Senior QA Engineer - IT Industry

Build the automated regression estate and the hands-on testing that protect the platform, through the build, through go-live, and across the support phase.
What you'll do
Build the test automation framework: an end-to-end regression suite (Playwright/TypeScript for the front end, RSpec request specs for the GraphQL API), wired into CI as a merge gate.
Extend multi-tenant isolation testing: negative test cases proving no cross-tenant data leakage across row-level access, API object-level authorization, exports, search, reports and background jobs.
Own Arabic RTL and localization testing: UI mirroring, bidirectional text with mixed Arabic/Latin content and numerals, Arabic-Indic versus Western numerals, Hijri and Gregorian dates, Arabic sort and collation, Arabic full-text search, and PDF/report generation with correct Arabic shaping.
Introduce accessibility testing to WCAG 2.2 Level AA: automated scanning (axe-core in CI) plus manual keyboard-only and screen-reader passes in Arabic and English, with a documented conformance report.
Stand up performance and scalability testing against the contractual targets (e.g., 500 concurrent users with 95% of user actions completing under 2 seconds), on production-equivalent infrastructure, with tuning recommendations and re-test evidence.
Own security test coordination and evidence: OWASP-aligned test cases, static analysis, dependency and container-image scanning in CI, dynamic analysis, third-party penetration-test coordination and remediation retest cycles.
Own integration and contract testing across identity/SSO (SAML and OIDC), patent-office and registry interfaces, correspondence ingestion, billing, and audit export.
Validate data migration with the Data Migration Lead: reconciliation test design, record-count and field-level assertions, and formal sign-off criteria.
Verify resilience: participate in failover and restore drills proving the recovery objectives, and produce signed evidence per drill.
Define and report the quality metrics regime (defect escape rate, defect density by module, requirements-to-test traceability, automation coverage, change-failure rate) and enforce entry and exit criteria per phase.
Own the defect management process: severity and priority definitions, triage cadence with the client, SLA per severity, root-cause classification and defect-leakage review at each phase exit.
Plan and run client UAT across legal, finance, admin and executive user groups: entry and exit criteria, bilingual test scripts, tester onboarding, daily stand-ups and formal sign-off.
And all responsibilities given by the direct manager.
What we look for
5 years hands-on in software quality assurance and test automation on enterprise, multi-tenant platforms.
Deep hands-on automation: able to write and review Playwright/TypeScript and API tests personally, and own a CI pipeline.
Experience testing on PostgreSQL and a modern web stack (Ruby on Rails and/or Next.js/TypeScript).
Professional Arabic and English, able to test Arabic UI content and run UAT sessions in Arabic.
Experience delivering against contractual non-functional service levels.
Comfortable building a test estate from a thin base rather than inheriting a mature one — you will be setting the standard, not maintaining someone else's.
Experience in, or genuine comfort working in, a fast-paced startup environment: self-managed time, adapting to changing priorities, following tasks through, and delivering on short timelines when needed.
Comfortable working with AI tools and able to use them effectively to lift your productivity and the quality of your work — Claude Code and other relevant AI-powered tools.
Preferred — Performance engineering, including load, stress and soak tests with k6, JMeter or Gatling against a stated concurrency and latency target, and diagnosing the resulting bottlenecks.
Preferred — ISTQB Advanced Level Test Analyst (CTAL-TA) or equivalent demonstrated testing depth.
Preferred — OWASP-aligned security testing experience, or prior work producing audit evidence for a security certification cycle.
Preferred — Prior QA on an IP management, legal-technology or docketing platform (deadline and date-calculation logic is the highest-defect area in this domain).
Preferred — Accessibility testing credential or documented VPAT/ACR authorship.
Preferred — Test process improvement exposure (TMMi or equivalent).
Saudi nationals are strongly encouraged to apply.

Work arrangement
Yes