RACF Architect

RACF Architect

Employment Type: Contract
Duration: 18 Months

Position Overview

We are seeking an experienced RACF Architect to provide strategic leadership and architecture expertise for enterprise z/OS security environments. This role will be responsible for designing, implementing, and governing large-scale mainframe security solutions, with a strong focus on RACF/ESM architecture, USS security, enterprise risk management, and regulatory compliance.

The ideal candidate will bring deep technical expertise in z/OS security along with the ability to advise senior and executive leadership on security strategy, risk, governance, and architecture.

Qualifications

• 15+ years of z/OS security experience, with progressive leadership responsibilities.

• Proven track record of architecting security solutions for large-scale enterprise environments.

• Architect-level expertise in RACF / External Security Manager (ESM) security design, implementation, and governance.

• Experience presenting security strategies, risks, and recommendations to executive leadership and board-level committees.

• Strong background in enterprise security architecture, governance, and risk management.

• Industry certifications such as CISSP, CISM, or IBM Certified z/OS Security Expert are preferred.

Technical Expertise

• Advanced USS security architecture, including UIDs, GIDs, OMVS, POSIX permissions, and superuser controls.

• Expert knowledge of RACF resource classes, including:

  • FACILITY

  • UNIXPRIV

  • STARTED

  • CSFSERV

  • CRYPTOZ

• zFS/HFS security architecture, mount security, enterprise auditing, and SIEM integration.

• Multi-LPAR and Sysplex security architecture, including cross-platform security considerations.

• Enterprise-scale security design, implementation, monitoring, and governance.

Security Architecture & Compliance

Extensive experience with:

• Security architecture frameworks such as SABSA, TOGAF, and NIST Cybersecurity Framework (CSF).

• Enterprise risk management and security governance.

• Regulatory and compliance architecture, including SOX, PCI-DSS, GDPR, and other industry-specific requirements.

• Translating business, regulatory, and security requirements into scalable enterprise security architecture.