RACF IAM Security Specialist (Mainframe)

Bank of America; Washington (District of Columbia); On-site; USD 120,000 - 180,000; Full time

Job summary

Bank of America is seeking a skilled mainframe IAM security professional to administer RACF profiles, implement security rules, and support incident response. The role emphasizes collaboration with audit teams and ongoing process improvement within a global information security environment.

You will be part of the Identity & Access Management team, working with z/OS, TSO/ISPF, JCL/REXX, and related tools to safeguard bank resources while participating in 24/7 coverage and disaster recovery tests.

Qualifications

• 3+ years of experience in mainframe security administration/engineering in a RACF environment.
• 3+ years of relevant IAM experience.
• Working knowledge of the z/OS mainframe environment.
• Experience with Add‑on security managers (zSecure/Vanguard), TSO/ISPF, JCL/REXX, USS Security, Excel and ServiceNow.

Responsibilities

• Administer and maintain RACF security profiles for users, groups, datasets and general resources
• Implement, review, and update RACF rules to align with security policies and compliance requirements
• Analyze and troubleshoot security incidents and access issues, including 24/7 on-call support on a rotating basis
• Provide support during mainframe upgrades, migrations, and disaster recovery tests
• Develop and maintain process and procedural documentation
• Identify opportunities for process automation or improvement and design/develop/deploy solutions
• Work closely with internal/external audit and compliance teams to ensure adherence to IAM standards.

Skills

RACF

IAM

z/OS

TSO/ISPF

JCL/REXX

Security auditing

Excel

ServiceNow

AI for automation

Tools

zSecure/Vanguard

Job description

Bank of America is seeking a skilled mainframe IAM security professional to administer RACF profiles, implement security rules, and support incident response. The role emphasizes collaboration with audit teams and ongoing process improvement within a global information security environment.

You will be part of the Identity & Access Management team, working with z/OS, TSO/ISPF, JCL/REXX, and related tools to safeguard bank resources while participating in 24/7 coverage and disaster recovery tests.