Software Quality Assurance Lead

Company Name: DGePay Services Limited Location: Dhaka Job Type: Full-Time Workplace Type: On-Site Job ID: IJOB202680314

• Job Summary DGePay Services Limited is seeking an experienced Software Quality Assurance (SQA) Lead to own and drive the quality engineering function for DGePay, its payment gateway platform. The role is responsible for establishing the QA strategy, leading testing activities, strengthening release quality gates, and ensuring that platform changes meet functional, security, performance, reliability, and regulatory expectations. The ideal candidate will combine hands-on testing expertise with team leadership and a strong understanding of payment workflows, including transaction initiation, authorization, status handling, settlement, refunds, reversals, reconciliation, and integration with banks, card schemes, and mobile financial services (MFS) providers.
• Key Responsibilities
• QA Strategy & Leadership
• Define and maintain the overall SQA strategy, test policy, standards, and quality objectives for DGePay.
• Lead, mentor, and manage QA engineers; allocate work, review deliverables, and support professional development.
• Establish risk-based testing practices and quality gates across development, UAT, staging, and production releases.
• Prepare test plans, estimates, schedules, entry/exit criteria, and release quality reports.
• Collaborate with product owners, business analysts, developers, DevOps, and operations teams from requirement analysis through release.
• Promote a shift-left quality culture by involving QA early in requirements, design, and implementation.
• Functional & Integration Testing
• Review BRDs, SRS documents, user stories, API specifications, and acceptance criteria for testability and gaps.
• Design and execute test scenarios, test cases, test data, and traceability matrices.
• Validate end-to-end payment flows across merchants, customers, payment channels, banks, MFS providers, and internal services.
• Test payment initiation, authorization, callbacks/webhooks, status inquiry, refunds, reversals, settlements, and reconciliation.
• Validate idempotency, duplicate request handling, timeout scenarios, retry logic, asynchronous processing, and transaction state transitions.
• Perform API, database, integration, regression, smoke, sanity, exploratory, and user acceptance support testing.
• Verify accurate transaction amounts, fees, MDR calculations, routing rules, settlement amounts, and financial reports.
• Automation & API Testing
• Develop and maintain a practical test automation strategy for UI, API, and critical end-to-end workflows.
• Build and maintain automated API test suites using tools such as Postman/Newman, REST Assured, or equivalent frameworks.
• Use Playwright, Selenium, Cypress, or equivalent tools for web UI automation where appropriate.
• Integrate automated tests into CI/CD pipelines and ensure meaningful test results are available before deployment.
• Maintain reusable test utilities, test data management practices, and automation reporting.
• Identify high-value regression scenarios for automation and continuously improve test coverage.
• Performance, Reliability & Resilience Testing
• Plan and execute load, stress, spike, endurance, and volume testing for critical payment journeys.
• Use tools such as JMeter, k6, or equivalent to assess throughput, latency, concurrency, and system limits.
• Validate platform behavior under provider latency, network interruption, service unavailability, and partial failures.
• Test retry, timeout, circuit-breaker, queue-processing, and recovery behavior where applicable.
• Analyze test results and work with engineering and DevOps teams to identify bottlenecks and capacity risks.
• Verify system stability and recovery behavior before major releases and capacity changes.
• Security & Compliance Testing
• Coordinate security testing activities and validate remediation of identified vulnerabilities.
• Perform or coordinate application-level security checks, including authentication, authorization, session management, input validation, and access-control testing.
• Validate secure handling of API credentials, tokens, sensitive customer data, and payment information.
• Support VAPT, penetration testing, vulnerability assessments, and internal/external audits.
• Ensure QA evidence and test records support applicable Bangladesh Bank requirements and organizational security policies.
• Maintain awareness of relevant standards and frameworks, including PCI DSS and OWASP guidance, as applicable to the platform's scope.
• Defect & Release Management
• Establish defect lifecycle standards, severity/priority definitions, triage practices, and escalation procedures.
• Track defects through resolution, retesting, regression, and closure; identify recurring root causes.
• Provide objective release-readiness recommendations based on test evidence, open risks, and agreed acceptance criteria.
• Prepare test summary reports, release sign-off inputs, known-issue registers, and post-release quality reviews.
• Coordinate production smoke testing and validation with engineering and operations teams.
• Ensure critical defects and financial-impacting issues are escalated promptly.
• Process Improvement & Documentation
• Define and maintain QA processes, templates, checklists, test repositories, and reporting standards.
• Maintain traceability from requirements to test cases, execution results, defects, and releases.
• Measure QA effectiveness and recommend improvements based on defect trends and production feedback.
• Ensure test environments and test data are controlled, reliable, and appropriately protected.
• Contribute to root-cause analysis and preventive actions for production incidents.
• Promote continuous improvement in test coverage, automation, delivery predictability, and product quality.
• Required Technical Skills
• Testing Fundamentals: Test planning, test design techniques, functional, integration, regression, and exploratory testing.
• Payment Domain: Payment gateway workflows, transaction lifecycle, settlement, refunds, reversals, reconciliation, and channel integrations.
• API Testing: REST APIs, JSON, HTTP methods/status codes, Postman, Newman, or REST Assured.
• Automation: Playwright, Selenium, Cypress, or equivalent; maintainable automation framework design.
• Performance Testing: JMeter, k6, or equivalent; workload modelling and result analysis.
• Database: SQL and PostgreSQL fundamentals; data validation and transaction verification.
• CI/CD: Automated test execution in build and deployment pipelines.
• Defect Management: Jira or equivalent test/issue tracking and reporting tools.
• Security Testing: OWASP Top 10 awareness, authentication/authorization testing, and vulnerability validation.
• Technical Foundations: HTTP, TLS, web architecture, microservices, message queues, logs, and distributed systems.
• Reporting: Test metrics, dashboards, defect analysis, and release quality reporting. Requirements
• Experience: 5 to 7 years
• Education:
• Bachelor's degree in Computer Science, Software Engineering, Information Technology, or a related discipline.,
• Relevant certifications in software testing, test automation, or quality engineering are an advantage.
• Skills: Testing fundamentals, Payment domain, API testing, Automation, Performance testing, Database, CI/CD, Defect management, Security testing, Technical foundations, Reporting Last Date of Application: 06 December 2026