Mainframe Logical Security Engineer

Kforce has a client that is seeking a Mainframe Logical Security Engineer in Chandler, AZ. Overview: We are seeking an experienced Mainframe Logical Security Engineer to support and manage security controls across IBM z/OS environments. This role focuses on access control, compliance, monitoring, and security administration within enterprise mainframe systems. The ideal candidate will have strong hands-on experience with RACF (or equivalent tools) and the ability to safeguard critical systems and sensitive data. What You'll Do:

• Access Control & Administration: Administer and maintain RACF security environments across z/OS systems
• Create, modify, and revoke: User IDs; Groups; Resource profiles; Dataset and subsystem access permissions
• Implement and enforce least privilege access models
• Secure access to key systems and resources including Datasets; Applications (CICS, DB2, IMS, MQ); System-level resources; Security & Compliance
• Define and maintain security policies and access standards
• Perform periodic access reviews and audits
• Support compliance with regulations such as: SOX; PCI; HIPAA (where applicable)
• Ensure all access controls align with enterprise governance and audit requirements
• Monitor and analyze security activity through: RACF reports; SMF logs; SIEM tools
• Investigate and respond to: Access violations; Unauthorized access attempts; Security incidents
• Troubleshoot and resolve access issues and authorization failures
• Secure mainframe subsystems and integrations, including: CICS, DB2, IMS, MQ, TCP/IP, USS
• Support integration with: Enterprise IAM solutions; Single Sign-On (SSO) and multi-factor authentication (MFA)
• Assist with system-wide configuration of RACF classes, rules, and profiles
• Support encryption and certificate management
• Assist with TLS/SSL configuration and secure communication
• Work with cryptographic services (e.g., ICSF) where applicable
• 5+ years of experience in IBM mainframe (z/OS) environments
• Strong hands-on experience with: RACF administration (or ACF2 / Top Secret); User and group management; Dataset and subsystem security
• Experience with: Security audits and access reviews; Monitoring and analyzing security logs
• Strong understanding of z/OS security architecture; Access control models and compliance practices
• Excellent troubleshooting and analytical skills

• Experience with ACF2 or Top Secret
• Familiarity with SIEM tools (Splunk, QRadar, or similar)
• Experience supporting enterprise audits and compliance initiatives
• Exposure to IAM integration, SSO, and MFA solutions
• Automation or scripting experience (REXX, Python, Shell)
• Experience in financial services or regulated environments

• You enjoy working on security and access control at a deep technical level
• You are detail-oriented and focused on protecting critical systems and data
• You thrive in environments requiring compliance, audit readiness, and precision
• You are comfortable working across teams to support secure and reliable operations