QA Test Manager – Environment, Application Performance & Security Testing

QA Test Manager Environment Application Performance & Security Testing

Location: Regina SK (100% Remote)

Job Summary

The QA Test Manager orchestrates Test Environment Management (TEM) Application Performance Testing and Application Security Testing across our insurance IT infrastructure. You will manage complex testing environments and lead specialized engineering teams to ensure core systems (policy claims billing engines) are fast resilient scalable and secure against cyber threats before major production releases.

Required Qualifications & Technical Skills

• Experience: 7 years in IT QA with 3 years managing Test Environments Performance Engineering or Application Security.
  

• Domain Expertise: Mandatory experience in the Insurance domain (policy lifecycles high-volume batch scheduling billing and claims processing).
  

• Performance Tooling: Hands-on experience with Apache JMeter LoadRunner NeoLoad or Gatling.
  

• Security Tooling: Familiarity with SAST/DAST tools such as SonarQube Veracode Checkmarx or OWASP ZAP.
  

• Monitoring & Infrastructure: Proficiency with APM tools (Dynatrace New Relic Splunk) cloud architecture (AWS or Azure) and containerization (Docker Kubernetes).
  

Key Responsibilities

1. Test Environment Management (TEM)

• Environment Governance: Own the lifecycle scheduling and conflict resolution for all QA Performance and Pre-Production staging environments.
  

• Configuration & Integrations: Track environment topologies code versions patch levels and downstream third-party integration points (e.g. credit and valuation APIs).
  

• Data Compliance: Architect a secure Test Data Management (TDM) framework ensuring all performance and security test data is masked and compliant with privacy regulations (e.g. PIPEDA).
  

• Virtualization: Implement service virtualization and stubbing strategies to eliminate environment downtime and third-party dependencies.
  

2. Application Performance Testing

• Strategy & Architecture: Define strategy test plans and exit criteria for Load Stress Endurance Failover and Capacity testing.
  

• NFR Alignment: Partner with business analysts to translate complex insurance workflows into measurable Non-Functional Requirements (NFRs) like sub-second quote response times.
  

• Telemetry Analysis: Use APM tools during peak load simulations to identify and troubleshoot architectural bottlenecks (CPU leaks database deadlocks network latency).
  

3. Application Security Testing

• SSDLC Framework: Embed Static (SAST) and Dynamic (DAST) security testing tools directly into the testing lifecycle.
  

• Vulnerability Management: Manage automated scans (OWASP Top 10) and penetration testing. Partner with Corporate Cybersecurity to prioritize and track remediation of flaws.
  

4. Leadership & DevOps Integration

• Team Leadership: Manage and mentor a specialized team of Performance Engineers Security Specialists and Environment Coordinators.
  

• Shift-Left Automation: Integrate automated performance gates vulnerability scans and on-demand environment provisioning into CI/CD deployment pipelines.