Title: Z/OS Security / RACF Expert
Position: Remote
Type: Long Term Contract
Job Description
Act as a Subject Matter Expert (SME) for z/OS security across RACF, USS, and platform controls
Lead risk identification, impact analysis, and exposure assessment
Provide clear, actionable guidance and use cases to drive effective remediation
Key Responsibilities
Perform deep-dive security assessments to identify control gaps and vulnerabilities
Analyze and translate technical findings into business risk and impact
Define practical remediation strategies and implementation guidance for engineering teams
Review and strengthen RACF controls (DATASET, FACILITY, UNIXPRIV, STARTED)
Evaluate USS security posture (UID/GID, OMVS, POSIX, zFS)
Assess SMF, audit logs, and control effectiveness
Partner with stakeholders to ensure sustainable risk reduction and compliance alignment
Must-Haves
SME-level expertise in RACF / ESM security design and control evaluation
Identify security gaps and misconfigurations
Assess impact, exposure, and exploitability
Provide clear remediation pathways and use cases
USS security (UIDs, GIDs, OMVS, POSIX permissions)
FACILITY, UNIXPRIV, STARTED classes
zFS/HFS, mount controls, auditing/logging
Vulnerability management, risk assessments, or penetration testing methodologies
Applying security frameworks (STIGs, CIS benchmarks)