Lead Info Sec Ops Specialist, IAM Unix Specialist

TIAA

Confirmed live yesterday High trust
Hybrid

Quick summary

Work type
Hybrid
Location
Dallas, TXCharlotte, NCChicago, ILIselin, NJ
Employment
Full-time
Posted
12 days ago
Freshness
Confirmed live yesterday

Market check

Salary context

How this pay compares to similar roles

Similar $153k
$104k $201k
below market most similar roles pay here above market

This listing doesn't post a salary. Most similar roles pay $122,443–$184,325.

Based on 240 similar postings.

Employer

About TIAA

TIAA (Teachers Insurance and Annuity Association of America) is a leading Fortune 100 financial services organization and a premier provider of retirement services in the academic, research, medical, cultural, and governmental fields.

TIAA currently has 20 open roles on FindRole.

Most-posted roles

View all roles at TIAA

At a glance

TL;DR · Lead Info Sec Ops Specialist, IAM Unix Specialist

The Lead Info Sec Ops Specialist - IAM Unix Specialist joins the information security team to safeguard critical enterprise Unix, Linux, and Mainframe systems. This role focuses on privileged access management, where the specialist designs and maintains complex IAM access control solutions, manages sudo policies, and administers RACF environments. Day-to-day responsibilities include conducting security audits for SOX, GLBA, and PCI-DSS compliance, developing automated security scripts, and bridging Unix controls with enterprise IAM solutions. The position requires technical proficiency in Unix/Linux system fundamentals, sudo policy management, and scripting languages including Bash, KSH, Python, and Perl. Candidates should also possess experience with BoKS ServerControl, BeyondTrust EPM, and containerized environments to identify and remediate access control gaps while providing expert mentorship and documentation for the broader security architecture.

What you'll do

  • Design and maintain sudo access control policies across enterprise Unix/Linux environments.
  • Administer and optimize Unix privileged access management solution infrastructure and session management.
  • Manage the Mainframe RACF environment including user management and resource profile management.
  • Conduct specialized Unix and RACF security audits to ensure compliance with SOX, GLBA, and PCI-DSS.
  • Develop automated security scripts using shell scripting, Python, and Perl for access reviews and reporting.
  • Integrate BoKS/sudo privileged access controls with enterprise IAM solutions and cybersecurity architecture.
  • Identify and remediate access control gaps and privilege escalation risks through regular risk assessments.
  • Provide technical mentorship and maintain comprehensive documentation of security procedures and configurations.

What we're looking for

  • 5+ years of experience in information technology and/or Cybersecurity.
  • 7+ years of experience in the field (preferred).
  • 3+ years of experience with Unix/Linux.
  • Experience with scripting using Bash, KSH, Python, or Perl.
  • University degree (preferred).
  • RACF administration experience (preferred).
  • Hands-on experience with BoKS ServerControl or similar centralized Unix access control solutions (preferred).
  • Experience in a containerized environment (preferred).

More like this

Similar roles

Lead Info Security Systems Engineer

L3Harris

Clifton, NJ 89 days ago $125,000–$232,000
Risk Management Framework (RMF) NIST 800-53 NIST 800-37 NIST 800-160 ACAS SCC Encryption Vulnerability Analysis Common Criteria DITSCAP DIACAP DCID 6/3 Cyber Defense Security Architecture Configuration Management Anti-Tamper (AT Verification and Validation Earned Value Management System (EVMS TS/SCI Clearance
9+ yrs exp

Lead Info Security Systems Engineer

L3Harris

Chantilly, VA 40 days ago $127,500–$236,500
DevSecOps CI/CD SAST STIG IaaS PaaS SaaS Splunk Tenable Nessus Fortify Coverity GitLab UML SysML UAF Encryption Firewalls
9+ yrs exp

Lead Info Security Systems Engineer

L3Harris

Chantilly, VA 40 days ago $127,500–$236,500
DevSecOps CI/CD SAST STIG IaaS PaaS SaaS Splunk Tenable Nessus Fortify Coverity GitLab UML SysML UAF Encryption Firewalls Vulnerability Management
9+ yrs exp

Lead Info Security Systems Engineer

L3Harris

Clifton, NJ 89 days ago $125,000–$232,000
Risk Management Framework (RMF) NIST 800-53 ACAS SCC Vulnerability Assessment Encryption NIST 800-37 Common Criteria DITSCAP DIACAP DCID 6/3 Security Architecture Anti-Tamper (AT Configuration Management Verification and Validation Earned Value Management System (EVMS TS/SCI Clearance DoD 8140 NIST 800-181 DoD 5200.39 NIST 800-160
9+ yrs exp

Lead Info Security Systems Engineer

L3Harris

Colorado Springs, CO 11 days ago $110,500–$205,500
CMMC AWS DevSecOps CI/CD SAST DAST SCA SBOM IaC Fortify Coverity Anchore GitLab Splunk Tenable NESSUS UML SysML UAF Zero Trust Architecture OSCAL STIG FIPS JSIG CNNSI Encryption Vulnerability Management Identity and Access Management IaaS PaaS SaaS
9+ yrs exp