Website:
slicebank.com
Job details:
About the team
The Platform & Infrastructure Engineering team owns the foundational estate that everything else runs on. The team designs, builds, automates, and operates scalable cloud-native systems across networks, security, data & storage, and compute. It carries significant regulatory and operational responsibility, with its platforms directly underpinning critical customer-facing systems such as payments and banking, so security and availability are not optional.
About the role
We are looking for an Engineering Manager to lead Infrastructure Security at slice. You will own charters like cloud security, network security, and software supply chain security and build a team that makes the secure path the default path for every engineer. This is a hands-on leadership role. You will set the architecture, hire and grow the team, and be accountable for measurable, auditable security outcomes across our cloud and hybrid estate.
What You will do
- Lead, hire and scale the Infrastructure Security team, setting goals, mentoring engineers, and developing technical leaders.
- Own the cloud and hybrid network security architecture and roadmap, balancing security, reliability, scalability, velocity and cost.
- Establish secure-by-design principles, guardrails and baseline configurations across AWS accounts, organizations and future cloud regions.
- Drive Infrastructure-as-Code (IaC) and platform automation to ensure security controls are version-controlled, tested, repeatable and consistently enforced.
- Own IAM, SSO/Identity Center, PAM, least-privilege access, just-in-time access and secrets management.
- Enforce encryption, KMS/HSM key management, certificate lifecycle management and data protection standards.
- Secure Kubernetes (EKS), compute workloads and container images through hardening, runtime protection and automated patching.
- Design secure network architecture, including VPC segmentation, hybrid connectivity, egress controls, firewalls, DNS security, IDS/IPS, and zero-trust access.
- Protect internet-facing services and APIs using DDoS mitigation, WAF, bot management, rate limiting, and API security controls.
- Harden CI/CD pipelines and implement DevSecOps practices, including short-lived credentials (OIDC), SCA, image scanning, SBOMs, artifact signing and provenance.
- Implement policy-as-code and admission controls to prevent misconfigured infrastructure and untrusted or vulnerable artifacts from reaching production.
- Govern open-source and third-party dependencies through vulnerability management, license compliance, and remediation of SLAs.
- Establish security metrics for control coverage, policy violations, exposure and remediation timelines; continuously detect and remediate misconfigurations and security drifts.
- Partner with Cybersecurity, AppSec, GRC and SOC teams to address security and compliance gaps and support audits.
- Lead infrastructure security incident responses, including DDoS attacks and cloud misconfigurations, and drive blameless post-incident reviews.
- Strengthen resilience through availability planning, disaster recovery, capacity management, incident readiness, and recovery exercises for critical infrastructure.
What You will need
- 9+ years in infrastructure, cloud or security engineering, including 2+ years managing and building high-performing teams.
- Deep hands-on expertise in AWS/GCP/Azure security (IAM, Organizations/SCPs, KMS, Security Hub, Guard Duty or equivalents) and cloud security architecture.
- Strong understanding of IAM, SSO, PAM, secrets management, encryption and key management.
- Deep expertise in cloud and data-center networking, hybrid connectivity, firewalls, WAF, DDoS protection and IDS/IPS.
- Practical experience with CI/CD hardening, SCA and image scanning, SBOMs, artifact signing and policy enforcement.
- Strong infrastructure-as-code skills (e.g., Terraform) and experience building guardrails at scale.
- Solid grounding in observability, incident management, disaster recovery, and capacity planning.
- Strong understanding of Linux, networking, and distributed systems.
- Experience designing infrastructure for high-scale, highly available environments.
- Experience in fintech, banking, or another highly regulated industry.
- Experience with multi-cloud or hybrid-cloud environments.
- Experience with RBI cyber security and IT governance directions, CERT-In guidelines, PCI DSS or NPCI audits.
- Depth in admission controllers, policy engines and runtime security tools.
- Certifications such as AWS Certified Security – Specialty, CCSP, CISSP or CKS.
- Contributions to security tooling, open source or the wider security community.
Life at slice
Life so good, you’d think we’re kidding:
- Competitive salaries. Period.
- An extensive medical insurance that looks out for our employees & their dependants. We’ll love you and take care of you, our promise.
- Flexible working hours. Just don’t call us at 3AM, we like our sleep schedule.
- Tailored vacation & leave policies so that you enjoy every important moment in your life.
- A reward system that celebrates hard work and milestones throughout the year. Expect a gift coming your way anytime you kill it here.
- Learning and upskilling opportunities. Seriously, not kidding.
- Good food, games, and a cool office to make you feel like home. An environment so good, you’ll forget the term “colleagues can’t be your friends”.
Click on Apply to know more.
