Custom kiosk OS based on linux. Merge raspberry pi python code onto single machine.

I'm looking for a linux expert with the ability to implement automation and high level of security into a custom OS. Background. We have a kiosk system that currently operates using two computing devices. 1. X86 running a custom kiosk OS that is dedicated to controlling the user interface. Included software stack on this machine is Chrome, Guacamole (VNC) served up with an apache/tomcat server. It is configured using a startup config file hosted on a remote server allowing configuration changes by simply changing the config file. It is highly locked down and secure allowing the user to only utilize the browser with no menu options. 2. Raspberry pi running flask api server. This device is running python code to manage the physical hardware and communicate with our cloud api servers to transmit data, send/receive commands and perform other hardware related actions. We are in the process of redesigning our system in order to simplify the hardware and eliminate some of the drawbacks and complexity of a two computing device system. I would like the chosen developer to be able to perform the following. Integrate all raspberry pi functions onto the X86 linux OS. This will include the following. Python programs managing all connected hardware. Would need to follow the logic in the main control file to determine the other files that would need to be moved. Java programs and associated files to control a bill validator change python code controlling raspberry pi to control usb gpio/relay boards over serial communication. Harden OS for public kiosk application, (limit browser functionality, possibly by utilizing browser config file downloaded form remote server) implement other security measures. Install and configure OpenVPN (will send critical control communication over vpn) Install and configure Guacamole VNC (with VNC and SSH) Auto recognize standard hardware such as barcode scanners, bill validators, cameras, credit card readers, etc... It is preferable that most of the configurable parameters of the pc (network setup, hostnames, touchscreen calibration parameters, sound/volume controls, Guacamole passwords, vnc configuration and many other parameters be loaded on boot by pulling a remote onfiguration from a file or from a server. We will also want to implement hardware testing scripts to communicate back to our api server that will allow us to monitor and test the functionality of connected hardware as well as gpio, sensor and relay states. I can provide ISO files for current raspberry pi and x86 operating systems as well as some server side php files.