Senior DevOps Engineer - Agent CI/CD & Registry

EPAM Systems; United States; Remote; USD 140,000 - 190,000; Full time

Job summary

EPAM Systems is seeking a Senior DevOps Engineer to help build an Enterprise Agent Development Platform on AWS. You will design and operate the CI/CD pipeline, agent registry integration, and security scans to support scalable AI agent deployments.

Responsibilities include managing ARM64 builds, ECR hosting, and GitHub Actions workflows, with a focus on traceability, governance, and robust security practices across cloud-native runtimes.

Qualifications

• 3+ years in DevOps or platform engineering with AI/ML pipelines.
• Hands-on CI/CD for AI agents including ARM64 builds and security scans.
• Proficiency in CI/CD pipeline implementation for containerized AI agents or ML models.
• Experience with container registry management and semantic tagging with AWS ECR.
• Security scanning within CI/CD workflows for vulnerabilities and secrets.
• Familiarity with LangGraph/LangChain packaging and deployment.
• Knowledge of Docker for containerized workloads.

Responsibilities

• Build and operate the agent CI/CD pipeline and registry integration.
• Design and maintain Agent Registry integration with metadata (git SHA, evaluation status).
• Implement GitHub Actions workflows for matrix builds and security scans.
• Manage AWS ECR for agent images with semantic and git SHA tags.
• Define and evolve agent version metadata schema (digest, timestamp, results).
• Integrate security scanning across the pipeline for vulnerabilities and secrets.
• Establish registry management practices and tagging strategies for reliable delivery.
• Collaborate with platform, ML, and security teams to enforce quality and governance.

Skills

CI/CD pipelines

ARM64 builds

AWS ECR

GitHub Actions

Container security scanning

Docker

LangGraph/LangChain

GitOps

Observability

English (B2+)

Tools

GitHub Actions

Docker

AWS ECR

AgentCore Runtime

Job description

We are looking for an experienced Senior DevOps Engineer to help build an Enterprise Agent Development Platform — a production-grade, cloud-native ecosystem that enables engineering teams to define, orchestrate, deploy, and observe AI agents at scale. The platform standardizes agent development across the organization using LangGraph and Strands Agents on AWS AgentCore Runtime. This initiative spans agent framework design, runtime architecture, marketplace integration, CI/CD automation, and enterprise-grade observability — reducing agent development from months to days while enforcing consistent security, quality, and governance standards. In this role, you will build and operate the agent CI/CD pipeline and registry integration that powers this ecosystem.

Responsibilities

• Build and operate the agent CI/CD pipeline, including ARM64 agent container builds, security scanning, pushing to ECR, and triggering AgentCore Runtime version creation
• Design and maintain Agent Registry integration to auto-register agent versions with metadata such as git SHA, evaluation pass/fail status, and promotion status
• Implement GitHub Actions workflows for agent-specific use cases, including matrix builds and specialized security scans (prompt injection, PII leakage)
• Manage AWS ECR for agent images with semantic versioning tags and git SHA tags for full traceability
• Define and evolve the agent version metadata schema, covering version ID, container digest, timestamp, evaluation results, and tool/policy bindings
• Integrate security scanning across the pipeline for vulnerabilities, secrets, and compliance checks
• Establish container registry management practices and tagging strategies to support reliable agent delivery
• Partner with platform, ML, and security teams to enforce consistent quality, governance, and release standards across all agent deployments

Requirements

• 3+ years of experience in DevOps or platform engineering with AI/ML pipelines
• Hands-on background in building CI/CD pipelines specifically for AI agents in a production agentic AI project — e.g., ARM64 agent container builds with security scanning, AWS AgentCore Runtime version registration, or agent-specific evaluation-gate integration in GitHub Actions (generic containerized CI/CD experience without agent/AgentCore context does not meet this bar)
• Proficiency in CI/CD pipeline implementation for containerized AI agents or ML models
• Expertise in container registry management, tagging strategies, and AWS ECR for agent images with semantic and git SHA versioning
• Skills in security scanning within CI/CD workflows, covering vulnerabilities, secrets, and compliance
• Competency in GitHub Actions for agent workflows, including matrix builds and agent-specific scans for prompt injection and PII leakage
• Understanding of agent version metadata schemas, including container digests, evaluation results, and tool/policy bindings
• Familiarity with Docker for building and operating containerized agent workloads
• English proficiency at an Upper-Intermediate level (B2) or higher
• Nice to have Knowledge of AWS AgentCore Runtime endpoint management API
• Background in agent evaluation gate integration to block promotion when evaluations fail
• Familiarity with GitOps promotion patterns for agents
• Skills in LangChain/LangGraph agent packaging and deployment