Mainframe Engineer

Location: Pittsburgh, PA or Lake Mary, FL preferred; remote candidates may be considered

Position Overview: A leading financial services organization is seeking a Senior Mainframe Security Engineer to support enterprise mainframe security and vulnerability management initiatives. This is a highly technical, hands-on role focused on mainframe security controls, vulnerability scanning and remediation, security database analysis, and automation. The ideal candidate will bring extensive mainframe security experience with RACF, ACF2, and/or Top Secret (TSS), along with strong expertise in IBM zSecure, REXX, and CARLa. RACF experience is particularly valuable as the organization continues migration efforts.

Key Responsibilities: Serve as a subject matter expert for RACF, ACF2, and Top Secret (TSS) within mainframe vulnerability management initiatives. Develop, mature, and automate mainframe security scanning processes. Create and maintain REXX-based programs and automation and schedule recurring security scans. Use IBM zSecure and CARLa to analyze mainframe security environments and identify vulnerabilities. Investigate security findings and coordinate remediation of mainframe vulnerabilities. Perform rescans and retesting to validate remediation and support vulnerability closure. Support z/OS hardening, security controls, STIG requirements, and least-privilege initiatives. Manage and validate user, batch, service, client, and administrative IDs. Partner directly with clients and internal engineering/security teams to resolve vulnerabilities and access-related issues. Develop process documentation, flowcharts, and materials within tools such as Confluence, JIRA, and SharePoint. Support and improve internal vulnerability management and security utility tools.

Required Qualifications: Significant experience with IBM zSecure, including security auditing, analysis, and vulnerability identification. Proficiency with REXX for scripting, programming, and security process automation. Knowledge of z/OS security controls, STIG hardening, vulnerability management, and remediation practices. Familiarity with mainframe utilities such as IBM Syncsort and ICETOOL.Ability to analyze security findings, troubleshoot access issues, and validate remediation through rescanning and testing. Strong communication and documentation skills with the ability to collaborate with technical teams, security stakeholders, and clients. Bachelor’s degree or equivalent combination of education and extensive mainframe security experience.