About the Role :

We are looking for an experienced RACF Engineering & Security Conversion Lead with strong hands-on expertise in RACF administration, mainframe security, and ACF2-to-RACF conversion.

Key Responsibilities :

- Own RACF database engineering, database build, backup/recovery, and access control procedures.

- Analyze ACF2 LogonIDs (LIDs), UID strings, dataset rules, resource rules, privileged IDs, and existing access permissions.

- Validate RACF command streams covering users, groups, profiles, permits, connects, ownership, and security controls.

- Coordinate ACF2 extraction cycles, conversion runs, compare reports, and exception remediation with vendors and internal teams.

- Configure and validate RACF SETROPTS, class activation, generic profiles, UACC, logging, and audit controls.

- Identify and resolve conversion issues involving missing permissions, excessive access, profile conflicts, ownership gaps, and authorization mismatches.

- Prepare implementation plans, rollback procedures, validation evidence, and production cutover activities.

- Support mock cutovers, production migration, incident resolution, and post-implementation hypercare.

- Document RACF build standards and facilitate handover to BAU RACF administration teams.

Required Skills & Expertise :

- 12+ years of hands-on experience in RACF engineering, ACF2 administration, or mainframe security implementation.

- Strong expertise in RACF database management, RACF commands, user/group administration, profiles, permits, connects, and SETROPTS.

- Hands-on experience with ACF2-to-RACF conversion, security rule analysis, access mapping, compare reports, and remediation.

- Strong understanding of ACF2 LogonIDs, UID strings, dataset/resource rules, scopes, privileged IDs, and access controls.

- Experience with JCL, REXX, ISPF, SMF, IRR utilities, and security reporting.

- Experience in security database backup/recovery, production migration, rollback planning, and post-conversion validation.

Preferred Skills :

- Experience with zSecure or equivalent mainframe security tools.

- Familiarity with ACF2-to-RACF conversion toolkits and vendor-generated conversion artifacts.

- Experience with REXX automation and batch reporting.

- IBM RACF, z/OS security, or equivalent mainframe security certification.