Bachelor's degree and 5 years of relevant experience, or Master's degree and 3 years in quality assurance or related field.
Experience with quality management plans and QA methodologies for federal IT programs.
Ability to define quality metrics and acceptance criteria in a government context.
Experience testing CI/CD pipeline security gates and cloud configurations in a structured environment.
Proficiency in tracing dashboard metrics back to source evidence, particularly with AWS tools.
Strong communication skills for documenting QA findings and defect logs.
Hands-on experience with test tooling, API testing, and basic scripting or query skills.
Responsibilities
Develop and maintain a comprehensive Quality Management Plan for three Agile teams.
Validate platform configurations against established architecture and deployment plans.
Test CI/CD pipeline security gates in an AWS Lab sandbox environment.
Validate ServiceNow remediation workflows and ensure correct routing of findings.
Review Kubernetes admission control gate configurations with Security Engineers.
Verify AWS CloudWatch metrics and reporting outputs against defined policies.
Coordinate documentation reviews for technical accuracy and consistency.
Track defects and escalate quality risks to the Project Manager.
Benefits
Collaborative work environment across multiple Agile teams.
Opportunity to work with cutting-edge technologies in a federal IT context.
Engagement in Agile sprint ceremonies for continuous improvement.
Exposure to a variety of platforms including Wiz, GitLab, and ServiceNow.
Professional development opportunities in quality assurance and federal standards.
Full Job Description
POSITION OVERVIEW
This role develops and executes quality control methodologies to ensure that all deliverables, Wiz DSPM platform configurations, GitLab CI/CD pipeline gate outputs, and ServiceNow remediation workflows meet or exceed USPTO requirements and applicable federal standards. The QA Specialist is a cross-cutting resource supporting all three Agile teams equally-no team is more deserving of QA than another-and integrates QA practices directly into the two-week sprint cadence. CORE RESPONSIBILITIES
Develop and maintain the Quality Management Plan covering all three Agile teams and all five program objectives; define acceptance criteria for each program deliverable that align with CPARS evaluation dimensions: responsiveness, technical quality, schedule adherence, and customer satisfaction
Validate Wiz Federal DSPM platform configurations against the Enterprise Architecture and Deployment Plan and Discovery and Classification Configuration: verify scanner connector coverage, confirm classification rule precision and recall measurements, and document configuration baselines prior to COR submission
Test GitLab CI/CD pipeline security gates end-to-end in the AWS Lab sandbox environment: confirm Wiz Code container scanning, Snyk Agent Scan AI artifact analysis, and IaC policy checks produce expected findings and route to the correct ServiceNow SMP queue with appropriate severity tags
Validate ServiceNow SMP remediation workflow configurations: confirm correct routing of DSPM, CASB, SIEM, and pipeline findings to the right queue tier, verify SLA timer behavior, and test exception register workflows including approver, justification, and expiration-date fields
Review and validate Kubernetes admission control gate configurations and runtime scanning alert thresholds in coordination with Security Engineers; confirm findings from the approximately 4,000-container estate route correctly through the remediation workflow
Verify that AWS CloudWatch dashboard metrics and AWS S3 reporting outputs map to the published metric definitions fixed in the Reporting and Dashboard Package; confirm every dashboard number resolves to a defined policy version and detection evidence source (XSIAM, QRadar, or Wiz)
Coordinate with the Senior Technical Writer on all documentation deliverables: review for technical accuracy, completeness, formatting consistency, and alignment with the approved content-class taxonomy before each submission to the COR
Track defects, configuration discrepancies, and corrective actions in a structured defect log; escalate quality risks to the Project Manager and reflect findings in the monthly COR review re-baselining process
Participate in Agile sprint ceremonies; integrate QA into sprint review definition-of-done checklists and retrospective improvement cycles across all three Agile teams
MINIMUM QUALIFICATIONS
Bachelor's degree and 5 years of relevant experience, or Master's degree and 3 years of relevant experience in quality assurance, software engineering, information technology, or a related field
Experience developing and implementing quality management plans and QA/QC methodologies for complex federal IT programs; familiarity with FAR deliverable quality standards and CPARS evaluation criteria
Demonstrated ability to define quality metrics, scoring parameters, and acceptance criteria for both technical platform configurations and written deliverables in a government program context
Experience testing CI/CD pipeline security gates, cloud platform configurations, or ITSM workflow logic in a structured test environment (AWS Lab sandbox or equivalent)
Ability to trace dashboard metrics or reporting outputs back to source evidence; comfort working with AWS CloudWatch, AWS S3-backed reports, or SIEM telemetry outputs for validation purposes
Strong written and verbal communication skills; ability to clearly document QA findings, defect logs, and corrective actions for both technical leads and program management
Hands-on test tooling proficiency: structured test case management, API testing tools (Postman or equivalent) for validating integration endpoints, basic scripting or query skills (Python, SQL, or advanced spreadsheet analysis) for validating findings data, and GitLab issues/boards for defect tracking
PREFERRED QUALIFICATIONS
Prior QA experience on a federal cybersecurity, DSPM, data governance, or DevSecOps program; familiarity with Wiz, GitLab, ServiceNow, or Netskope platform testing
Experience validating Kubernetes container security configurations or cloud-native security tool outputs in a multi-cloud environment
Familiarity with Agile QA practices including acceptance test-driven development (ATDD), behavior-driven development (BDD), and definition-of-done checklists within two-week sprints
Certifications such as CSTE, ISTQB, ASQ Certified Quality Engineer (CQE), or AWS Certified Cloud Practitioner
Experience working in or validating outputs from a GitLab-based DevSecOps software factory
Experience with automated test frameworks or CI-integrated test stages in GitLab, and with validating role-based access behavior (Okta SSO/MFA) in enterprise security applications
The salary or salary range for this role reflects an estimated range informed by multiple compensation factors. Final offers may vary based on considerations such as relevant experience, education and training, critical skillsets, and overall business needs.
