Testing & QA Engineer

Testing & QA Engineer SDK & Security Validation
Department: R&D
Location: Hyderabad

Role Overview

NPCI is seeking a detail-oriented and technically strong Testing & QA Engineer to join its Research & Development team. This role will focus on quality assurance, validation, and reliability testing of Android/mobile SDKs, with a strong emphasis on security-related developments, compliance, and robustness in payment-grade environments.

The ideal candidate will be responsible for defining and executing comprehensive QA strategies for SDKs, APIs, mobile components, and security-sensitive product features. The role requires experience in functional testing, automation testing, SDK validation, API testing, performance testing, and security-focused quality engineering. The candidate should be comfortable working closely with developers, architects, product teams, and security stakeholders to ensure high-quality and secure deliverables.

This role is especially relevant for candidates who understand the challenges of validating payment, authentication, cryptographic, and trust-sensitive mobile components in a structured R&D environment.

Key Responsibilities

1. SDK Testing and Quality Assurance

• Design, develop, and execute test strategies for Android/mobile SDKs and related software components.
• Validate SDK functionality across multiple Android versions,device types, OEM environments, and integration scenarios.
• Create detailed test plans, test cases, test scenarios, and traceability matrices for SDK features and enhancements.
• Perform integration testing to verify SDK behavior when embedded into host applications.
• Ensure backward compatibility and stability of SDK releases across supported environments.
• Validate SDK installation, configuration, initialization, runtime behavior, error handling, and upgrade paths.

2. Security Validation and Secure QA Support

• Perform validation of security-sensitive features, including authentication flows, secure storage, device binding, cryptographic operations, token handling, and session management.
• Verify implementation of mobile security controls such as certificate pinning, root/jailbreak detection, tamper detection, obfuscation, and secure communication.
• Support review and validation of security requirements in SDK and mobile application workflows.
• Work closely with engineering and security teams to identify vulnerabilities, weak controls, insecure configurations, and risk areas early in the development lifecycle.
• Participate in security testing activities, including negative testing, abuse-case testing, and misconfiguration validation.
• Assist in validating compliance with secure coding and mobile security best practices.

3. Test Automation

• Build and maintain automated test frameworks for SDK and application validation.
• Develop automated functional, regression, integration, and API test suites.
• Automate repeatable test scenarios for SDK releases and continuous validation pipelines.
• Integrate automated test execution with CI/CD pipelines to improve release quality and reduce manual effort.
• Contribute to test infrastructure for emulator, real-device, and device farm-based testing.

4. API, Integration, and Platform Validation

• Validate SDK interaction with backend APIs, device services, and platform capabilities.
• Perform testing for network handling, retries, resilience, transaction integrity, and failure scenarios.
• Verify interoperability between SDK components and dependent systems.
• Support testing of mobile components involving NFC, device security modules, cryptographic interfaces, and secure communication layers where applicable.
• Ensure consistency of behavior across sandbox, UAT, and production-like test environments.

5. Performance, Reliability, and Resilience Testing

• Conduct performance, stress, load, and stability testing for SDKs and related mobile components.
• Validate app/SDK behavior under low memory, poor network, device interruptions, and edge-case conditions.
• Test for battery impact, startup latency, SDK footprint, crash resilience, and transaction reliability.
• Assess release readiness from a non-functional quality standpoint.

6. Defect Management and Quality Governance

• Identify, document, reproduce, prioritize, and track defects with clear technical detail.
• Work with developers to troubleshoot issues, validate fixes, and prevent regression.
• Maintain structured QA documentation including release reports, quality dashboards, and defect metrics.
• Support root cause analysis and continuous improvement initiatives for recurring quality issues.
• Contribute to definition and monitoring of QA gates and release acceptance criteria.

7. Collaboration and Process Improvement

• Work closely with R&D developers, product managers, architects, security teams, and external stakeholders.
• Participate in requirement reviews, design discussions, sprint planning, and release readiness reviews.
• Recommend improvements in QA processes, tooling, test coverage, and product quality standards.
• Contribute to a quality-first engineering culture within the R&D organization.

Required Qualifications

• Bachelors degree in Computer Science, Information Technology, Electronics, or a related discipline.
• 5-8 years of relevant experience in software testing, QA engineering, or mobile/SDK validation.
• Hands-on experience in testing Android applications, mobile SDKs, APIs, or platform components.
• Strong understanding of software testing lifecycle, defect management, and quality processes.
• Experience in creating detailed manual and automated test artifacts.
• Familiarity with security-focused validation for mobile or payment-related products.

Required Technical Skills

• Strong knowledge of functional, regression, integration, system, and user acceptance testing concepts.
• Experience in Android/mobile testing across multiple OS versions and device profiles.
• Knowledge of API testing tools such as Postman, Swagger, or equivalent.
• Experience with test automation frameworks and scripting for mobile/application testing.
• Understanding of CI/CD pipelines and automated quality checks.
• Familiarity with defect tracking and test management tools such as JIRA, TestRail, Zephyr, or similar platforms.
• Strong debugging, log analysis, and issue reproduction skills.
• Understanding of secure communication, authentication models, and mobile security testing fundamentals.
• Working knowledge of cryptographic concepts, secure key handling, token validation, and transaction security is desirable.
• Exposure to performance and reliability testing tools is preferred.

Preferred Skills and Experience

• Experience testing SDKs intended for third-party developer integration.
• Exposure to payment systems, fintech products, authentication products, or regulated digital platforms.
• Familiarity with Android security architecture, keystore usage, app signing, and secure storage validation.
• Experience with security testing tools, static/dynamic analysis outputs, or vulnerability validation workflows.
• Understanding of NFC, host card emulation, secure elements, device attestation, or trusted execution concepts is an advantage.
• Experience in testing products that require high assurance, auditability, and compliance alignment.
• Exposure to Agile / Scrum development environments.

Key Competencies

• Strong analytical and problem-solving ability
• High attention to detail and structured thinking
• Ability to identify edge cases and risk areas proactively
• Clear documentation and reporting skills
• Strong collaboration and cross-functional communication
• Ownership mindset and commitment to product quality
• Ability to work in an R&D environment with evolving requirements and rapid experimentation

Role Expectations

The selected candidate will be expected to:

• Ensure that SDK and security-focused deliverables meet high standards of quality, reliability, and trustworthiness
• Strengthen validation practices for mobile and security-critical components
• Improve release confidence through structured testing and automation
• Support the R&D team in delivering secure, scalable, and production-ready innovations

Why Join This Role

This position offers an opportunity to work on next-generation digital payment and security technologies within NPCIs R&D ecosystem. The role provides meaningful exposure to mobile innovation, SDK quality engineering, secure platform validation, and payment-grade software assurance, with direct impact on products of national importance.