Lead Edge Platform Security Engineer

In this role you will secure and scale the network of our self-service kiosks, while enabling DevOps practices and leading security improvements. You will own the edge networking stack (OpenWrt/pfSense) and drive reliable, secure connectivity from devices to the platform. You will build reusable pipelines and Terraform modules to empower the team. You will push hardware and software suppliers toward higher security standards and manage annual penetration testing. This is a hands-on, cross-functional role with a strong emphasis on practical impact and collaboration.

• Fully remote

• Edge Networking: own the kiosk network end-to-end and secure connections to the platform
• Maintain and upgrade OpenWrt/pfSense configurations, firmware, and remote fleet upgrade processes
• Escalation point for connectivity issues and permanent fixes
• Advance device authentication and least-privilege access models for devices
• Keep site build standards and runbooks up to date for reliable kiosk deployment
• DevOps Enablement: build reusable GitLab CI/CD templates with security scanning
• Create Terraform modules and best practices for infrastructure
• Coach engineers on infrastructure-as-code and secure pipelines
• Support cross-team infrastructure work and document repeatable practices
• Manage self-hosted GitLab and participate in architectural decisions
• Security: lead security improvements and oversee the annual penetration test
• Manage security testing scope, findings, and remediation tracking
• Maintain a security backlog across cloud, tooling, and kiosk estate
• Drive supplier security improvements and enforce patching cadence
• Own certificate, key, and credential lifecycles
• Support audits and customer due diligence with evidence and docs
• Work on edge network, device identity, platform templates, secure pipelines, and supplier security initiatives

• OpenWrt and pfSense (or OPNsense) on real hardware
• VPNs: WireGuard/OpenVPN config and key management
• Strong TCP/IP fundamentals
• Experience managing remote devices
• GitLab CI/CD pipelines and Terraform
• AWS networking and IAM
• Linux and scripting (shell/Python)
• Secrets and certificate management
• Penetration testing and vulnerability management
• Supplier security collaboration
• Network security expertise

• passion for networks and devices
• enabler and team-builder
• self-driven
• OpenWrt
• pfSense
• WireGuard/OpenVPN