Mainframe Security & Compliance Administrator

Role & responsibilities

As a System Administrator at Kyndryl, youll solve complex problems and identify potential future issues across the spectrum of platforms and services. Youll be at the forefront of new technology and modernization, working with some of our biggest clients which means some of the biggest in the world.

Theres never a typical day as a System Administrator at Kyndryl, because no two projects are alike. You’ll be managing systems data for clients and providing day-to-day solutions and security compliance. You’ll oversee a queue of assignments and work directly with technicians, prioritizing tickets to deliver the best solutions to our clients.

Preferred candidate profile

A minimum of five years’ experience managing security and compliance within mainframe environments, demonstrating proficiency in the following areas

1. Mainframe Security Concepts

• Familiarity with essential mainframe security principles and system architecture
• Skilled in z/OS security features as well as relevant subsystems

2. Security Software & Tools

• Hands-on experience with mainframe security solutions such as:

• RACF (Resource Access Control Facility)

  for managing identity and access
• Other platforms like

  CA ACF2 or CA Top

  Secret
• Capable in administering user accounts, assigning access rights, and handling profile management
• Able to develop and maintain security policies

3. Access Management

• Proven track record in setting up and maintaining user IDs, groups, roles, and access privileges
• Applies least privilege principles effectively
• Manages resource classes and custom access rule sets
• Enforces password standards, account lockout procedures, and multi-factor authentication

4. Compliance & Auditing

• Understands regulatory requirements impacting mainframes

  (SOX, HIPAA, PCI-DSS, GDPR)

• Conducts security log reviews and system access audits
• Prepares audit materials and uses specialized tools for compliance monitoring
• Analyzes SMF records tied to security events

5. Incident Management

• Detects, investigates, and responds to security incidents
• Performs forensic analysis following breaches or suspicious activities
• Works with incident response teams to implement remediation

6. Encryption & Data Protection

• Knowledgeable about encryption methods and protecting mainframe data
• Puts into practice encryption controls for data at rest and in transit (e.g.,

  DFSMS, ICSF

  )

7. Policy & Procedure Development

• Creates, updates, and enforces security protocols and operational guidelines for mainframes
• Records configuration changes and security updates

8. System & Network Security

• Collaborates with system programmers to patch vulnerabilities
• Ensures secure network connections to mainframe systems
• Manages secure communications using SSL/TLS, SSH, and similar protocols

9. Monitoring & Alerting

• Implements monitoring systems to catch unauthorized actions or policy breaches
• Sets up automated alerts for significant security events

Preferred Technical and Professional Experience

• Experience using IBM Security zSecure for auditing and meeting compliance needs
• Familiar with Identity and Access Management (IAM) systems
• Has knowledge of automated compliance management frameworks
• Participates in disaster recovery planning and ensures business continuity