DevSecOps Engineer

National Carwash Solutions•Atlanta, GA

4h•Hybrid

About The Position

We are a fast-growing, impact-driven team rethinking how infrastructure supports modern software development. With the agility of a startup and the vision of a long-term player, we are building systems that are resilient, secure, and built to scale. We believe DevOps is more than just a role—it is a mindset of constant improvement, collective problem-solving, and bold experimentation. AMP, a division of National Carwash Solutions (NCS), is an industry-leading technology company providing innovative solutions to car wash operators across the country. Our products include cutting-edge software solutions such as white-labeled mobile membership apps, administrative portals, and kiosks, allowing customers to capture and use customer data at an unprecedented level. NCS has grown to become North America’s largest equipment, service, and cleaning solutions provider in the car wash industry for over five decades, offering an extensive service network and home to many trusted brands. We are looking for a DevOps Engineer who thrives in dynamic environments, enjoys taking ownership of infrastructure end-to-end, and brings a passion for automation, scalability, and cloud-native design. In this role, you will be our security champion, ensuring that as we move fast, we move safely. You will have the autonomy to make big decisions and the support of a team that values new perspectives and collaborative innovation. This role is about helping write the next chapter of our journey.

Requirements

3–5 years of experience in DevOps, SRE, or Cloud Infrastructure roles with a demonstrated focus on DevSecOps.
Deep experience managing Azure resources, specifically IAM, Key Vault, and Network Security Groups (NSGs).
Hands-on experience implementing Security & Compliance controls (log management, vulnerability patching, and identity governance).
Expertise in scripting (PowerShell, Bash, Python) and managing YAML-based pipelines.
Ability to diagnose complex issues in distributed, cloud-native systems across both Linux and Windows environments.
Experience working alongside developers to shift security "left" in the development lifecycle.

Nice To Haves

Agentic Coding Experience: Experience using AI-assisted coding tools (e.g., GitHub Copilot, Cursor) with a focus on best practices and security verification of AI-generated code.
AI Guardrails: Knowledge of implementing security wrappers or "human-in-the-loop" workflows for agentic automation.
Mobile DevOps: Experience with mobile CI/CD tooling (EAS, Fastlane) and React Native (Expo) app store deployments.
Ecosystem Knowledge: Familiarity with .NET deployments to Azure and container orchestration (Docker, Kubernetes).
Governance Tools: Deep knowledge of Azure Defender for Cloud and Microsoft Entra ID (Azure AD) best practices.
Network Security: Experience managing DNS and edge security (e.g., Cloudflare WAF and Zero Trust).

Responsibilities

Architect and manage cloud infrastructure (primarily Azure, with some AWS) with a "Security by Design" philosophy.
Design and own secure CI/CD pipelines using Azure DevOps and YAML-based workflows, integrating automated security scanning (SAST/DAST).
Implement and maintain compliance frameworks (e.g., SOC2, HIPAA, or CIS benchmarks) using Azure Policy and automated auditing.
Develop infrastructure-as-code using Terraform, Bicep, or ARM templates, ensuring all code is peer-reviewed and linted for security vulnerabilities.
Eliminate manual toil by scripting system provisioning and operational tasks with PowerShell, Bash, or Python.
Drive cost optimization and performance tuning while maintaining robust logging and alerting via Azure Monitor and Log Analytics.
Lead the strategy for backups, failovers, and high availability to ensure zero-downtime environments.