{"id":3393122,"url":"https://alion.io/job/glory-lead-edge-platform-security-engineer","title":"Lead Edge Platform Security Engineer","company":{"id":50549,"name":"GLORY","domain":"glory-global.com","url":"https://alion.io/company/glory-global","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Pinpoint","truth_index":{"grade":"A","score":95,"open_postings":6,"ghost_share":0,"stale_share":0,"repost_share":0.333,"time_to_fill_p50_days":22,"computed_at":"2026-11-04T06:34:25Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":["Basingstoke, United Kingdom"],"countries":["GB"],"hiring_countries":["GB"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":68000,"max_usd":118000,"period":"year","method":"role_seniority_country_cell","sample_n":32},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"GitLab","optional":false},{"name":"GitLab CI","optional":false},{"name":"pfSense","optional":false},{"name":"Terraform","optional":false},{"name":"AWS","optional":true},{"name":"DHCP","optional":true},{"name":"DNS","optional":true},{"name":"IAM","optional":true},{"name":"Linux","optional":true},{"name":"OPNsense","optional":true},{"name":"Python","optional":true},{"name":"TCP/IP","optional":true},{"name":"VPN","optional":true}],"status":"closed","first_seen_at":"2026-10-27T11:15:32Z","employer_posted_date":"2026-10-27","last_verified_at":"2026-11-03T03:25:54Z","board_verified":false,"closed_at":"2026-11-03T03:25:54Z","days_open":6,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":6},"description":"OneBanx\nOneBanx builds and runs a fintech platform that powers self-service banking kiosks. We are looking for an experienced engineer who combines DevSecOps (development, security and operations) skills with a real passion for networking and network devices. The role brings together three areas of equal importance.\n\nTHE ROLE\nEdge networking: you will own and improve the network that connects our kiosks, built on OpenWrt and pfSense devices deployed in the field and managed remotely as a fleet. This calls for hands-on experience with network devices and a strong interest in how they behave in real-world conditions.\n\nDevOps enablement: our engineers already run much of their own infrastructure, so this is not about owning everything; you will set best practice, build the reusable GitLab pipeline and Terraform templates the team relies on, and support them where they need specialist help.\n\nSecurity: you will drive most of our security work, from annual penetration test to pushing hardware suppliers to a higher security standard.\nKey Responsibilities\nEdge Networking\nOwn the kiosk network end to end, from on-site devices through to the secure connection back to our platform\nMaintain and improve OpenWrt and pfSense configurations, firmware and upgrade processes across a remote fleet\nAct as the escalation point for connectivity issues and turn recurring problems into permanent fixes\nLead the evolution of how devices connect and authenticate, moving towards a modern model where each device proves its identity and requests only the access it needs\nKeep site build standards and runbooks up to date so kiosks can be deployed and supported reliably\n DevOps Enablement\nBuild and maintain reusable GitLab CI/CD (continuous integration and delivery) pipeline templates, with security scanning built in\nCreate Terraform best-practice templates and modules that the team can adopt for their own infrastructure\nCoach engineers on infrastructure-as-code, secrets handling and secure pipeline design, rather than doing it for them\nSupport the team on infrastructure work outside their day-to-day expertise, and document it so it is repeatable\nLook after our self-managed GitLab instance, including routine upgrades\nContribute to architecture decisions and write them up so the wider team understands the reasoning\nSecurity\nDrive our security improvement work, reporting to the CTO\nOwn the annual penetration test: scoping, managing the testing firm, triaging findings and tracking fixes to closure\nMaintain a security improvement backlog across cloud infrastructure, developer tooling and the kiosk estate\nPush our hardware and firmware suppliers to improve their security: assessments, patch commitments and contractual requirements\nSet the patching and vulnerability management cadence for infrastructure and network devices\nOwn certificate, key and credential lifecycles, including rotation\nSupport audits and customer security due diligence with clear evidence and documentation\nWhat you will work on\nA flavour of the problems this role will tackle:\nEdge Network: OpenWrt and pfSense devices deployed in the field and managed remotely as a fleet\nDevice Identity: Moving towards a model where devices enrol, authenticate and request access securely\nPlatform Templates: Shared GitLab CI/CD and Terraform templates that make the secure way the easy way for every team\nSecure Pipelines: Security scanning and secrets handling built into how every team ships\nPenetration Testing: Running the annual test and making sure findings are fixed, not just filed\nSupplier Security: Working with hardware and firmware suppliers to raise their security standards\nSkills, Knowledge & Expertise\n Education Level:\nBSc Computer Science, IT or software engineering related qualification (desirable)\n\nREQUIRED SKILLS AND COMPETENCIES\nWe do not expect one person to be an expert in everything below; we do expect hands-on experience in each area, and real depth in at least one.\n\nCore skills and technologies\n· OpenWrt\n· pfSense\n· WireGuard / OpenVPN\n· GitLab CI/CD\n· Terraform\n· AWS\n· Linux / Shell / Python\n· Secrets & Certificate Mgmt\n· Penetration Testing\n· Vulnerability Management\n· Supplier Security\n· Network Security\n\n Essential - Networking & Devices\nHands-on experience with OpenWrt and pfSense (or OPNsense) on real hardware\nVPN technologies such as WireGuard and OpenVPN: configuration, key management and troubleshooting\nStrong TCP/IP fundamentals: subnetting, routing, DNS, DHCP, VLANs and firewall design\nExperience managing remote devices where a mistake can mean a site visit\n Essential - DevOps\nWriting and maintaining GitLab CI/CD pipelines, ideally including shared templates used across many projects\nTerraform: modules, remote state, state locking and safe plan/apply workflows\nWorking knowledge of AWS, particularly networking and IAM (identity and access management)\nComfortable in Linux and with scripting in shell and/or Python; familiar with administering self-hosted tools such as GitLab\nEssential - Security\nPractical involvement in penetration testing: scoping, remediation planning and re-testing\nVulnerability management: reading advisories, scoring severity and prioritising patches\nSecrets and certificate management in production environments\nConfidence working with third parties to agree and track security improvements\nDesirable skills\nThe following are not required but will distinguish exceptional candidates:\n\nDevice Fleet & IoT\nFleet management tooling for routers or other network devices\nIoT (Internet of Things) device identity and enrolment: device certificates, zero-touch provisioning, mutual TLS\nCellular (4G/LTE) connectivity on Linux-based devices\nPlatform & Delivery\nContainer platforms and image security scanning\nPolicy-as-code or automated compliance checks in pipelines\nCentralised logging and monitoring for both cloud and remote devices\n Security & Compliance\nExperience in fintech, payments or another regulated environment\nSupplier security assessment and third-party risk management\nSecurity certifications such as OSCP, CompTIA Security+ or CISSP (helpful, not essential)\n Ideal candidate profile\nBeyond technical credentials, we value engineers who embody the following:\nPassion for networks and devices: you enjoy the hands-on side as much as the automation\nEnabler, not gatekeeper: you raise the team’s capability rather than becoming a bottleneck\nSelf-driven: you take the initiative on security and see improvements through without being chased\nOwnership mentality: you see problems through to a permanent fix\nCareful with change: you plan rollouts and rollbacks, whether for pipelines or for devices in the field\nFirm but constructive with suppliers: comfortable pushing vendors to meet the standard we need\nClear communicator: able to explain risks and decisions to engineers and non-technical stakeholders alike","description_format":"text","description_chars":6872,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Vending & Automated Retail"],"lifecycle":[{"event":"open","at":"2026-10-28T11:15:32Z"},{"event":"close","at":"2026-11-03T03:25:54Z"}],"visa":[],"liveness":null,"pay":null,"html_url":"https://alion.io/job/glory-lead-edge-platform-security-engineer","json_url":"https://alion.io/job/glory-lead-edge-platform-security-engineer.json","meta":{"generated_at":"2026-11-04T19:00:30Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":29269,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":50549},"rest":"https://alion.io/mcp/rest/get_company?id=50549"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fglory-lead-edge-platform-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fglory-lead-edge-platform-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fglory-lead-edge-platform-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/glory-lead-edge-platform-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fglory-lead-edge-platform-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3393122}},{"tool":"search_jobs","arguments":{"company":"glory-global.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3393122},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}