DevSecOps Engineer (Cloud Security and Compliance)

SoftDoes is a U.S.-based custom software development company headquartered in Kansas City, Missouri. We build custom software, SaaS platforms, web and mobile applications, AI solutions, and cloud infrastructure for businesses across industries such as healthcare, fintech, construction, legal, and real estate.

We work with modern technologies and focus on solving complex business problems through reliable, scalable software solutions.

About the role

The company is moving deeper into enterprise work. We need a DevSecOps engineer who can help harden our infrastructure, implement security best practices, and drive compliance readiness so we can pass enterprise vendor reviews and pursue certifications like SOC 2 and ISO 27001. You will work closely with engineering and leadership across infrastructure, security, and compliance.

What you will do:

• Build and maintain secure cloud infrastructure and CI/CD pipelines
• Implement access control, least privilege, and secrets management across environments
• Standardize logging, monitoring, alerting, and audit trails
• Create and maintain secure SDLC practices, including code scanning, dependency scanning, and change control
• Set up incident response basics, including runbooks, on-call expectations, and post-incident process
• Compliance readiness for SOC 2 and ISO 27001 by implementing required technical controls and gathering evidence
• Vulnerability management and patching routines for infrastructure and dependencies
• Improve backup, disaster recovery, and business continuity practices
• Support client security questionnaires with clear technical answers and evidence