Cyber Security Cloud Engineer

NCS is a leading industrial products, services and technology company whose primary end-market is car wash operators. NCS provides a full suite of manufactured equipment, installation project services, aftermarket parts and services, chemicals (detergents, protectants, etc.), and software. More specifically with equipment, NCS provides tunnel equipment, IBA (In Bay Automatic), vacuums, dryers, water systems, doors, signage, arches, and related components. NCS also sells a range of brands – on both equipment, chemicals and software today – including Armor All, Rain‑X, Blue Coral, TSS, Vacu Tech, NCS, AMP, etc.

The company sells primarily in N. America, operates 6 manufacturing plants across N. America, and has ~1600+ employees. The Company operates numerous Distribution Centers and has sales/HQ offices across N. America, with its primary corporate offices in Des Moines, Iowa and Dallas, TX. NCS is currently owned by Berkshire Partners, a leading Boston‑based PE firm

We are interested in every qualified candidate who is eligible to work in the United States. However, we are not currently able to sponsor work visas.

The Cyber Security Cloud Engineer is the hands‑on engineer responsible for implementing, operating, and maturing security controls across NCS's cloud environment, including Microsoft Azure, Amazon Web Services, and the enterprise SaaS platforms that run the business. NCS operates within an established set of NIST-based enterprise security requirements that define the controls, reporting cadences, and audit expectations for the business. This role implements the security controls that protect our cloud, SaaS, identity, workload, and data environments, and serves as the security lead for integrating newly acquired companies into the NCS security framework.

As NCS invests in AI to transform how we serve customers and run the business, this engineer ensures those initiatives are deployed with the required safeguards in place. The engineer also partners with Product Engineering and Dev Ops teams to put required security controls into practice across the software development lifecycle for NCS products, connected equipment, and customer‑facing platforms. The role works closely with Infrastructure, Networking, Data, Application Development, and business stakeholders, and provides security leadership with clear visibility into control status, gaps, and remediation progress.

Success in this role means delivering required controls on schedule, demonstrating their effectiveness, and reducing enterprise risk without slowing the business.

• Implement and maintain security controls across Azure and AWS in accordance with NCS security requirements and the enterprise security framework, including identity and access management, network segmentation, encryption and key management, logging, and workload protection.
• Deploy and operate cloud security posture management (CSPM/CNAPP), infrastructure-as-code guardrails, policy-as-code, and automated compliance checks that enforce required baselines and provide continuous evidence of control effectiveness.
• Operate and tune cloud-native security services (e.g., Microsoft Defender for Cloud, Microsoft Sentinel, Entra , AWS Guard Duty, Security Hub, Cloud Trail, IAM Access Analyzer) and integrate cloud telemetry into enterprise SIEM detection and response workflows.
• Execute detection engineering and incident response for cloud-hosted and identity-centric threats, including alert triage, investigation, root cause analysis, containment, and remediation coordination with managed security providers, following established playbooks and escalation paths; track emerging cloud attack…