L1: We are seeking a RACF Engineering & Security Conversion Lead to combine RACF engineering ownership with hands-on ACF2 security conversion analysis. The role will be the primary technical counterpart to Vendors for conversion cycles, RACF database build, generated RACF command validation, LogonID and UID mapping, dataset/resource rule conversion, exception remediation, and compare report analysis. You will ensure RACF build artifacts are accurate, controlled, repeatable, recoverable, and ready for production implementation.

Key Skills and Expertise

L2: Key skills include RACF database engineering, ACF2 rule analysis, ACF2 LogonIDs, UID strings, dataset rules, resource rules, RACF commands, RACF groups, connects, permits, SETROPTS, class activation, database backup/recovery, IRR utilities, password propagation, certificate conversion, compare reports, zSecure, SMF, REXX, JCL, and conversion defect remediation.

Key Responsibilities

- Own RACF database engineering, build standards, backup/restore validation, copy strategy, access build controls, and recovery procedures.
- Analyze ACF2 LogonIDs, UID strings, dataset rules, resource rules, scopes, privileged attributes, generic IDs, service IDs, and wildcard access for conversion readiness.
- Validate Vendors-generated RACF command streams for groups, users, profiles, permits, connects, ownership, and class-specific controls.
- Coordinate repeatable ACF2 extract cycles, cleansing inputs,



conversion runs, compare reports, and exception remediation with Vendors and internal teams.
- Implement and validate RACF SETROPTS configuration, class activation, generic profile controls, warning mode approach, logging, and audit flag strategy.
- Reconcile baseline ACF2 access reports against converted RACF profiles, permits, and validation/compare outputs.
- Investigate conversion defects involving missing permits, excessive access, profile collisions, ownership gaps, incorrect UACC, class issues, or authority mismatches.
- Prepare RACF load plans, rollback procedures, implementation evidence, command execution controls, and post-load validation steps.
- Support mock cutovers, production migration, incident triage, and hypercare for RACF engineering defects.
- Document RACF build standards and transition the converted environment to BAU RACF administration teams.

Experience and Qualifications

- 12+ years of hands-on RACF engineering, ACF2 administration, or mainframe security implementation experience.
- Strong experience with RACF commands, profiles, user/group administration, RACF class controls, and security database maintenance.
- Experience with ACF2-to-RACF conversion, security cleanup, access analysis, compare reporting, or large access remediation initiatives.
- Solid JCL, REXX, ISPF, SMF, and security reporting experience.

📌 RACF Security Engineer (Bengaluru)
🏢 Creospan Private
📍 Bengaluru