90%faster incident resolution
300hrsrecovered across the team every year
RAG retrievalPythonSMF
$35K/yrNatural-language search over sysmod schedules, Excel trackers, and region data. Escalations fell 30%.
Mainframe security · 2026
Rohit Kumar Shaw
A z/OS specialist securing the mainframes that move money.
I harden z/OS at Bank of America and publish what I learn. Encrypted transport, modern authentication, and AI-driven automation for platforms where downtime isn't an option.
AT-TLS handshake complete · channel secured
AI operations portal
$35K/yr
Saved annually by one internal platform. Answers that took 15 minutes now take one.
READY
Kerberos SSO
85%
Fewer password logins across z/OS.
SNMPv3 migration
75%
Legacy risk retired. Community string, killed.
AT-TLS at scale
50+
Reusable transport security policies deployed via z/OSMF.
About me
I'm an Infrastructure Engineer at Bank of America with three years focused on z/OS network security. My day to day lives in AT-TLS policy design, Kerberos SSO, and RACF integration, the plumbing most people never notice until it breaks. Outside production I write, turning hands-on engineering into peer-reviewed research.
Selected work
Project
60%shorter onboarding
40%fewer authentication tickets
GSS-APIRACFOpenSSH
85%fewer password logins. NAS, RACF principal mappings, and OpenSSH GSS-API brought SSO to a platform born before SSO.
75%legacy risk exposure retired
0monitoring interruptions during cutover
AuthPrivPARMLIBCompliance
100%of mainframe environments migrated to authenticated, encrypted SNMP. The community string is gone.
60%faster change turnaround via z/OSMF
100%secure channel uptime
TLS 1.3IPSecPKI
50+reusable policies across 20+ virtual and 30+ z/VM systems. 50+ ports secured, monthly IPSec key rotation automated.
Research & writing
Research
Peer-reviewed papers11
01
Journal of Intelligent Decision Making & Information Science · Scopus · Vol. 3 No. 4s, pp. 1559–1582
Privileged Access Management for z/OS System Programmers: A Zero-Trust Control Framework for RACF, TSO, and SDSF Administrative Sessions
Read
02
Int. Journal of Computer Information Systems & Industrial Management Applications · Scopus · 18(6s), 342–351
Zero-Trust Network Access on IBM z/OS: Applying BeyondCorp Principles to Mainframe Perimeter Architecture
Read
03
IEEE · 9th Int. Conference on Computing Methodologies and Communication (ICCMC 2026)
Kerberos vs. Public Key Authentication in z/OS Environments: Performance, Scalability, and Security Trade-offs
Read
04
Int. Journal of Computer Information Systems & Industrial Management Applications · Scopus · 18(1s)
The Zero-Touch Data Center: Lights-Out Operations at Scale
Read
05
Springer LNNS · SSRN 6910198 · Scopus, EI & WoS indexed
RAG-Based Retrieval Systems for Enterprise Mainframe Operations: Accelerating Incident Response and Mitigating Operational Risk Through AI-Driven Knowledge Access
Read
06
Journal of Engineering Research and Sciences · Vol. 5 No. 6, pp. 1–14
SNMPv2-to-SNMPv3 Migration in Financial Mainframes: Risk Reduction and Repeatable Playbook
Read
07
American Journal of Technology · Vol. 5 No. 7, pp. 1–26
The Role of AT-TLS in Modernizing Mainframe Network Security: A Comparative Analysis of Pre-AT-TLS and Post-AT-TLS Security Models
Read
08
ICAIMIS 2026 · Bentham Science
TLS 1.3 Adoption on z/OS: Modernizing Transport Security for Legacy Financial Systems
Published
09
IEEE · Int. Conference on AI and Project Engineering Governance (AIPEG 2026)
Post-Quantum Cryptography Readiness on z/OS: Assessing CPACF and AT-TLS Migration Paths for NIST FIPS 203/204/205 Compliance
Under review
10
Cureus · Springer
LLM-Assisted JCL Generation for Mainframe Automation
Under review
11
Journal of Intelligent Decision Making & Information Science
Security Isolation and Policy Enforcement for Docker Workloads on IBM zCX: A Threat Model and Control Framework
In preparation
Trade & industry writing7
01
SHARE'd Intelligence · August 2026
SSH Key Governance on Legacy Platforms: The Audit Gap Nobody Talks About
Read
02
Techstrong.ai · July 2026
The AI Blind Spot Nobody's Writing About: Mainframes
Read
03
Techstrong IT · June 2026
How to Build Real-Time Mainframe Dashboards Without Paying for a Splunk License
Read
04
Security Boulevard · May 2026
Stop Letting Legacy Mainframe Services Manage Their Own TLS
Read
05
SHARE'd Intelligence · Planet Mainframe
Kill the Community String: Migrating z/OS SNMP to AuthPriv Without Downtime
Submitted
06
ACM Dallas
AI-Driven RAG Retrieval for Mainframe Incident Response
Submitted
07
Open Mainframe Project
Post-Quantum on z/OS: Start at the Handshake, Not the Hardware
Submitted
Experience
Track record
Mainframe Infrastructure Engineer
Bank of America · Plano, TX
Feb 2024 — Present
Current
- Architected and deployed a web operations portal with AI-powered search and chat over Excel/sysmod windows, timezone conversion, and region/system queries, delivering ~90% faster answers (≈15 min → 1 min), ~30% fewer escalations, and ~$35K/yr in savings (~300 hrs/yr recovered).
- Implemented Kerberos single sign-on across z/OS by integrating NAS, RACF mappings, and OpenSSH GSS-API, cutting password-based logins 85%.
- Automated KDC and keytab deployment plus RACF mapping validation, cutting manual onboarding time ~60% and auth-related support tickets 40%.
- Eliminated BasicAuth from all mainframe web servers with z/OS Connect EE as a REST API front end, replacing direct dataset access with JWT/SAF bearer tokens and RACF-enforced access controls on SMF and performance reporting pages.
- Built an SSH authorized-keys compliance framework in USS, automating BOAB checks across z/OS with results flowing into Comply Check weekly reporting via NetView auto log, eliminating manual audit cycles.
- Overhauled SNMP across 100% of mainframe environments, enforcing SNMPv3-only and reducing legacy risk exposure 75%.
- Used z/OSMF to streamline AT-TLS deployment, cutting change turnaround 60% and shipping 50+ reusable policies; secured 50+ ports, automated monthly IPSec (IKED) password rotation, and managed 8+ certificate renewals at 100% secure channel uptime.
- Standardized TCP/IP across 20+ virtual systems (6+ config files each) and extended it to 30+ z/VM systems covering ports, users, and access controls, improving cross-environment consistency 40% and reaching full enterprise audit compliance.
- Mapped GDPSCA failover processes, routing dependencies, and support ownership; ran DR tests across 4+ environments with zero critical failures and led z/OS 3.1 upgrade validation for 15+ dependent systems.
Global Technology Summer Analyst
Bank of America · Plano, TX
Jun 2023 — Aug 2023
- Built a Bash framework verifying 100+ GIS baseline security rules, removing hours of manual checks per cycle.
- Designed Splunk dashboards visualizing encrypted QUALYS scans to speed security review.
- Found a critical IBM NetView defect and worked with IBM support to open an APAR.
Student Technology Specialist
UNT Digital Strategy & Innovation · Denton, TX
Feb 2023 — Dec 2023
- Delivered equipment training, maintenance, and repair across university classrooms and conference rooms.
IT Student Worker
UNT Administrative IT Services · Denton, TX
Nov 2021 — Feb 2023
- Exceeded IT service benchmarks by 25% through ServiceNow ticketing, Active Directory updates, and fast resolution.
Speaking, judging & peer review
Recognition
Speaking
Judging
Peer review
Mentorship
Certificates
Credentials
Judge — 2nd SmallAI Hackathon
Judge for an AI-focused hackathon competition.
April 2026
Session Chair — Sejong University
6th International Conference on Paradigms of Communication, South Korea.
June 2026
Peer Review Recognition
10 completed peer reviews across IEEE and Springer venues.
2026
IBM z/OS Mainframe Practitioner
Issued by IBM. Foundational z/OS and system administration skills via hands-on labs on a live IBM Z server.
Credly · View credential ›
z/OS Networking Security Foundations
Issued by IBM Training. Foundational coursework in z/OS network security concepts.
IBM Training · View credential ›
CodePath Volunteer
Resume reviewer, mentor, and mock technical interviewer for students breaking into software engineering.
CodePath · View credential ›
Skills
Toolkit
Mainframe & z/OS
Security & auth
Languages
AI & automation
Cloud & DevOps
Education
Foundations
B.S. in Computer Science
Data Structures & Algorithms, Systems Programming, Computer Networks, Database Management, Software Engineering, Certified Ethical Hacking, Internet Programming, Linear Algebra, Statistics, Combinatorics & Graph Theory.
3.51
GPA
Contact