Senior Security Engineer – Senior RACF Engineer

Truist

. Design and maintain RACF profiles, groups, and resource classes supporting business operations and regulatory compliance .

Posted 10/26/2026full-timeWilson • North Carolina • United StatesSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in RACF administration, including user provisioning, access reviews, and compliance reporting. Proficient in developing automation scripts and managing cybersecurity projects while ensuring adherence to regulatory standards.

Highest-signal resume keywords

RACF AdministrationCybersecurity PrinciplesREXX ScriptingIBM z/OS ExperienceCompliance Standards

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

RACF ProfilesUser ProvisioningAccess ReviewsPassword ManagementSecurity Incident ResponseThreat ModelingSecurity TestingPenetration TestingAutomation ScriptingInformation Security Technologies

Soft Skills

CollaborationMentoringTechnical Leadership

Tools & Technologies

ZSecureIRRDBU00SMF RecordsSIEM PlatformsLDAP

Certifications & Qualifications

CISSPCRISCCISMCCNA SecurityGSECGCEDGPPACCNARHCEMCSE

Industry Keywords

SOXHIPAAPCI-DSSLeast-Privilege AccessRole-Based Access Control

Tech Stack

Tools & technologies

Cyber SecuritySplunk

About the role

Key responsibilities & impact

Design and maintain RACF profiles, groups, and resource classes supporting business operations and regulatory compliance
Lead RACF administration activities, including user provisioning, access reviews, and cleanup of obsolete IDs and datasets
Implement and manage password phrases, digital certificates, and program control
Monitor and audit RACF activity using SMF records, IRRDBU00 utilities, and zSecure tools
Collaborate with application, infrastructure, compliance, IAM, cybersecurity, risk, audit, and development teams to enforce least-privilege access
Develop and maintain REXX, CLIST, and JCL automation scripts for RACF provisioning, monitoring, and reporting
Provide expert-level support for security incidents, access issues, and RACF-related outages
Participate in RACF migrations, system upgrades, and integration with external identity systems such as LDAP
Document RACF policies, procedures, and standards
Contribute to audit and compliance reporting
Develop and maintain IT and cybersecurity capabilities safeguarding information systems and applications across the software development lifecycle
Design, plan, test, and implement cybersecurity technology projects
Administer policies and profiles, role-based access control, segregation of duties, controls, and auditing mechanisms
Lead related projects and serve as a technical subject matter expert
Mentor junior security engineers
Support identity management, certificate administration, encryption controls, privileged access administration, and risk management

Requirements

What you’ll need

Bachelor’s degree or equivalent education, training, and work-related experience
Minimum of 7 years of experience in security engineering or related cybersecurity roles
Deep specialized knowledge in cybersecurity principles, theories, and concepts
Proven experience in software development lifecycle security practices
Deep knowledge of threat modeling, security testing, and penetration testing
Experience implementing and managing complex information security technologies
Hands-on experience with RACF on IBM z/OS
Deep understanding of RACF classes including DATASET, GENERAL, FACILITY, OPERCMDS, and UNIXPRIV
Proficiency with IRRDBU00, DSMON, and SMF record analysis preferred
Expertise in zSecure Admin, Audit, and Alert modules
Strong scripting skills in REXX, CLIST, and JCL
Familiarity with USS environments, including OMVS segments, BPX.DAEMON, and program control
Working knowledge of SOX, HIPAA, and PCI-DSS
Experience integrating RACF into SIEM platforms such as QRadar or Splunk highly desirable
Prior involvement in RACF migrations or enterprise-wide cleanup initiatives considered an asset
English language fluency required
Other security or technical certifications are preferred, including CISSP, CRISC, CISM, CCNA Security, GSEC, GCED, GPPA, CCNA, RHCE, and MCSE

Benefits

Comp & perks

Medical insurance
Dental insurance
Vision insurance
Life insurance
Disability insurance
Accidental death and dismemberment coverage
Tax-preferred savings accounts
401k plan
At least 10 days of vacation during the first year of employment
10 sick days during the first year of employment
Paid holidays
Defined benefit pension plan (depending on position and division)
Restricted stock units (depending on position and division)
Deferred compensation plan (depending on position and division)