QA Test Manager – Environment, Application Performance & Security Testing

QA Test Manager – Environment, Application Performance & Security Testing

Location: Regina, SK (100% Remote)

Job Summary

The QA Test Manager orchestrates Test Environment Management (TEM) , Application Performance Testing , and Application Security Testing across our insurance IT infrastructure. You will manage complex testing environments and lead specialized engineering teams to ensure core systems (policy, claims, billing engines) are fast, resilient, scalable, and secure against cyber threats before major production releases.

Required Qualifications & Technical Skills

Experience: 7+ years in IT QA, with 3+ years managing Test Environments, Performance Engineering, or Application Security .

Domain Expertise: Mandatory experience in the Insurance domain (policy lifecycles, high-volume batch scheduling, billing, and claims processing).

Performance Tooling: Hands-on experience with Apache JMeter, LoadRunner, NeoLoad, or Gatling.

Security Tooling: Familiarity with SAST/DAST tools such as SonarQube, Veracode, Checkmarx, or OWASP ZAP.

Monitoring & Infrastructure: Proficiency with APM tools (Dynatrace, New Relic, Splunk), cloud architecture (AWS or Azure), and containerization (Docker, Kubernetes).

Key Responsibilities

Environment Governance: Own the lifecycle, scheduling, and conflict resolution for all QA, Performance, and Pre-Production staging environments.

Configuration & Integrations: Track environment topologies, code versions, patch levels, and downstream third-party integration points (e.g., credit and valuation APIs).

Data Compliance: Architect a secure Test Data Management (TDM) framework ensuring all performance and security test data is masked and compliant with privacy regulations (e.g., PIPEDA).

Virtualization: Implement service virtualization and stubbing strategies to eliminate environment downtime and third-party dependencies.

2. Application Performance Testing

Strategy & Architecture: Define strategy, test plans, and exit criteria for Load, Stress, Endurance, Failover, and Capacity testing.

NFR Alignment: Partner with business analysts to translate complex insurance workflows into measurable Non-Functional Requirements (NFRs) like sub-second quote response times.

Telemetry Analysis: Use APM tools during peak load simulations to identify and troubleshoot architectural bottlenecks (CPU leaks, database deadlocks, network latency).

3. Application Security Testing

SSDLC Framework: Embed Static (SAST) and Dynamic (DAST) security testing tools directly into the testing lifecycle.

Vulnerability Management: Manage automated scans (OWASP Top 10) and penetration testing. Partner with Corporate Cybersecurity to prioritize and track remediation of flaws.

Team Leadership: Manage and mentor a specialized team of Performance Engineers, Security Specialists, and Environment Coordinators.

Shift-Left Automation: Integrate automated performance gates, vulnerability scans, and on-demand environment provisioning into CI/CD deployment pipelines.