RACF Architect

RACF Architect Consultant — Role Summary

Position: Architect (not Engineer)
Location: Open to Remote
Focus: Project-oriented leadership in mainframe security

 Role Overview

The Mainframe Security team seeks an experiencedRACF Architect Consultant to lead strategic security solutioning and implementation across the IBM Z platform. This role involves assessing, scoping, and designing RACF and z/OS UNIX System Services (USS) security projects, translating business and audit requirements into robust architectures, and guiding engineering teams through implementation.

 Key Requirements

• Experience: 12+ years in mainframe security, with proven leadership in RACF/USS architecture projects.

• Expertise:

  • IBM RACF & IBM zSecure (configuration, internals, reporting, administration).

  • z/OS UNIX System Services (USS) security — UNIXPRIV, BPX resources, least-privilege models.

  • JCL, REXX, CARLa for automation and reporting.

  • Core z/OS utilities (TSO, ISPF, SDSF).

• Additional Skills:

  • Knowledge of DB2, Sybase, SQL.

  • Experience with authentication, encryption, digital certificates, MFA, and key management.

  • Broad understanding of z/OS infrastructure (systems programming, storage, networking, CICS, DB2).

  • Strong grasp of IAM best practices (least privilege, PAM, segregation of duties).

• Soft Skills: Independent worker, strong communicator, project-oriented mindset, ability to influence cross-functional teams.

 Key Activities

• Lead assessment, scoping, and architectural design of RACF and USS security solutions.

• Define target-state architectures and produce design documentation.

• Guide engineering teams through build, validation, testing, and implementation.

• Support deployment, operational handoff, and training.

• Collaborate with application, security, systems programming, and audit teams.

• Create and maintain monitoring, automation, and reporting solutions (IBM zSecure, Compliance Manager, MFA platforms).

• Serve as subject matter expert on RACF, USS, and z/OS security controls.