Senior IAM & Unix Privilege Security Lead

TIAA; Frisco (TX); On-site; USD 108,000 - 130,000; Full time

Job summary

TIAA seeks a Lead Information Security Specialist to safeguard enterprise Unix/Linux/Mainframe systems with advanced privileged access management, sudo administration, and RACF controls. You will design IAM solutions, conduct SOX/GLBA/PCI-DSS audits, and mentor the team while documenting policies.

You will bridge BoKS/sudo PAM with enterprise IAM, develop automated scripts in shell, Python, and Perl, and drive risk-based access reviews to strengthen security across the Unix/Linux and Mainframe

Qualifications

• 5+ years of experience in information technology and/or Cybersecurity.
• Experience with Unix/Linux environments and privilege access management.
• Proficient in scripting languages including Bash, Python, and Perl.

Responsibilities

• Design and maintain sudo access control policies across enterprise Unix/Linux environments.
• Administer and optimize Unix privilege access management solution infrastructure.
• Manage Mainframe RACF environment including user management and permissions.
• Conduct Unix and RACF security audits for SOX/GLBA/PCI-DSS compliance.
• Develop automated security scripts using shell, Python, and Perl.
• Bridge BoKS/sudo privileged access controls with enterprise IAM solutions.
• Identify and remediate access control gaps and mentor team members.

Skills

Unix/Linux

Privileged access management

Sudo policy management

RACF administration

Scripting (Python, Perl, Bash)

BoKS ServerControl

Education

University (Degree) Preferred

Tools

BoKS ServerControl

Mainframe RACF

Shell scripting

Python

Perl

Job description

TIAA seeks a Lead Information Security Specialist to safeguard enterprise Unix/Linux/Mainframe systems with advanced privileged access management, sudo administration, and RACF controls. You will design IAM solutions, conduct SOX/GLBA/PCI-DSS audits, and mentor the team while documenting policies.

You will bridge BoKS/sudo PAM with enterprise IAM, develop automated scripts in shell, Python, and Perl, and drive risk-based access reviews to strengthen security across the Unix/Linux and Mainframe