Mainframe DevOps Engineer - IBM Z Systems

Kforce Inc is seeking an experienced Mainframe Security Engineer to support a large-scale migration from CA-ACF2 and RC/Secure to IBM Security Server (RACF). The role involves planning, migrating, and validating security definitions to enhance enterprise security and access management across IBM Z environments.

Responsibilities:

• Lead the migration of CA-ACF2 and RC/Secure for DB2 to IBM Security Server (RACF)
• Migrate and validate security definitions for user/system IDs, datasets, and subsystems (CICS, IMS, DB2)
• Work with teams to export and convert ACF2 security databases at designated cutover points
• Implement and test password propagation solutions to maintain user credentials during migration
• Collaborate across system, network, and application teams to test, document, and promote RACF-based access control
• Execute migration on a sysplex-by-sysplex basis, ensuring minimal disruption to production systems

Requirements:

• 5+ years of experience with mainframe security administration on z/OS
• Hands-on expertise with CA-ACF2 and/or RACF (IBM Security Server)
• Strong knowledge of z/OS, CICS, IMS, and DB2 subsystems
• Understanding of security database migration, access control, and password management
• Excellent analytical and troubleshooting skills in large, complex mainframe environments
• Prior experience executing ACF2-to-RACF migrations or similar z/OS security conversions
• Familiarity with CA-RC/Secure, IMS interfaces, or other IBM Z security tools
• Knowledge of compliance frameworks (e.g., SOX, PCI, or NIST) within mainframe contexts
• Ability to script or automate security administration tasks (REXX, CLIST, or Python on z/OS)