THE ROLE
NextgenID is hiring a Hardware / Network Engineer to own our kiosk and mobile kit hardware from build to field support. We operate 250 or more self-service kiosks that verify identity for government and enterprise sites, scaling to 400 or more over the next 18 to 24 months. You build units, wire and rewire parts, swap devices, trace power, configure networks, and fix faults. You keep every unit identical, documented, and ready to ship.
This is a hands-on job, not a design-only or advisory one. Reporting directly to the CTO & EVP, you work alongside software engineering, operations, field service, and client solutions so every unit ships reliable, connected, and secure. Our kiosks process identity verification transactions in government and enterprise environments, which makes uptime, security, and network resilience non-negotiable.
ROLE FIT & NON-NEGOTIABLES
- Onsite in Fairfax, VA. Remote is not available.
- U.S. citizen required for ITAR and government customer obligations.
- Comfortable with physical hardware — assembly, wiring, cabling, and bench testing — as well as network configuration and troubleshooting.
- Hands-on ownership of kiosk hardware and network infrastructure, including the power path and the field faults that come with it.
- Comfortable working to a documented standard: every unit identical, tested, and traceable.
WHAT YOU WILL OWN (90 TO 180 DAY OUTCOMES)
- A documented and standardized kiosk hardware bill of materials, assembly process, and QA acceptance criteria that produce consistent build quality
- A repeatable hardware provisioning pipeline: image, configure, test, and ship units with minimal manual intervention
- An audited and hardened kiosk network architecture: VPN tunnels, firewall rules, cellular LTE or 5G failover, and remote management access across the deployed fleet
- Hardware lifecycle management: inventory tracking, warranty and RMA processes, component obsolescence planning, and a spare parts strategy
- Monitoring and alerting for hardware health: temperature, connectivity, peripheral status, and power and UPS telemetry
- Secure boot, firmware integrity, and patch delivery for deployed kiosks, in partnership with DevSecOps and software engineering
CORE RESPONSIBILITIES
1. Kiosk & Kit Hardware Build (Hands-On)
Build and repair the hardware. Turn a bill of materials into a finished, tested unit.
- Build kiosks and mobile kits from the bill of materials and the assembly drawings
- Wire and rewire parts: crimp ferrules, land wires on terminal blocks, and seat jumpers
- Remove and replace cameras, fingerprint scanners, ID scanners, card readers, USB hubs, monitors, power supplies, and batteries
- Route cable harnesses with proper strain relief so nothing pulls loose or rubs
- Test and qualify new parts for reliability, security, and cost
- Keep spare parts current and swap known-good units to restore service fast
2. Power & Electrical
Own the power path from the wall to each device.
- Work with wall power input from 120 to 250 VAC and the internal 12 VDC and 24 VDC supplies
- Trace voltage with a multimeter; check rails at the power supply and at each device
- Find and fix blown fuses, loose ferrules, bad barrel connectors, and dead rails
- Service the UPS and backup battery; know the power-on and power-off steps and the UPS beep behavior
- Read and follow voltage labels and safety warnings before touching live parts
3. Network Engineering & Connectivity
Keep every unit connected and secure.
- Set up and manage the internal network: the cellular router, the VPN router and switch, the NetBooter, Wi-Fi for the mobile kit, and device IP addressing
- Apply TCP/IP, DNS, DHCP, VLAN, and firewall rules; verify reach with ping and ipconfig
- Set up site-to-site VPN and cellular LTE or 5G failover for units without wired internet
- Confirm each device answers on its correct IP and gateway
- Watch fleet network health, latency, and uptime, holding 99.5 percent or better
4. Provisioning, Imaging & Fleet Management
Make every unit identical and remotely manageable.
- Image, configure, test, and ship units through a repeatable pipeline with little manual work
- Work with Windows 10 and 11 and IoT LTSC: imaging, hardening, and updates at fleet scale
- Set up remote management: firmware updates, reimaging, peripheral checks, and remote reboot
- Confirm certificates, licenses, and software module versions match the NextgenID specification
5. Testing, QA & Acceptance
Prove each unit works before it leaves.
- Run the Factory Acceptance Test steps and record pass or fail with evidence
- Run the hardware test application to confirm every device is seen and works
- Build and maintain test fixtures and acceptance procedures
- Perform burn-in and restart checks so units hold up over time
6. Field Support & Reliability
Fix problems fast, in person or remotely.
- Triage a down unit: power faults, dead peripherals, and lost network
- Use LED status, alarm state, and the CheckMate diagnostic tool to find the cause
- Support field service engineers with remote diagnostics and clear escalation steps
- Perform root-cause analysis and put in a permanent fix, not just a swap
- Reduce field trips by resolving more issues remotely
7. BOM, Documentation & Lifecycle
Keep the record clean and the supply steady.
- Own the hardware bill of materials, vendor list, and lead times with operations and supply chain
- Write assembly steps, wiring diagrams, and acceptance criteria that others can follow
- Track inventory, warranty and RMA, spare parts, and end-of-life component planning
- Record serial numbers for consigned and tracked parts
8. Security & Compliance
Build security into the hardware and the network.
- Support SOC 2 and FedRAMP requirements for physical security, hardware integrity, and network controls
- Harden Windows endpoints with the DevSecOps team: secure boot, BitLocker, and application allow-listing
- Follow NIST 800-53 controls for hardware and network
- Keep firmware trusted and patch delivery safe for deployed units
WHAT YOU MUST HAVE ALREADY DONE
- Built, wired, or rebuilt physical hardware systems in production — kiosks, POS, IoT, edge, or industrial and embedded equipment
- Traced a power fault to its cause with a multimeter and repaired it, rather than replacing the whole unit
- Configured networks yourself — VLANs, VPN tunnels, firewall rules, and device addressing — not merely supported someone else’s configuration
- Deployed and sustained distributed equipment in the field, including diagnosing failures remotely
- Worked to a documented build and acceptance standard, and written the documentation others followed
QUALIFICATIONS
Required
- 5 or more years in hardware engineering, network engineering, or a combined hardware and infrastructure role with hands-on production responsibility
- Hands-on electrical troubleshooting: 12 VDC and 24 VDC systems, multimeter voltage tracing, fuses, connectors, and power supply replacement
- Hands-on experience building, integrating, or maintaining hardware systems such as kiosks, POS, IoT devices, edge computing, or industrial and embedded systems
- Strong networking fundamentals: TCP/IP, DNS, DHCP, VLAN, VPN (IPSec or WireGuard), firewall configuration, and cellular LTE or 5G connectivity
- Working knowledge of Windows 10 and 11 deployment and hardening in a fleet or device management context
- Experience with hardware BOM management, vendor evaluation, and component lifecycle planning
- Familiarity with at least one cloud platform (AWS, Azure, or GCP) for network connectivity and remote device management
- Ability to read and create hardware schematics, wiring diagrams, and assembly documentation
- Startup mindset: rolls up sleeves and gets it done, even when the task falls outside the job description
- Must be able to work onsite in Fairfax, VA; U.S. citizen
Preferred
- Experience with biometric hardware: cameras, fingerprint sensors, NFC and RFID readers, document scanners, or identity verification peripherals
- Network or security certifications: CCNA, CompTIA Network+, Security+, or equivalent
- Asset management and logistics experience: shipping and receiving, inventory control, and serialized asset tracking
- Familiarity with FedRAMP or government compliance requirements related to hardware and network controls (NIST 800-53)
- Experience with SD-WAN, zero-trust network access, or SASE architectures
- Wiring-level troubleshooting or embedded systems experience (firmware, BIOS, UEFI)
- Prior experience scaling hardware deployments internationally: power standards, carrier and ISP coordination, customs and logistics
- Active security clearance or clearance eligibility
SIGNALS WE LOOK FOR
- You can explain how you would design a kiosk network that stays connected and secure across 250 or more units in diverse locations with intermittent connectivity
- You have debugged hardware failures in the field and can describe your systematic path to root cause and a permanent fix
- You think in standardization and repeatability: every kiosk that leaves the facility is identical, documented, and remotely manageable
- You balance cost and reliability, selecting components that meet security and performance needs without over-engineering
- You respect the power path: you read the labels, check the rails, and work safely around live parts
WHAT SUCCESS LOOKS LIKE
- Every kiosk ships with a documented, repeatable build process and passes standardized acceptance testing before deployment
- Network connectivity is resilient: kiosks hold 99.5 percent or better uptime with automated failover and proactive alerting
- Hardware issues are diagnosed and resolved remotely wherever possible, cutting field service dispatches by 40 percent or more
- The hardware platform scales smoothly to 400 or more units with an established BOM, vendor relationships, and provisioning automation
- Hardware and network controls meet SOC 2 and FedRAMP evidence requirements with minimal manual documentation overhead
Pay: $110,000.00 - $125,000.00 per year
Benefits:
- 401(k)
- Dental insurance
- Health insurance
- Paid time off
- Vision insurance
Work Location: In person
