Database Specialist - Guardium Z/os

Role: Infrastructure Database Guardium Engineer

Location: Plano- TX, New Jersey, Columbus- OH, onsite

Must have : DAM: Data Activity Monitoring, Guardium on Z/os

As a member of the Infrastructure Development team, you will dive right into creating innovative solutions that advance businesses and careers. You’ll join an inspiring and curious team of technologists dedicated to developing and deploy large scale infrastructure solutions that supports JPMC’s diverse and critical businesses. You will be using the latest technologies, data management and security practices in all aspects of software development. Critical thinking, clear communication and collaboration are key to successful product delivery.

As an IBM Guardium Data Activity Monitoring (DAM) Engineer, you will play a critical role in designing, implementing, and supporting secure database monitoring platforms that enable the protection of sensitive data for customers and businesses worldwide. You will be responsible for the installation, configuration, and ongoing support of highly resilient and stable Guardium DAM environments, leveraging automation and scripting to streamline deployments and operations.

In this role, you will apply your expertise in database security and monitoring to design tailored Guardium solutions based on project requirements, validate system performance and scalability, and ensure monitoring, alerting, and compliance objectives are fully met. You will collaborate closely with infrastructure, database, and security teams to test, optimize, and verify that Guardium implementations meet both operational and regulatory standards.

In addition to traditional Mainframe Systems Programming skills, the ideal candidate will have experience with software-driven systems management using various scripting languages and will be open to new ideas and ways to manage Mainframe infrastructure software.

Required Technical Skills

DAM: Data Activity Monitoring, Guardium

Mainframe & z/OS Core Skills

• Strong understanding of z/OS operating system, including SMP/E, datasets, RACF/ACF2/Top Secret, JES2/JES3, USS.
• Experience with mainframe networking (TCP/IP, VTAM) and port security requirements.
• Knowledge of z/OS sysprog fundamentals, IPL processes, PARMLIB members, and subsystem configuration.

IBM Guardium (Mainframe) Expertise

• Installation, configuration, and maintenance of:
• Guardium S-TAP for z/OS
• Guardium z/OS Toolkit components
• DB2 and IMS database activity monitoring via Guardium
• Experience with Guardium Policy Templates, security rules, and monitoring configurations.
• Ability to configure and troubleshoot Guardium buffering, log streaming, and filtering for mainframe DB2 workloads.
• Understanding of Guardium traffic flows from S-TAP to Collector and Aggregator.

VSI (Virtual Software Instance) for Guardium Components

• Deploying and administering VSI for Guardium Collector on z/OS.
• Deploying and administering VSI for Guardium Aggregator on z/OS.
• Understanding the lifecycle of VSIs (deploy, upgrade, patching, rollback).
• Performance tuning of Guardium VSI workloads on z/OS.
• Storage allocation planning and monitoring for VSI environments.

Database Monitoring & Security

• DB2 for z/OS internals and knowledge of data access paths requiring monitoring.
• Experience configuring DB2 audit traces, IFCIDs relevant to Guardium monitoring.
• Understanding of privileged access monitoring (PAM) and security control points.
• Experience with security compliance frameworks (SOX, PCI, internal audit, etc.).

Networking, Messaging, and Integration

• Expertise with TCP/IP encryption, certificates, TLS/SSL for Guardium connections.
• Understanding Guardium communication channels (collector ↔ aggregator, S-TAP ↔ collector).
• Experience engaging network teams for firewall openings, routing, load balancing.

Automation & Scripting

• Knowledge of REXX, JCL, ISPF scripting, and UNIX System Services scripting for automation surrounding Guardium processes.
• Ability to automate Guardium log management, health-check routines, and deployment tasks.

Operational Support Skills

• Support capability for Guardium-related outages or monitoring gaps.
• Strong troubleshooting abilities for:
• S-TAP connectivity failures
• Guardium policy performance issues
• Collector/aggregator data flow problems
• VSI resource or performance degradation
• Ability to interpret Guardium alerts, dashboards, and compliance reports.

Audit, Compliance, and Documentation

• Experience working directly with Audit, Cybersecurity, and Risk & Control teams.
• Documenting installation procedures, failover steps, and recovery processes.