[Hiring] Senior Mainframe Security Engineer @Computer Task Group

Role Description

CTG is seeking a Senior Mainframe Security Engineer to maintain and improve security across a client’s IBM z/OS environments. You’ll administer RACF, manage encryption keys and certificates, and lead remediation of audit findings. You’ll work with infrastructure, application, and security teams to plan, test, and implement changes in a 24/7 production environment. Location: Remote. Occasional travel to Raleigh, NC, may be required at the client’s expense. Duration: 6-month contract with possible extension.

• Install, configure, and administer IBM RACF.
• Design, implement, and maintain security controls for IBM z/OS environments.
• Manage mainframe encryption, cryptographic keys, certificates, and related security services.
• Conduct security assessments, interpret audit results, and lead remediation from initial findings through closure.
• Support internal and external audits by preparing documentation, responding to auditor questions, and reporting on compliance and remediation progress.
• Plan and prioritize security changes based on risk assessments, internal policies, and audit findings.
• Coordinate implementation and testing with infrastructure, application, and security teams.
• Lead technical security discussions and contribute to risk analysis, disaster recovery planning, security training, and policy development.
• Resolve production security issues and service requests within established service-level agreements while supporting a 24/7 environment.

Qualifications

• Strong hands-on experience installing, configuring, and administering IBM RACF, with demonstrated experience designing, implementing, and maintaining mainframe security controls.
• At least 5 years of experience in systems architecture, technology risk, information security, or a related discipline.
• Hands-on experience with UNIX, z/Linux, Db2, CICS, and IBM Trusted Key Entry (TKE).
• Proficiency with JCL, REXX, CLIST, and mainframe utilities.
• Knowledge of public key infrastructure (PKI), encryption, key management, and certificate management.
• Experience conducting audit assessments, developing remediation plans, tracking findings through closure, and presenting security and compliance findings to technical and nontechnical audiences.
• Working knowledge of network security and client-server applications.
• Ability to work independently and coordinate with technical teams, business stakeholders, management, and auditors.

Requirements

• 7 years of systems architecture experience focused on technology risk and information security (preferred).
• Experience with SailPoint integration and Venafi (preferred).
• Experience mentoring or coaching junior technical staff (preferred).
• CISSP or CISA certification (preferred).
• A bachelor’s degree, associate degree, or CCUE certification is preferred.
• Five consecutive years of full-time service with SECU may be considered as an alternative.

Benefits

• Must be able to support a 24x7 production environment.
• Must be able to follow established work schedules and attendance requirements.
• Occasional travel to Raleigh, NC may be required.
• Must be comfortable working in an office environment when onsite, including extended periods of sitting and computer use.
• Excellent verbal and written English communication skills and the ability to interact professionally with a diverse group are required.