Mainframe Engineer

IntePros; Pittsburgh (Allegheny County); On-site; USD 120,000 - 180,000; Full time

Job summary

IntePros is seeking a Senior Mainframe Security Engineer to lead security controls, vulnerability management, and automation for enterprise mainframes. The role is highly technical and hands-on, focused on RACF, ACF2, TSS, zSecure, REXX, and CARLa within a security program.

You will partner with clients and internal teams to analyze findings, coordinate remediation, and drive hardening efforts across z/OS, with emphasis on least privilege and documentation in Confluence and JIRA.

Qualifications

• Extensive mainframe security experience with RACF, ACF2, and/or Top Secret (TSS).
• Proficiency in IBM zSecure, REXX, and CARLa for security automation.
• Experience with mainframe vulnerability management, auditing, and remediation.

Responsibilities

• Serve as SME for RACF/ACF2/TSS within vulnerability management.
• Automate mainframe security scanning processes.
• Create and maintain REXX-based automation and schedule scans.
• Use IBM zSecure and CARLa to analyze security environments and identify vulnerabilities.
• Coordinate remediation of mainframe vulnerabilities with teams.
• Perform rescans and retesting to validate remediation.
• Support z/OS hardening and least-privilege initiatives.
• Document processes and workflows in Confluence, JIRA, and SharePoint.
• Collaborate with clients and internal teams to resolve issues.
• Develop and maintain internal vulnerability tools and utilities.

Skills

RACF

ACF2

Top Secret (TSS)

IBM zSecure

REXX

CARLa

Education

Bachelor's degree or equivalent combination of education and extensive mainframe security experience

Tools

IBM Syncsort

ICETOOL

Job description

Location: Pittsburgh, PA or Lake Mary, FL preferred; remote candidates may be considered

Position Overview

A leading financial services organization is seeking a Senior Mainframe Security Engineer to support enterprise mainframe security and vulnerability management initiatives. This is a highly technical, hands-on role focused on mainframe security controls, vulnerability scanning and remediation, security database analysis, and automation.

The ideal candidate will bring extensive mainframe security experience with RACF, ACF2, and/or Top Secret (TSS), along with strong expertise in IBM zSecure, REXX, and CARLa. RACF experience is particularly valuable as the organization continues migration efforts.

Key Responsibilities

• Serve as a subject matter expert for RACF, ACF2, and Top Secret (TSS) within mainframe vulnerability management initiatives.
• Develop, mature, and automate mainframe security scanning processes.
• Create and maintain REXX-based programs and automation and schedule recurring security scans.
• Use IBM zSecure and CARLa to analyze mainframe security environments and identify vulnerabilities.
• Investigate security findings and coordinate remediation of mainframe vulnerabilities.
• Perform rescans and retesting to validate remediation and support vulnerability closure.
• Support z/OS hardening, security controls, STIG requirements, and least-privilege initiatives.
• Manage and validate user, batch, service, client, and administrative IDs.
• Partner directly with clients and internal engineering/security teams to resolve vulnerabilities and access-related issues.
• Develop process documentation, flowcharts, and materials within tools such as Confluence, JIRA, and SharePoint.
• Support and improve internal vulnerability management and security utility tools.

Required Qualifications

• Significant experience with IBM zSecure, including security auditing, analysis, and vulnerability identification.
• Proficiency with REXX for scripting, programming, and security process automation.
• Knowledge of z/OS security controls, STIG hardening, vulnerability management, and remediation practices.
• Familiarity with mainframe utilities such as IBM Syncsort and ICETOOL.
• Ability to analyze security findings, troubleshoot access issues, and validate remediation through rescanning and testing.
• Strong communication and documentation skills with the ability to collaborate with technical teams, security stakeholders, and clients.
• Bachelor's degree or equivalent combination of education and extensive mainframe security experience.