Kforce Inc is seeking an experienced Mainframe Security Engineer to support a large-scale migration from CA-ACF2 and RC/Secure to IBM Security Server (RACF). The role involves planning, migrating, and validating security definitions to enhance enterprise security and access management across IBM Z environments.
Responsibilities:
- Lead the migration of CA-ACF2 and RC/Secure for DB2 to IBM Security Server (RACF)
- Migrate and validate security definitions for user/system IDs, datasets, and subsystems (CICS, IMS, DB2)
- Work with teams to export and convert ACF2 security databases at designated cutover points
- Implement and test password propagation solutions to maintain user credentials during migration
- Collaborate across system, network, and application teams to test, document, and promote RACF-based access control
- Execute migration on a sysplex-by-sysplex basis, ensuring minimal disruption to production systems
Requirements:
- 5+ years of experience with mainframe security administration on z/OS
- Hands-on expertise with CA-ACF2 and/or RACF (IBM Security Server)
- Strong knowledge of z/OS, CICS, IMS, and DB2 subsystems
- Understanding of security database migration, access control, and password management
- Excellent analytical and troubleshooting skills in large, complex mainframe environments
- Prior experience executing ACF2-to-RACF migrations or similar z/OS security conversions
- Familiarity with CA-RC/Secure, IMS interfaces, or other IBM Z security tools
- Knowledge of compliance frameworks (e.g., SOX, PCI, or NIST) within mainframe contexts
- Ability to script or automate security administration tasks (REXX, CLIST, or Python on z/OS)