Lead Edge Platform Security Engineer

Application Deadline:

2 November 2026

Department:

Product Mgmt - Product Promotion

Location:

UK/Basingstoke

Description

OneBanx

OneBanx builds and runs a fintech platform that powers self-service banking kiosks. We are looking for an experienced engineer who combines DevSecOps (development, security and operations) skills with a real passion for networking and network devices. The role brings together three areas of equal importance.

THE ROLE

Edge networking: you will own and improve the network that connects our kiosks, built on OpenWrt and pfSense devices deployed in the field and managed remotely as a fleet. This calls for hands‑on experience with network devices and a strong interest in how they behave in real-world conditions.

DevOps enablement: our engineers already run much of their own infrastructure, so this is not about owning everything; you will set best practice, build the reusable GitLab pipeline and Terraform templates the team relies on, and support them where they need specialist help.

Security: you will drive most of our security work, from annual penetration test to pushing hardware suppliers to a higher security standard.

Key Responsibilities

Edge Networking

• Own the kiosk network end to end, from on‑site devices through to the secure connection back to our platform
• Maintain and improve OpenWrt and pfSense configurations, firmware and upgrade processes across a remote fleet
• Act as the escalation point for connectivity issues and turn recurring problems into permanent fixes
• Lead the evolution of how devices connect and authenticate, moving towards a modern model where each device proves its identity and requests only the access it needs
• Keep site build standards and runbooks up to date so kiosks can be deployed and supported reliably

DevOps Enablement

• Build and maintain reusable GitLab CI/CD (continuous integration and delivery) pipeline templates, with security scanning built in
• Create Terraform best‑practice templates and modules that the team can adopt for their own infrastructure
• Coach engineers on infrastructure‑as‑code, secrets handling and secure pipeline design, rather than doing it for them
• Support the team on infrastructure work outside their day‑to‑day expertise, and document it so it is repeatable
• Look after our self‑managed GitLab instance, including routine upgrades
• Contribute to architecture decisions and write them up so the wider team understands the reasoning

Security

• Drive our security improvement work, reporting to the CTO
• Own the annual penetration test: scoping, managing the testing firm, triaging findings and tracking fixes to closure
• Maintain a security improvement backlog across cloud infrastructure, developer tooling and the kiosk estate
• Push our hardware and firmware suppliers to improve their security: assessments, patch commitments and contractual requirements
• Set the patching and vulnerability management cadence for infrastructure and network devices
• Own certificate, key and credential lifecycles, including rotation
• Support audits and customer security due diligence with clear evidence and documentation

What you will work on

A Flavour Of The Problems This Role Will Tackle

• Edge Network: OpenWrt and pfSense devices deployed in the field and managed remotely as a fleet
• Device Identity: Moving towards a model where devices enrol, authenticate and request access securely
• Platform Templates: Shared GitLab CI/CD and Terraform templates that make the secure way the easy way for every team
• Secure Pipelines: Security scanning and secrets handling built into how every team ships
• Penetration Testing: Running the annual test and making sure findings are fixed, not just filed
• Supplier Security: Working with hardware and firmware suppliers to raise their security standards

Education Level

Skills, Knowledge & Expertise

BSc Computer Science, IT or software engineering related qualification (desirable)

Required Skills And Competencies

We do not expect one person to be an expert in everything below; we do expect hands‑on experience in each area, and real depth in at least one.

Core Skills And Technologies

• OpenWrt
• pfSense
• WireGuard / OpenVPN
• GitLab CI/CD
• Terraform
• AWS
• Linux / Shell / Python
• Secrets & Certificate Mgmt
• Penetration Testing
• Vulnerability Management
• Supplier Security
• Network Security

Essential — Networking & Devices

• Hands‑on experience with OpenWrt and pfSense (or OPNsense) on real hardware
• VPN technologies such as WireGuard and OpenVPN: configuration, key management and troubleshooting
• Strong TCP/IP fundamentals: subnetting, routing, DNS, DHCP, VLANs and firewall design
• Experience managing remote devices where a mistake can mean a site visit

Essential — DevOps

• Writing and maintaining GitLab CI/CD pipelines, ideally including shared templates used across many projects