Mainframe Security Architect — Hybrid & IAM Security Lead

Kyndryl Inc.; Toronto; Hybrid; CAD 194,000 - 265,000; Full time

Job summary

Kyndryl is seeking a seasoned security architect to lead the design and operationalization of mainframe security solutions for managed-services clients. You will partner with the mainframe consulting team to validate designs and translate recommendations into runbooks, controls, and run readiness plans while guiding delivery teams through design, build, test, pilot, and cutover.

You will provide architecture guidance across IBM Z security domains, support RACF/ACF2/Top Secret, and design

Qualifications

• Strong experience with IBM Z / z/OS security architecture, engineering, or operations.
• Deep hands-on knowledge of RACF, ACF2, or Top Secret/TSS.
• Working knowledge of SAF, ESM integration, dataset security, and privileged access.

Responsibilities

• Lead the architecture and operationalization of mainframe security solutions for managed-services clients.
• Validate designs with the mainframe consulting team and translate recommendations into runbooks and controls.
• Design security patterns for mainframe access paths and workloads (TSO, CICS, Db2, MQ, FTP/SFTP, SSH, JES, SDSF).
• Support integration with MFA, IAM, SIEM/SOC, and compliance processes.
• Define operating models for user enrollment, access reviews, and break-glass procedures.
• Guide delivery through design, build, test, pilot, cutover, and transition-to-run.

Skills

IBM Z / z/OS security

RACF/ACF2/Top Secret

SIEM / SOC integration

RBAC / least privilege

IAM integration

Mainframe security architecture

Tools

zSecure

ACF2

Broadcom Top Secret

JCL / JES2

SailPoint / IAM tools

Job description

Kyndryl is seeking a seasoned security architect to lead the design and operationalization of mainframe security solutions for managed-services clients. You will partner with the mainframe consulting team to validate designs and translate recommendations into runbooks, controls, and run readiness plans while guiding delivery teams through design, build, test, pilot, and cutover.

You will provide architecture guidance across IBM Z security domains, support RACF/ACF2/Top Secret, and design