QA Test Engineer with Security Clearance

QA / Test Engineer
(*Mainly remote but must go on-site in Ft Meade for IL7 related activities*)
 
Description
QA / Test Engineer to own quality assurance and test across the secure enterprise applications we deliver to federal customers on Azure Government Cloud. You will design and run functional, integration, regression, and user acceptance testing to prove our systems operate correctly and consistently as they are built, deployed, and continuously authorized — and you will build the automated test coverage that lets us ship with confidence within a continuous-authorization (cATO) pipeline.
 This is a hands-on, embedded builder role, not an oversight seat. You will work directly with developers, cloud and security engineers, and requirements of staff on a delivery team, with your test suites wired into the CI/CD pipeline as enforceable quality gates. In a delivery model where much of the code is produced with AI-assisted tooling and authorization is continuous rather than point-in-time, independent verification is the control that keeps a system trustworthy — your work is the evidence that what shipped does what it must, and it feeds directly into the continuous-monitoring and accreditation record.
 Location: Candidate must be located in the Washington, DC, metro region and available to go onsite in Maryland (Ft. Meade) as required. This role supports secure Government environments; a Top-Secret w/ SCI Eligibility, with the ability to obtain a Top Secret/SCI clearance. All personnel shall meet DoD 8140/8570 baseline requirements for their role.
Responsibilities: • Own the test strategy and its execution across functional, integration, regression, and user-acceptance testing for full applications and their workflows. • Build and maintain automated test suites (unit, API/endpoint, and end-to-end) integrated into the CI/CD pipeline as enforceable, continuous quality gates. • Design reconciliation tests that independently re-derive computed outputs and assert equality against application results — so no reported figure goes unverified. • Verify that applications behave consistently across each environment after independent deployment and configuration. • Test authentication, authorization, and data-scope enforcement, proving that access controls hold at the API and data layer, not just the UI. • Perform Section 508 / WCAG 2.1 AA accessibility testing and document conformance and defects. • Contribute security-focused test automation to the pipeline and validate remediation of security findings as part of the secure software supply chain. • Independently verify AI-assisted / machine-generated code against requirements and edge cases. • Author and maintain the test plan, traceability of tests to requirements, and defect records suitable for continuous monitoring, accreditation, and customer handoff. • Support root-cause analysis, regression prevention, and continuous quality improvement across managed environments.
Requirements: • 5+ years of hands-on software QA / test engineering, including test automation. • Strong experience building automated test suites for web applications and REST APIs (e.g., vitest/jest + supertest, Playwright/Cypress, or comparable frameworks). • Solid SQL skills and the ability to write independent verification queries against a relational database. • Experience testing authentication/authorization and data-access controls. • Familiarity with Section 508 / WCAG accessibility testing tools and methods. • Experience integrating automated tests into CI/CD pipelines and defining quality gates. • Rigorous documentation, traceability, and defect-management discipline. • Excellent troubleshooting and stakeholder communication skills. • Comfort working independently across a lean, senior team and multiple concurrent efforts.
Preferred Qualifications: • Experience testing on Azure Government Cloud environments, and understanding of DoD IL5/IL6/IL7 constraints. • Familiarity with RMF, continuous ATO (cATO), continuous monitoring, and security control validation. • Security-testing experience (OWASP-aligned, DISA STIG validation) and pipeline security tooling. • Experience verifying AI-assisted / generated code in a regulated environment. • Experience with performance and load testing for spiky, high-concurrency workloads.
About Total Force Alliance
Total Force Alliance, LLC (TFA) is an SBA-certified Service-Disabled Veteran-Owned Small Business (SDVOSB) and Economically Disadvantaged Woman-Owned Small Business (EDWOSB) delivering mission-critical IT services and technical solutions to federal customers. Based in Miami, Florida, we support programs across AI, Cloud, Cybersecurity, ISR, and Enterprise IT. At TFA, we work on meaningful missions that support the Defense, Intelligence, and Federal Civilian communities. Our teams help modernize enterprise networks and intelligence systems through cloud migration, ServiceNow development, advanced ISR support, and AI-driven data integration. We combine technical excellence with mission focus, giving our employees the opportunity to make an impact while growing their careers in high-demand technical environments. Why Join TFA?
We believe great people do their best work when they are supported professionally and personally. That’s why we offer benefits and development opportunities designed to help our team thrive, including:
• Medical, Dental, and Vision Insurance
• Mental Health Resources
• Paid Time Off and Company Holidays
• 401(k) with Company Matching
• Life, Accident, and Injury Insurance
• Flexible Spending Account (FSA)
• Health Savings Account (HSA)
• Certification Preparation and Exam Reimbursement
• Virtual Personal and Professional Development Classes Equal Opportunity Employer
Total Force Alliance, LLC is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other characteristic protected by applicable federal, state, or local law.