QA Test Manager – Environment, Application Performance & Security Testing
Astra North Infoteck Inc. QA Test Manager – Environment, Application Performance & Security Testing
Summary
Leads Test Environment Management, application performance testing, and application security testing for core insurance systems (policy, claims, billing). Day to day this means governing QA/staging environments, running load/stress/failover tests with tools like JMeter or LoadRunner, embedding SAST/DAST scans, and mentoring a specialist team using APM, AWS/Azure, and Docker/Kubernetes.
QA Test Manager – Environment, Application Performance & Security Testing
Location: Regina, SK (100% Remote)
Job Summary
The QA Test Manager orchestrates Test Environment Management (TEM), Application Performance Testing, and Application Security Testing across our insurance IT infrastructure. You will manage complex testing environments and lead specialized engineering teams to ensure core systems (policy, claims, billing engines) are fast, resilient, scalable, and secure against cyber threats before major production releases.
Required Qualifications & Technical Skills
Experience: 7+ years in IT QA, with 3+ years managing Test Environments, Performance Engineering, or Application Security.
Domain Expertise: Mandatory experience in the Insurance domain (policy lifecycles, high-volume batch scheduling, billing, and claims processing).
Performance Tooling: Hands-on experience with Apache JMeter, LoadRunner, NeoLoad, or Gatling.
Security Tooling: Familiarity with SAST/DAST tools such as SonarQube, Veracode, Checkmarx, or OWASP ZAP.
Monitoring & Infrastructure: Proficiency with APM tools (Dynatrace, New Relic, Splunk), cloud architecture (AWS or Azure), and containerization (Docker, Kubernetes).
Key Responsibilities
1. Test Environment Management (TEM)
Environment Governance: Own the lifecycle, scheduling, and conflict resolution for all QA, Performance, and Pre-Production staging environments.
Configuration & Integrations: Track environment topologies, code versions, patch levels, and downstream third-party integration points (e.g., credit and valuation APIs).
Data Compliance: Architect a secure Test Data Management (TDM) framework ensuring all performance and security test data is masked and compliant with privacy regulations (e.g., PIPEDA).
Virtualization: Implement service virtualization and stubbing strategies to eliminate environment downtime and third-party dependencies.
2. Application Performance Testing
Strategy & Architecture: Define strategy, test plans, and exit criteria for Load, Stress, Endurance, Failover, and Capacity testing.
NFR Alignment: Partner with business analysts to translate complex insurance workflows into measurable Non-Functional Requirements (NFRs) like sub-second quote response times.
Telemetry Analysis: Use APM tools during peak load simulations to identify and troubleshoot architectural bottlenecks (CPU leaks, database deadlocks, network latency).
3. Application Security Testing
SSDLC Framework: Embed Static (SAST) and Dynamic (DAST) security testing tools directly into the testing lifecycle.
Vulnerability Management: Manage automated scans (OWASP Top 10) and penetration testing. Partner with Corporate Cybersecurity to prioritize and track remediation of flaws.
4. Leadership & DevOps Integration
Team Leadership: Manage and mentor a specialized team of Performance Engineers, Security Specialists, and Environment Coordinators.
Shift-Left Automation: Integrate automated performance gates, vulnerability scans, and on-demand environment provisioning into CI/CD deployment pipelines.