The USS Security Engineer will be a key member of the Enterprise Z Security team, focusing on securing and administering z/OS UNIX System Services (USS) environments on the mainframe. This role emphasizes enforcing least privilege, protecting privileged access, and ensuring compliance with enterprise security standards. The engineer will collaborate with security architects, system programmers, and compliance stakeholders to maintain a secure USS platform. The position requires a strong understanding of mainframe security controls and UNIX permissions.

• Bachelor's degree and 5+ years of experience with mainframe and z/OS UNIX System Services.
• Strong hands-on experience securing USS environments.
• Proven experience administering RACF or equivalent ESM for USS.
• Solid understanding of UIDs, GIDs, OMVS segments, and service IDs.
• Strong understanding of least privilege and separation of duties principles.

• Administer and manage USS identities, including UIDs, GIDs, OMVS segments, and service/shared IDs based on policy.
• Enforce naming standards, ownership traceability, and lifecycle controls for USS users and services.
• Manage and audit POSIX permissions, ownership, and execution rights across critical USS file systems.
• Control and monitor privileged access, including UID(0), setuid/setgid programs, and elevated authorities.
• Administer USS related ESM controls (RACF/TSS), including UNIXPRIV, FACILITY resources, and STARTED task identities.
• Secure USS configuration files, shell environments, PATH settings, and file system mount options.
• Monitor USS security events, logs, and audit records.
• Support production issues, security incidents, and access related investigations.
• Develop and maintain USS security standards, procedures, and documentation.

• Morgan Stanley offers extensive benefits that support employees’ careers, health, finances, and families, including top-tier medical coverage, mental health support, generous parental leave, fertility and family-building benefits, and robust retirement and stock purchase plans. Employees also gain access to continuous learning and networking opportunities, volunteer and giving programs aligned with the firm’s values, and hundreds of lifestyle perks like discounted products, cultural and entertainment tickets, and commuter savings.