Mainframe Security Engineer

Bimona is looking for a Mainframe Security Engineer with at least 10 years of experience and in-depth RACF knowledge for an organisation in the financial sector in Brussels. You need the RACF Security Administrator certification for this role.

You join the team responsible for mainframe security. That team sets the security standards and checks that people follow them. It also helps infrastructure teams and users when a security incident comes up, and it fixes and documents the risks that auditors find.

• Manage permissions and access for systems that are not covered by the central IAM process. Access has to be secure, and operational teams still need to be able to do their work.
• Maintain the content of the RACF database, manually or with automation.
• Write the security standards and documentation that teams work with, including the reasoning behind each rule.
• Handle encryption tasks: you import certificates and configure the technical agents for Hardware Security Modules (HSMs).
• Review new mainframe products for security before they go into production.
• Work with your teammates on security incidents. You interpret the error messages, find the cause and roll out a fix that disrupts as little as possible.
• Provide compliance evidence to internal risk teams, application owners and auditors, and follow up on audit findings.
• Look ahead for risks and deal with them before they affect the business.
• Join the on-call rotation. Roughly one week per month, you handle critical job failures outside business hours, including the weekend and any public holidays in that week.

Required:

• At least 10 years of relevant cybersecurity experience, including hands-on mainframe work, and the motivation to keep building that expertise
• A bachelor’s degree
• RACF Security Administrator certification
• English
• Solid knowledge of:
  – RACF and its related utilities
  – mainframe architecture
  – the standard mainframe tools, such as JCL, ISPF, REXX and SDSF
  – role-based security modelling
  – AT-TLS and certificates
  – security of DB2, IMS and MQ
  – job scheduling
  – mainframe subsystems and their security, such as spool, network, storage and SMF
  – PKI and mainframe crypto cards
  – UNIX System Services

Nice to have:

• zSecure RACF certification and experience with the zSecure suite
• COBOL
• Experience with mainframe change and source management tooling
• Dutch and/or French
• Experience in the financial sector

• Location: Brussel
• Contract: Freelance or as Bimona consultant
• Start date: ASAP
• Duration: A one-year contract with the possibility of extension.
• Hybrid working: mandatory 50% on site