Lead Mainframe Security Engineer - z/OS ACF2/TSS/RACF

eNGINE; Pittsburgh (Allegheny County); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Paid training/certifications

Job summary

eNGINE is hiring an experienced Mainframe Security professional to join a team of four providing z/OS security services across a major financial services company. This role serves as a subject matter expert on Mainframe Security Systems (ACF2, TSS, RACF) supporting vulnerability management, security hardening, and remediation projects.

Responsibilities include day-to-day tactical execution, guiding vulnerability management initiatives, and interfacing with client staff to train on our

Qualifications

• Deep mainframe (z/OS) expertise with hands-on experience in ACF2, TSS, or RACF
• 7–10 years of experience with zSecure Audit
• Proficiency in Mainframe REXX, IBM Sync Sort, and ICETOOL
• Strong communication and documentation skills

Responsibilities

• Provide day-to-day tactical execution of security projects, including detailed data analytics, asset modeling, and project documentation
• Serve as subject matter expert on Mainframe Security Systems — ACF2, TSS, and RACF — supporting vulnerability management initiatives
• Apply z/OS ACF2/TSS/RACF STIG guidelines in system hardening efforts
• Determine security standards for z/OS hardening, security controls, and vulnerability remediation
• Interface directly with client staff to train and support day-to-day use of our home-grown vulnerability tool and other utility tools
• Serve as liaison between mainframe engineering teams and information security teams

Job description

eNGINE is hiring an experienced Mainframe Security professional to join a team of four providing z/OS security services across a major financial services company. This role serves as a subject matter expert on Mainframe Security Systems (ACF2, TSS, RACF) supporting vulnerability management, security hardening, and remediation projects.

Responsibilities include day-to-day tactical execution, guiding vulnerability management initiatives, and interfacing with client staff to train on our