RACF Security Administration (Frisco) at HCLTech

RACF z/OS Security Expert to manage and maintain security infrastructure across our mainframe environment, with emphasis on security administration and certificate lifecycle management.Key ResponsibilitiesRACF Security AdministrationDesign, implement, and maintain RACF security policies and user access controlsManage user IDs, groups, and resource profiles (datasets, transactions, programs)Conduct security audits, access reviews, and incident responseCreate compliance documentation and audit reportsCertificate ManagementManage digital certificates within RACF and z/OS using RACDCERTPlan and execute certificate renewals to prevent service disruptionsMonitor certificate expiration dates and maintain renewal schedulesGenerate CSRs and coordinate with Certificate AuthoritiesInstall, update, and validate SSL/TLS certificates for z/OS applicationsMaintain certificate key rings and trust chainsTroubleshoot certificate-related connectivity issuesSystem Security & ComplianceImplement security controls for CICS, DB2, IMS, MQ, and other z/OS subsystemsCollaborate with CICS, DB2, MQ, and application teams on security requirements and implementationsConfigure Started Task and Surrogate securityMonitor SMF security records and investigate anomaliesEnsure compliance with industry standards (PCI-DSS, SOX, HIPAA)Support internal and external security auditsParticipate in disaster recovery planningRequired QualificationsTechnical Skills7+ years of hands-on RACF administration experience in z/OS environmentsStrong expertise in RACF commands, utilities, and best practicesProficiency with RACDCERT for digital certificate managementExperience with SSL/TLS protocols and PKI infrastructureStrong knowledge of ISPF, TSO, JCL, and REXXFamiliarity with z/OS subsystems security (CICS, DB2, IMS, MQ)Understanding of SMF record analysis and security monitoringSecurity & ComplianceDeep understanding of mainframe security concepts and threatsKnowledge of security frameworks and regulatory requirementsExperience with security incident responseStrong analytical and problem-solving abilitiesPreferred QualificationsIBM RACF or mainframe security certificationExperience with zSecure or similar security toolsKnowledge of encryption technologies (ICSF, z/OS Crypto)Security automation and scripting experienceRelevant certifications (CISSP, CISM)Work EnvironmentOn-call rotation required Occasional off-hours maintenanceDisclaimer HCL is an equal opportunity employer, committed to providing equal employment opportunities to all applicants and employees regardless of race, religion, sex, color, age, national origin, pregnancy, sexual orientation, physical disability or genetic information, military or veteran status, or any other protected classification, in accordance with federal, state, and/or local law. Should any applicant have concerns about discrimination in the hiring process, they should provide a detailed report of those concerns to [email protected] for investigation. Compensation and Benefits A candidates pay within the range will depend on their work location, skills, experience, education, and other factors permitted by law. This role may also be eligible for performance-based bonuses subject to company policies. In addition, this role is eligible for the following benefits subject to company policies: medical, dental, vision, pharmacy, life, accidental death & dismemberment, and disability insurance; employee assistance program; 401(k) retirement plan; 10 days of paid time off per year (some positions are eligible for need-based leave with no designated number of leave days per year); and 10 paid holidays per year.