Mainframe Security Engineer: RACF & z/OS Specialist

Kyndryl Inc.; Phoenix, Northern (AZ, KY); Hybrid; USD 110,000 - 150,000; Full time

Job summary

Kyndryl Inc. in Phoenix, AZ is seeking a Senior RACF Security Administrator to join our mainframe security team. You will administer RACF across z/OS, implement least-privilege access, perform audits, and support regulatory compliance with SOX, PCI, and HIPAA controls.

You will analyze security logs, configure encryption practices, and collaborate with IAM, SSO, and enterprise security solutions to safeguard critical mainframe assets. Travel and on-call duties may apply based on client needs.

Qualifications

• Strong hands-on experience with RACF administration on z/OS.
• Deep knowledge of RACF profiles, classes, and dataset security.
• Experience with SMF data analysis, security reporting and audit tools.
• Understanding of z/OS security concepts and system internals.
• Experience with SIEM tools such as Splunk or QRadar is preferred.

Responsibilities

• Administer and maintain RACF security environment across z/OS systems.
• Create, modify, and revoke users, groups, and resource access permissions.
• Implement least-privilege access controls for datasets, applications, and system resources.
• Configure and maintain security policies aligned with enterprise standards.
• Perform periodic access reviews, audits, and compliance checks.
• Support regulatory compliance (SOX, PCI, HIPAA where applicable).
• Analyze security logs and reports; investigate access violations and security incidents.
• Troubleshoot RACF-related issues and integrate with IAM/SSO solutions.

Skills

RACF administration

z/OS security concepts

SMF data analysis

Security reporting

Access controls

Python

REXX

Tools

Splunk

QRadar

IAM tools

Job description

Kyndryl Inc. in Phoenix, AZ is seeking a Senior RACF Security Administrator to join our mainframe security team. You will administer RACF across z/OS, implement least-privilege access, perform audits, and support regulatory compliance with SOX, PCI, and HIPAA controls.

You will analyze security logs, configure encryption practices, and collaborate with IAM, SSO, and enterprise security solutions to safeguard critical mainframe assets. Travel and on-call duties may apply based on client needs.