Senior RACF Administrator

DXC Technology Company; Valby; Hybrid; DKK 900.000 - 1.100.000; Vollzeit

Zusammenfassung

DXC Technology seeks a seasoned Mainframe RACF administrator to manage RACF across IBM z/OS platforms, handling IDs, groups, and resource profiles while enforcing approved access procedures. The role includes regular reviews and remediation of excessive or unauthorized access.

You will use IBM zSecure for administration, security analysis, and compliance reporting, conduct assessments, and support audits with evidence.

Qualifikationen

• Experience administering RACF in IBM z/OS environments.
• Knowledge of access controls, groups, and resource profiles.
• Familiarity with audit trails and security reporting.

Aufgaben

• Administer and maintain IBM RACF security environments across IBM z/OS platforms.
• Create, modify, disable, and remove RACF IDs and groups per access procedures.
• Manage RACF groups, permissions, ownership, and resource profiles.
• Use IBM zSecure for RACF administration, security analysis, reporting, auditing, and compliance monitoring.
• Perform RACF and z/OS security reviews and investigate violations.

Kenntnisse

RACF administration

IBM z/OS

Security analytics

MFA implementation

Tools

zSecure

Jobbeschreibung

Job Description:

Key Responsibilities

• Administer and maintain IBM RACF security environments across IBM z/OS platforms.
• Create, modify, disable, and remove RACF user IDs and group IDs in accordance with approved access procedures.
• Manage RACF groups, permissions, ownership, authorities, and resource profiles.
• Administer RACF dataset profiles and resource profiles for applications, started tasks, transactions, and system resources.
• Manage and review RACF privileged authorities including SPECIAL, OPERATIONS, AUDITOR, and other elevated permissions.
• Perform regular RACF access reviews, entitlement reviews, and privileged-access reviews.
• Identify and remediate excessive, inappropriate, inactive, orphaned, or unauthorized access.
• Use IBM zSecure for RACF administration, security analysis, reporting, auditing, and compliance monitoring.
• Perform security assessments using zSecure Audit and generate reports for security and compliance requirements.
• Analyze RACF and z/OS security violations and investigate unauthorized access attempts.
• Support internal and external security audits by preparing RACF, zSecure, and z/OS security evidence and reports.
• Track audit findings, coordinate remediation activities, and provide evidence for audit closure.
• Support implementation and administration of Multi-Factor Authentication (MFA) for mainframe environments.
• Troubleshoot authentication and authorization issues involving RACF, MFA, and mainframe applications.
• Manage the lifecycle of mainframe digital certificates, including certificate inventory, renewal, replacement, installation, validation, and retirement.
• Coordinate certificate replacements and renewals with application, infrastructure, PKI, network, and security teams.
• Manage RACF key rings and certificate-related security configurations where applicable.
• Monitor certificate expiration dates and proactively coordinate renewals to prevent production outages.
• Support security hardening and continuous improvement of IBM z/OS environments.
• Investigate RACF authorization failures, authentication problems, security violations, and mainframe security incidents.
• Perform periodic user and entitlement certification activities.
• Support Segregation of Duties (SoD) and privileged-access controls.
• Implement RACF and mainframe security changes through formal Change Management processes.
• Develop and maintain RACF, zSecure, MFA, certificate-management, and security-operation procedures.
• Collaborate with Mainframe Operations, System Programmers, Application Teams, Cybersecurity, IAM, PKI, Risk, Compliance, and Audit teams.
• Provide security recommendations and technical support for mainframe applications and infrastructure.
• Maintain accurate security documentation, audit evidence, operational procedures, and technical runbooks.

At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We’re committed to fostering an inclusive environment where everyone can thrive.

Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf.More information on employment scams is available here.