Software Quality Assurance (QA) Analyst

About the Company and Product

We're building a technology company around a web platform that helps organizations manage who can use their spaces and how access information is handled. The product brings together user and administrator portals, an API, and backend processes. It currently includes authentication, account recovery, invitations, a people directory, and read-only imports from external access-control systems. Imports retrieve information without changing the source system. Our goal is a secure, easy-to-use platform that keeps each organization's data separate.

About the Role

You will verify that platform features work as expected before organizations use them. You will combine exploratory testing and automation across both portals and the API, with special attention to sign-in, invitations, the directory, and permissions that keep each organization's data separate.

What You'll Do

• Turn user stories and acceptance criteria into test scenarios with preconditions, test data, steps, and expected results.
• Test sign-in, sign-out, password recovery, session continuity, and invitation flows, including expired links and invalid data.
• Verify directory access and management in both portals, including authorized users, insufficient permissions, empty results, and service errors.
• Confirm that one organization cannot view or change another organization's data through the UI or API, including by replaying requests with different identifiers.
• Validate the API with valid and invalid requests: required fields, formats, authentication, permissions, response codes, and consistency with the published contract.
• Test external-directory imports with test data and confirm that the process reads from, but does not modify, the source system.
• Automate critical browser journeys with Playwright and service tests with the tools available in the project.
• Run PostgreSQL integration tests when a scenario depends on persistence or organization-level isolation, and review unit-test results.
• Review layouts at different screen sizes, keyboard navigation, labels, and accessible messages in key workflows.
• Report defects with reproducible steps, expected and actual results, evidence, and a description of the impact on users.
• Retest fixes and select regression tests to confirm that a change did not break a related workflow.
• Own the application documentation: maintain user guides and functional references for workflows, validation rules, and permissions; update them with every change and verify them against the tested version.

What We're Looking For

• Experience testing web applications and writing defect reports that others can reproduce.
• Knowledge of functional, exploratory, and regression testing, with judgment to prioritize risks for each change.
• Experience with browser automation such as Playwright, and API testing through tools or code.
• Working knowledge of HTTP, JSON, and SQL to investigate responses and verify test data.
• Ability to distinguish a UI defect, an API error, a permissions issue, and an environment failure.
• Clear communication with developers and willingness to help define acceptance criteria early.
• Clear writing skills and the ability to turn requirements, findings, and verified behavior into useful, unambiguous documentation.
• English is required.

Nice to Have

• Experience with Vitest, PostgreSQL integration testing, or API contract automation.
• Knowledge of web accessibility and products with sensitive data or multiple permission levels.
• Experience adding tests to a monorepo or running them in continuous integration.

Team Technology Stack

Playwright, Vitest, Node.js, PostgreSQL, REST APIs, OpenAPI, GitHub Actions, pnpm, and Turborepo.