RACF Engineer

Bridgetown Consulting Group Inc; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Bridgetown Consulting Group Inc is seeking an experienced RACF Engineer for a remote 12+ month contract in the Banking sector. The role focuses on RACF database analysis, user/group/role rationalization, and implementation of least-privilege access controls to strengthen OS security.

You will align RACF controls with z/OS configurations, standardize security naming, enhance auditing and monitoring, and support regulatory remediation efforts.

Qualifications

• 15+ years of z/OS security experience with progressive leadership responsibilities.
• Experience architecting security solutions for large-scale enterprises.
• Ability to present to executive leadership and board committees.
• Industry certifications preferred: CISSP, CISM, IBM Certified z/OS Security Expert.
• Architect-level mastery of RACF/ESM security design, implementation, and governance.

Responsibilities

• RACF database analysis, restructuring, and cleanup.
• Rationalization of User IDs, groups, and roles.
• Remediation of datasets, resources, and subsystem profiles.
• Implement least-privilege access controls.
• Eliminate orphaned and excessive access.
• Standardize security naming conventions and models.
• Align RACF controls with z/OS configurations.
• Enhance auditing, SMF logging, and monitoring controls.
• Support for audit findings and regulatory remediation.

Skills

RACF

z/OS security

Security architecture

ESM security

Executive briefings

Job description

Job Description

Title: RACF Engineer
Location: REMOTE
Duration: 12+ Months Contract
Client: Banking
Visa: GC-EAD, TN,
Interview Mode: Video

Job Description

We are NOT looking an ++Architect++here

• RACF database analysis, restructuring, and cleanup
• User ID, group, and role rationalization
• Dataset, general resource, and subsystem profile remediation
• Implementation of least-privilege access controls
• Elimination of orphaned and excessive access
• Standardization of security naming conventions and models
• Alignment of RACF controls with z/OS system configurations
• Implementation of enhanced auditing, SMF logging, and monitoring controls
• Support for audit findings and regulatory remediation "

"Qualifications:"

• 15+ years of z/OS security experience with progressive leadership responsibilities
• Demonstrated track record architecting security solutions for large-scale enterprises
• Experience presenting to and advising executive leadership and board committees
• Industry certifications preferred: CISSP, CISM, IBM Certified z/OS Security Expert
• Architect-level mastery of RACF / ESM security design, implementation, and governance

Expert knowledge of:

• Advanced USS security architecture (UIDs, GIDs, OMVS, POSIX, superuser controls)
• FACILITY, UNIXPRIV, STARTED, CSFSERV, CRYPTOZ classes and their strategic application
• zFS/HFS architecture, mount security, enterprise auditing and SIEM integration
• Multi-LPAR, Sysplex, and cross-platform security architecture
• Extensive experience with:
• Security architecture frameworks (SABSA, TOGAF, NIST CSF)
• Enterprise risk management and security governance
• Regulatory compliance architecture (SOX, PCI-DSS, GDPR, industry-specific regulations)"