> Markdown version of [/jobs/ext/2697655-mainframe-security-architect-racf](https://www.wearedevelopers.com/jobs/ext/2697655-mainframe-security-architect-racf). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Mainframe Security Architect (RACF) - **Company:** PTR Global - **Location:** Atlanta, United States (Remote available) - **Salary:** $145,600.0 - $166,400.0 - **Contract:** Permanent contract - **Skills:** Microsoft Access, Microsoft Word, Microsoft Excel, Artificial Intelligence, Business Software, Unix, Customer Information Control System (CICS), Cyber Security, Databases, IBM DB2, Multi-Factor Authentication, Job Control Language (JCL), Rexx (Programming Language), Identity and Access Management, Interactive System Productivity Facility (ISPF), Key Management, Mainframes, Microsoft Office, Microsoft PowerPoint, IBM Resource Access Control Facility, Software Engineering, SQL Databases, System Programming, Software Vulnerability Management, Z/OS, Sybase, Database Tools and Utilities - **Published:** September 3, 2026 - **Apply:** https://www.dice.com/job-detail/d628107c-991b-4255-9e9c-3d2d65ea50d6 ## About the Role The Mainframe Security team is seeking an experienced RACF Architect Consultant to lead strategic security solutioning and implementation across the IBM Z platform for key security projects. This role requires a seasoned professional with deep expertise in IBM RACF, IBM zSecure, and z/OS UNIX System Services (USS) security. The consultant will be responsible for assessing, scoping, and designing security solutions, translating security, audit, and business requirements into robust architectures. The ideal candidate will have strong analytical, architectural, organizational, and communication skills, with the ability to work independently and influence cross-functional teams. Occasional off-hours support may be required for project implementations and critical security initiatives., * 12+ years of related experience, with demonstrated experience as a mainframe security architect or senior engineer leading the design and delivery of enterprise RACF and USS security solutions. * Expert-level, hands-on knowledge of IBM RACF and IBM zSecure, including configuration, internals, reporting, administration, and the ability to architect and design end-to-end security solutions. * Deep expertise in z/OS UNIX System Services (USS) security, including UNIXPRIV, file/directory permissions, BPX resources, and the design of least-privilege USS access models. * Proven ability to lead solution architecture activities-assessing current state, defining scope, producing target-state designs, and creating architecture and design documentation for RACF and USS security projects. * Proficiency with JCL, REXX, and CARLa for automation, reporting, utilities, and security tooling development. * Experience with core z/OS utilities and facilities, including TSO, ISPF, SDSF, and related operational tooling. * Working knowledge of database technologies and query tools such as DB2, Sybase, and SQL. * Experience implementing and supporting mainframe authentication and encryption capabilities, including digital certificates, key management, multifactor authentication, and related controls. * Broad understanding of z/OS infrastructure disciplines, including systems programming, storage, networking, UNIX System Services, CICS, DB2, performance, and enterprise tooling. * Strong understanding of Identity and Access Management best practices, including least privilege, privileged access management, access certification, segregation of duties, and vulnerability management principles. * Ability to work independently, manage competing priorities, and deliver results with limited oversight. * Strong project planning, organization, time management, and multitasking skills. * Proficiency with Microsoft Office business applications, including Excel, Word, Access, and PowerPoint. * Excellent verbal and written communication skills, with the ability to explain technical concepts to both technical and non-technical stakeholders. * Collaborative team player who promotes a team-first mindset and contributes to an inclusive, respectful culture. ## Description * Lead the assessment, scoping, and architectural design of strategic RACF and USS security project solutions, covering authentication, authorization, encryption, privileged access, and sensitive data protection. * Define target-state architectures and technical designs, produce solution and design documentation, and guide engineering teams through build, validation, testing, and implementation. * Support deployment of security solutions, including process changes, operational handoff, documentation, and training for security operations teams. * Assess technical feasibility and trade-offs of proposed solutions, and recommend strategic approaches that meet security, operational, audit, and resiliency requirements. * Collaborate with application development, security product owners, systems programming, database, CICS/MQ, business, and audit teams to gather requirements and implement effective security solutions. * Create and maintain security monitoring, automation, and reporting solutions using tools such as IBM zSecure, Compliance Manager, Admin Express, multifactor authentication platforms, and key management capabilities. * Monitor, analyze, and report on key performance indicators, control health, and operational trends; recommend preventative actions and process improvements as needed. * Serve as the architectural subject matter expert on RACF, USS, and z/OS security controls, setting standards and guiding teams on mainframe security best practices for questions, issues, audit inquiries, and project requirements., * Purchase any product, service, or gift cards from us or for us as part of an application, interview, or selection process. * Provide sensitive financial information such as credit card numbers or banking information. Successfully placed or hired candidates would only be asked for banking details after accepting an offer from us during our official onboarding processes as part of payroll setup. Pay Range: $70- $80 The specific compensation for this position will be determined by several factors, including the scope, complexity, and location of the role, as well as the cost of labor in the market; the skills, education, training, credentials, and experience of the candidate; and other conditions of employment. Our full-time consultants have access to benefits, including medical, dental, vision, and 401K contributions, as well as PTO, sick leave, and other benefits mandated by applicable state or localities where you reside or work. If you receive a suspicious message, email, or phone call claiming to be from PTR Global do not respond or click on any links. Instead, contact us directly at +1 . To report any concerns, please email us at During the hiring process, we may use artificial intelligence (AI) tools to assist in evaluating information related to your application. These tools may help analyze job-related qualifications or assist recruiters in reviewing applications and interview responses. AI-generated information is one factor considered in our hiring process. Final employment decisions are made by qualified hiring personnel and are not based solely on AI-generated recommendations. ## Related Videos - [WeAreDevelopers LIVE - Node and Package Security](https://www.wearedevelopers.com/videos/2138-wearedevelopers-live-node-and-package-security) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [The Time Paradox: Building Timezone-Safe Python/Django Applications](https://www.wearedevelopers.com/videos/1915-the-time-paradox-building-timezone-safe-python-django-applications) - [Building with IBM Bob](https://www.wearedevelopers.com/videos/100275-building-with-ibm-bob) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Coffee with Developers - Robby Russell](https://www.wearedevelopers.com/videos/917-coffee-with-developers-robby-russell) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Résumé-Driven Development: How IT trends affect the job market for software developers](https://www.wearedevelopers.com/magazine/59-resume-driven-development-how-it-trends-affect-the-job-market-for-software-developers) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Software Developer Salary in Switzerland [2023]](https://www.wearedevelopers.com/magazine/215-software-developer-salary-in-switzerland-2023)