Principal Platform Engineer

Principal Platform Engineer

• The Principal Platform Engineer will join the Mainframe Security Engineering team which provides engineering support for mainframe software and hardware, and for mainframe storage, network, performance, and security functions.

• Understand and implement RACF administration in a highly granular SYSPLEX and monoplex environments.
• Perform analysis, design, documentation, testing, implementation, and on-going support for the infrastructure mainframe security environment.
• Plan and implement assignments by due dates, without detailed supervision.
• Maintain high quality and consistency for security settings, rules, and procedures.
• Provide recommendations for the security settings of mainframe software products and features.
• Provide input and follow-through for continuous improvement to mainframe security.
• Configure zSecure, develop reporting, and enhance automation using REXX, SQL, SAS, and CARLa.
• Participate in team on-call coverage rotation, which includes tactical security administration and provide support on weekends
• Aligns risk and control processes into day-to-day responsibilities to monitor and mitigate risk, advances appropriately
• Participant in disaster recovery tests on weekends.
• Participate in audits and penetration testing

• Minimum of 8 years of related experience
• Bachelor's degree preferred or equivalent experience
• Experience with RACF on z/OS, including both administration and technical support (answering questions, resolving incidents, debugging problems, etc.)
• In-depth knowledge and experience with one or more of: RACF certificate management, Integrated Cryptographic Service Facility, RACF Remote Sharing Facility, RACF security for CICS, RACF security for MQ, RACF security for WebSphere Application Server, RACF security for IP networks, RACF security for Unix System Services, zSecure, Linux
• Ability to program in one or more of: Assembler, CARLa, REXX, SAS, SQL
• Strong MS Excel experience
• Knowledge of IAM (Identity Access Management) software products a plus.
• Knowledge of IP networks; NetAccess z/OS Communications Server a plus