DevSecOps Engineer

National Carwash Solutions•Atlanta, GA

52d•Hybrid

About The Position

This position is a hybrid role in Atlanta. Hybrid requires the candidate to be available to work in person in our Atlanta office. We come in 3 days per week, but support flexibility as needed. We are interested in every qualified candidate who is eligible to work in the United States. However, we are not currently able to sponsor work visas. DevOps Engineer (Security & Automation Focus) Who We Are We're a fast-growing, impact-driven team rethinking how infrastructure supports modern software development. With the agility of a startup and the vision of a long-term player, we’re building systems that are resilient, secure, and built to scale. We believe DevOps is more than just a role—it’s a mindset of constant improvement, collective problem-solving, and bold experimentation. About AMP (An NCS Company) AMP is an industry-leading technology company providing innovative solutions to car wash operators across the country. Our products include cutting-edge software solutions such as white-labeled mobile membership apps, administrative portals, and kiosks. These solutions allow our customers to capture and use customer data at a level not seen in the car wash industry before. AMP is a division of National Carwash Solutions (NCS). NCS has grown to become North America’s largest equipment, service, and cleaning solutions provider in the car wash industry. For over five decades, National Carwash Solutions (NCS) has revolutionized the carwash industry, offering unparalleled quality and innovative technology. NCS offers the most extensive service network and is home to many trusted brands. No matter if customers are new to the industry or are looking to level up a classic site, NCS is the proven partner for operational excellence and sustainable growth. Our family of brands includes MacNeil, Ryko, Vacutech, PurClean, TSS, Rain-X, ArmorAll, Black Magic, Blue Coral, USA Towel, International Drying Corporation & Shadow. The Opportunity We're looking for a DevSecOps Engineer who thrives in dynamic environments, enjoys taking ownership of infrastructure end-to-end, and brings a passion for automation, scalability, and cloud-native design. In this role, you will be our security champion, ensuring that as we move fast, we move safely. You’ll have the autonomy to make big decisions—and the support of a team that values new perspectives and collaborative innovation. This role isn’t about following a playbook—it’s about helping write the next chapter of ours.

Requirements

3–5 years of experience in DevOps, SRE, or Cloud Infrastructure roles with a demonstrated focus on DevSecOps.
Cloud Depth: Deep experience managing Azure resources, specifically IAM, Key Vault, and Network Security Groups (NSGs).
Security Mindset: Hands-on experience implementing Security & Compliance controls (log management, vulnerability patching, and identity governance).
Automation Proficiency: Expertise in scripting (PowerShell, Bash, Python) and managing YAML-based pipelines.
Problem Solver: Ability to diagnose complex issues in distributed, cloud-native systems across both Linux and Windows environments.
Collaborator: Experience working alongside developers to shift security "left" in the development lifecycle.

Nice To Haves

Agentic Coding Experience: Experience using AI-assisted coding tools (e.g., GitHub Copilot, Cursor) with a focus on best practices and security verification of AI-generated code.
AI Guardrails: Knowledge of implementing security wrappers or "human-in-the-loop" workflows for agentic automation.
Mobile DevOps: Experience with mobile CI/CD tooling (EAS, Fastlane) and React Native (Expo) app store deployments.
Ecosystem Knowledge: Familiarity with .NET deployments to Azure and container orchestration (Docker, Kubernetes).
Governance Tools: Deep knowledge of Azure Defender for Cloud and Microsoft Entra ID (Azure AD) best practices.
Network Security: Experience managing DNS and edge security (e.g., Cloudflare WAF and Zero Trust).

Responsibilities

Secure Infrastructure: Architect and manage cloud infrastructure (primarily Azure, with some AWS) with a "Security by Design" philosophy.
CI/CD Ownership: Design and own secure CI/CD pipelines using Azure DevOps and YAML-based workflows, integrating automated security scanning (SAST/DAST).
Compliance & Governance: Implement and maintain compliance frameworks (e.g., SOC2, HIPAA, or CIS benchmarks) using Azure Policy and automated auditing.
IaC Mastery: Develop infrastructure-as-code using Terraform, Bicep, or ARM templates, ensuring all code is peer-reviewed and linted for security vulnerabilities.
Automation: Eliminate manual toil by scripting system provisioning and operational tasks with PowerShell, Bash, or Python.
Observability: Drive cost optimization and performance tuning while maintaining robust logging and alerting via Azure Monitor and Log Analytics.
Disaster Recovery: Lead the strategy for backups, failovers, and high availability to ensure zero-downtime environments.