Software Developer - z Security Expert

Introduction

IBM Software infuses core business operations with intelligence-from machine learning to generative AI-to help make organizations more responsive, productive, and resilient. IBM Software helps clients put AI into action now to create real value with trust, speed, and confidence across digital labor, IT automation, application modernization, security, and sustainability. Critical to this is the ability to make use of all data, because AI is only as good as the data that fuels it. In most organizations data is spread across multiple clouds, on premises, in private datacenters, and at the edge. IBM's AI and data platform scales and accelerates the impact of AI with trusted data, and provides leading capabilities to train, tune and deploy AI across business. IBM's hybrid cloud platform is one of the most comprehensive and consistent approach to development, security, and operations across hybrid environments-a flexible foundation for leveraging data, wherever it resides, to extend AI deep into a business.

• Develop and modernize security-related tools that support Migration from TSS or ACF2 to RACF.
• Analyze and enhance existing security migration tools to make them more efficient, scalable, and aligned with modern security needs.
• Automate security administration processes, improving how access control, rule translation, and reporting are handled.
• Support security rule extraction and transformation, ensuring our tools can handle new ESM policies and evolving security requirements.
• Integrate security tools with AI/automation platforms, helping improve migration process and analysis.
• Work closely with security specialists, mainframe developers and AI specialists, ensuring tools align with best practices and compliance requirements.
• Reverse engineer and understand security configurations, supporting the transition to more alternative security frameworks.
• Research and prototype new security capabilities, exploring ways to enhance IBM mainframe security solutions for future needs.

• 10-12 years of Industry experience, 5+ years of relevant experience in in security domain (espicially on any of the products like ACF2, RACF, Topsecret).
• Strong knowledge of CA ACF2, CA Top Secret (TSS), and RACF administration on z/OS-especially in how these systems handle access control and security rules.
• Hands-on experience building and maintaining security-related tools in a mainframe environment.
• Deep understanding of z/OS security architecture, including how security models are structured, enforced, and audited.
• Proficiency in Java, REXX, JCL, and scripting, particularly for automating security-related processes and improving tool efficiency.
• Familiarity with IBM security tools like zSecure, RACF utilities, and access management automation, and how they fit into broader security operations.
• Ability to analyze security policies, extract security rules, and contribute to the modernization of legacy security tools to meet evolving requirements.

• Experience working on modernizing mainframe security tools, including transitioning them to more modern Java-based solutions.
• Assembler knowledge, particularly an understanding of how older security tools interact with z/OS at a lower level.
• Some familiarity with Watsonx.ai and AI-driven automation for security analysis and automation (or willingness to learn).
• Knowledge of API integration for mainframe security tools, especially for connecting mainframe security with cloud/hybrid environments.
• Exposure to IAM frameworks, cryptographic controls, and security event monitoring in mainframe environments.
• Strong troubleshooting and debugging skills for resolving security workflow issues and improving tool performance.