Mainframe Security Engineer – RACF

Exciting New Freelance Opportunity – Mainframe Security Engineer (RACF) | 12-Month Contract + Potential Extensions

Location: Brussels, Belgium

Working arrangement: 50% onsite / 50% remote

Contract: 12 months, with potential extensions

Languages: English mandatory; French and Dutch advantageous

Rate: Depending on expereince

Experience: 10+ years relevant experience

Certification: RACF Security Administrator certification mandatory

Role Overview

We are looking for an experienced Mainframe Operational Security Engineer to join the IT Security Production Tribe, within the Mainframe System Security Squad.

This is a hands-on technical security role focused on protecting and maintaining the security of IBM mainframe environments. You will be responsible for implementing security standards, managing access controls, supporting infrastructure teams and resolving mainframe security incidents.

You will also work closely with IT Risk, asset owners and auditors to address security risks, implement controls and resolve audit findings.

Key Responsibilities

• Administer and maintain RACF security, including the RACF database, user profiles, permissions and access controls.
• Manage mainframe user access and permissions, outside the traditional IAM environment.
• Implement and maintain mainframe security standards and procedures.
• Support infrastructure teams with the implementation of security controls.
• Investigate and resolve mainframe security incidents and operational issues.
• Manage encryption, certificates and HSM-related security components.
• Assess new mainframe products and technologies from a security perspective.
• Identify and proactively manage security risks across the mainframe environment.
• Support IT Risk teams, asset owners and auditors with security assessments and audit requirements.
• Produce and maintain technical security documentation and standards.
• Investigate and resolve security vulnerabilities and audit findings.
• Participate in an on-call rota, approximately one week per month, including weekends and public holidays.

Technical Requirements

Essential experience:

• Strong hands-on experience administering IBM RACF.
• In-depth knowledge of IBM mainframe architecture and z/OS.
• Experience managing RACF databases, user profiles, permissions and security utilities.
• Strong understanding of mainframe access controls and RBAC.
• Experience with mainframe security operations, troubleshooting and incident resolution.
• Knowledge of encryption, certificates, PKI and mainframe cryptographic components.
• Experience working with infrastructure and operational security teams.

Relevant technologies and tools:

• IBM RACF and RACF utilities
• IBM z/OS
• JCL
• ISPF
• REXX
• SDSF
• zSecure
• AT-TLS and certificate management
• PKI and mainframe cryptographic cards
• DB2, IMS and MQ security
• Unix System Services
• Mainframe job scheduling, spool, network, storage and SMF subsystem security

Additional advantageous skills:

• COBOL
• Endevor
• Mainframe scheduling and Control tools
• Experience with mainframe security auditing and remediation.

Candidate Requirements

• 10+ years of relevant mainframe security experience.
• Mandatory RACF Security Administrator certification.
• Bachelor's degree or equivalent.
• Fluent professional English.
• French and/or Dutch would be advantageous.
• Based in Brussels or within a practical commuting distance.
• Comfortable working onsite in Brussels approximately 50% of the time.

Working Arrangement

• Brussels-based assignment.
• 50% onsite and 50% remote.
• 12-month initial contract, with potential extensions.
• On-call responsibility approximately one week per month, including weekends and holidays.

Important: This is a hands-on IBM Mainframe Security / RACF engineering position, not a general Cybersecurity Analyst, SOC, GRC or traditional IAM/IGA role.