Mainframe Security Expert (z/OS ACF2/TSS) – Hybrid

Eliassen Group; Pittsburgh (Allegheny County); Hybrid; Confidential; Full time

Job summary

Eliassen Group is seeking a Mainframe Security expert for a contract-to-hire role in Pittsburgh, hybrid (4 days onsite). The candidate will serve as SME across ACF2, Top Secret (TSS), and RACF within vulnerability management initiatives, including standards setting for z/OS hardening, controls, and remediation, while coordinating between mainframe engineering and information security teams.

The position requires 7–10 years with zSecure Audit, 10+ years with z/OS ACF2/TSS, and proficiency in

Qualifications

• zSecure Audit experience required, 7 to 10 years.
• Expertise in Broadcom ACF2 and/or Top Secret (TSS); 10+ years with z/OS ACF2 or TSS.
• Demonstrated use of z/OS ACF2/TSS/RACF STIG in hardening.
• Proficiency with Mainframe REXX, IBM Syncsort, and ICETOOL.
• Experience with zSecure programming using CARLa.
• Background in z/OS security consulting or penetration testing preferred.
• Exposure to vulnerability management.
• Good communication and documentation skills; exposure to JIRA, Confluence, and SharePoint.

Responsibilities

• Provide day-to-day tactical project execution and perform detailed analytics across multiple data points.
• Act as SME for mainframe security systems including ACF2, TSS, and RACF within vulnerability management projects.
• Leverage z/OS ACF2/TSS/RACF STIG for hardening efforts.
• Interface directly with client staff to train and address daily questions on a home-grown vulnerability tool and related utilities.
• Determine and document security standards for z/OS hardening, security controls, and vulnerability remediation.
• Facilitate communication between mainframe engineering and information security teams.
• Create and maintain project documentation as required.

Skills

z/OS security

Mainframe security SME

Vulnerability management

Documentation skills

Communication skills

Education

BS degree

15+ years of mainframe security experience

Tools

z/OS ACF2

Top Secret (TSS)

RACF

zSecure

CARLa

REXX

IBM Syncsort

ICETOOL

JIRA

Confluence

SharePoint

Job description

Eliassen Group is seeking a Mainframe Security expert for a contract-to-hire role in Pittsburgh, hybrid (4 days onsite). The candidate will serve as SME across ACF2, Top Secret (TSS), and RACF within vulnerability management initiatives, including standards setting for z/OS hardening, controls, and remediation, while coordinating between mainframe engineering and information security teams.

The position requires 7–10 years with zSecure Audit, 10+ years with z/OS ACF2/TSS, and proficiency in