Principal Cyber Security Engineer - Senior Mainframe RACF Engineer (Remote)

The Senior Mainframe RACF Engineer leads the design, implementation, and governance of RACF security controls across complex z/OS environments. This role requires expert-level RACF engineering, strong programming skills (REXX, IBM Utilities and RACF utilities, SAS, JCL, Splunk), and hands-on experience with digital certificate rotation automation, Multi-Factor Authentication (MFA) implementation, and enterprise reporting. The engineer partners with engineering, security, audit, infrastructure, and application teams to ensure resilient, compliant, and scalable mainframe security., * RACF Engineering - Architect, configure, and maintain RACF profiles, classes, permissions, and database structures across multi-LPAR environments.

• Multifactor Authentication - Support MFA for mainframe access, including integration with Enterprise Identity providers, enforcement of strong authentication policies, and modernization of legacy authentication flows.
• Digital Certificate Lifecycle - Manage certificate creation, renewal, rotation, and ring assignments; ensure secure integration with SFTP, and cross-platform authentication.
• REXX Automation - Develop automation and tooling using REXX, CLIST, and TSO/ISPF to streamline RACF administration, compliance evidence collection, and operational workflows.
• SAS Reporting - Build and optimize SAS programs for compliance reporting, audit evidence generation, access analytics, and RACF database insights.
• Security Integration - Integrate RACF with DB2, CICS, and enterprise applications to ensure end-to-end security coverage.
• Incident Response - Diagnose and resolve RACF-related issues; perform root-cause analysis and lead remediation for security events.
• Audit & Compliance - Produce SOX/HIPAA/PCI evidence, lead reviews, and maintain defensible documentation for internal and external audits.
• Authentication & Encryption Modernization - Drive modernization of authentication and cryptographic controls, including MFA and certificate lifecycle automation.
• Mentorship & Documentation - Train junior engineers; support processes, standards, and engineering design documentation.

This job posting is expected to remain active for 30 days from the initial posting date listed above. If it is necessary to extend this deadline, the posting will remain active as appropriate. Job postings may come down early due to business need or a high volume of applicants.

Bachelor’s Degree and 8 years of experience in Systems Engineering, Network, or Information Security OR High School Diploma or GED and 12 years of experience in Systems Engineering, Network, or Information Security

Preferred Skills:

• 10+ years of mainframe experience with expert RACF knowledge (profiles, classes, permissions, command set).
• Advanced proficiency in REXX, SAS, JCL, TSO/ISPF, and IBM utilities.
• Hands-on experience with Vanguard specific tools.
• Hands-on experience with MFA for mainframe access, including integration with enterprise identity providers.
• Experience with dataset encryption, and cryptographic modernization.
• Strong background in digital certificates, rings, and cross-platform authentication.
• Proven ability to troubleshoot complex RACF issues and differentiate RACF vs. non-RACF root causes.
• Experience supporting SOX, HIPAA, PCI, and internal audit requirements.
• Strong analytical, communication, and documentation skills.
• Experience defining enterprise RACF standards and reference architectures.
• Systems programming experience.
• Financial industry experience.

The base pay for this position is generally between $130,000 and $190,000. Actual starting base pay will be determined based on skills, experience, location, and other non-discriminatory factors permitted by law. For some roles, total compensation may also include variable incentives, bonuses, benefits, and/or other awards as outlined in the offer of employment.