> Markdown version of [/jobs/ext/2388706-identity-access-management-engineer](https://www.wearedevelopers.com/jobs/ext/2388706-identity-access-management-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Identity & Access Management Engineer - **Company:** Brenham Ready Mix Inc - **Location:** United States (Remote available) - **Experience:** Expert - **Salary:** $125,000.0 - $159,000.0 - **Contract:** Permanent contract - **Skills:** User Authentication, Customer Information Control System (CICS), Cyber Security, Information Systems, Data Files, IBM DB2, Job Control Language (JCL), Rexx (Programming Language), Identity and Access Management, Interactive System Productivity Facility (ISPF), PCI Data Security Standards, IBM Resource Access Control Facility, Role-Based Access Control, User Provisioning Software, Z/OS, Scripting, Software Application Delivery, Information Technology, Servicenow - **Published:** August 6, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=0c4d1f384ea7ccaa ## About the Role * Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Information Systems, or a related field, or equivalent combination of education and experience. * 5+ years of experience administering IBM z/OS mainframe security environments. * Extensive hands-on experience administering RACF within enterprise mainframe environments. * Strong understanding of Identity and Access Management (IAM) principles and lifecycle processes. * Experience administering: + RACF User Profiles + Group Profiles + Resource Profiles + Dataset Profiles + CICS Security + DB2 Security + SETROPTS configuration * Strong understanding of authentication, authorization, identity governance, privileged access management, least privilege, and role-based access control. * Experience using IBM z/OS utilities including TSO, ISPF, JCL, and REXX. * Strong analytical and troubleshooting skills with the ability to diagnose and resolve complex access and security issues. * Experience supporting audit activities and regulatory compliance initiatives. * Excellent written and verbal communication skills with the ability to communicate effectively across technical and business teams. Desired: * Experience administering IBM zSecure Administration and Audit. * Experience using ServiceNow for access requests, incident management, and change management. * Experience supporting Identity Governance and Administration (IGA) processes. * Experience supporting SOX, PCI DSS, NIST, ISO 27001, FFIEC, or other regulatory frameworks. * Experience with privileged access management (PAM) concepts and enterprise IAM governance. * Experience developing automation using REXX or other scripting languages. * Knowledge of enterprise mainframe operations, CICS, DB2, and z/OS security architecture. ## Description The ideal candidate will have extensive experience with RACF administration, IBM zSecure, and mainframe identity management practices. This individual will work closely with cybersecurity, infrastructure, application, audit, and compliance teams to ensure secure access to critical mainframe resources while supporting governance initiatives, access reviews, and operational excellence., * Administer and maintain the IBM RACF security environment for enterprise z/OS systems. * Manage the complete identity lifecycle, including user provisioning, modifications, role changes, transfers, and deprovisioning. * Configure and maintain RACF User, Group, Resource, Dataset, CICS, and DB2 security profiles. * Configure and maintain RACF SETROPTS parameters to ensure compliance with enterprise security standards. * Implement and enforce least privilege, role-based access control (RBAC), and segregation of duties (SoD) principles across the mainframe environment. * Review, evaluate, and approve user access requests in accordance with established IAM governance processes and security policies. * Partner with business units, application teams, and cybersecurity to design and implement secure access models for new and existing applications. * Provide Tier 3 support for complex identity, authentication, authorization, and RACF-related incidents and service requests. * Troubleshoot access failures, permission conflicts, RACF violations, and authorization issues across production and non-production environments. * Utilize IBM zSecure to perform security administration, reporting, compliance monitoring, and audit support. * Support periodic access certifications, entitlement reviews, privileged access reviews, and audit activities. * Monitor compliance with internal security standards, regulatory requirements, and corporate IAM policies. * Develop and maintain RACF standards, operational procedures, security documentation, and technical guidelines. * Identify opportunities to automate IAM administration and reporting using REXX, JCL, and other mainframe utilities. * Participate in security projects, system upgrades, application implementations, and IAM modernization initiatives. * Collaborate with enterprise IAM, cybersecurity, infrastructure, and governance teams to strengthen the organization's overall security posture. * Recommend and implement process improvements that enhance operational efficiency, security, and compliance. * Perform other duties as assigned ## Related Videos - [Data Fabric in Action - How to enhance a Stock Trading App with ML and Data Virtualization](https://www.wearedevelopers.com/videos/253-data-fabric-in-action-how-to-enhance-a-stock-trading-app-with-ml-and-data-virtualization) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [Building with IBM Bob](https://www.wearedevelopers.com/videos/100275-building-with-ibm-bob) - [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Oops! Stories of supply chain shenanigans](https://www.wearedevelopers.com/videos/245-oops-stories-of-supply-chain-shenanigans) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Résumé-Driven Development: How IT trends affect the job market for software developers](https://www.wearedevelopers.com/magazine/59-resume-driven-development-how-it-trends-affect-the-job-market-for-software-developers) - [Software Developer Salary in Switzerland [2023]](https://www.wearedevelopers.com/magazine/215-software-developer-salary-in-switzerland-2023) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j) - [Data Analyst Salary in Switzerland](https://www.wearedevelopers.com/magazine/276-data-analyst-salary-in-switzerland)