mainframe security.

• Excellent verbal and written communication skills, with the ability to engage both technical and non-technical stakeholders.

• Experience integrating or working with ServiceNow for access requests and workflow management.

• Prior experience supporting regulated or compliance-driven environments.