Leads edge networking, DevOps enablement, and security for a remote kiosk fleet. Responsibilities include managing OpenWrt and pfSense devices, developing GitLab and Terraform templates, administering AWS and Linux infrastructure, overseeing penetration tests and vulnerability remediation, managing certificates and credentials, and improving supplier security. The role also establishes device identity, secure connectivity, patching standards, audit evidence, and security practices while coaching engineering teams.
OneBanx
OneBanx builds and runs a fintech platform that powers self-service banking kiosks. We are looking for an experienced engineer who combines DevSecOps (development, security and operations) skills with a real passion for networking and network devices. The role brings together three areas of equal importance.
THE ROLE
Edge networking: you will own and improve the network that connects our kiosks, built on OpenWrt and pfSense devices deployed in the field and managed remotely as a fleet. This calls for hands-on experience with network devices and a strong interest in how they behave in real-world conditions.
DevOps enablement: our engineers already run much of their own infrastructure, so this is not about owning everything; you will set best practice, build the reusable GitLab pipeline and Terraform templates the team relies on, and support them where they need specialist help.
Security: you will drive most of our security work, from annual penetration test to pushing hardware suppliers to a higher security standard.
Key Responsibilities
Edge Networking
- Own the kiosk network end to end, from on-site devices through to the secure connection back to our platform
- Maintain and improve OpenWrt and pfSense configurations, firmware and upgrade processes across a remote fleet
- Act as the escalation point for connectivity issues and turn recurring problems into permanent fixes
- Lead the evolution of how devices connect and authenticate, moving towards a modern model where each device proves its identity and requests only the access it needs
- Keep site build standards and runbooks up to date so kiosks can be deployed and supported reliably
DevOps Enablement
- Build and maintain reusable GitLab CI/CD (continuous integration and delivery) pipeline templates, with security scanning built in
- Create Terraform best-practice templates and modules that the team can adopt for their own infrastructure
- Coach engineers on infrastructure-as-code, secrets handling and secure pipeline design, rather than doing it for them
- Support the team on infrastructure work outside their day-to-day expertise, and document it so it is repeatable
- Look after our self-managed GitLab instance, including routine upgrades
- Contribute to architecture decisions and write them up so the wider team understands the reasoning
Security
- Drive our security improvement work, reporting to the CTO
- Own the annual penetration test: scoping, managing the testing firm, triaging findings and tracking fixes to closure
- Maintain a security improvement backlog across cloud infrastructure, developer tooling and the kiosk estate
- Push our hardware and firmware suppliers to improve their security: assessments, patch commitments and contractual requirements
- Set the patching and vulnerability management cadence for infrastructure and network devices
- Own certificate, key and credential lifecycles, including rotation
- Support audits and customer security due diligence with clear evidence and documentation
What you will work on
A flavour of the problems this role will tackle:
- Edge Network: OpenWrt and pfSense devices deployed in the field and managed remotely as a fleet
- Device Identity: Moving towards a model where devices enrol, authenticate and request access securely
- Platform Templates: Shared GitLab CI/CD and Terraform templates that make the secure way the easy way for every team
- Secure Pipelines: Security scanning and secrets handling built into how every team ships
- Penetration Testing: Running the annual test and making sure findings are fixed, not just filed
- Supplier Security: Working with hardware and firmware suppliers to raise their security standards
Skills, Knowledge & Expertise
Education Level:
BSc Computer Science, IT or software engineering related qualification (desirable)
REQUIRED SKILLS AND COMPETENCIES
We do not expect one person to be an expert in everything below; we do expect hands-on experience in each area, and real depth in at least one.
Core skills and technologies
· OpenWrt
· pfSense
· WireGuard / OpenVPN
· GitLab CI/CD
· Terraform
· AWS
· Linux / Shell / Python
· Secrets & Certificate Mgmt
· Penetration Testing
· Vulnerability Management
· Supplier Security
· Network Security
Essential — Networking & Devices
- Hands-on experience with OpenWrt and pfSense (or OPNsense) on real hardware
- VPN technologies such as WireGuard and OpenVPN: configuration, key management and troubleshooting
- Strong TCP/IP fundamentals: subnetting, routing, DNS, DHCP, VLANs and firewall design
- Experience managing remote devices where a mistake can mean a site visit
Essential — DevOps
- Writing and maintaining GitLab CI/CD pipelines, ideally including shared templates used across many projects
- Terraform: modules, remote state, state locking and safe plan/apply workflows
- Working knowledge of AWS, particularly networking and IAM (identity and access management)
- Comfortable in Linux and with scripting in shell and/or Python; familiar with administering self-hosted tools such as GitLab
Essential — Security
- Practical involvement in penetration testing: scoping, remediation planning and re-testing
- Vulnerability management: reading advisories, scoring severity and prioritising patches
- Secrets and certificate management in production environments
- Confidence working with third parties to agree and track security improvements
Desirable skills
The following are not required but will distinguish exceptional candidates:
Device Fleet & IoT
- Fleet management tooling for routers or other network devices
- IoT (Internet of Things) device identity and enrolment: device certificates, zero-touch provisioning, mutual TLS
- Cellular (4G/LTE) connectivity on Linux-based devices
Platform & Delivery
- Container platforms and image security scanning
- Policy-as-code or automated compliance checks in pipelines
- Centralised logging and monitoring for both cloud and remote devices
Security & Compliance
- Experience in fintech, payments or another regulated environment
- Supplier security assessment and third-party risk management
- Security certifications such as OSCP, CompTIA Security+ or CISSP (helpful, not essential)
Ideal candidate profile
Beyond technical credentials, we value engineers who embody the following:
- Passion for networks and devices: you enjoy the hands-on side as much as the automation
- Enabler, not gatekeeper: you raise the team’s capability rather than becoming a bottleneck
- Self-driven: you take the initiative on security and see improvements through without being chased
- Ownership mentality: you see problems through to a permanent fix
- Careful with change: you plan rollouts and rollbacks, whether for pipelines or for devices in the field
- Firm but constructive with suppliers: comfortable pushing vendors to meet the standard we need
- Clear communicator: able to explain risks and decisions to engineers and non-technical stakeholders alike
About
Global Leaders in Customer Experience Automation With a culture rooted in innovation, each day Glory’s people are transforming our customer’s businesses. Our automation solutions empower retailers, restaurants and financial institutions to save time, money, and deliver unrivalled customer experiences. Publicly listed and proudly international, Glory has been a trusted name for over 100 years, and a global leader for more than a decade. That’s a reputation we’ve earned by combining our pioneering software and hardware with our dynamic people. Because alongside our technology, it’s our people who are driving our successes. Why Join Us Here at Glory, our ambitions are as big as yours. And that’s why we are actively looking to recruit the best of the best. Join Glory and you will be part of the force driving our transformative technology and leading-edge innovations. That’s because every Glory solution is powered by exceptional people like you. People with experience, skills and dedication. Here, we prioritise the development and well-being of our people. Across vibrant and collaborative workplaces, you’ll team up with colleagues across the world to deliver remarkable solutions in more than one-hundred countries. Looking to make a global impact? Join Glory in innovating the future of business transformation. Glory ValuesThe Glory Values are our ethos of working together, diversity and innovation: a practical blueprint of how we work together. We live our values wherever we are – with both colleagues and customers. Glory Values help us meet new challenges and exceed expectations. And they help us further our skills and work with trust and respect. Customer Delight. We put our customers first.Integrity. We do the right thing, always. Innovation. We embrace new challenges and share the future. Speed. We move fast, that’s how we stay ahead. Diversity & Respect. We value the strength in our differences. Teamwork. We succeed together.
Similar Jobs
.png){kind=logo}
AdTech • Cloud • Digital Media • Information Technology • News + Entertainment • App development
Own and mature the Global Dormancy Manager privacy product, defining its vision, roadmap, backlog, and deletion capabilities. Partner with Legal, Compliance, Data Governance, engineering, and business stakeholders to establish privacy policies, retention requirements, and regulatory controls. Prioritize enhancements, define product requirements, support audits, improve reporting and orchestration, and evolve the platform into an enterprise data lifecycle management capability.
Top Skills:
Agile MethodologiesCloud-Based EnvironmentsPower BITableau
Cloud • Information Technology • Productivity • Security • Software • App development • Automation
Owns enterprise deal structuring, financial modelling, commercial advisory, and governance for complex B2B SaaS transactions. Partners with Sales, Finance, Legal, Revenue Recognition, and Operations to evaluate risks, develop pricing and contract scenarios, ensure policy compliance, and improve deal-review and lead-to-cash processes. The role also operationalizes new products, packaging, and pricing changes while advising stakeholders on negotiations and strategic deal outcomes.
Top Skills:
Contract Lifecycle Management SystemsCpqCRMExcel
Cloud • Information Technology • Productivity • Security • Software • App development • Automation
Lead and develop a team of 6–8 Mid-Market sellers serving UKI customers. Responsibilities include creating sales strategies, achieving revenue targets, coaching and mentoring sellers, recruiting Account Executives, setting performance goals, analyzing sales trends, improving sales processes, and collaborating with internal teams and partners. The manager will also build talent pipelines, manage key stakeholder relationships, and identify market growth opportunities.
What you need to know about the Edinburgh Tech Scene
From traditional pubs and centuries-old universities to sleek shopping malls and glass-paneled office buildings, Edinburgh's architecture reflects its unique blend of history and modernity. But the fusion of past and future isn't just visible in its buildings; it's also shaping the city's economy. Named the United Kingdom's leading technology ecosystem outside of London, Edinburgh plays host to major global companies like Apple and Adobe, as well as a growing number of innovative startups in fields like cybersecurity, finance and healthcare.
