Microsoft logo
Microsoft3 weeks ago

z/OS UNIX System Services (USS) Security Engineer

$95,000–$135,000 year

On-site · Alpharetta, Georgia, United States

Type
Full Time
Level
Senior Level
Education
Bachelors Degree
Company size
Enterprise

Job Summary

Secure and administer z/OS UNIX System Services (USS) on the mainframe; enforce least privilege, protect privileged access, and ensure alignment between UNIX permissions, ESM controls (RACF/TSS), and enterprise security standards. Partner with Enterprise Z security architect, system programmers, middleware teams, and audit/compliance stakeholders to maintain a secure and compliant USS platform. Develop and maintain USS security standards, procedures, and documentation.

Required Qualifications

  • Bachelor's degree and 5+ years of experience with mainframe and z/OS UNIX System Services
  • Strong hands on experience securing USS environments
  • Proven experience administering RACF or equivalent ESM for USS
  • Solid understanding of: UIDs, GIDs, OMVS segments, and service IDs
  • POSIX permissions, ownership, and execution controls
  • Experience with USS related security controls, including: UNIXPRIV class FACILITY class resources impacting OMVS STARTED task identities for USS services
  • Working knowledge of zFS/HFS file systems, mount options, and USS SMF/audit logging
  • Strong understanding of least privilege and separation of duties principles
  • Desired Experience with PKI, digital certificates, Kerberos, SSL/TLS, SSH, or OpenSSL
  • Exposure to systems programming concepts (e.g., SMP/E, SYS1 datasets, Assembler)
  • Understanding of mainframe networking concepts
  • Experience supporting or securing middleware technologies (e.g., MQ)
Sorce

Apply with one swipe on Sorce. We auto-fill applications and apply on your behalf — no cover letters, no 40-minute forms.

Hiring someone like this?

Get your role in front of qualified candidates on Sorce.

Get started

$95k – $135k / yr

z/OS UNIX System Services (USS) Security Engineer · Microsoft

Apply on Sorce