Lead Edge Platform Security Engineer Application Deadline: 2 November 2026 Department: Product Mgmt - Product Promotion Employment Type: Permanent - Full Time Location: UK/Basingstoke Reporting To: CTO Onebanx Description OneBanx OneBanx builds and runs a fintech platform that powers self-service banking kiosks. We are looking for an experienced engineer who combines DevSecOps (development, security and operations) skills with a real passion for networking and network devices. The role brings together three areas of equal importance. THE ROLE Edge networking: you will own and improve the network that connects our kiosks, built on OpenWrt and pfSense devices deployed in the field and managed remotely as a fleet. This calls for hands-on experience with network devices and a strong interest in how they behave in real-world conditions. DevOps enablement: our engineers already run much of their own infrastructure, so this is not about owning everything; you will set best practice, build the reusable GitLab pipeline and Terraform templates the team relies on, and support them where they need specialist help. Security: you will drive most of our security work, from annual penetration test to pushing hardware suppliers to a higher security standard. Key Responsibilities Edge Networking Own the kiosk network end to end, from on-site devices through to the secure connection back to our platform Maintain and improve OpenWrt and pfSense configurations, firmware and upgrade processes across a remote fleet Act as the escalation point for connectivity issues and turn recurring problems into permanent fixes Lead the evolution of how devices connect and authenticate, moving towards a modern model where each device proves its identity and requests only the access it needs Keep site build standards and runbooks up to date so kiosks can be deployed and supported reliably DevOps Enablement Build and maintain reusable GitLab CI/CD (continuous integration and delivery) pipeline templates, with security scanning built in Create Terraform best-practice templates and modules that the team can adopt for their own infrastructure Coach engineers on infrastructure-as-code, secrets handling and secure pipeline design, rather than doing it for them Support the team on infrastructure work outside their day-to-day expertise, and document it so it is repeatable Look after our self-managed GitLab instance, including routine upgrades Contribute to architecture decisions and write them up so the wider team understands the reasoning Security Drive our security improvement work, reporting to the CTO Own the annual penetration test: scoping, managing the testing firm, triaging findings and tracking fixes to closure Maintain a security improvement backlog across cloud infrastructure, developer tooling and the kiosk estate Push our hardware and firmware suppliers to improve their security: assessments, patch commitments and contractual requirements Set the patching and vulnerability management cadence for infrastructure and network devices Own certificate, key and credential lifecycles, including rotation Support audits and customer security due diligence with clear evidence and documentation What you will work on A flavour of the problems this role will tackle: Edge Network: OpenWrt and pfSense devices deployed in the field and managed remotely as a fleet Device Identity: Moving towards a model where devices enrol, authenticate and request access securely Platform Templates: Shared GitLab CI/CD and Terraform templates that make the secure way the easy way for every team Secure Pipelines: Security scanning and secrets handling built into how every team ships Penetration Testing: Running the annual test and making sure findings are fixed, not just filed Supplier Security: Working with hardware and firmware suppliers to raise their security standards Skills, Knowledge we do expect hands-on experience in each area, and real depth in at least one. Core skills and technologies OpenWrt pfSense WireGuard / OpenVPN GitLab CI/CD Terraform AWS Linux / Shell / Python Secrets familiar with administering self-hosted tools such as GitLab Essential - Security Practical involvement in penetration testing: scoping, remediation planning and re-testing Vulnerability management: reading advisories, scoring severity and prioritising patches Secrets and certificate management in production environments Confidence working with third parties to agree and track security improvements Desirable skills The following are not required but will distinguish exceptional candidates: Device Fleet
Lead Edge Platform Security Engineer in Hampshire employer: GLORY
As an Entry Level Field Service Engineer in the North Bristol area, you'll join a company that prioritises employee growth and development, offering comprehensive training and clear pathways for career progression. With a supportive work culture that values flexibility and teamwork, you can expect competitive benefits including a company vehicle, private medical insurance, and opportunities for additional earnings through weekend support. This role is perfect for those looking to kickstart their engineering career in a dynamic environment that encourages learning and innovation.
