Job Summary

Mainframe Security Engineer / Specialist

Role Summary

We are looking for an experienced Mainframe Security Engineer / Specialist to support the administration, governance, security, compliance, and protection of enterprise IBM Z environments. The role requires strong hands-on expertise in RACF or equivalent Mainframe security products, identity and access management, security administration, audit/compliance, vulnerability remediation, and security automation.

The individual will work closely with Mainframe infrastructure, application, operations, IAM, cybersecurity, audit, and compliance teams to ensure secure and compliant operation of business-critical Mainframe platforms.

Key Responsibilities

- Administer, configure, maintain, and support Mainframe security environments, primarily IBM RACF, or equivalent products such as ACF2 and Top Secret.

- Manage user IDs, groups, roles, profiles, permissions, access controls, and security policies across z/OS environments.

- Perform RACF administration, including management of users, groups, dataset profiles, general resource profiles, password/passphrase policies, and access permissions.

- Implement and maintain appropriate access control and least-privilege principles for Mainframe users, applications, service accounts, and privileged IDs.

- Manage security requirements across key Mainframe components including z/OS, TSO/ISPF, USS, JES2, CICS, Db2, IMS, MQ, and storage, depending on the environment.

- Support identity and access management processes, including access provisioning, modification, revocation, periodic access reviews, and recertification.

- Monitor and investigate Mainframe security events using SMF records, RACF reports, system logs, audit reports, and security-monitoring tools.

- Support security audits, regulatory compliance assessments, risk assessments, vulnerability reviews, and remediation activities.

- Review and remediate security findings arising from internal audits, external audits, penetration assessments, vulnerability scans, and security health checks.

- Support management of privileged and elevated access, including emergency IDs and privileged-account controls.

- Review and strengthen Mainframe security configurations in line with organisational security policies and applicable security baselines and industry standards.

- Support integration of Mainframe security with enterprise IAM, PAM, MFA, SIEM, authentication, certificate, and security-monitoring solutions.

- Manage and troubleshoot digital certificates, key rings, TLS/SSL configurations, encryption-related security controls,



and authentication mechanisms where applicable.

- Develop and maintain REXX, JCL, CLIST, or other automation for security administration, reporting, monitoring, and repetitive operational activities.

- Participate in incident, problem, change, vulnerability, security-event, and risk-management processes related to Mainframe platforms.

- Maintain security documentation, SOPs, access-control procedures, audit evidence, compliance records, configuration documentation, and operational runbooks.

- Collaborate with Mainframe system programmers, application teams, IAM, SOC, cybersecurity, audit, compliance, network, database, and infrastructure teams.

- Identify opportunities for security automation, continuous compliance, enhanced monitoring, access optimisation, and security modernisation across the Mainframe platform.

Skill Requirements

Required Technical Skills

- Strong hands-on knowledge of IBM RACF or equivalent Mainframe security products such as Broadcom ACF2 / Top Secret

- RACF user, group, dataset, and general resource administration

- RACF commands and utilities, including security administration and reporting

- Strong understanding of z/OS security architecture and access-control concepts

- TSO/ISPF and JCL

- Knowledge of z/OS UNIX / USS security

- Understanding of security requirements for CICS, Db2, IMS, MQ, JES2, or similar Mainframe subsystems

- SMF security records, audit reporting, logging, and security-event analysis

- Identity and Access Management (IAM) concepts, including provisioning, de-provisioning, access reviews, and recertification

- Privileged Access Management (PAM) and privileged-ID security concepts

- Knowledge of digital certificates, key rings, TLS/SSL, encryption, and authentication

- REXX / CLIST / JCL scripting and security automation

- Security incident, vulnerability, risk, and change management

- Strong troubleshooting and root-cause-analysis skills

- Understanding of least privilege, segregation of duties, privileged access, and security governance

Preferred Skills

Exposure to one or more of the following would be advantageous:

- Broadcom ACF2 or Top Secret (TSS)

- Mainframe security assessment and compliance tools





- IBM zSecure for security administration, reporting, auditing, and compliance

- Enterprise IAM and PAM platforms

- SIEM integration and Mainframe security-event monitoring

- CICS, Db2, IMS, IBM MQ security administration

- Mainframe network security including TCP/IP, AT-TLS, TLS/SSL, and Communications Server

- PKI, digital certificates, cryptography, ICSF, and key-management concepts

- Security standards and frameworks such as CIS benchmarks, NIST, ISO 27001, PCI DSS, and organisational security baselines, where applicable

- Security audit, compliance, risk-management, and vulnerability-remediation processes

- Ansible, Python, Git, REST APIs, or DevOps/SecOps automation in a Mainframe workplace

- Integration of IBM Z security with distributed, cloud, IAM, PAM, and security-monitoring platforms

- Mainframe security modernisation, Zero Trust, MFA, passwordless authentication, and automated compliance concepts

Must Have Skill

Mainframe - Others,Mainframe Security

Good to Have Skill

Other Requirements

Experience

- Relevant hands-on experience in Mainframe security administration, RACF engineering, IAM, cybersecurity, or IBM Z infrastructure security.

- Experience supporting business-critical enterprise Mainframe environments with strong security and availability requirements.

- Experience administering RACF, ACF2, or Top Secret in enterprise z/OS environments.

- Experience supporting user access management, privileged access, security controls, audit, compliance, and remediation activities.

- Experience working within structured ITIL-based Incident, Problem, Change, and Release Management processes.

- Experience collaborating with cybersecurity, IAM, audit, risk, compliance, Mainframe infrastructure, and application teams.

Desired Profile

- Strong analytical, security, and problem-solving capability.

- Ability to independently investigate and troubleshoot complex Mainframe security and access-control issues.

- Strong understanding of security governance, least privilege, segregation of duties, and access-control principles.

- Good written and verbal communication skills, particularly for technical documentation, audit responses, and stakeholder communication.

- Comfortable working with global delivery, Mainframe infrastructure, cybersecurity, application, IAM, audit, compliance, and vendor teams.

- Strong focus on security, compliance, risk reduction, documentation, automation, and continuous improvement.

- Ability to balance stringent security controls with business availability and operational requirements.

📌 Administrator (Support & Operations) (India)
🏢 HCLTech
📍 India