> Markdown version of [/jobs/ext/3119610-acf2-security-engineer](https://www.wearedevelopers.com/jobs/ext/3119610-acf2-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# ACF2 Security Engineer

- **Company:** Brilliant
- **Location:** Buffalo, NY, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** COBOL (Programming Language), Cyber Security, Rexx (Programming Language), Identity and Access Management, Intrusion Detection Systems, Mainframes, IBM Resource Access Control Facility, Role-Based Access Control, Zero Trust Network Access, Runbook, Security Information and Event Management, Cyberark, QRadar, Api Design, SailPoint, Splunk
- **Published:** September 28, 2026
- **Apply:** https://www.dice.com/job-detail/b52a3a28-c1c2-4bc0-9c8e-1a40b0d07e12

## About the Role

* 8-10+ years Mainframe Security / Security Administration
 * Strong CA ACF2 / ACF2 Security Administration
 * z/OS Mainframe Security
 * SailPoint IIQ / IAM / Identity Governance
 * PAM/CyberArk
 * Experience with RBAC, access reviews, privileged access, MFA, and security compliance

Nice to Have: REXX/COBOL/Assembler, Splunk/QRadar/Elastic, Zero Trust, SSL/TLS certificates, API-based IAM integrations, and Financial Services experience

## Description

Seeking a Senior ACF2 Security Engineer with strong Mainframe Security/ACF2 expertise to support security administration, access governance, compliance, IAM integration, and production support within a large enterprise environment., * Administer and support CA ACF2, including security rules, CPF propagation, access controls, and reporting.

 * Design and manage RBAC, entitlement governance, access recertification, privileged IDs, service accounts, and batch IDs.
 * Support SailPoint IIQ integration, provisioning, and identity governance issues.
 * Work with CyberArk/PAM, Mainframe MFA, SSL/TLS certificates, and enterprise IAM solutions.
 * Support security audits, risk remediation, compliance controls, SIEM integration, and security monitoring.
 * Troubleshoot complex Mainframe security issues and provide L2 production support.
 * Develop security procedures, runbooks, documentation, and audit evidence while collaborating with Cybersecurity, IAM, Infrastructure, and application teams.