Mainframe Security Engineer

Bayforce; United States; On-site; USD 140,000 - 170,000; Full time

Job summary

Bayforce is seeking a Senior Mainframe Security Engineer to design, implement, and support security solutions across IBM mainframe environments. You will bring expertise in ACF2, RBAC, identity governance, and privileged access management while aligning with enterprise security standards and regulatory requirements.

In this role you will mentor teammates, drive the mainframe security roadmap, manage certificates, audits, compliance reporting, and incident response, and provide Level 2 IAM and

Qualifications

• Minimum of 6-8 years experience in mainframe security administration, mainframe infrastructure, or architecture.
• Ability to lead technical initiatives across multiple teams.
• Experience with zero trust and privileged access governance.
• Proven ability to translate security risks into business impact for leadership.

Responsibilities

• Design, implement, and support security solutions for IBM mainframe environments.
• Lead cross-team initiatives and mentor junior staff.
• Oversee access recertification, audits, and compliance reporting.
• Manage SSL/TLS certificates for internal and external mainframe services.
• Provide Level 2 IAM and mainframe security support during high-severity incidents.

Skills

RBAC

Identity governance

Privileged access management

Zero Trust

Security monitoring

Root cause analysis

Leadership

ACF2

Tools

ACF2

SSL/TLS certificates management

Job description

Duration: 6 months to start, could extend or convert

Preferred Location: Remote, ET hours

Role Description:

• The Mainframe Security Engineer serves as an advanced technical resource responsible for designing, implementing, and supporting security solutions across enterprise IBM mainframe environments.
• This role provides subject matter expertise in ACF2 security architecture, access controls, CPF propagation, identity governance, privileged access management, and role-based access control (RBAC). The engineer partners with Cybersecurity, Infrastructure, Application Development, and Identity teams to ensure mainframe security capabilities align with enterprise security standards and regulatory requirements.
• Responsibilities include supporting access recertification, compliance reporting, audits, security monitoring, incident response, encryption, digital certificates, and data protection controls. The position also supports and troubleshoots SailPoint IIQ and related identity governance solutions, including complex provisioning and entitlement issues.
• This individual identifies security risks and control gaps, develops mitigation strategies, and participates in disaster recovery, cyber recovery, and resiliency testing. The engineer provides Level 2 support for IAM and Mainframe Security services and assists with high-severity production incidents when required.
• As a senior technical contributor, this individual also mentors less experienced team members and helps drive the ongoing development of the organization's Mainframe Security strategy and roadmap.

Requirements:

• Minimum of 6-8 years experience in mainframe security administration, mainframe infrastructure, systems management and/or mainframe architecture
• Ability to lead technical initiatives spanning multiple teams and organizations
• Ability to influence technical decisions without direct authority
• Ability to govern service accounts, batch logon IDs, privileged IDs, and other non human identities throughout their lifecycle.
• Demonstrated ability to translate technical risks into business impact for leadership audiences
• Strong analytical and problem solving skills with focus on root cause analysis and remediation
• Experience with Zero Trust, privileged access governance, and security monitoring concepts
• Experience managing SSL/TLS digital certificates for internal and external mainframe services.