Mainframe Security

**Who We Are**

At Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day. So why work at Kyndryl? We are always moving forward - always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities.

**The Role**

As a System Administrator at Kyndryl, you’ll solve complex problems and identify potential future issues across the spectrum of platforms and services. You’ll be at the forefront of new technology and modernization, working with some of our biggest clients - which means some of the biggest in the world.

There’s never a typical day as a System Administrator at Kyndryl, because no two projects are alike. You’ll be managing systems data for clients and providing day-to-day solutions and security compliance. You’ll oversee a queue of assignments and work directly with technicians, prioritizing tickets to deliver the best solutions to our clients.

One of the benefits of Kyndryl is that we work with clients in a variety of industries, from banking to retail. Whether you want to broaden your knowledge base or narrow your scope and specialize in a specific sector, you can find your opportunity here. You’ll also get the chance to share your expertise by recommending modernization options, identifying new business opportunities, and cultivating relationships with other teams and stakeholders. Does the work get challenging at times? Yes But you’ll collaborate with a diverse group of talented people and gain invaluable management and organizational skills, which will come in handy as you move forward in your career.

Your future at Kyndryl
Every position at Kyndryl offers a way forward to grow your career, from Junior System Administrator to Architect. We have opportunities for Cloud Hyperscalers that you won’t find anywhere else, including hands-on experience, learning opportunities, and the chance to certify in all four major platforms. One of the benefits of Kyndryl is that we work with clients in a variety of industries, from banking to retail. Whether you want to broaden your knowledge base or narrow your scope and specialize in a specific sector, you can find your opportunity here.

**Who You Are**

You’re good at what you do and possess the required experience to prove it. However, equally as important - you have a growth mindset; keen to drive your own personal and professional development. You are customer-focused - someone who prioritizes customer success in their work. And finally, you’re open and borderless - naturally inclusive in how you work with others.

**Required Technical and Professional Expertise**

A minimum of five years’ experience managing security and compliance within mainframe environments, demonstrating proficiency in the following areas

**1. Mainframe Security Concepts**
- Familiarity with essential mainframe security principles and system architecture
- Skilled in z/OS security features as well as relevant subsystems

**2. Security Software & Tools**
- Hands-on experience with mainframe security solutions such as:

- **RACF (Resource Access Control Facility)**for managing identity and access
- Other platforms like **CA ACF2 or CA Top**Secret
- Capable in administering user accounts, assigning access rights, and handling profile management
- Able to develop and maintain security policies

**3. Access Management**
- Proven track record in setting up and maintaining user IDs, groups, roles, and access privileges
- Applies least privilege principles effectively
- Manages resource classes and custom access rule sets
- Enforces password standards, account lockout procedures, and multi-factor authentication

**4. Compliance & Auditing**
- Understands regulatory requirements impacting mainframes **(SOX, HIPAA, PCI-DSS, GDPR)**
- Conducts security log reviews and system access audits
- Prepares audit materials and uses specialized tools for compliance monitoring
- Analyzes SMF records tied to security events

**5. Incident Management**
- Detects, investigates, and responds to security incidents
- Performs forensic analysis following breaches or suspicious activities
- Works with incident response teams to implement remediation

**6. Encryption & Data Protection**
- Knowledgeable about encryption methods and protecting mainframe data
- Puts into practice encryption controls for data at rest and in transit (e.g., **DFSMS, ICSF**)

**7. Policy & Procedure Development**
- Creates, updates, and enforces security protocols and operational guidelines for mainframes
- Records configuration changes and security updates

**8. System & Network Security**
- Collaborates with system programmers to patch vulnerabilities
- Ensures secure network connections to mainframe systems
- Manages secure communications using SSL/TLS, SSH, and similar protocols

**9. Monitoring & Alerting**
- Implements monitoring systems to catch unauthorized actions or policy