Remote Mainframe Security Migration

RESPONSIBILITIES:

Kforce has a client that is seeking a Mainframe Security Migration Specialist - ACF2/TSS to RACF for a remote long-term role.

Summary:

We are seeking an experienced Mainframe Security Migration Specialist to lead large-scale security modernization efforts - migrating enterprise clients from CA-ACF2 or CA-TSS to IBM Security Server (RACF). This is a high-impact role supporting the transformation of legacy security infrastructures into modern, automated, and AI-enhanced RACF environments. The ideal candidate combines deep mainframe security knowledge with project leadership, technical expertise, and a passion for modernization.

Duties:

• Perform detailed analysis of existing ACF2 or TSS environments to design and plan tailored RACF migration strategies
• Conduct comprehensive security assessments, vulnerability analyses, and compliance checks to identify potential migration risks and mitigation strategies
• Develop and execute migration plans covering planning, conversion, implementation, and cutover phases
• Configure and integrate RACF on z/OS systems, ensuring alignment with business and security requirements
• Utilize IBM tools such as zSecure and other RACF utilities to automate migration activities and streamline command generation
• Manage the installation, configuration, and validation of RACF profiles, rules, and access controls to fully replace ACF2 or TSS setups
• Provide post-migration support to fine-tune RACF configurations and ensure stability and performance
• Conduct training sessions and knowledge transfers to help client teams manage RACF environments effectively
• Serve as a Subject Matter Expert (SME) on RACF - guiding both client and internal teams on mainframe security best practices
• Explore opportunities to integrate AI and automation into RACF for enhanced monitoring and threat detection
  
  

REQUIREMENTS:

• 5 years of experience in mainframe security administration using RACF, ACF2, or TSS
• Hands-on experience with security database migration and conversion between z/OS security products
• Strong knowledge of RACF structure, profiles, rules, access lists, and utilities
• Expertise with z/OS, CICS, IMS, and DB2 security integration
• Excellent analytical, troubleshooting, and communication skills
• Experience leading migrations with minimal downtime and strong change control discipline
  
  

Preferred Skills:

• Familiarity with IBM zSecure and automation utilities for RACF
• Foundational programming knowledge in REXX, Assembler, PL/I, or Java
• Understanding of AI-driven security monitoring or interest in developing automation using AI tools
• Experience working in regulated environments requiring compliance and audit readiness (SOX, PCI, or ISO)
  
  

Why Join Us:

• Be at the forefront of mainframe security modernization in partnership with IBM
• Work with cutting-edge RACF automation and AI-enabled security tools
• Collaborate with top engineers and architects across IBM Z ecosystems
• Enjoy a remote-first, flexible work environment with long-term stability and competitive compensation
  
  

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.

We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.

Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law.

This job is not eligible for bonuses, incentives or commissions.

Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.

By clicking ?Apply Today? you agree to receive calls, AI-generated calls, text messages or emails from Kforce and its affiliates, and service providers. Note that if you choose to communicate with Kforce via text messaging the frequency may vary, and message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You will always have the right to cease communicating via text by using key words such as STOP.