Mainframe Logical Security Engineer

Posted 2 Days Ago
Be an Early Applicant
6 Locations
In-Office or Remote
Mid level
Cloud • Information Technology • Consulting
The Role
Design, implement, and manage RACF-based logical security across z/OS environments. Administer user/group and resource profiles, enforce least-privilege for datasets and subsystems, perform access reviews and compliance audits, analyze SMF/RACF logs and SIEM alerts, investigate incidents, integrate mainframe security with enterprise IAM/SSO/MFA, and support encryption and key management.
Summary Generated by Built In

Who We Are

At Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day. So why work at Kyndryl? We are always moving forward – always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities.

The Role

Job Description

We are seeking a skilled Mainframe Logical Security Engineer to design, implement, and manage security controls across IBM z/OS environments. The role ensures the confidentiality, integrity, and availability of enterprise systems and data by enforcing robust access controls and complying with regulatory requirements.
This role requires employees to live in or around the Plano, TX, Charlotte, NC, Richmond, VA, Jacksonville, FL, Pennington, NJ, Chicago, IL  area. You will be responsible to be onsite 3 days a week. We will consider candidates who are willing to relocate to any of these areas.

Responsibilities Include:

  • Administer and maintain RACF security environment across z/OS systems
  • Create, modify, and revoke:

    • User IDs

    • Groups

    • Resource profiles

    • Dataset and subsystem access permissions

  • Implement and maintain least-privilege access controls for:

    • Datasets

    • Applications (CICS, DB2, IMS, MQ)

    • System resources

Security Controls & Compliance

  • Configure and maintain security policies aligned with enterprise standards

  • Perform periodic access reviews, audits, and compliance checks

  • Support regulatory compliance (e.g., SOX, PCI, HIPAA where applicable)

  • Implement data protection controls and access monitoring mechanisms

Monitoring & Incident Response

  • Analyze security logs and reports:

    • SMF records

    • RACF reports

    • SIEM alerts

  • Investigate:

    • Access violations

    • Unauthorized access attempts

    • Security incidents

  • Troubleshoot and resolve:

    • Authorization failures

    • RACF-related abends or access issues

Security Architecture & Integration

  • Secure mainframe subsystems and integrations:

    • CICS, DB2, IMS, MQ, TCP/IP, USS

  • Support integration with:

    • Enterprise IAM solutions

    • Single Sign-On (SSO) / MFA (where applicable)

  • Define and maintain RACF classes, profiles, and rules for system-wide protection

Encryption & Advanced Security

  • Support:

    • Digital certificates

    • TLS/SSL configuration

    • ICSF (crypto services) at a high level

Ensure secure key management and encryption practices

 
One of the benefits of Kyndryl is that we work with clients in a variety of industries, from banking to retail. Whether you want to broaden your knowledge base or narrow your scope and specialize in a specific sector, you can find your opportunity here. You’ll also get the chance to share your expertise by recommending modernization options, identifying new business opportunities, and cultivating relationships with other teams and stakeholders. Does the work get challenging at times? Yes! But you’ll collaborate with a diverse group of talented people and gain invaluable management and organizational skills, which will come in handy as you move forward in your career.
Your future at Kyndryl
Every position at Kyndryl offers a way forward to grow your career, from Junior System Administrator to Architect. We have opportunities for Cloud Hyperscalers that you won’t find anywhere else, including hands-on experience, learning opportunities, and the chance to certify in all four major platforms. One of the benefits of Kyndryl is that we work with clients in a variety of industries, from banking to retail. Whether you want to broaden your knowledge base or narrow your scope and specialize in a specific sector, you can find your opportunity here.

Kyndryl currently does not require employees to be fully vaccinated against COVID-19, however, if you are hired to work at a client, customer, or partner location, you may be required to show proof of vaccination to align with their respective COVID-19 vaccination policies.  Those who believe they are eligible may apply for a medical or religious accommodation prior to the start of employment.

Who You Are

You’re good at what you do and possess the required experience to prove it. However, equally as important – you have a growth mindset; keen to drive your own personal and professional development. You are customer-focused – someone who prioritizes customer success in their work. And finally, you’re open and borderless – naturally inclusive in how you work with others.

Required Qualifications:

  • Strong hands-on experience with:

    • RACF administration on z/OS

  • Deep knowledge of:

    • RACF profiles, classes, and dataset security

    • User/group management and access control models

  • Experience with:

    • SMF data analysis

    • Security reporting and audit tools

  • Strong understanding of:

    • z/OS security concepts and system internals

Preferred Experience:

  • Experience in banking or financial services environments

  • Exposure to:

    • ACF2 or Top Secret (nice to have)

    • SIEM tools (Splunk, QRadar, etc.)

  • Experience with:

    • Automation (REXX, Python)

    • Identity governance tools

  • Experience with enterprise-wide security transformations or IAM integration

  • Knowledge of Zero Trust or modern security frameworks

  • Experience supporting regulatory audits in large enterprises

Being You

Diversity is a whole lot more than what we look like or where we come from, it’s how we think and who we are. We welcome people of all cultures, backgrounds, and experiences. But we’re not doing it single-handily: Our Kyndryl Inclusion Networks are only one of many ways we create a workplace where all Kyndryls can find and provide support and advice. This dedication to welcoming everyone into our company means that Kyndryl gives you – and everyone next to you – the ability to bring your whole self to work, individually and collectively, and support the activation of our equitable culture. That’s the Kyndryl Way.

What You Can Expect

With state-of-the-art resources and Fortune 100 clients, every day is an opportunity to innovate, build new capabilities, new relationships, new processes, and new value. Kyndryl cares about your well-being and prides itself on offering benefits that give you choice, reflect the diversity of our employees and support you and your family through the moments that matter – wherever you are in your life journey. Our employee learning programs give you access to the best learning in the industry to receive certifications, including Microsoft, Google, Amazon, Skillsoft, and many more. Through our company-wide volunteering and giving platform, you can donate, start fundraisers, volunteer, and search over 2 million non-profit organizations.  At Kyndryl, we invest heavily in you, we want you to succeed so that together, we will all succeed.

Get Referred!
If you know someone that works at Kyndryl, when asked ‘How Did You Hear About Us’ during the application process, select ‘Employee Referral’ and enter your contact's Kyndryl email address.
 

Skills Required

  • Hands-on RACF administration on z/OS
  • Deep knowledge of RACF profiles, classes, and dataset security
  • User and group management and access control models
  • Experience with SMF data analysis
  • Experience with security reporting and audit tools
  • Strong understanding of z/OS security concepts and system internals
  • Willingness to live in/relocate to listed metro areas and be onsite 3 days per week
  • Experience in banking or financial services environments
  • Exposure to ACF2 or Top Secret
  • Experience with SIEM tools (Splunk, QRadar, etc.)
  • Experience with automation (REXX, Python)
  • Experience with identity governance tools and IAM integration
  • Knowledge of Zero Trust or modern security frameworks
  • Experience supporting regulatory audits (SOX, PCI, HIPAA where applicable)

Kyndryl Compensation & Benefits Highlights

The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Kyndryl and has not been reviewed or approved by Kyndryl.

  • Fair & Transparent Compensation Pay is considered good in some roles, with mentions of “good pay,” “great pay and benefits,” and an “acceptable salary range” paired with bonuses. Certain senior or consulting tracks are described as market-competitive.
  • Leave & Time Off Breadth Vacation, paid time off, holidays, and a dedicated volunteer day are highlighted as positives. Parental leave exists companywide alongside sick leave and disability coverage.
  • Wellbeing & Lifestyle Benefits Remote and hybrid flexibility is emphasized, including 100% remote roles and a formal flexible workplace policy. Well‑being resources such as the Be Well program and an EAP are available.

Kyndryl Insights

Am I A Good Fit?
beta
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.

The Company
HQ: New York, NY
46,070 Employees
Year Founded: 2021

What We Do

We have the world’s best talent that design, run, and manage the most advanced and reliable technology infrastructure each day. Together, we think holistically about the health of these vital technology ecosystems. We are a focused, independent company that builds on our foundation of excellence by creating systems in new ways. Bringing in the right partners, investing in our business, and working side-by-side with our customers to unlock potential. We're raising the bar. Our experience speaks for itself: We have 90,000 highly skilled employees around the world serving 75 of the Fortune 100. But our purpose is what drives us: Advancing the vital systems that power human progress. Because when a digital ecosystem is healthy, it can more readily adapt and support continuous growth and that opens up a world of possibility for everyone.

Similar Jobs

Bounteous Logo Bounteous

Senior Platform Engineer

Artificial Intelligence • Information Technology • Professional Services • Software • Analytics • Generative AI • Big Data Analytics
Remote
United States
5000 Employees
110K-140K Annually

Bounteous Logo Bounteous

Associate Director, Adobe Workfront & MarTech Execution

Artificial Intelligence • Information Technology • Professional Services • Software • Analytics • Generative AI • Big Data Analytics
Remote
United States
5000 Employees

PNC Bank Logo PNC Bank

Technology Solution Center Analyst

Machine Learning • Payments • Security • Software • Financial Services
Remote or Hybrid
USA
55000 Employees
37K-75K Annually

PNC Bank Logo PNC Bank

Software Engineer

Machine Learning • Payments • Security • Software • Financial Services
Remote or Hybrid
USA
55000 Employees

Similar Companies Hiring

Standard Template Labs Thumbnail
Artificial Intelligence • Information Technology • Software
New York, NY
25 Employees
NODA AI Thumbnail
Artificial Intelligence • Information Technology • Software • Cybersecurity
Sydney, AU
54 Employees
Golden Pet Brands Thumbnail
Digital Media • eCommerce • Information Technology • Marketing Tech • Pet • Retail • Social Media
El Segundo, California
178 Employees

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account