RBAC And RACF Engineer-Remote In Clients Footprint.

TEKsystems is a leading provider of business and technology services, and they are seeking an experienced Engineer to design, implement, and manage Role-Based Access Control (RBAC) solutions. The role focuses on ensuring secure, scalable, and compliant access management aligned with business requirements and security best practices.

Responsibilities:

• Design and implement RBAC models across enterprise applications, cloud platforms, and internal systems
• Define roles, permissions, and access policies aligned with business functions and least-privilege principles
• Collaborate with Security, DevOps, Infrastructure, and Application teams to integrate RBAC into systems and workflows
• Automate provisioning and de-provisioning of user access
• Conduct access reviews, audits, and compliance reporting
• Support integration with identity providers (IdP) and SSO solutions (e.g., Okta, Azure AD, Auth0)
• Implement and maintain access governance processes
• Troubleshoot access-related issues and ensure minimal operational disruption
• Document RBAC architecture, standards, and operational procedures
• Stay current with security standards, regulations, and IAM best practices
• Leads delivery and implementation of IAM technologies across the bank
• Ensure that identity & access management services are designed to be compliant with security and privacy standards and other industry standards and practices
• Consult with business units when implementing access for new systems
• Experience implementing RBAC in microservices or SaaS environments
• Experience with policy-as-code or fine-grained authorization systems (e.g., OPA, Cedar)
• Security certifications (CISSP, CISM, Azure/AWS Security certifications)
• Experience with access governance and entitlement review tools

Requirements:

• Experience in IAM, access governance, and enterprise security architecture
• Strong experience in designing and implementing RBAC models across enterprise applications, cloud platforms, and internal systems
• Ability to define roles, permissions, and access policies aligned with business functions and least-privilege principles
• Collaboration with Security, DevOps, Infrastructure, and Application teams to integrate RBAC into systems and workflows
• Experience in automating provisioning and de-provisioning of user access
• Conducting access reviews, audits, and compliance reporting
• Support integration with identity providers (IdP) and SSO solutions (e.g., Okta, Azure AD, Auth0)
• Implementing and maintaining access governance processes
• Troubleshooting access-related issues and ensuring minimal operational disruption
• Documenting RBAC architecture, standards, and operational procedures
• Staying current with security standards, regulations, and IAM best practices
• Leading delivery and implementation of IAM technologies across the bank
• Ensuring that identity & access management services are designed to be compliant with security and privacy standards and other industry standards and practices
• Consulting with business units when implementing access for new systems
• Experience implementing RBAC in microservices or SaaS environments
• Experience with policy-as-code or fine-grained authorization systems (e.g., OPA, Cedar)
• Security certifications (CISSP, CISM, Azure/AWS Security certifications)
• Experience with access governance and entitlement review tools
• Strong analytical and problem-solving skills
• Excellent communication and cross-functional collaboration
• Attention to detail
• Security-first mindset
• Ability to translate business requirements into technical access models
• Native RACF experience
• 6+ years of experience of implementing zSecure capabilities, including zAlert
• Experience with SIEM (SPLUNK) products for implementing reports and dashboards to support a Mainframe Governance program
• Experience with building out RACF reports in zSecure to support database authenticity
• Experience with onboarding and decommissioning applications into RACF structures
• Experience in IDAM solutions both on-premises and in the cloud
• Experience administering IDAM systems, access controls, security and risk management, as well as a security governance framework at scale
• Experience and understanding of various regulatory requirements and laws such as, but not limited to, Payment Card Industry (PCI), Federal Financial Institutions Examination Council (FFIEC), Sarbanes-Oxley (SOX), Health Information Portability and Accountability Act (HIPAA), General Data Protection Regulation (GDPR) and Gramm-Leach-Bliley Act (GLBA)
• Extensive knowledge of SSO, MFA, Active Directory (AD), public key infrastructure (PKI), privileged accounts and integration application program interface (API) capabilities
• Track record acting with integrity, taking pride in work, seeking to excel, being curious and adaptable, and communicating effectively
• Expert level knowledge of operating systems, e.g. Windows, Linux, & Unix
• Excellent customer facing communication skills (both written and verbal)
• Ability to research, evaluate, and devise course of action for security hardware/software and tools to make overall impact on the enterprise's existing security environment
• Experience with both Agile and Waterfall working methods
• Track record of acting with integrity, taking pride in work, seeking to excel, being curious and adaptable, and communicating effectively
• Extensive knowledge of Active Directory (AD) and LDAP Directories (e.g., Oracle Directory, Novell/NetIQ eDirectory)