> Markdown version of [/jobs/ext/3410519-telecommute-z-os-security-consultant](https://www.wearedevelopers.com/jobs/ext/3410519-telecommute-z-os-security-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# TELECOMMUTE z/OS security consultant

- **Company:** SR Talent Solution Inc
- **Location:** United States (Remote available)
- **Contract:** Temporary contract
- **Skills:** Cyber Security, System Configuration, Data Files, Database Analysis, IBM Parallel Sysplex, PCI Data Security Standards, Posix, IBM Resource Access Control Facility, Sherwood Applied Business Security Architecture, Security Information and Event Management, Z/OS, Data Logging, Cloud Platform System, Togaf
- **Published:** September 25, 2026
- **Apply:** https://www.dice.com/job-detail/ec515458-9966-42c7-abfe-89cd2963e9ef

## About the Role

* 15+ years of z/OS security experience with progressive leadership responsibilities

 * Demonstrated track record architecting security solutions for large-scale enterprises

 * Experience presenting to and advising executive leadership and board committees

 * Industry certifications preferred: CISSP, CISM, IBM Certified z/OS Security Expert

 * Architect-level mastery of RACF / ESM security design, implementation, and governance

Expert knowledge of:

 * Advanced USS security architecture (UIDs, GIDs, OMVS, POSIX, superuser controls)

 * FACILITY, UNIXPRIV, STARTED, CSFSERV, CRYPTOZ classes and their strategic application

 * zFS/HFS architecture, mount security, enterprise auditing and SIEM integration

 * Multi-LPAR, Sysplex, and cross-platform security architecture

 * Extensive experience with:

 * Security architecture frameworks (SABSA, TOGAF, NIST CSF)

 * Enterprise risk management and security governance

 * Regulatory compliance architecture (SOX, PCI-DSS, GDPR, industry-specific regulations)"

## Description

We are NOT looking an Architect here

 * RACF database analysis, restructuring, and cleanup

 * User ID, group, and role rationalization

 * Dataset, general resource, and subsystem profile remediation

 * Implementation of least-privilege access controls

 * Elimination of orphaned and excessive access

 * Standardization of security naming conventions and models

 * Alignment of RACF controls with z/OS system configurations

 * Implementation of enhanced auditing, SMF logging, and monitoring controls

 * Support for audit findings and regulatory remediation "