Lead Edge Platform Security Engineer

🔥 0 minutes ago

🇬🇧 United Kingdom – Remote

⏰ Full Time

🟠 Senior

🏗️ Platform Engineer

🇬🇧 UK Skilled Worker Visa Sponsor

This company has sponsored UK Skilled Worker visas in the past.

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

GLORY

WebsiteLinkedInAll Job Openings

5001 - 10000 employees

💼 Consulting

📦 Logistics

📣 Marketing

Consulting • Logistics • Marketing

GLORY is a global leader in cash technology solutions, providing innovative services that automate cash processes across various sectors including financial institutions, retail, gaming, and cash-in-transit (CIT). With a focus on enhancing efficiency, security, and customer service, GLORY designs custom solutions for cash handling at the point of sale, in cash centers, and throughout the retail cash chain. Their products range from cash recyclers and self-service kiosks to comprehensive cash management systems, aimed at optimizing cash workflows and improving business performance.

📋 Description

• Own and improve the edge network connecting self-service banking kiosks, from field devices through secure connections to the platform • Maintain and improve OpenWrt and pfSense configurations, firmware, and upgrade processes across a remote device fleet • Escalate connectivity issues and convert recurring problems into permanent fixes • Lead evolution toward device identity, secure authentication, and least-privilege access • Maintain kiosk deployment standards and support runbooks • Build and maintain reusable GitLab CI/CD pipeline templates with security scanning • Create Terraform best-practice templates and modules • Coach engineers on infrastructure-as-code, secrets handling, and secure pipeline design • Support infrastructure work outside the team’s day-to-day expertise and document repeatable solutions • Administer the self-managed GitLab instance, including routine upgrades • Contribute to architecture decisions and document the rationale • Drive security improvement work while reporting to the CTO • Own the annual penetration test, including scoping, test-firm management, findings triage, and remediation tracking • Maintain a security improvement backlog across cloud infrastructure, developer tooling, and the kiosk estate • Improve hardware and firmware supplier security through assessments, patch commitments, and contractual requirements • Set patching and vulnerability-management cadence for infrastructure and network devices • Own certificate, key, and credential lifecycles, including rotation • Support audits and customer security due diligence with evidence and documentation

🎯 Requirements

• BSc Computer Science, IT or software engineering related qualification is desirable, not required • Hands-on experience with OpenWrt and pfSense or OPNsense on real hardware • Experience configuring, managing keys for, and troubleshooting WireGuard and OpenVPN • Strong TCP/IP fundamentals, including subnetting, routing, DNS, DHCP, VLANs, and firewall design • Experience managing remote devices where mistakes may require a site visit • Experience writing and maintaining GitLab CI/CD pipelines, ideally shared templates • Experience with Terraform modules, remote state, state locking, and safe plan/apply workflows • Working knowledge of AWS, particularly networking and IAM • Comfortable with Linux and shell and/or Python scripting • Familiarity administering self-hosted tools such as GitLab • Practical involvement in penetration testing, including scoping, remediation planning, and re-testing • Vulnerability management experience, including reading advisories, scoring severity, and prioritising patches • Production secrets and certificate management experience • Confidence working with third parties to agree and track security improvements • Experience in fleet management tooling, IoT device identity and enrolment, cellular 4G/LTE connectivity, container platforms, image security scanning, policy-as-code, automated compliance checks, centralised logging and monitoring, fintech/payments or regulated environments, and supplier security assessment are desirable • Security certifications such as OSCP, CompTIA Security+, or CISSP are helpful, not essential