Mainframe Security Engineer - ACF2 to RACF

Kforce's client is seeking a Mainframe Security Engineer for a Remote or Hybrid (U.S.-based) role. This role will be Long-Term Contract or Full-Time.

About the Role: We're looking for an experienced Mainframe Security Engineer to support a large-scale migration from CA-ACF2 and RC/Secure to IBM Security Server (RACF). This is a high-impact modernization initiative that enhances enterprise security and access management across IBM Z environments. You'll play a key role in planning, migrating, and validating security definitions that protect critical mainframe assets - collaborating with system administrators, application owners, and security teams to ensure a smooth, compliant, and secure transition.

What You'll Do:

• Lead the migration of CA-ACF2 and RC/Secure for DB2 to IBM Security Server (RACF)
• Migrate and validate security definitions for user/system IDs, datasets, and subsystems (CICS, IMS, DB2)
• Work with teams to export and convert ACF2 security databases at designated cutover points
• Implement and test password propagation solutions to maintain user credentials during migration
• Collaborate across system, network, and application teams to test, document, and promote RACF-based access control
• Execute migration on a sysplex-by-sysplex basis, ensuring minimal disruption to production systems