> Markdown version of [/jobs/ext/2051803-direct-security-consultant](https://www.wearedevelopers.com/jobs/ext/2051803-direct-security-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Direct Security Consultant

- **Company:** IBM
- **Location:** United States
- **Contract:** Permanent contract
- **Skills:** Data Analysis, Audit Trail, User Authentication, Data Files, File Transfer, Node.Js, IBM Resource Access Control Facility, Information Technology Security Auditing, User Provisioning Software, Z/OS, Data Logging, Transport Layer Security
- **Published:** August 14, 2026
- **Apply:** https://www.dice.com/job-detail/42e15ab8-f402-4947-a3fa-4c0a9eb01101

## About the Role

Technical Expertise

 * 8+ years administering or securing IBM Connect:Direct for z/OS.
 * Strong knowledge of:

 * IBM Connect:Direct architecture
 * Managed File Transfer (MFT)
 * Connect:Direct configuration & administration
 * Node definitions and process management

Mainframe Security

 * Experience with one or more ESMs:

 * RACF (Preferred)
 * CA Top Secret (TSS)
 * CA ACF2

Strong understanding of:

 * Started Task security
 * Dataset security
 * Resource profiles
 * User provisioning
 * Least-privilege access models
 * Security auditing

Security Technologies

Experience assessing:

 * TLS/SSL
 * Digital certificates
 * Cryptographic configurations
 * Secure communications
 * Authentication & authorization models
 * Security monitoring and audit logging

Preferred Qualifications

 * Experience performing security assessments or audits in enterprise mainframe environments.
 * Familiarity with IBM z/OS infrastructure and enterprise networking.
 * Knowledge of IBM security best practices for Connect:Direct.
 * Experience in regulated industries (banking, insurance, healthcare, government).
 * Security certifications such as CISSP, CISA, or equivalent.

## Description

Security Assessment & Validation

 * Perform a comprehensive security assessment of IBM Connect:Direct environments across ~15 z/OS LPARs.
 * Validate:

 * Node inventory
 * Software versions
 * Configuration parameters
 * Connectivity models
 * Operational roles and responsibilities

Enterprise Security Manager (ESM) Integration Review

 * Assess integration with RACF, ACF2, or Top Secret, including:

 * Started Task security
 * Administrative authorities
 * Process submission permissions
 * Dataset access controls
 * Privileged operations

Authentication & Secure Communications

 * Evaluate:

 * TLS/SSL implementation
 * Digital certificate management
 * Secure protocol configuration
 * Remote node definitions
 * Trusted relationships
 * Credential management practices

Configuration & Operational Review

 * Review Connect:Direct configuration datasets and operational settings.
 * Evaluate logging, audit capabilities, monitoring, and operational security procedures.

Risk Identification

Identify:

 * Excessive privileges
 * Weak access controls
 * Insecure file transfer paths
 * Weak/outdated cryptographic configurations
 * Configuration inconsistencies
 * Security misconfigurations

Analysis & Reporting

 * Analyze findings against IBM and industry security best practices.
 * Develop a prioritized assessment report including:

 * Findings
 * Risk ratings
 * Remediation recommendations
 * Implementation guidance

Present findings and recommendations to client technical stakeholders., Deliverables

 * Complete Connect:Direct security assessment
 * Configuration validation report
 * Security findings with risk ratings
 * Prioritized remediation roadmap
 * Executive summary and technical recommendations
 * Knowledge transfer session with client team


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Introduction to TXT](https://www.wearedevelopers.com/videos/30-introduction-to-txt)
- [Stop using Node.js like in 2020! What changed and what you can do today with Node.js](https://www.wearedevelopers.com/videos/100011-stop-using-node-js-like-in-2020-what-changed-and-what-you-can-do-today-with-node-js)
- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Implementing continuous delivery in a data processing pipeline](https://www.wearedevelopers.com/videos/73-implementing-continuous-delivery-in-a-data-processing-pipeline)
- [Stop Using Node.js Like It’s 2020! - Alfonso Graziano](https://www.wearedevelopers.com/videos/1863-stop-using-node-js-like-it-s-2020-alfonso-graziano)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Top Big Data Technologies That You Need to Know](https://www.wearedevelopers.com/magazine/108-top-big-data-technologies-that-you-need-to-know)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)