Test Engineer III - HHS STIM - Remote Eligible

Test Engineer III

Lead the development and execution of test strategies, test plans, and test cases for GRC platform and application enhancements and releases.

Support regression, integration, and user acceptance testing as part of routine release activities.

Coordinate QA cycles for development sprints, regression testing, and release validations.

Document and track test results, defects, and remediations using tools such as ServiceNow.

Ensure testing includes NIST/FISMA compliance criteria, OSCAL control validation, and HHS ATO documentation requirements.

Build and manage test datasets for the GRC platform and application development and validation.

Collaborate with developers, DBAs, and business owners to validate acceptance criteria and production readiness.

Review requirements and designs to create testable use cases and traceability matrices.

Prepare defect reports and work with technical teams to ensure timely resolution.

Coordinate test execution and validation activities in HCAP Lab and CSO-managed environments.

Ensure test artifacts contribute to version-controlled documentation libraries (e.g., SharePoint, Git) supporting traceability and audit readiness.

Qualifications

At least 8 years of experience in enterprise software quality assurance, with a minimum of 2 years focused on Enterprise GRC platforms including RSA Archer.

Experience leading QA cycles and coordinating with development and business stakeholders in federal IT environments.

Familiarity with NIST Risk Management Framework (RMF), FISMA compliance, and Section 508 accessibility validation.

Proficiency in QA tools such as ServiceNow, SharePoint, Git, and test case management systems.

Attention to detail and consistent execution of QA best practices.

Preferred certifications include ISTQB Certified Agile Tester or equivalent QA credentials.

Strong written and oral communication skills with ability to interface with technical and non-technical stakeholders.

Must be familiar with and adhere to the full Enterprise Performance Lifecycle (EPLC) and defined Software Development Life Cycle (SDLC) policies.