Remote IAM Engineer: RACF & z/OS Security

Brooklyn Arts Council; Virginia (MN); On-site; USD 125,000 - 159,000; Full time

Benefits offered by this job

Medical Insurance

Life Insurance

Disability Insurance

401(k)

PTO & Holidays

Educational Assistance

Job summary

Brooklyn Arts Council is seeking an Identity & Access Management Engineer to support and maintain the enterprise IAM program on IBM z/OS mainframes. You will administer RACF security, manage identity lifecycles, and enforce access controls across critical resources.

The role emphasizes governance, access reviews, and collaboration with cybersecurity, audit, and compliance teams. Remote options exist for select states; strong mainframe IAM experience is essential.

Qualifications

• 5+ years administering IBM z/OS mainframe security environments.
• Extensive RACF administration experience in enterprise environments.
• Strong IAM principles, lifecycle management, and access governance.
• Experience with RACF User/Group/Resource profiles, SETROPTS.
• Experience with TSO, ISPF, JCL, and REXX.
• Excellent communication and collaboration across teams.

Responsibilities

• Administer RACF security for IBM z/OS systems.
• Manage identity lifecycle: provisioning, modifications, deprovisioning.
• Configure RACF User/Group/Resource/Dataset/CICS/DB2 security profiles.
• Maintain SETROPTS for compliance with security standards.
• Enforce RBAC and SoD across mainframe environments.
• Review and approve access requests per IAM governance.
• Provide Tier 3 support for IAM-related incidents.
• Automate IAM tasks using REXX and other mainframe utilities.

Skills

RACF administration

IBM zSecure

Mainframe IAM

JCL

REXX scripting

TSO/ISPF

RBAC & SoD

Audit support

Security governance

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

IBM zSecure Administration

JCL

REXX

TSO/ISPF

SETROPTS

Job description

Brooklyn Arts Council is seeking an Identity & Access Management Engineer to support and maintain the enterprise IAM program on IBM z/OS mainframes. You will administer RACF security, manage identity lifecycles, and enforce access controls across critical resources.

The role emphasizes governance, access reviews, and collaboration with cybersecurity, audit, and compliance teams. Remote options exist for select states; strong mainframe IAM experience is essential.