z/OS UNIX System Services (USS) Security Engineer – Vice President

Morgan Stanley · Bengaluru · 10+ yrs experience · Posted 2026-07-01

Tech stack: Unix

Apply on the company site · Get a referral for this role

Morgan Stanley salary & ratings · Morgan Stanley interview process · More live openings

About the role

Responsibilities:
- Administer and manage USS identities, including UIDs, GIDs, OMVS segments, and service/shared IDs based on policy.
- Enforce naming standards, ownership traceability, and lifecycle controls for USS users and services.
- Manage and audit POSIX permissions, ownership, and execution rights across critical USS file systems.
- Control and monitor privileged access, including UID(0), setuid/setgid programs, and elevated authorities.
- Administer USS‑related ESM controls (RACF/TSS), including UNIXPRIV, FACILITY resources, and STARTED task identities.
- Secure USS configuration files, shell environments, PATH settings, and file system mount options.
- Monitor USS security events, logs, and audit records.
- Support production issues, security incidents, and access‑related investigations.
- Develop and maintain USS security standards, procedures, and documentation.
Qualifications:
- Bachelor’s degree and 10+ years of experience with mainframe and z/OS UNIX System Services.
- At least 6 years' relevant experience would generally be expected to find the skills required for this role.
- Strong hands‑on experience securing USS environments.
- Proven experience administering RACF or equivalent ESM for USS.
- Solid understanding of:
- UIDs, GIDs, OMVS segments, and service IDs
- POSIX permissions, ownership, and execution controls
- Experience with USS‑related security controls, including:
- UNIXPRIV class
- FACILITY class resources impacting OMVS
- STARTED task identities for USS services
- Working knowledge of zFS/HFS file systems, mount options, and USS SMF/audit logging.
- Strong understanding of least‑privilege and separation‑of‑duties principles.
- Experience with PKI, digital certificates, Kerberos, SSL/TLS, SSH, or OpenSSL.
- Exposure to systems programming concepts (e.g., SMP/E, SYS1 datasets, Assembler).
- Understanding of mainframe networking concepts.
- Experience supporting or securing middleware technologies (e.g., MQ).

Qualifications

- Bachelor’s degree and 10+ years of experience with mainframe and z/OS UNIX System Services.
- At least 6 years' relevant experience would generally be expected to find the skills required for this role.
- Strong hands‑on experience securing USS environments.
- Proven experience administering RACF or equivalent ESM for USS.
- Solid understanding of:
- UIDs, GIDs, OMVS segments, and service IDs
- POSIX permissions, ownership, and execution controls
- Experience with USS‑related security controls, including: UNIXPRIV class
- FACILITY class resources impacting OMVS
- STARTED task identities for USS services
- Working knowledge of zFS/HFS file systems, mount options, and USS SMF/audit logging.
- Strong understanding of least‑privilege and separation‑of‑duties principles.
- Experience with PKI, digital certificates, Kerberos, SSL/TLS, SSH, or OpenSSL.
- Exposure to systems programming concepts (e.g., SMP/E, SYS1 datasets, Assembler).
- Understanding of mainframe networking concepts.
- Experience supporting or securing middleware technologies (e.g., MQ).

Responsibilities

- Administer and manage USS identities, including UIDs, GIDs, OMVS segments, and service/shared IDs based on policy.
- Enforce naming standards, ownership traceability, and lifecycle controls for USS users and services.
- Manage and audit POSIX permissions, ownership, and execution rights across critical USS file systems.
- Control and monitor privileged access, including UID(0), setuid/setgid programs, and elevated authorities.
- Administer USS‑related ESM controls (RACF/TSS), including UNIXPRIV, FACILITY resources, and STARTED task identities.
- Secure USS configuration files, shell environments, PATH settings, and file system mount options.
- Monitor USS security events, logs, and audit records.
- Support production issues, security incidents, and access‑related investigations.
- Develop and maintain USS security standards, procedures, and documentation.

More openings at Morgan Stanley