DevSecOps Engineer

Hiring for ClearRoute — via Flexiple, the recruiting partner on this role.

About the Company

ClearRoute is a global, AI-native platform engineering consultancy headquartered in London, with an engineering hub in Pune. It helps enterprises fix how their software gets built, tested and shipped, across cloud platforms, quality engineering and developer experience. On this engagement, ClearRoute is leading a strategic platform engineering programme for a large regulated financial-services firm: an AI-enabled delivery platform on AWS that replaces manual, fragmented delivery with a standardised, policy-driven path to production.

About the Role

You'll join ClearRoute's AI-first Developer Platform team as a DevSecOps Engineer, based in Pune on a hybrid model (2 days a week in the office). The team owns the CI/CD pipelines every engineer ships through, and builds its own products on top of GitHub, Artifactory and a Kubernetes-hosted marketplace of build runners. This is a hands-on build role in a regulated environment: you build working software, not documents, and what you ship reaches delivery teams the same week. Evidence counts more than years: show what you built, what you measured, and a decision the measurement changed.

What you'll do

• Build CI/CD pipelines on GitHub Actions and make the secure, correct path the default, with policy-as-code guardrails (OPA, AWS Config), automated compliance gates and golden paths
• Define and operate self-service infrastructure patterns in AWS CDK and Terraform
• Put AI agents to work on the toolchain: remediation at scale, pipeline upgrades, scanner triage and credential rotation
• Design how autonomous agents are allowed to act, including identity, scoping, audit trail and a stop control
• Build new platform products such as self-serve dashboards, MCP servers, skills and developer tooling
• Build prototypes fast, harden the ones that prove their value, and run time-boxed experiments with a decide-or-kill date
• Make the estate observable through monitoring, telemetry, logging, tracing and alerting, and help run it with zero-downtime practices defined in code
• Talk to delivery teams directly and bring back findings that change the roadmap

What you bring

• Hands-on CI/CD pipeline engineering (GitHub Actions, Azure DevOps or similar), where teams own their pipelines and security is part of building
• Infrastructure as code with Terraform or AWS CDK, reviewed and tested as code
• Production experience on AWS or Azure
• You've wired security into delivery: scanners, secrets detection or policy checks running as pipeline gates
• You write real code for tooling and services in Python, TypeScript or C#
• Real observability experience: monitoring, telemetry, logging, tracing and alerting
• Test-driven and behaviour-driven development, trunk-based development and pairing as your default way of working
• You've driven delivery metrics toward elite DORA performance and measured a problem before solving it
• Hands-on use of AI tools such as Claude and GitHub Copilot, and real interest in how engineering changes in an AI-first world
• Proactive and self-directed, not ticket-led

Nice to have

• Built AI agents, MCP servers or automation that acts on a toolchain
• GitHub, Azure DevOps or Artifactory administration; Kubernetes runner fleets
• Experience in banking, asset management or other regulated environments
• Product instinct: you ask who the user is and what they will adopt before what is technically interesting
• Teaching others through pairing, writing or speaking to engineering teams

Originally posted on: 26 Oct 2026