Mainframe Security Sme

Who We Are

At Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day. So why work at Kyndryl? We are always moving forward - always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities.

The Role

Are you passionate about security architecture and driven to protect against the latest threats? We are seeking a Security Architect who will join our team and take the lead on developing, implementing, and maintaining our security strategy within our Service Provider organization.

As our Security Architect, you will work closely with our leadership team to design and implement effective security solutions that not only protect our business objectives and regulatory requirements, but also provide innovative solutions to stay ahead of emerging threats.

You will conduct risk assessments and threat modeling to identify and prioritize risks to our business and IT assets, using your extensive experience in security architecture design and implementation within a Service Provider environment to create a cutting-edge security architecture framework. You will also work to maintain policies, standards, and guidelines related to information security within our organization, collaborating with cross-functional teams to implement security controls and technologies such as encryption, authentication, and authorization solutions.

Your role will also involve conducting security reviews of vendors and third-party partners to ensure they meet our rigorous security standards, as well as performing regular security and risk reviews of our Service Provider environment to identify vulnerabilities and recommend remediation activities.

At the forefront of security trends and technologies, you will advise our senior leadership team on the latest security best practices, and stay ahead of emerging security threats, always keeping our organization one step ahead. Join us on this exciting journey of securing our Service Provider organization and protecting our customer’s assets.

Your Future at Kyndryl
Every position at Kyndryl offers a way forward to grow your career, from a Junior Architect to Principal Architect - we have opportunities for that you won’t find anywhere else, including hands-on experience, learning opportunities, and the chance to certify in all four major platforms.

Who You Are

You’re good at what you do and possess the required experience to prove it. However, equally as important - you have a growth mindset; keen to drive your own personal and professional development. You are customer-focused - someone who prioritizes customer success in their work. And finally, you’re open and borderless - naturally inclusive in how you work with others.

Required Technical and Professional Expertise
- 7 yrs of minimum experience in the related technology
- Experience in working on Mainframe services delivery or consulting
- Experience in working with global teams; Presentation and Client-facing
- Experience on Z platform, focused on z/OS, but with fair knowledge/experience on other domains like database, middleware, storage, network, and performance.
- Working knowledge of Mainframe ESM such as RACF/ACF2/TopSecret, including the basics, commands, operations, capabilities, and integrations.
- Knowledge on Z security concepts, such as PR/SM Virtualization, Common Criteria, HMC/SE Security, SAF, APF, Problem State vs. Supervisor State, Supervisor Calls, ACEE, SMF, Role-based Access, Principle of Least Privilege, Privileged Access Management, Database/Middleware/Network Security.

Theoretical (preferred) or Practical (optional) knowledge on some (if not all) of the following Mainframe Security concepts/technologies:

- ESM Management - ESM DB Sharing/Clustering/Plex, ESM Migrations, DB2 ESM Security Management, Failure Recovery, Disaster Recovery, Reporting, Auditing, Exits
- Mainframe IAM - Passphrases, MFA, Digital Certificate Management, Password Tokens (including JWT), Single Sign-on, and Enterprise Integrations (LDAP)
- Encryption Management - Symmetric/Asymmetric Encryption (methods and algorithms), Key Management aspects (including KMS such as UKO, SKLM), Data-at-rest/Data-in-transit/Data-in-memory encryption methods, Pervasive Encryption Features, z/OS Dataset Encryption, zERT, Database Encryption, Secure Key Operations, ICSF, Key Datasets (PKDS/CKDS/TKDS), CPACF, Crypto Adapters, TKE, Data Compression (zEDC), and awareness of Advanced Z Encryption Capabilities (such as Quantum-safe Encryption, Secure Boot, Fully Homomorphic Encryption, Data Privacy Passports)
- Mainframe Security Intelligence/Monitoring - Security Healthchecks, Monitoring Solutions (such as IBM zSecure, Broadcom CEM, or BMC AMI), SIEM Integration.
- Mainframe Security Patch Management - IBM Security/Integrity APAR Confidentiality, z/OS System Integrity Statement, Z Security Portal, Major Vul