Kyndryl Holdings, Inc.

Mainframe Security Architect

Kyndryl Holdings, Inc. • $138K — $188K *
Toronto, ON M3C 0E3In-Person
Information Technology
8 - 10 years of experience
Today
Be an Early Applicant
Job Overview by Ladders

Qualifications

  • 5-7 years of experience with IBM Z/z/OS security architecture, engineering, or operations.
  • Deep hands-on knowledge of a major mainframe External Security Manager: RACF, ACF2, or Top Secret/TSS.
  • Working knowledge of mainframe security concepts like SAF, ESM integration, and dataset security.
  • Over 10 years experience securing mainframe subsystems and access paths (e.g., CICS, Db2, IMS).
  • Experience with mainframe MFA and enterprise IAM integration including access certification and RBAC.
  • Ability to design solutions considering DR, high availability, and regulatory auditability.
  • Strong communication skills for documentation and technical designs.

Responsibilities

  • Lead the architecture of mainframe security solutions for Kyndryl clients.
  • Validate designed solutions with the Kyndryl mainframe consulting team.
  • Translate consulting recommendations into practical managed services implementations and controls.
  • Provide guidance across IBM Z security domains including authentication and compliance processes.
  • Support client environments using RACF, ACF2, and Top Secret/TSS.
  • Design security patterns for mainframe access paths and workloads.
  • Engage with client security architects to confirm proposed controls meet security and support standards.

Benefits

  • Comprehensive health benefits including medical, dental, and vision coverage.
  • Flexible work hours and hybrid working options.
  • Professional development opportunities and training programs.
  • Access to employee assistance programs and wellness resources.
Full Job Description
The Role

Key Responsibilities
  • Lead the architecture and operationalization of mainframe security solutions for Kyndryl managed-services clients.
  • Work with the Kyndryl mainframe consulting team to validate solutions being designed, proposed, and recommended to clients.
  • Translate consulting recommendations into practical managed-services designs, implementation approaches, runbooks, controls, support procedures, and operational readiness plans.
  • Provide architecture guidance across IBM Z security domains, including authentication, authorization, privileged access, dataset and resource protection, audit, monitoring, encryption, compliance, and cyber resilience.
  • Support client environments using RACF, ACF2, and Top Secret/TSS.
  • Design and validate security patterns for key mainframe access paths and workloads, including TSO, TN3270, CICS, Db2, IMS, MQ, FTP/SFTP, SSH, USS, batch, JES, SDSF, started tasks, service IDs, vendor IDs, automation IDs, and privileged users.
  • Support integration with enterprise security capabilities, including MFA, identity lifecycle intelligence and governance, privileged access management, SIEM/SOC monitoring, incident and change management, resilience, and compliance processes.
  • Define practical operating models for user enrollment, identity correlation, access reviews, exception handling, break-glass access, fallback, DR, password/passphrase impacts, monitoring, alerting, reporting, and steady-state support.
  • Guide delivery teams through design, build, test, pilot, cutover, stabilization, and transition-to-run.
  • Create reusable Kyndryl assets such as reference architectures, discovery questionnaires, implementation checklists, SIEM mappings, exception models, test plans, runbooks, and operational readiness criteria.
  • Engage with client security architects and technical stakeholders to confirm that proposed controls are secure, practical, auditable, resilient, and supportable under managed-services SLAs.


Who You Are

Required Skills and Experience
  • Strong experience with IBM Z / z/OS security architecture, engineering, or operations.
  • Deep hands-on knowledge of at least one major mainframe External Security Manager: RACF, ACF2, or Top Secret/TSS.
  • Working knowledge across mainframe security concepts, including SAF, ESM integration, dataset security, general resource protection, privileged access, started tasks, service accounts, digital certificates, SMF, audit controls, and security administration.
  • 10 + years experience securing mainframe subsystems and access paths such as CICS, Db2, IMS, MQ, USS, FTP/SFTP, SSH, TSO, TN3270, batch, JES, and SDSF.
  • Experience with mainframe MFA, enterprise IAM integration, identity lifecycle management, access certification, RBAC, least privilege, privileged access, and non-human identity governance.
  • Experience integrating mainframe security with SIEM/SOC processes, including security event forwarding, alerting, monitoring, investigation, and audit reporting.
  • Ability to design solutions that account for DR, high availability, fallback, exception handling, performance, password/passphrase policies, operational support, change management, and regulatory auditability.
  • Experience in managed services, outsourcing, consulting, financial services, insurance, government, healthcare, or other regulated enterprise environments.
  • Strong communication and documentation skills, including architecture diagrams, technical designs, implementation plans, runbooks, risk summaries, and executive-level updates.


Preferred Skills
  • Experience with IBM Z MFA / zMFA, Broadcom Advanced Authentication Mainframe, Rocket MFA, or equivalent mainframe MFA capabilities.
  • Familiarity with identity lifecycle intelligence and governance platforms such as SailPoint, IBM Security Identity Governance and Intelligence, IBM Verify Identity Governance, or equivalent client platforms.
  • Experience with mainframe security, compliance, monitoring, and resilience tools such as IBM zSecure, Broadcom ACF2, Broadcom Top Secret, Broadcom Compliance Event Manager, Broadcom Trusted Access Manager for Z, BMC AMI Defender, Rocket Secure Host Access, Rocket z/Assure VAP, or equivalent tools.
  • Knowledge of RACDCERT, ICSF, AT-TLS, TLS certificates, dataset encryption, key labels, CKDS/PKDS/TKDS concepts, certificate lifecycle management, and cryptographic controls.
  • Experience with mainframe security assessments, audit remediation, CIS/STIG/NIST/SOX/PCI control alignment, pervasive encryption, quantum-safe encryption readiness, immutable copies, cyber vault, or cyber recovery.
  • Working knowledge of JCL, REXX, CLIST, CARLa, TSO/ISPF, SDSF, JES2/JES3, SMF reporting, automation, ServiceNow, Ansible, or Git-based operational workflows.
  • Bilingual English/French is an asset for Canadian client engagements.


Salary: $138,320 - $188,320

The above represents Kyndryl's pay range for this role.

Salaries will vary based on factors such as location, skills, experience, education, and qualifications for the role. The range provided reflects the target compensation range for the position at the time of posting. Kyndryl's total compensation package will vary based on the pay type of the position and may include performance-based incentives, discretionary bonuses, as well as other perks and rewards.

About Kyndryl Holdings, Inc.

Kyndryl is an IT transformation services company. They offer network services, business resilience, and hybrid cloud solutions. Their services include applications, core enterprise and zcloud, the digital workplace, security and resiliency, cloud, data, and AI, network, and edge. They committed to the health and continuous improvement of the vital systems at the heart of the digital economy.

Kyndryl Holdings, Inc. Careers

Join the Pioneering Team at Kyndryl Holdings, Inc. At Kyndryl Holdings, Inc., we are at the forefront of technological innovation and service excellence, making this an ideal time to join our global team. As a leader in IT infrastructure services, we offer unparalleled job opportunities that propel your career to new heights. Work You’ll Do Embark on a career with Kyndryl Holdings, Inc. and be part of a team that transforms businesses and industries worldwide. Our professionals are not just part of a company; they are essential drivers of innovation and growth. With a commitment to leadership and diversity training, Kyndryl Holdings, Inc. stands out as a beacon of professional development and innovation in the tech industry. Our culture is built on the principles of open collaboration, leadership, and respect for diversity, ensuring a welcoming environment for all employees. Join our team and contribute to our mission of delivering high-quality solutions across various industries. At Kyndryl Holdings, Inc., your skills will be honed through challenging projects and a collaborative team environment. Innovative Work At Kyndryl Holdings, Inc., innovation isn't just a buzzword—it's the cornerstone of everything we do. With a focus on cutting-edge technology and industry expertise, our team is equipped to tackle some of the most critical challenges facing businesses today. Be Part of a Great Team Kyndryl Holdings, Inc. is not just about individual growth; it’s about collective success. The synergy of our team’s diverse skills leads to groundbreaking solutions and industry leadership. Our commitment to employee benefits and a supportive culture makes Kyndryl Holdings, Inc. a top choice for professionals seeking meaningful and rewarding careers. Future-Proof Your Career With Kyndryl Holdings, Inc., the path to professional advancement is clear. Our career development programs offer extensive training, certification support, and opportunities for growth, ensuring that your career trajectory is always upward. Explore Job Opportunities Whether you’re looking for a full-time position, an internship, or leadership roles, Kyndryl Holdings, Inc. offers a range of employment opportunities to match your career aspirations. Enhance your resume through hands-on experience that sets you apart in the job market. Kyndryl Holdings, Inc. Careers Network Stay connected with Kyndryl Holdings, Inc. through our dedicated careers network. Search open positions that align with your skills and interests. We are continuously hiring creative, curious, and motivated individuals who are ready to drive success in a dynamic work environment. Keep Up to Date Stay informed with the latest career tips, industry insights, and professional growth opportunities available at Kyndryl Holdings, Inc. Our careers blog provides valuable information to help you navigate your job search, prepare for interviews, and excel in your career. Job Alert Emails Customize your experience by subscribing to job alerts and insider tips tailored to your preferences. Discover the exciting and rewarding career opportunities waiting for you at Kyndryl Holdings, Inc. Join Kyndryl Holdings, Inc. today and be part of a team that values innovation, leadership, and a diverse skill set in driving technological advancements and business success.
Learn more about Kyndryl Holdings, Inc.
Market Cap
$2.5 billion
Industry
Information Technology
NASDAQ
KD
* Ladders Estimates

Similar Jobs

Ad banner background

Get Ready For Your
Next Interview

More Jobs at Kyndryl Holdings, Inc.

More Information Technology Jobs

Find similar Mainframe Security Architect jobs:

NationwideToronto, ON