Mainframe Security Engineer - Logical Security

Ensono is a hybrid IT services provider that sees a world in transformation. We understand the world of business has become more complex, layered, and interdependent because we’re enabling the IT infrastructure for that transformation. Our clients are some of the most innovative and forward-thinking companies in the world and we help keep their businesses thriving. With nearly 50 years of experience, we optimize and modernize IT infrastructure by amplifying the power of mainframes and mid-range servers with the agility of cloud. Check us out at www.ensono.com.

The Mainframe Systems Programmer – RACF Security Administration is responsible for the administration, maintenance, support, and enhancement of IBM z/OS security environments with a strong focus on RACF (Resource Access Control Facility). This role ensures the integrity, confidentiality, and availability of enterprise mainframe systems while supporting compliance, audit, and operational requirements. As well as Digital Certificate renewals and creation.

This career-level position provides technical support and administration for enterprise mainframe security infrastructure. The ideal candidate will possess hands-on experience with RACF administration, z/OS system security, user provisioning, access controls, auditing, digital certificates and compliance standards. The role requires collaboration with infrastructure teams, auditors, application support, and business stakeholders to maintain a secure and stable mainframe environment.

• →Administer and maintain RACF security definitions, user IDs, groups, datasets, and resource profiles.
• →Implement and manage access controls for z/OS systems, applications, datasets, and subsystems.
• →Monitor RACF system logs, SMF records, and security events for compliance and incident response.
• →Support security audits and ensure compliance with organizational and regulatory requirements.
• →Analyze and resolve RACF-related incidents, access issues, and security vulnerabilities.
• →Collaborate with application teams to implement secure access solutions and role-based access controls.
• →Develop and maintain operational procedures, standards, and technical documentation.
• →Support system upgrades, migrations, and implementation of new security features.
• →Work closely with system programmers, auditors, and cybersecurity teams to strengthen enterprise security posture.

• 3–7 years of experience supporting IBM z/OS mainframe environments.
• Hands-on experience administering RACF security in enterprise environments.
• Strong understanding of z/OS security architecture and mainframe operations.
• Experience with TSO/ISPF, JCL, SDSF, and IBM utilities.
• Knowledge of SMF records, security reporting, and audit compliance processes.
• Experience troubleshooting security access issues and implementing corrective actions within client scope.
• Understanding of change management, incident management, and operational support procedures.
• Strong analytical, problem-solving, and communication skills.

• Experience with zSecure, native RACF commands and Digital Certificates.
• Knowledge of CICS, DB2, IMS, MQ, and other mainframe subsystems.
• Experience with automation and scripting in z/OS environments.
• IBM Mainframe or RACF-related certifications are a plus.

Operating Systems | IBM z/OS

Security | RACF, zSecure, SMF, Audit Controls

Mainframe Tools | TSO/ISPF, SDSF, JCL

Subsystems | CICS, DB2, IMS, MQ

Processes | Access Management, Incident Response, Compliance Audits, Digital Certificates

Documentation | Technical Procedures, Security Standards

This position operates in a highly regulated enterprise IT environment supporting mission-critical mainframe systems. Participation in weekend maintenance windows and after-hours support activities is required. This is a position based on US client hours EST.

The organization is committed to creating an inclusive environment for all employees and is proud to be an equal opportunity employer. Employment decisions are based on qualifications, merit, and business needs.

We are an equal opportunity employer. All qualified applicants will be considered for employment without regard to caste, colour, creed, religion, gender, gender identity, sexual orientation, age, disability, HIV status, or any other status protected by law. Candidates with disabilities who require accommodations during the recruitment process are encouraged to contact our Talent Acquisition team to place a request