Senior Mainframe Security Engineer: RACF/zSecure Expert

IntePros; Pittsburgh (Allegheny County); On-site; USD 120,000 - 180,000; Full time

Job summary

IntePros is seeking a Senior Mainframe Security Engineer to lead security controls, vulnerability management, and automation for enterprise mainframes. The role is highly technical and hands-on, focused on RACF, ACF2, TSS, zSecure, REXX, and CARLa within a security program.

You will partner with clients and internal teams to analyze findings, coordinate remediation, and drive hardening efforts across z/OS, with emphasis on least privilege and documentation in Confluence and JIRA.

Qualifications

• Extensive mainframe security experience with RACF, ACF2, and/or Top Secret (TSS).
• Proficiency in IBM zSecure, REXX, and CARLa for security automation.
• Experience with mainframe vulnerability management, auditing, and remediation.

Responsibilities

• Serve as SME for RACF/ACF2/TSS within vulnerability management.
• Automate mainframe security scanning processes.
• Create and maintain REXX-based automation and schedule scans.
• Use IBM zSecure and CARLa to analyze security environments and identify vulnerabilities.
• Coordinate remediation of mainframe vulnerabilities with teams.
• Perform rescans and retesting to validate remediation.
• Support z/OS hardening and least-privilege initiatives.
• Document processes and workflows in Confluence, JIRA, and SharePoint.
• Collaborate with clients and internal teams to resolve issues.
• Develop and maintain internal vulnerability tools and utilities.

Skills

RACF

ACF2

Top Secret (TSS)

IBM zSecure

REXX

CARLa

Education

Bachelor's degree or equivalent combination of education and extensive mainframe security experience

Tools

IBM Syncsort

ICETOOL

Job description

IntePros is seeking a Senior Mainframe Security Engineer to lead security controls, vulnerability management, and automation for enterprise mainframes. The role is highly technical and hands-on, focused on RACF, ACF2, TSS, zSecure, REXX, and CARLa within a security program.

You will partner with clients and internal teams to analyze findings, coordinate remediation, and drive hardening efforts across z/OS, with emphasis on least privilege and documentation in Confluence and JIRA.