DevOps Engineer II, Security

Job Description:

DevOps Engineer II, Security

About AllTrails
AllTrails is the world’s most popular and trusted platform for outdoor exploration. We connect people to the outdoors, help them discover new places, and elevate their experiences on the trail. With the most comprehensive collection of trails in the world, AllTrails supports inclusive access to nature for a global community of millions of trailgoers. Every day, we solve incredibly hard problems to get more people outside, for their wellbeing and the collective care of the natural world. Join us!
This is a U.S.-based remote position. San Francisco Bay Area employees are highly encouraged to come into the office one day a week.
DevOps Engineer II, Security
We are seeking a motivated and skilled DevOps Engineer (II), Security to join our infrastructure team. The ideal candidate will be a collaborative individual with a strong sense of ownership and a passion for building and maintaining robust, secure, and scalable systems. This role is integral to enhancing security of our data, reliability of our systems and developer experiences.

What You'll Be Doing:

• Lead and contribute to projects focused on enhancing security, system reliability, release processes, developer experiences, cost optimizations, and observability.
• Collaborate with various engineering teams to solve security issues including infrastructure, CI pipelines, and application.
• Implement and manage infrastructure-as-code (IaC) and compliance-as-code strategies.
• Improve the overall developer experience by refining tools and workflows.
• Participate in security reviews of third-party vendors and services.
• Contribute to our on-call rotation, with a frequency of approximately one week every two months, to ensure system stability.

Requirements

• A minimum of one year of professional experience managing production workloads within containerized environments.
• Demonstrated 3 years of experiences with Amazon Web Services (AWS) implementations via Infrastructure as Code with a strong emphasis on security best practices.
• Proficiency with Docker, a container orchestration platform (e.g., Kubernetes, ECS), web proxy technologies (e.g., NGINX), and at least one programming language, such as: Python, Go, Ruby.
• A solid understanding of relational databases.
• Commitment to continuous improvements (picking up new technology stacks)
• Familiarity with the software development lifecycle (SDLC) and Continuous Integration/Continuous Deployment (CI/CD) pipelines.
• Experience with monitoring, logging, and metrics-gathering tools such as Datadog, NewRelic, or CloudWatch.
• A high degree of self-motivation and a commitment to delivering high-quality work.
• The ability to navigate ambiguous situations effectively and a proactive approach to problem-solving.
• AI Native: You naturally incorporate AI tools to enhance your work. You’re comfortable writing prompts, evaluating AI outputs, and enjoy experimenting with new ways to boost creativity, productivity, and decision-making.

Bonus Points

• Contributions to open source projects (code, documentation, minor bug fixes, anything!)
• Experience with Google Cloud Platform (GCP)
• Passion for outdoors
• Get the hunter2 joke