Senior QA Engineer - IT Industry

Build the automated regression estate and the hands-on testing that protect the platform, through the build, through go-live, and across the support phase.

• Build the test automation framework: an end-to-end regression suite (Playwright/TypeScript for the front end, RSpec request specs for the GraphQL API), wired into CI as a merge gate.
• Extend multi-tenant isolation testing: negative test cases proving no cross-tenant data leakage across row-level access, API object-level authorization, exports, search, reports and background jobs.
• Own Arabic RTL and localization testing: UI mirroring, bidirectional text with mixed Arabic/Latin content and numerals, Arabic-Indic versus Western numerals, Hijri and Gregorian dates, Arabic sort and collation, Arabic full-text search, and PDF/report generation with correct Arabic shaping.
• Introduce accessibility testing to WCAG 2.2 Level AA: automated scanning (axe-core in CI) plus manual keyboard-only and screen-reader passes in Arabic and English, with a documented conformance report.
• Stand up performance and scalability testing against the contractual targets (e.g., 500 concurrent users with 95% of user actions completing under 2 seconds), on production-equivalent infrastructure, with tuning recommendations and re-test evidence.
• Own security test coordination and evidence: OWASP-aligned test cases, static analysis, dependency and container-image scanning in CI, dynamic analysis, third-party penetration-test coordination and remediation retest cycles.
• Own integration and contract testing across identity/SSO (SAML and OIDC), patent-office and registry interfaces, correspondence ingestion, billing, and audit export.
• Validate data migration with the Data Migration Lead: reconciliation test design, record-count and field-level assertions, and formal sign-off criteria.
• Verify resilience: participate in failover and restore drills proving the recovery objectives, and produce signed evidence per drill.
• Define and report the quality metrics regime (defect escape rate, defect density by module, requirements-to-test traceability, automation coverage, change-failure rate) and enforce entry and exit criteria per phase.
• Own the defect management process: severity and priority definitions, triage cadence with the client, SLA per severity, root-cause classification and defect-leakage review at each phase exit.
• Plan and run client UAT across legal, finance, admin and executive user groups: entry and exit criteria, bilingual test scripts, tester onboarding, daily stand-ups and formal sign-off.
• And all responsibilities given by the direct manager.

• 5 years hands-on in software quality assurance and test automation on enterprise, multi-tenant platforms.
• Deep hands-on automation: able to write and review Playwright/TypeScript and API tests personally, and own a CI pipeline.
• Experience testing on PostgreSQL and a modern web stack (Ruby on Rails and/or Next.js/TypeScript).
• Professional Arabic and English, able to test Arabic UI content and run UAT sessions in Arabic.
• Experience delivering against contractual non-functional service levels.
• Comfortable building a test estate from a thin base rather than inheriting a mature one — you will be setting the standard, not maintaining someone else's.
• Experience in, or genuine comfort working in, a fast-paced startup environment: self-managed time, adapting to changing priorities, following tasks through, and delivering on short timelines when needed.
• Comfortable working with AI tools and able to use them effectively to lift your productivity and the quality of your work — Claude Code and other relevant AI-powered tools.
• Preferred — Performance engineering, including load, stress and soak tests with k6, JMeter or Gatling against a stated concurrency and latency target, and diagnosing the resulting bottlenecks.
• Preferred — ISTQB Advanced Level Test Analyst (CTAL-TA) or equivalent demonstrated testing depth.
• Preferred — OWASP-aligned security testing experience, or prior work producing audit evidence for a security certification cycle.
• Preferred — Prior QA on an IP management, legal-technology or docketing platform (deadline and date-calculation logic is the highest-defect area in this domain).
• Preferred — Accessibility testing credential or documented VPAT/ACR authorship.
• Preferred — Test process improvement exposure (TMMi or equivalent).
• Saudi nationals are strongly encouraged to apply.