NLM QA Specialist I - III

Job Description

Job Description:\n\nSalary: $50,000 - $135,000 QA Specialist I III Lexical Intelligence provides software and services related to processing large-scale biomedical information sources. Our Natural Language Processing (NLP) and analytics software is used by policy and decision makers to evaluate and prioritize current and emerging areas of research. We are looking for QA Specialists (I III) to work within the National Library of Medicine (NLM), Lister Hill National Center for Biomedical Communications (LHNCBC), located at Building 38A on the NIH campus in Bethesda, MD. The QA Specialists will have experience in software quality assurance and testing, automated testing frameworks and configuration management, and federal IT compliance and secure software development practices. The QA Specialists will have a firm understanding of software testing methodologies, quality control processes, and federal security and accessibility requirements applicable to government software systems. The QA Specialists shall be able to work well within a team of software developers, DevOps engineers, data scientists, and biomedical informatics professionals. The selected applicant(s) will be subject to a pre-employment background and reference check. Level Descriptions QA Specialist I Entry to mid-level professional with foundational experience in software quality assurance and testing. Works under supervision, executing defined test plans and contributing to QA activities across the software development lifecycle. Focuses primarily on test execution, defect documentation, and supporting automated testing and accessibility validation efforts. QA Specialist II Mid to senior-level professional with demonstrated experience leading QA activities across complex software development programs. Works with greater independence, designing test strategies, managing automated testing frameworks, and providing technical guidance to junior QA staff. Contributes to DevSecOps integration, security validation, and accessibility compliance governance. QA Specialist III Senior-level professional serving as the strategic QA lead for enterprise software quality programs. Provides expert guidance on QA architecture, governance, and process improvement across multi-team development efforts. Leads the design and implementation of enterprise testing frameworks, oversees accessibility and security compliance programs, and serves as the primary QA liaison to government stakeholders and senior leadership. Required Qualifications QA Specialist I2 years of relevant software quality assurance, testing, or related experienceAssociate's degree or other degree(s) in Computer Science, Information Technology, Software Engineering, or related fieldsExperience conducting software testing and quality control across multiple phases of the software development lifecycle, including analysis, design, implementation, testing, deployment, and maintenanceFamiliarity with automated testing environments and configuration management tools and practicesBasic knowledge of secure coding best practices in accordance with US-CERT standards and OWASP guidelinesExperience working in or supporting software development in Linux environments, with additional familiarity with Windows, MacOS, or web-based environmentsFamiliarity with common programming languages and environments used in testing and QA, such as Python, Java, JavaScript, or shell scriptingStrong written and oral communication skills, including the ability to document test results, defects, and quality metrics clearly and concisely QA Specialist II4 years of progressive software quality assurance and testing experience, including demonstrated leadership of QA activities on complex software development programsBachelor's degree or other degree(s) in Computer Science, Information Technology, Software Engineering, or related fields; advanced degree preferredDemonstrated experience designing, implementing, and managing automated testing frameworks and configuration management systems across multiple software development environmentsProven ability to develop comprehensive test strategies, test plans, and quality metrics for enterprise-level software applications and toolsExperience integrating QA and security validation activities within CI/CD pipelines and DevSecOps frameworksWorking knowledge of federal information security requirements, including FISMA compliance considerations relevant to software testing and quality assuranceExperience conducting and overseeing Section 508 accessibility testing and validation, including WCAG 2.0 Level A and AA compliance assessmentDemonstrated ability to provide technical guidance to junior QA staff and coordinate QA activities across cross-functional development teams QA Specialist III6+ years of senior-level software quality assurance experience, with demonstrated leadership of enterprise QA programs in federal government or government contracting environmentsBachelor's degree or other degree(s) in Computer Science, Information Technology, Software Engineering, or related fields; Master's degree strongly preferredExpert-level experience designing and governing enterprise automated testing frameworks, CI/CD security integration, and DevSecOps quality assurance architectures across large, complex multi-team software development programsDemonstrated strategic leadership in federal software quality governance, including oversight of FISMA compliance validation, security testing programs, and enterprise accessibility conformance initiativesProven ability to brief and advise senior government officials and program leadership on QA program status, risk, and strategic improvement initiativesExpert knowledge of Section 508 requirements, HHS digital accessibility conformance standards, and federal ICT accessibility governanceDemonstrated experience mentoring and leading teams of QA professionals, establishing enterprise quality standards and performance frameworks Preferred QualificationsExperience with Agile and Scrum development frameworks and participation in sprint-based QA activities at varying levels of leadershipFamiliarity with CI/CD pipeline testing integration using tools such as GitLab, GitHub Actions, Nexus, or equivalent platformsExperience with version control systems such as Bitbucket or GitLab for managing test scripts and QA documentationKnowledge of ticketing and issue tracking systems such as JIRA and documentation platforms such as Confluence WikiExperience testing web-based and user interface applications, including Responsive and RESTful design standards, and proficiency with graphic design, data visualization, and user-centered design evaluation techniquesFamiliarity with or experience in web accessibility testing and Section 508 compliance validation, including WCAG 2.0 Level A and AA success criteria, and experience preparing Accessibility Conformance Reports (ACRs) or Supplemental Accessibility Conformance Reports (SARs)Experience testing applications across multiple environments including Linux, Windows, MacOS, Android, web-based, and mobile platformsExperience with cloud computing platforms such as AWS, Google Cloud (GC), or Microsoft Azure and their implications for software testing across IaaS, PaaS, SaaS, and CI/CD configurationsKnowledge of containerization tools such as Docker and orchestration platforms such as Kubernetes as they relate to software testing and deployment validationFamiliarity with database platforms such as MySQL, MongoDB, MS SQL, PostgreSQL, or Elasticsearch and experience conducting database-level testing and validationExperience testing applications that handle Personally Identifiable Information (PII) or Protected Health Information (PHI), with awareness of applicable privacy and security requirements including FISMA, HIPAA, and NIH data governance policiesFamiliarity with programming languages and environments such as Python, Java, JavaScript, R, Matlab, SAS, SQL, and Jupyter notebooks as they relate to testing and QA activitiesExperience with AI, machine learning (ML), deep learning (DL), or natural language processing (NLP) application testing, including validation of model outputs and algorithmic behaviorKnowledge of open-source software security and quality requirements in accordance with US-CERT and OWASP standardsRelevant certifications such as ISTQB Foundation or Advanced Level, CompTIA Security+, CISSP, or equivalent QA or security credentials(For Levels II and III) Experience managing subcontractor QA activities and coordinating quality assurance across multi-vendor development teams(For Level III) Demonstrated experience developing and delivering QA training programs and establishing enterprise quality governance frameworks for large federal IT programs Responsibilities All LevelsParticipate as a team member in all phases of software, application, and tool development and maintenance, including analysis, design, implementation, testing, deployment, and maintenance activities in support of NLM/LHNCBC research and development programsConduct software testing and quality control activities employing automated testing environments and configuration management practices to ensure the accuracy, reliability, and security of software applications and toolsExecute functional, regression, integration, and performance testing activities across software applications developed for NLM programs, documenting test cases, test results, and identified defects clearly and accuratelyEnsure that all tested software is fully functional and operates correctly on systems configured in accordance with government policy and federal configuration standards, including testing with all relevant and current updates and patches applied prior to installation in the HHS environmentVerify that developed software applications meet all applicable HHS, NIH, NLM, and LHNCBC security and operational policies, including FISMA compliance requirementsSupport the validation of software security by assisting with the review of vulnerability scan results and coordinating with development and security teams to ensure identified vulnerabilities are remediated within prescribed timelinesAssist in ensuring that IT applications designed and developed for end users run in the standard user context without requiring elevated administrative privilegesSupport secure coding quality assurance activities in accordance with US-CERT specified standards and OWASP guidelines, helping to identify and document potential software vulnerability exploitsConduct accessibility testing to validate conformance with Section 508 requirements and HHS digital accessibility conformance standards, including WCAG 2.0 Level A and AA success criteria, for all ICT deliverablesAssist in preparing or lead the preparation of Supplemental Accessibility Conformance Reports (SARs) and Accessibility Conformance Reports (ACRs) based on required test methods, documenting accessibility test results, features supporting accessibility, and core functions that may not be accessible to individuals with disabilitiesSupport or lead the demonstration of completed ICT items to government stakeholders to validate conformance with agency accessibility requirements prior to final acceptanceEnsure that no sensitive data is used during software testing activities, in compliance with HHS and NIH data protection policiesDocument technical project requirements, testing timelines, and quality metrics, and contribute to or lead status updates for project management and government oversight purposesTrack and report defects, issues, and test progress using ticketing systems such as JIRA and ServiceNow or equivalent platforms, and maintain testing documentation using Confluence Wiki or equivalent documentation toolsParticipate in or lead Agile and Scrum development processes, contributing to sprint planning, backlog refinement, and retrospective activities from a QA perspectiveSupport or oversee testing and validation of software developed across multiple environments, including Linux, Windows, MacOS, Android, web-based, and mobile platforms as applicable to assigned projectsAssist in or lead the validation that software architecture is secure, extensible, and able to integrate with existing internal or external systems, and that all developed software is documented for internal and external users and future maintenance purposesSupport or oversee testing activities for applications leveraging commercial cloud computing services across GC, AWS, and Azure in IaaS, PaaS, SaaS, and CI/CD configurationsContribute to or lead the testing and validation of open-source software and non-commercial software procurements in accordance with secure coding best practice requirements and federal standardsMaintain awareness of and compliance with HHS/NIH information security policies, completing mandatory annual HHS/NIH Information Security Awareness, Privacy, and Records Management training prior to beginning work and annually thereafterAdhere to the HHS Information Technology General Rules of Behavior and applicable Rules of Behavior prior to accessing government data, systems, and networksComplete and maintain required Non-Disclosure Agreements (NDAs) for access to non-public government information prior to performing work under the contractIdentify themselves as contractor personnel in all contract-related meetings, communications, and correspondence in accordance with contract requirementsSupport transition activities by contributing to or leading documentation, knowledge transfer, and testing continuity planning as directed by the Program Manager and COR Additional Responsibilities QA Specialist IIDesign, implement, and manage comprehensive automated testing frameworks and configuration management systems across multiple software development programs and environmentsDevelop test strategies, test plans, and quality metrics for enterprise-level software applications and tools, ensuring alignment with project timelines, technical requirements, and government acceptance criteriaLead the integration of QA and security validation activities within CI/CD pipelines and DevSecOps frameworks using tools such as GitLab, GitHub Actions, Nexus, and equivalent platformsProvide technical guidance and mentorship to QA Specialist I staff, reviewing test plans and results and coordinating QA activities across cross-functional development teamsLead Section 508 accessibility testing and compliance validation programs, overseeing the preparation of ACRs and SARs and coordinating remediation activities with development teamsCoordinate with security teams to validate FISMA compliance requirements, support ATO documentation efforts, and ensure that security testing activities are integrated throughout the software development lifecycleContribute to the design and review of software architecture from a quality and security assurance perspective, identifying potential risks and r