z/OS Security System Programmer

Alfalogic Solutions

is a global IT consulting and solutions provider that offers dynamic end to end business solutions to various enterprises with high quality of services in emerging technologies and an impressive command of industry expertise and leading technology capabilities with fully integrated on-site, off-site, offshore and blended delivery methodologies.

Alfalogic Solutions hires

z/OS Security System Programmer

with min 5 years of real-time relevant experience for Kuwait location. The candidates should be able to join and travel for projects if selected. The candidates who have relevant skillset and strong experience can share their profile to *** immediately.

Requirement:
Qualification: Any Relevant degree
Work Location: Kuwait
Experience: Min 5+ years of relevant experience
Skills: z/OS Security System Programming, Scripting in REXX, JCL, RACF etc.
Duration:

Long-Term
Start Time: ASAP/ 30 - 60 days or less than from the day of offer acceptance


Key Responsibilities:
Security Administration: Install, configure, and maintain z/OS security products such as RACF (Resource Access Control Facility).
Access Control Management: Define and manage user accounts, roles, permissions, and groups to ensure that only authorized users have appropriate access to systems and data.
Policy Implementation: Implement and enforce security policies and procedures for z/OS systems to protect against unauthorized access, data breaches, and internal/external threats.
RACF Configuration: Customize and configure RACF or equivalent security software to meet the organization's security requirements, including defining profiles, resource classes, and rule sets.
Auditing & Compliance: Conduct security audits and reviews to ensure compliance with internal policies and regulatory requirements (e.g., PCI DSS, SOX, HIPAA). Provide detailed reports and remediation plans.
Security Monitoring & Incident Response: Monitor system security logs (e.g., SMF, SYSLOG) for unauthorized access attempts, suspicious activity, or security breaches. Investigate and respond to security incidents.
Encryption & Key Management: Configure and manage data encryption, including SSL/TLS for network security, and manage encryption key lifecycles for secure communications.
Security Patch Management: Regularly apply security patches and updates to z/OS and related software to ensure vulnerabilities are addressed and systems are up-to-date.
Security Performance Tuning: Monitor and optimize security configurations to balance performance and protection, ensuring minimal impact on system performance.
System Hardening: Harden z/OS systems by implementing best practices for security configuration, such as disabling unused services and enforcing password policies.
Automation & Scripting: Develop automation scripts (REXX, JCL, etc.) to manage and streamline security tasks such as account management, log monitoring, and incident reporting.
Collaboration & Support: Work closely with system administrators, application teams, and network administrators to ensure security policies are properly implemented across the enterprise.
Documentation: Maintain comprehensive documentation for security configurations, policies, procedures, and incident responses.
Technical Skills:
Strong knowledge of z/OS security subsystems, including RACF and their integration with z/OS components.
Experience configuring and managing security protocols such as SSL, TLS, and encryption methods.
Expertise in creating and managing security policies, user roles, and access control mechanisms.
Hands-on experience with SMF records, log analysis, and audit trails for security monitoring.
Familiarity with tools like IBM Security zSecure for auditing, reporting, and compliance.
Experience with security patch management and vulnerability assessment tools.
Proficiency in scripting (REXX, JCL) to automate security administration tasks.
Experience:
5+ years of experience as a z/OS System Programmer with a focus on security, particularly working with RACF.
•