RACF Security Administrator

247Hire; Vienna (VA); On-site; USD 110,000 - 150,000; Full time

Job summary

247Hire seeks a skilled RACF security administrator to manage the IBM z/OS RACF environment, including profiles for users, groups, and resources, and to enforce least-privilege access. You will configure security settings and support audits in collaboration with cross-functional teams.

Experience with IBM zSecure, RACF, SETROPTS, and IAM concepts is essential, along with strong problem-solving and communication skills for Tier 3 support and incident resolution.

Qualifications

• 5+ years hands-on RACF administration in IBM z/OS environments.
• Strong experience with IBM zSecure administration and reporting.
• Deep understanding of RACF User, Group, Resource, Dataset, CICS, and DB2 security administration.
• Experience configuring and maintaining RACF SETROPTS.
• Knowledge of IAM concepts including user provisioning and least-privilege access.
• Proficiency with TSO, ISPF, JCL, and familiarity with REXX scripting.
• Experience supporting compliance and audit activities in mainframe security.
• Excellent analytical, troubleshooting, and problem-solving skills.
• Strong verbal and written communication across technical and business teams.

Responsibilities

• Administer and maintain RACF security environment in IBM z/OS.
• Create, modify, and maintain RACF profiles for users, groups, resources, datasets, CICS, and DB2.
• Configure SETROPTS and other RACF settings to meet policies.
• Manage user provisioning/deprovisioning and enforce least privilege.
• Review and process access requests per security policies and compliance.
• Use IBM zSecure for security reporting, auditing, and access reviews.
• Provide Tier 3 support for RACF incidents, service requests, and production issues.
• Troubleshoot RACF security and authorization issues.
• Collaborate with infrastructure, application, audit, and compliance teams to implement secure access controls.
• Participate in security audits, assessments, and remediation activities.
• Maintain documentation for security procedures and operational processes.
• Support access management workflows through ServiceNow or other ITSM platforms.
• Recommend security improvements and automation where appropriate.

Skills

RACF administration

IBM zSecure

IAM concepts

TSO / ISPF / JCL

REXX scripting

Audit & compliance

Security incident response

Communication

Tools

ServiceNow

Job description

Key Responsibilities:

• Administer and maintain the IBM z/OS mainframe security environment using RACF.


• Create, modify, and maintain RACF User, Group, Resource, Dataset, CICS, and DB2 security profiles.


• Configure and manage SETROPTS and other RACF security settings to ensure compliance with organizational policies.


• Manage user provisioning, deprovisioning, and role-based access while enforcing the principle of least privilege.


• Review, approve, and process access requests in accordance with established security policies and compliance requirements.


• Utilize IBM zSecure to perform security reporting, auditing, compliance monitoring, and access reviews.


• Provide Tier 3 support for RACF-related incidents, service requests, and production issues.


• Troubleshoot and resolve complex RACF security and authorization issues.


• Collaborate with infrastructure, application, audit, and compliance teams to implement and maintain secure access controls.


• Participate in security audits, compliance assessments, and remediation activities.


• Maintain documentation for security procedures, standards, and operational processes.


• Support access management workflows through ServiceNow or other ITSM platforms.


• Recommend and implement security improvements and process automation where appropriate.

Qualifications:

• 5+ years of hands-on experience administering RACF in an IBM z/OS mainframe environment.


• Strong experience with IBM zSecure administration and reporting.


• Deep understanding of RACF User, Group, Resource, Dataset, CICS, and DB2 security administration.


• Experience configuring and maintaining RACF SETROPTS.


• Strong knowledge of Identity and Access Management (IAM) concepts, including user provisioning and least-privilege access.


• Proficiency with TSO, ISPF, JCL, and familiarity with REXX scripting.


• Experience supporting compliance and audit activities related to mainframe security.


• Excellent analytical, troubleshooting, and problem-solving skills.


• Strong verbal and written communication skills with the ability to collaborate across technical and business teams.

Preferred Qualifications

• Experience with ServiceNow or other IT Service Management (ITSM) tools.


• Experience in banking, financial services, insurance, or other highly regulated industries.


• Knowledge of regulatory frameworks such as SOX, PCI-DSS, NIST, or ISO 27001.


• Experience with security automation and scripting.


• Familiarity with IBM z/OS system administration and security best practices.