Mainframe Logical Security Engineer

Who We Are At Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day. So why work at Kyndryl? We are always moving forward - always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities. The Role Responsibilities: Administer and maintain RACF security environment across z/OS systems Create, modify, and revoke: User IDs Groups Resource profiles Dataset and subsystem access permissions Implement and maintain least-privilege access controls for: Datasets Applications (CICS, DB2, IMS, MQ) System resources Security Controls & Compliance Configure and maintain security policies aligned with enterprise standards Perform periodic access reviews, audits, and compliance checks Support regulatory compliance (e.g., SOX, PCI, HIPAA where applicable) Implement data protection controls and access monitoring mechanisms Monitoring & Incident Response Analyze security logs and reports: SMF records RACF reports SIEM alerts Investigate: Access violations Unauthorized access attempts Security incidents Troubleshoot and resolve: Authorization failures RACF-related abends or access issues Security Architecture & Integration Secure mainframe subsystems and integrations: CICS, DB2, IMS, MQ, TCP/IP, USS Support integration with: Enterprise IAM solutions Single Sign-On (SSO) / MFA (where applicable) Define and maintain RACF classes, profiles, and rules for system-wide protection Encryption & Advanced Security Support: Digital certificates TLS/SSL configuration ICSF (crypto services) at a high level Ensure secure key management and encryption practices One of the benefits of Kyndryl is that we work with clients in a variety of industries, from banking to retail. Whether you want to broaden your knowledge base or narrow your scope and specialize in a specific sector, you can find your opportunity here. You'll also get the chance to share y