Creospan - RACF Engineering & Security Conversion Lead

RACF Engineering & Security Conversion Lead

Location: Pune / Bangalore

Experience: 14+ Years

Joining Preference: Immediate joiners preferred

Job Overview :

We are looking for an experienced RACF Engineering & Security Conversion Lead to own RACF engineering activities while performing hands-on ACF2 security conversion analysis. The role is suited to a senior mainframe security professional with practical knowledge of RACF administration, database engineering, ACF2 rule structures, and security migration. The successful candidate will assess existing ACF2 security configurations, translate access requirements into RACF controls, support conversion activities, and resolve defects to ensure secure outcomes across complex enterprise mainframe environments.

Key Responsibilities :

- Lead RACF engineering activities, including security database maintenance, user and group administration, profile management, and access control configuration.

- Analyse ACF2 components, including LogonIDs, UID strings, dataset rules, and resource rules, to understand access and security requirements.

- Map ACF2 rules and permissions to appropriate RACF users, groups, connects, profiles, permits, and resource classes.

- Execute and validate RACF commands and manage RACF groups, user connects, permits, SETROPTS settings, and class activation.

- Support ACF2-to-RACF conversion planning and implementation, including access analysis, security cleanup, compare reporting, and remediation of gaps.

- Review conversion outputs and compare reports, investigate mismatches, identify root causes, and coordinate defect resolution with technical teams.

- Perform RACF database engineering tasks, including backup and recovery, use of IRR utilities, and database integrity maintenance.

- Support password propagation and certificate conversion activities, ensuring security requirements are addressed.

- Use zSecure, SMF data, REXX, JCL, and security reporting techniques to analyse access, validate

configurations, and support audit and troubleshooting activities.

- Prepare technical analysis, conversion findings, remediation details, and status updates for stakeholders.

- Work with mainframe, application, infrastructure, and security teams to resolve dependencies and maintain progress across conversion milestones.

- Follow security controls and operational practices while ensuring conversion activities are accurate, traceable, and documented.

Required Skills and Experience :

- 14+ years of hands-on experience in RACF engineering, ACF2 administration, or mainframe security implementation.

- Strong knowledge of RACF commands, profiles, user and group administration, class controls, and security database maintenance.

- Practical experience analysing ACF2 LogonIDs, UID strings, dataset rules, and resource rules.

- Experience with ACF2-to-RACF conversion, security cleanup, access analysis, compare reporting, or large-scale access remediation initiatives.

- Understanding of RACF groups, connects, permits, SETROPTS, class activation, database backup and recovery, and IRR utilities.

- Experience with password propagation and certificate conversion.

- Proficiency in JCL, REXX, ISPF, SMF analysis, and security reporting.

- Familiarity with zSecure and its use in mainframe security analysis and reporting.

- Strong troubleshooting, analytical, documentation, and communication skills, with the ability to work

independently and collaborate across technical teams.