{"id":2375817,"url":"https://alion.io/job/brmi-identity-access-management-engineer","title":"Identity & Access Management Engineer","company":{"id":4422694,"name":"BRMi","domain":"brmi.com","url":"https://alion.io/company/brmi-2","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"iCIMS","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":119000,"max_usd":211000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":297},"experience_years_min":5,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Db2","optional":false},{"name":"IAM","optional":false},{"name":"Incident Management","optional":false},{"name":"ISO 27001","optional":false},{"name":"Least Privilege","optional":false},{"name":"PCI DSS","optional":false},{"name":"ServiceNow","optional":false}],"status":"live","first_seen_at":"2026-10-12T18:33:46Z","employer_posted_date":"2026-10-12","last_verified_at":"2026-10-14T09:59:13Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Overview\nBRMi is seeking a Identity & Access Management Engineer to support and maintain the enterprise Identity and Access Management (IAM) program for an IBM z/OS mainframe environment. This role is responsible for administering RACF security, managing the identity lifecycle, enforcing access controls, and ensuring compliance with enterprise security policies and regulatory requirements.\nThe ideal candidate will have extensive experience with RACF administration, IBM zSecure, and mainframe identity management practices. This individual will work closely with cybersecurity, infrastructure, application, audit, and compliance teams to ensure secure access to critical mainframe resources while supporting governance initiatives, access reviews, and operational excellence.\nBenefits:\nComprehensive Medical, Dental, and Vision Insurance\nEmployer-Paid Life Insurance\nEmployer-Paid Short-Term and Long-Term Disability Insurance\n401(k)\nPaid Time Off (PTO) that includes Vacation Leave, Sick Leave, and 11 Paid Holidays\nEducational Assistance\nSalary: 125k-159k\n**Can be 100% remote in TX, VA, MD, DC, or FL**\n**High Profile roles may require candidates to fly to customer HQ for in person interview (expenses paid)**\nClick here to learn about BRMi's culture.\nClick here to see BRMi’s Glassdoor reviews\nResponsibilities\nAdminister and maintain the IBM RACF security environment for enterprise z/OS systems.\nManage the complete identity lifecycle, including user provisioning, modifications, role changes, transfers, and deprovisioning.\nConfigure and maintain RACF User, Group, Resource, Dataset, CICS, and DB2 security profiles.\nConfigure and maintain RACF SETROPTS parameters to ensure compliance with enterprise security standards.\nImplement and enforce least privilege, role-based access control (RBAC), and segregation of duties (SoD) principles across the mainframe environment.\nReview, evaluate, and approve user access requests in accordance with established IAM governance processes and security policies.\nPartner with business units, application teams, and cybersecurity to design and implement secure access models for new and existing applications.\nProvide Tier 3 support for complex identity, authentication, authorization, and RACF-related incidents and service requests.\nTroubleshoot access failures, permission conflicts, RACF violations, and authorization issues across production and non-production environments.\nUtilize IBM zSecure to perform security administration, reporting, compliance monitoring, and audit support.\nSupport periodic access certifications, entitlement reviews, privileged access reviews, and audit activities.\nMonitor compliance with internal security standards, regulatory requirements, and corporate IAM policies.\nDevelop and maintain RACF standards, operational procedures, security documentation, and technical guidelines.\nIdentify opportunities to automate IAM administration and reporting using REXX, JCL, and other mainframe utilities.\nParticipate in security projects, system upgrades, application implementations, and IAM modernization initiatives.\nCollaborate with enterprise IAM, cybersecurity, infrastructure, and governance teams to strengthen the organization's overall security posture.\nRecommend and implement process improvements that enhance operational efficiency, security, and compliance.\nPerform other duties as assigned \nQualifications\nBachelor's degree in Computer Science, Information Technology, Cybersecurity, Information Systems, or a related field, or equivalent combination of education and experience.\n5+ years of experience administering IBM z/OS mainframe security environments.\nExtensive hands-on experience administering RACF within enterprise mainframe environments.\nStrong understanding of Identity and Access Management (IAM) principles and lifecycle processes.\nExperience administering:RACF User Profiles\nGroup Profiles\nResource Profiles\nDataset Profiles\nCICS Security\nDB2 Security\nSETROPTS configuration\n\nStrong understanding of authentication, authorization, identity governance, privileged access management, least privilege, and role-based access control.\nExperience using IBM z/OS utilities including TSO, ISPF, JCL, and REXX.\nStrong analytical and troubleshooting skills with the ability to diagnose and resolve complex access and security issues.\nExperience supporting audit activities and regulatory compliance initiatives.\nExcellent written and verbal communication skills with the ability to communicate effectively across technical and business teams.\nDesired:\nExperience administering IBM zSecure Administration and Audit.\nExperience using ServiceNow for access requests, incident management, and change management.\nExperience supporting Identity Governance and Administration (IGA) processes.\nExperience supporting SOX, PCI DSS, NIST, ISO 27001, FFIEC, or other regulatory frameworks.\nExperience with privileged access management (PAM) concepts and enterprise IAM governance.\nExperience developing automation using REXX or other scripting languages.\nKnowledge of enterprise mainframe operations, CICS, DB2, and z/OS security architecture.\n** BRMi will not sponsor applicants for work visas for this position.**\n**This is a W2 opportunity only**\nEOE/Minorities/Females/Vet/Disabled\nWe are an equal opportunity employer that values diversity and commitment at all levels. All individuals, regardless of personal characteristics, are encouraged to apply. Employment policies and decisions on employment and promotion are based on merit, qualifications, performance, and business needs. The decisions and criteria governing the employment relationship with all employees are made in a nondiscriminatory manner, without regard to race, religion, color, national origin, sex, age, marital status, physical or mental disability, medical condition, veteran status, or any other factor determined to be unlawful by federal, state, or local statutes.","description_format":"text","description_chars":5931,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Life insurance","Vision insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Identity Management"],"lifecycle":[{"event":"open","at":"2026-10-12T18:33:46Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":1,"expected_fill_days":40,"reasons":["conf:1","win:early"],"computed_at":"2026-10-14T06:34:16Z"},"pay":null,"html_url":"https://alion.io/job/brmi-identity-access-management-engineer","json_url":"https://alion.io/job/brmi-identity-access-management-engineer.json","meta":{"generated_at":"2026-10-14T10:05:09Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":11557,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4422694},"rest":"https://alion.io/mcp/rest/get_company?id=4422694"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbrmi-identity-access-management-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbrmi-identity-access-management-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbrmi-identity-access-management-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/brmi-identity-access-management-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbrmi-identity-access-management-engineer"}]}