Senior RACF Engineer - Director

MainframeMaster; Atlanta, Northern (GA, KY); Hybrid; USD 95,000 - 135,000; Full time

Job summary

Morgan Stanley is seeking a senior RACF engineer to lead mainframe security engineering and operations from a director-level vantage in the Technology division. The role emphasizes design, implementation, and support of authentication, encryption, and privileged access across complex mainframe environments, with collaboration across security, development, and audit teams.

The ideal candidate will have hands-on expertise with IBM RACF and zSecure, strong automation capability, and a proven track

Qualifications

• 10+ years of RACF/security engineering experience.
• Advanced hands-on knowledge of IBM RACF and IBM zSecure.
• Proficiency with JCL, REXX, and CARLa for automation and tooling.
• Experience with z/OS utilities and related tooling (TSO/ISPF/SDSF).
• Working knowledge of DB2, Sybase, and SQL.
• Experience implementing authentication, encryption, and MFA controls.
• Broad z/OS infrastructure understanding across multiple disciplines.
• Strong IAM practices and least privilege concepts.
• Independent work style with strong planning and multitasking.
• Excellent communication and collaboration across teams.

Responsibilities

• Design, engineer, and support mainframe security initiatives including authentication, authorization, encryption, privileged access, data protection, automation, reporting, utilities, and batch processes.
• Partner with Mainframe Security Architecture and Engineering teams to validate designs and support implementation.
• Support deployment including process changes, handoff, documentation, and training for security operations.
• Assess feasibility of solutions, meeting security, audit, and resiliency requirements.
• Collaborate with development, security product owners, systems programming, DB, CICS/MQ, business, and audit teams to implement security solutions.
• Create and maintain monitoring, automation, and reporting using IBM zSecure, Compliance Manager, Admin Express, MFA platforms, and key management.
• Monitor KPIs, control health, and operational trends; recommend preventative actions.
• Provide SME guidance on RACF, z/OS security controls and best practices for audits and projects.

Skills

RACF engineering

IBM RACF

IBM zSecure

JCL

REXX

CARLa

TSO/ISPF/SDSF

SQL/DB2

MFA / IAM controls

Key management

Tools

IBM zSecure

Compliance Manager

Admin Express

Key management platforms

Job description

In the Technology division, we leverage innovation to build the connections and capabilities that power our Firm, enabling our clients and colleagues to redefine markets and shape the future of our communities. This is a Lead Infrastructure Production Management & Reliability Engineering position at the Director level, which is part of the job family responsible for maintaining the stability and reliability of the organization's infrastructure systems, ensuring optimal performance and availability to support business operations.

Since 1935, Morgan Stanley is known as a global leader in financial services, continuously evolving and innovating to better serve our clients and our communities in more than 40 countries around the world.

The Mainframe Security team is seeking a senior RACF engineer to support mainframe security engineering, tooling, automation, and project execution. The ideal candidate will have deep hands‑on experience with IBM RACF, IBM zSecure, and the broader IBM Z security ecosystem, with the ability to design, implement, and support security solutions across complex mainframe environments. This role requires strong analytical, organizational, and communication skills, as well as the ability to work independently with infrastructure, security, application development, and operations teams. The position may require occasional off‑hours support for project implementations, production changes, and critical security initiatives.

What you'll be doing in the role:

• Design, engineer, and support mainframe security initiatives related to authentication, authorization, encryption, privileged access, sensitive data protection, automation, reporting, utilities, and batch processes.
• Partner with Mainframe Security Architecture and Engineering teams to develop technical solutions, validate designs, perform testing, and support implementation.
• Support deployment of security solutions, including process changes, operational handoff, documentation, and training for security operations teams.
• Assess technical feasibility of proposed solutions and recommend approaches that meet security, operational, audit, and resiliency requirements.
• Collaborate with application development, security product owners, systems programming, database, CICS/MQ, business, and audit teams to gather requirements and implement effective security solutions.
• Create and maintain security monitoring, automation, and reporting solutions using tools such as IBM zSecure, Compliance Manager, Admin Express, multifactor authentication platforms, and key management capabilities.
• Monitor, analyze, and report on key performance indicators, control health, and operational trends; recommend preventative actions and process improvements as needed.
• Provide subject matter expertise on RACF, z/OS security controls, and mainframe security best practices to address questions, issues, audit inquiries, and project requirements.

What you’ll bring to the role:

• 10+ years of related experience as a RACF engineer, security engineer, or senior mainframe security administrator.
• Advanced hands‑on knowledge of IBM RACF and IBM zSecure, including configuration, internals, reporting, administration, and engineering support.
• Proficiency with JCL, REXX, and CARLa for automation, reporting, utilities, and security tooling development.
• Experience with core z/OS utilities and facilities, including TSO, ISPF, SDSF, and related operational tooling.
• Working knowledge of database technologies and query tools such as DB2, Sybase, and SQL.
• Experience implementing and supporting mainframe authentication and encryption capabilities, including digital certificates, key management, multifactor authentication, and related controls.
• Broad understanding of z/OS infrastructure disciplines, including systems programming, storage, networking, UNIX System Services, CICS, DB2, performance, and enterprise tooling.
• Strong understanding of Identity and Access Management best practices, including least privilege, privileged access management, access certification, segregation of duties, and vulnerability management principles.
• Ability to work independently, manage competing priorities, and deliver results with limited oversight.
• Strong project planning, organization, time management, and multitasking skills.
• Proficiency with Microsoft Office business applications, including Excel, Word, Access, and PowerPoint.
• Excellent verbal and written communication skills, with the ability to explain technical concepts to both technical and non‑technical stakeholders.
• Collaborative team player who promotes a team‑first mindset and contributes to an inclusive, respectful culture.

WHAT YOU CAN EXPECT FROM MORGAN STANLEY:

At Morgan Stanley, we raise, manage and allocate capital for our clients – helping them reach their goals. We do it in a way that’s differentiated – and we’ve done that for 90 years. Our values - putting clients first, doing the right thing, leading with exceptional ideas, committing to diversity and inclusion, and giving back - aren’t just beliefs, they guide the decisions we make every day to do what's best for our clients, communities and more than 80,000 employees in 1,200 offices across 42 countries. At Morgan Stanley, you’ll find an opportunity to work alongside the best and the brightest, in an environment where you are supported and empowered. Our teams are relentless collaborators and creative thinkers, fueled by their diverse backgrounds and experiences. We are proud to support our employees and their families at every point along their work‑life journey, offering some of the most attractive and comprehensive employee benefits and perks in the industry. There’s also ample opportunity to move about the business for those who show passion and grit in their work.

To learn more about our offices across the globe, please copy and paste https://www.morganstanley.com/about-us/global-offices into your browser.

Expected base pay rates for the role will be between $95,000 and $135,000 per year at the commencement of employment. However, base pay if hired will be determined on an individualized basis and is only part of the total compensation package, which, depending on the position, may also include commission earnings, incentive compensation, discretionary bonuses, other short and long‑term incentive packages, and other Morgan Stanley sponsored benefit programs.

Morgan Stanley is an equal opportunity employer committed to building and maintaining a workforce that is diverse in experience and background. Our recruiting efforts reflect our strong commitment to a culture of inclusion, where individuals are hired, developed, and advanced based on their skills and talents.

Our workforce reflects a broad cross‑section of the global communities in which we operate, bringing a variety of backgrounds, talents, perspectives, and experiences.

For more information, please visit : https://www.morganstanley.com/people-opportunities/eeo .