Cyber Security Cloud Engineer

Location: Grimes

Company Overview NCS is a leading industrial products, services and technology company whose primary end-market is car wash operators.
NCS provides a full suite of manufactured equipment, installation project services, aftermarket parts and services, chemicals (detergents, protectants, etc.), and software.
More specifically with equipment, NCS provides tunnel equipment, IBA (In Bay Automatic), vacuums, dryers, water systems, doors, signage, arches, and related components.
NCS also sells a range of brands – on both equipment, chemicals and software today – including Armor All, Rain-X, Blue Coral, TSS, Vacu Tech, NCS, AMP, etc.
The company sells primarily in N. America, operates 6 manufacturing plants across N. America, and has ~1600+ employees.
The Company operates numerous Distribution Centers and has sales/HQ offices across N. America, with its primary corporate offices in Des Moines, Iowa and Dallas, TX.
NCS is currently owned by Berkshire Partners, a leading Boston-based PE firm  We are interested in every qualified candidate who is eligible to work in the United States. However, we are not currently able to sponsor work visas. POSITION SUMMARY The Cyber Security Cloud Engineer is the hands-on engineer responsible for implementing, operating, and maturing security controls across NCS's cloud environment, including Microsoft Azure, Amazon Web Services, and the enterprise SaaS platforms that run the business.

NCS operates within an established set of NIST-based enterprise security requirements that define the controls, reporting cadences, and audit expectations for the business. This role implements the security controls that protect our cloud, SaaS, identity, workload, and data environments, and serves as the security lead for integrating newly acquired companies into the NCS security framework. As NCS invests in AI to transform how we serve customers and run the business, this engineer ensures those initiatives are deployed with the required safeguards in place.

The engineer also partners with Product Engineering and Dev Ops teams to put required security controls into practice across the software development lifecycle for NCS products, connected equipment, and customer-facing platforms. The role works closely with Infrastructure, Networking, Data, Application Development, and business stakeholders, and provides security leadership with clear visibility into control status, gaps, and remediation progress. Success in this role means delivering required controls on schedule, demonstrating their effectiveness, and reducing enterprise risk without slowing the business.

KEY RESPONSIBILITIES Cloud Security Implementation & Operations Implement and maintain security controls across Azure and AWS in accordance with NCS security requirements and the enterprise security framework, including identity and access management, network segmentation, encryption and key management, logging, and workload protection. Deploy and operate cloud security posture management (CSPM/CNAPP), infrastructure-as-code guardrails, policy-as-code, and automated compliance checks that enforce required baselines and provide continuous evidence of control effectiveness.

Operate and tune cloud-native security services (e.g., Microsoft Defender for Cloud, Microsoft Sentinel, Entra , AWS Guard Duty, Security Hub, Cloud Trail, IAM Access Analyzer) and integrate cloud telemetry into enterprise SIEM detection and response workflows. Execute detection engineering and incident response for cloud-hosted and identity-centric threats, including alert triage, investigation, root cause analysis, containment, and remediation coordination with managed security providers, following established playbooks and escalation paths;

track emerging cloud attack techniques and recommend updates to detections, hardening, and response procedures. Acquisition Integration & Migration Support cybersecurity due diligence for acquisitions by executing technical assessments of target environments and documenting gaps against NCS security requirements to inform prioritized integration plans. Execute the secure integration and migration of acquired companies onto NCS platforms, including identity consolidation into Microsoft Entra , tenant-to-tenant Microsoft 365 migrations, workload migrations to Azure and AWS, network and endpoint onboarding, and decommissioning of legacy infrastructure.

Maintain and follow repeatable, documented integration playbooks and security baselines that bring…