Applications Quality Assurance & DevOps Senior Specialist

About the Role

Nahdi Medical Co. is seeking an Applications Quality Assurance & DevOps Senior Specialist to join their team in Makkah or Jeddah. This full-time role focuses on ensuring the quality of software products through meticulous testing and quality assurance activities, alongside operating and maintaining CI/CD pipelines and enforcing DevOps compliance. The specialist will be responsible for designing and executing test plans, test cases, and test scripts based on project requirements, collaborating with various teams to validate software functionality.

Key Responsibilities

• Conduct functional, regression, performance, security, and usability testing across all in-scope applications to verify functionality and identify defects.
• Design, develop, and execute test plans, test cases, and test scripts based on project requirements and risk-based testing priorities.
• Identify, track, document, and communicate defects using defect tracking tools (JIRA/Xray, Zephyr, TestRail), collaborating with development teams for timely resolution.
• Create and maintain comprehensive test documentation, including test plans, test cases, scripts, and results, to ensure coverage, traceability, and knowledge transfer.
• Set up and configure test environments and test data to simulate real-world scenarios for accurate and reliable testing.
• Adhere to QA standards, quality gates, and mandatory release deliverables defined by the COE (Test Strategy, Test Plan, Execution Report, Defect Summary, Production Readiness Sign-off).
• Develop and execute automated test scripts using QA frameworks and tools (Selenium, Cypress, Playwright, TestNG, Cucumber, Postman, REST Assured) and contribute to the shared automation framework.
• Embed automated regression suites as mandatory quality gates in CI/CD pipelines, supporting the target of 60%+ automation coverage for critical applications.
• Operate and maintain CI/CD pipelines (Jenkins, Azure DevOps, GitLab CI), including build, test, deployment, and release automation, and enforce the DevOps compliance framework (source control, branching, environment and release management).
• Monitor and report DORA metrics (deployment frequency, lead time, change failure rate, MTTR) and contribute to monthly DevOps compliance scorecards.
• Execute application security testing (SAST, DAST, dependency scanning) within CI/CD pipelines, identify and document vulnerabilities, and support remediation tracking with IT Security in line with OWASP Top 10.
• Support the Segregation of Duties (SoD) exercise by validating access controls, role configurations, and SoD test cases during release validation in coordination with Internal Audit and IT Security.
• Support audit and compliance readiness (*, ISO 27001) by maintaining test evidence, release documentation, and reconciliation records, and support the integration reconciliation function between different applications and third-party platforms.
• Contribute to the Application Portfolio Register, lifecycle dashboard, and monthly Application Excellence Scorecard by providing QA, DevOps, release, and security metrics for assigned applications.
• Collaborate with development teams, product managers, business stakeholders, IT Security, Internal Audit, and COE leadership; participate in Agile ceremonies; promote shift-left testing practices; and continuously improve QA, DevOps, and security processes while staying current with emerging methodologies and tools.

Qualifications and Experience

• A minimum of 5 to 10 years of relevant experience in quality assurance and DevOps.
• Demonstrated experience in designing and executing test plans, test cases, and test scripts.
• Proficiency in various types of testing, including functional, regression, performance, and usability testing.
• Experience with defect tracking tools such as JIRA/Xray, Zephyr, and TestRail.
• Familiarity with QA frameworks and automation tools like Selenium, Cypress, Playwright, TestNG, Cucumber, Postman, and REST Assured.
• Hands-on experience with CI/CD pipelines (Jenkins, Azure DevOps, GitLab CI).
• Knowledge of application security testing (SAST, DAST, dependency scanning) and OWASP Top 10.

Work Environment

This is a full-time position with a work schedule of 5 days a week, with 2 days off. The typical working hours are from 8:00 AM to 6:00 PM, including a one-hour break. The role is primarily indoors, accounting for 100% of the work environment.