IBM Global Financing
Website:
ibm.com
Job details:
Introduction
At IBM Finance & Operations, we are the backbone of IBM’s transformation driving efficiency, transparency, and smart decision-making across the business. Our teams provide the insight and discipline that guide strategy, ensure financial strength, and enable IBM to invest in innovation and growth. Working in Finance & Operations means combining analytical skills with collaboration and curiosity. You’ll partner with colleagues across functions and geographies, using data, technology, and process excellence to create solutions that improve performance and deliver measurable impact. IBM offers continuous learning, career development, and a culture that values diverse perspectives. Join us and be part of a global team that keeps IBM moving forward, while building your own future in a dynamic and evolving environment.
Your Role And Responsibilities
The
RACF L2 Support Engineer is responsible for providing advanced mainframe security administration and troubleshooting on
IBM z/OS and
z/VM environments.
This role acts as a
bridge between L1 Service Desk and L3 Engineering, handling complex security requests, access violations, RACF database issues, digital certificate management, and operational security tasks.
The L2 engineer ensures the reliability, availability, and compliance of mainframe security by executing access control operations, resolving incidents, generating audit reports, and supporting enterprise security initiatives.
Key Responsibilities
- RACF Security Administration
- Perform user, group, dataset, and resource profile administration using RACF commands
- Manage permissions, roles, and access entitlements
- Evaluate and fulfill complex access requests with proper impact analysis
- Troubleshooting & Incident Resolution
- Investigate and resolve access violations, job failures (ICH, IKJ, IEC messages), and RACF-related errors
- Support incident management, including root-cause analysis and remediation
- Troubleshoot JCL issues, abends, dataset errors, and condition codes
- RACF Database & System Maintenance
- Monitor and maintain RACF database health
- Execute RACF utilities (IRRUT200, IRRDBU00, IRRUT400) for integrity checks, backup, and unloads
- Assist in database corruption recovery and problem escalations
- Digital Certificates & Crypto Services
- Manage digital certificates, keyrings, and SSL/TLS configurations within RACF
- Support ICSF‑related crypto panel operations
- ZSecure Administration & Reporting Use IBM ZSecure for security administration, audit checks, compliance reporting
- Write/modify CARLA code to generate custom reports
- Compliance, Audit & Documentation
- Support internal and external audits by preparing logs, reports, and evidence
- Ensure SOX, GDPR, and internal enterprise policy compliance
- Create SOPs, knowledge articles, and runbooks for operational use
- Cross‑Team Collaboration
- Coordinate with L1 teams for escalations
- Work closely with L3 engineering for complex issue resolution
- Engage with application, infrastructure, and audit teams for security improvements
Preferred Education
Bachelor's Degree
Required Technical And Professional Expertise
Required Skills & Competencies
- RACF Expertise
- Strong command of RACF administrative commands (ADDUSER, ALTUSER, CONNECT, RDEFINE, PERMIT, RALTER)
- Experience administering datasets and general resource classes
- Handling RACF errors, access violations, and privileges
- Mainframe Navigation
- ISPF panels
- SDSF (job logs, output analysis, JES logs)
- ZSecure Admin & Audit
- OPC/TWS job scheduler
- ICSF crypto panels
- JCL & Job Troubleshooting
- JCL basics: syntax, execution flow, PROC structures
- Ability to diagnose abends, dataset errors, condition codes
- Familiarity with restart logic, overrides, and job dependencies
- RACF Database & Utilities
- Using IRRUT200, IRRDBU00, IRRUT400
- Knowledge of RACF database backup, structure, and recovery
- Certificates & Keyring Management
- X.509 certificates
- Keyring creation, renewal, and certificate installation
- Understanding of TLS/SSL in mainframe environment
- ZSecure (Advanced)
- CARLA coding for customized reports
- Compliance, entitlement, and exception reporting
- Soft Skills
- Strong analytical and problem‑solving skills
- Clear communication with technical and non‑technical teams
- Ability to document processes and create runbooks
- Time management & multitasking across multiple tickets/tasks
Preferred Technical And Professional Experience
- IT Service Management Knowledge: Exposure to IT service management principles and practices, including service delivery, service support, and service transition. Familiarity with IT service management frameworks and standards is beneficial.
- Multiple Platform Familiarity: Experience working with multiple platforms, processes, or architectures is advantageous, including knowledge of various operating systems, application programs, and system diagnostics.
- Technical Leadership Skills: Exposure to technical leadership roles, including leading technical teams, mentoring junior technicians, and providing technical guidance and assistance to others.
Click on Apply to know more.