Db2 Security Integration Architect

Experience: 12+ Years
Role: Db2 Security Integration Architect / Db2 Security Architect
Employment Type: Full-Time
Location: [Pune/Banglore]

Job Overview

We are looking for an experienced Db2 Security Integration Architect to lead Db2 for z/OS security integration as part of an ACF2 to RACF migration and RBAC conversion.

The role will be responsible for defining, implementing, and validating RACF-aligned access controls across Db2 subsystems, commands, utilities, plans, packages, collections, schemas, tables, views, stored procedures, DDF, DBA access, application IDs, and service accounts.

The ideal candidate should have strong experience in Db2 for z/OS, Db2 security, RACF/SAF integration, ACF2, application security, privileged access, SoD, least privilege, audit controls, testing, and production cutover.

Key Responsibilities

- Own the Db2 security conversion strategy and integration with the target RACF and RBAC model.
- Define security architecture and access controls for:
- Db2 subsystem authority
- Commands and utilities
- Plans, packages, and collections
- Schemas, tables, and views
- Stored procedures
- DDF access
- DBA and privileged access

- Validate access for DBAs, developers, application support, batch processes, service IDs, emergency access, and production operations.
- Assess secondary authorization IDs, group mapping, role structures, least privilege, and Segregation of Duties (SoD) requirements.
- Coordinate Db2 catalog, directory, audit trace, BIND/REBIND, utility, and operational access with RACF engineering and governance teams.
- Lead Db2 security regression testing, application connectivity validation, batch utility validation, negative testing, and migration-wave sign-off.




- Investigate Db2 authorization failures during mock cutovers, production migration, and hypercare using:

- Db2 messages
- Db2 traces
- SMF records
- RACF logs
- Application diagnostics

- Review execution partner deliverables, access matrices, conversion exceptions, test results, and fallback plans.
- Produce audit-ready evidence for Db2 access conversion, SoD reviews, privileged access, and post-migration certification.
- Develop BAU support procedures for Db2 security administration and access request handling under RACF.
- Work closely with application, infrastructure, RACF, governance, and operations teams to ensure application continuity during migration.

Must-Have Technical Skills

Db2 for z/OS Security

- Strong hands-on experience with Db2 for z/OS security.
- Knowledge of:
- Subsystem authority
- Db2 commands
- Utilities
- Plans
- Packages
- Collections
- Schemas
- Tables
- Views
- Stored procedures
- DDF

Application & Access Security

- Experience with Batch, CICS, DDF, stored procedures, application IDs, service IDs, and secondary authorization IDs.
- Solid understanding of application connectivity and production access models.

RACF / SAF Integration

- Hands-on experience with RACF/SAF integration with Db2.
- Knowledge of:
- RACF profiles
- Groups
- Permits
- Class controls
- Logging
- Access validation
- Security administration

Governance & Compliance

- Strong understanding of:
- Least privilege
- Segregation of Duties (SoD)
- DBA controls
- Privileged access
- Access recertification
- Audit evidence
- Regulatory controls

Testing & Operations

- Experience with BIND/REBIND, Db2 utilities, application regression testing, negative testing, and migration validation.
- A

Rakhi

Talent Corner HR Services Pvt. Ltd.

Email id: [email protected]

📌 security specialist (Pune)
🏢 Talent Corner HR Services
📍 Pune