Workplace Cloud & SaaS Lead

a { text-decoration: none; color: #464feb; } tr th, tr td { border: 1px solid #e6e6e6; } tr th { background-color: #f5f5f5; }

a { text-decoration: none; color: #464feb; } tr th, tr td { border: 1px solid #e6e6e6; } tr th { background-color: #f5f5f5; } QA Test Engineer (Manual & Automation)

Pay Rate: $30 per hour

Position Summary

We are seeking a skilled QA Test Engineer with experience in both manual and automation testing for web-based applications and APIs. The ideal candidate will be responsible for ensuring software quality through comprehensive test planning, execution, defect management, and automation development. This role requires strong analytical skills, attention to detail, and the ability to collaborate effectively with cross-functional teams in an Agile environment.

Responsibilities

• Design, develop, and execute comprehensive test plans, test cases, and test scripts for web applications and APIs.
• Perform manual functional, regression, integration, system, and end-to-end testing.
• Develop, maintain, and enhance automated test scripts and frameworks to improve test coverage and efficiency.
• Validate RESTful APIs using tools such as Postman, Swagger, or similar API testing platforms.
• Identify, document, track, and verify software defects through resolution.
• Collaborate closely with developers, product managers, and business stakeholders to understand requirements and acceptance criteria.
• Participate in Agile ceremonies including sprint planning, backlog grooming, daily standups, and retrospectives.
• Execute regression testing during releases and support production validation activities.
• Analyze test results and provide clear reporting on product quality and release readiness.
• Continuously improve testing processes, methodologies, and automation practices.
• Ensure adherence to quality standards, best practices, and established testing procedures.

Required Qualifications

• Bachelor//'s degree in Computer Science, Information Technology, Engineering, or a related field, or equivalent work experience.
• 3+ years of Quality Assurance experience in software testing.
• Experience with both manual and automated testing methodologies.
• Hands-on experience testing web applications and REST APIs.
• Experience with test automation tools such as Selenium, Cypress, Playwright, TestComplete, or similar.
• Proficiency with API testing tools such as Postman, SoapUI, or equivalent.
• Strong understanding of software development life cycle (SDLC) and software testing life cycle (STLC).
• Experience with defect tracking and project management tools such as Jira, Azure DevOps, or similar.
• Knowledge of Agile/Scrum development methodologies.
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent verbal and written communication skills.

Preferred Qualifications

• Experience with CI/CD pipelines and automated testing integration.
• Knowledge of performance, load, or security testing concepts.
• Experience with SQL and database validation testing.
• Familiarity with cloud-based applications and environments.
• Experience creating or maintaining automation frameworks.

Key Skills

• Manual Testing
• Test Automation
• Web Application Testing
• API Testing
• Selenium / Cypress / Playwright
• Postman
• Jira
• Regression Testing
• Functional Testing
• Agile/Scrum
• Defect Management
• Quality Assurance

Please submit your resume in English to be considered.

What Makes Us a Great Place to Work

We are proud to be consistently recognized as one of the world's best places to work. We are currently the top-ranked consulting firm on Glassdoor's Best Places to Work list and have earned the #1 overall spot a record seven times. Extraordinary teams are at the heart of our business strategy, but these don't happen by chance. They require intentional focus on bringing together a broad set of backgrounds, cultures, experiences, perspectives, and skills in a supportive and inclusive work environment. We hire people with exceptional talent and create an environment in which every individual can thrive professionally and personally.

Where You'll Fit Within the Team

As an Application Security Engineer, you'll help scale our shift-left security program by leading our code scanning capabilities and supporting the adoption of AI-enabled static code analysis technologies across our global development teams.

This is a highly collaborative, technical role where you'll work alongside engineering teams to integrate security seamlessly into the software development lifecycle. You'll help reduce vulnerabilities at the point of code creation, translate security risks into practical guidance for developers, and communicate security progress effectively to both technical and non-technical stakeholders.

What You'll Do

As an Application Security Engineer, you will:

• Own and operate application security scanning capabilities, including Static Application Security Testing (SAST), Software Composition Analysis (SCA), secret detection, and Infrastructure-as-Code (IaC) scanning.
• Lead the deployment and adoption of Wiz Code across development teams and CI/CD pipelines.
• Define and maintain secure coding standards and policy-as-code practices.
• Integrate security scanning into developer IDEs, pull request workflows, and CI/CD pipelines.
• Configure and optimize scanning rules to improve detection quality while minimizing false positives.
• Develop dashboards and reporting to measure application security posture, remediation progress, and key performance indicators.
• Build automation that streamlines vulnerability triage, ticket creation, and remediation workflows.
• Serve as a trusted security partner for development teams, supporting security issues through resolution.
• Evaluate emerging application security technologies and recommend improvements to the security tooling ecosystem.
• Develop documentation, developer guidance, and onboarding materials that enable teams to adopt secure development practices.
• Monitor, triage, and prioritize security findings, partnering with engineering teams to drive timely remediation of critical vulnerabilities.
• Identify recurring security patterns and implement long-term improvements that reduce organizational risk.
• Support application security investigations, root cause analysis, and compliance activities.
• Provide clear communication on application security risks, remediation progress, and program maturity.
• Advocate for security-by-design principles and help foster a culture of shared responsibility for secure software development.

About You

Required Qualifications

• Undergraduate degree or equivalent relevant work experience.
• 2–4 years of experience in Application Security, DevSecOps, or a related security or software engineering role.
• Experience with application security concepts including SAST, SCA, secret scanning, and Infrastructure-as-Code scanning.
• Understanding of common software vulnerabilities, including the OWASP Top 10, CVEs, and software dependency risks.
• Experience supporting CI/CD pipelines such as GitHub Actions, GitLab CI, or Jenkins.
• Ability to communicate security risks clearly with both technical and non-technical stakeholders.

Preferred Qualifications

• Experience with Wiz Code or similar application security platforms such as Snyk, Semgrep, Checkmarx, or Veracode.
• Experience working with cloud platforms including AWS, Azure, or Google Cloud Platform.
• Familiarity with Infrastructure-as-Code technologies such as Terraform or CloudFormation.
• Experience using Python, Bash, or similar scripting languages for automation.
• Knowledge of secure software development frameworks such as OWASP SAMM or NIST SSDF.
• Relevant security certifications such as Security+, GWEB, CASE, or equivalent training.

Working Model

This role follows a hybrid model, requiring in-office presence at least
one day per week
.

Please submit your resume in English to be considered.

WHAT MAKES US A GREAT PLACE TO WORK

We are proud to be consistently recognized as one of the world’s best places to work. We are currently the top ranked consulting firm on

Glassdoor’s Best Places to Work

list and have earned the #1 overall spot a record seven times. Extraordinary teams are at the heart of our business strategy, but these don’t happen by chance. They require intentional focus on bringing together a broad set of backgrounds, cultures, experiences, perspectives, and skills in a supportive and inclusive work environment. We hire people with exceptional talent and create an environment in which every individual can thrive professionally and personally.

WHO YOU’LL WORK WITH

Coro is Bain's persistent product development and engineering organization, building and operating the firm's proprietary digital solutions. Coro brings together technology, data, and services to create differentiated value for Bain's clients and case teams.

This role sits within Coro's DevOps and Assurance team, part of the Next Generation Software Solutions (NGSS) department. The team enables secure, efficient, and reliable delivery of technology across Bain's global ecosystem, focusing on both technical operations and platform assurance so that every deployment meets the firm's standards for quality, security, and compliance.

 

WHERE YOU’LL FIT WITHIN THE TEAM

The Senior Engineer helps build and operate the infrastructure, deployment automation, and operational reliability behind Coro's platforms. Working alongside architects and backend engineers, this engineer provisions and operates Azure infrastructure, builds and maintains CI/CD pipelines, and helps ensure services are deployed consistently, monitored effectively, and can scale as the build plan expands.

This is a delivery-focused role: the Senior Engineer executes well against established standards and patterns, takes ownership of the tasks assigned to them, and collaborates closely with the wider team. It is a critical foundational role in the early stages of the platform build, requiring strong technical fundamentals and the pragmatism to make infrastructure decisions that support a fast-moving product team.

 

WHAT YOU’LL DO

Infrastructure & Automation – 30%

• Design, provision, and manage cloud infrastructure using Terraform and Terraform Cloud. Automate deployments to ensure scalability, consistency, and security across environments.
• Architect and manage Azure networking: VNet/subnet design, private endpoints, DNS resolution, NSG rules, and Front Door Premium configuration.
• Provision and maintain Azure platform services: App Services, Azure SQL, Azure OpenAI, Container Registry (e.g. Azure Container Registry, Cloudsmith), Key Vault, Entra ID, and Storage Accounts (ADLS Gen2).
• Collaborate with Bain's central cloud and infrastructure teams to refine shared processes, tooling, and approaches to operational work.

Cloud & Platform Management (Azure) – 25%

• Manage Azure Kubernetes Service (AKS) clusters, including node pools, scaling, spot instances, and workload connectivity to dependent services (databases, storage, AI services).
• Manage identity and access: Entra ID app registrations, managed identities, RBAC, and integration with external IdPs (Okta).
• Administer database platforms from an infrastructure perspective: Azure SQL Serverless, PostgreSQL Flexible Server, Cosmos DB, including connectivity, Entra auth, firewall rules, and private endpoints.
• Ensure robust access controls and platform reliability across dev, demo, and production environments.

CI/CD & Software Delivery – 20%

• Build, optimize, and maintain CI/CD pipelines using GitHub Actions for container builds, infrastructure deployments, and application releases.
• Manage container image lifecycle: build, scan, push to a container registry (e.g. Azure Container Registry, Cloudsmith), and deploy to AKS or App Services.
• Implement environment promotion workflows with appropriate gating, secrets management (Key Vault), and rollback strategies.
• Design and operate GitHub-hosted private runners where required, including network integration with Azure VNets.

Monitoring, Security & Assurance – 15%

• Implement and operate observability using the team's monitoring stack (e.g. Datadog, Azure Application Insights). Monitor performance, resolve issues proactively, and optimize cost and reliability.
• Respond to security findings: triage, containment, IAM scoping, container image CVE remediation, and endpoint hardening.
• Handle L2/L3 incident escalations, including root-cause analysis, user journey tracing, and log analysis.
• Enforce solution compliance across products: network isolation, least-privilege access, secrets hygiene, and deployment guardrails.
• Maintain local development environments and deployment documentation so engineers across the distributed team can onboard quickly and operate with minimal infrastructure friction.

Leadership & Collaboration – 10%

• Partner with architects, product engineers, and security teams to align on infrastructure standards and platform roadmaps.
• Promote DevOps culture, automation-first thinking, and continuous improvement across the NGSS engineering organization.
• Contribute to technical discovery, POCs, and innovation workstreams to validate new tools, technologies, and architectural patterns.
• Support team recruiting activities: resume screening, technical interviews, and candidate evaluation.

ABOUT YOU

Education & Experience

• Bachelor's or Master's degree in Computer Science, Engineering, or a related technical field.
• 4–6 years

 of experience in DevOps, infrastructure engineering, or cloud platform engineering roles.

• Proven track record of designing and operating cloud infrastructure in production environments.
• Demonstrated experience working with cross-functional engineering teams in fast-paced product organizations.

Professional Skills & Mindset

• Excellent communication and collaboration skills, with the ability to translate complex technical topics for diverse stakeholders.
• Proactive, analytical, and systematic, with strong problem-solving skills and the ability to trace issues across multiple layers (DNS, networking, identity, application).
• Results-driven with a bias for automation and continuous improvement.
• Familiarity with Agile methodologies and a commitment to team enablement.

Technical Expertise

• Hands-on experience with
  Terraform
  and Terraform Cloud (or equivalent): workspace management, state, modules, and remote backends.
• Strong proficiency in Azure services, including
  AKS, Networking (VNets, subnets, private endpoints, NSGs, DNS zones), App Services, Key Vault, Container Registry, and Storage Accounts
  .
• Experience with containerization technologies (
  Docker, Kubernetes
  ) and container image lifecycle management.
• Expertise in
  roles, permissions, and IAM
  , particularly
  Microsoft Entra ID and Okta
  .
• Advanced skills in CI/CD automation using
  GitHub Actions
  , Azure DevOps, and related DevOps toolchains.
• Proficient in Linux administration and automation scripting (
  Bash, PowerShell, Python
  ) for reusable workflows.
• Experience with monitoring and observability platforms (e.g.
  Datadog, Azure Application Insights
  ).
• Familiarity with
  Azure private networking: private endpoints (blob, DFS, SQL, PostgreSQL), Private DNS Zones, and VNet integration for App Services and AKS
  .
• Competent in database deployment and management from an infrastructure perspective,
  Azure SQL Serverless, PostgreSQL Flexible Server
  , and Cosmos DB.
• Foundation in
  security remediation
  : container CVE patching, IAM scoping, NSG/firewall tightening, and WAF/Front Door rule management.

Preferred Qualifications

• Professional certifications such as Azure DevOps Engineer Expert, Azure Administrator, Terraform Associate, or CKA (or equivalent).
• Experience managing multi-environment governance, cost optimization, and compliance frameworks in cloud environments.
• Familiarity with
  Azure OpenAI, Cognitive Search, Databricks
  , and the integration of AI services into enterprise platforms.
• Experience with workflow orchestration tools (Airflow, or similar DAG/pipeline systems).
• Snowflake

 administration or connectivity from a DevOps lens.

• Experience with AI/ML observability tools such as LangSmith or Arize.
• Familiarity with AI coding assistants such as Cursor, Claude Code, or Codex to speed up development.

WHAT MAKES US A GREAT PLACE TO WORK

We are proud to be consistently recognized as one of the world’s best places to work. We are currently the top ranked consulting firm on 

Glassdoor’s Best Places to Work

 list and have earned the #1 overall spot a record seven times. Extraordinary teams are at the heart of our business strategy, but these don’t happen by chance. They require intentional focus on bringing together a broad set of backgrounds, cultures, experiences, perspectives, and skills in a supportive and inclusive work environment. We hire people with exceptional talent and create an environment in which every individual can thrive professionally and personally.

WHO YOU’LL WORK WITH

Coro is Bain's persistent product development and engineering organization, building and operating the firm's proprietary digital solutions. Coro brings together technology, data, and services to create differentiated value for Bain's clients and case teams.

This role sits within Coro's DevOps and Assurance team, part of the Next Generation Software Solutions (NGSS) department. The team enables secure, efficient, and reliable delivery of technology across Bain's global ecosystem, focusing on both technical operations and platform assurance so that every deployment meets the firm's standards for quality, security, and compliance.

WHERE YOU’LL FIT WITHIN THE TEAM

The Staff Engineer owns the design, architecture, and long-term direction of cloud infrastructure and software delivery across Coro's DevOps and Assurance team. Working alongside architects and backend engineers, this engineer sets the technical standard for how the team provisions infrastructure, ships software, and secures its platforms, and ensures those platforms scale as the build plan expands.

This is a critical foundational role in the early stages of the platform build, requiring both strong technical fundamentals and the pragmatism to make infrastructure decisions that support a fast-moving product team.

WHAT YOU’LL DO

Infrastructure Architecture & Automation – 30%

• Own the design and evolution of cloud infrastructure built on Terraform and Terraform Cloud. Define the module structure, state strategy, and remote backend conventions the rest of the team builds against.
• Architect Azure networking end to end: VNet/subnet topology, private endpoints, DNS resolution, NSG design, and Front Door Premium configuration across dev, demo, and production.
• Set the standard for provisioning Azure platform services (App Services, Azure SQL, Azure OpenAI, Container Registry (e.g. Azure Container Registry, Cloudsmith), Key Vault, Entra ID, Storage Accounts / ADLS Gen2) and ensure environment parity by design.
• Own the automation roadmap for the team: identify manual, repetitive operational work, own the backlog of it, and drive it toward self-service and infrastructure-as-code so operational load trends down over time.
• Partner with Bain's central cloud and infrastructure teams to shape shared processes, tooling, and standards for operational work.

Cloud & Platform Management (Azure) – 20%

• Own Azure Kubernetes Service (AKS) architecture, including node pools, scaling strategy, spot instance usage, and workload connectivity to dependent services (databases, storage, AI services).
• Define identity and access architecture: Entra ID app registrations, managed identities, RBAC model, and integration with external IdPs (Okta).
• Set infrastructure standards for database platforms (Azure SQL Serverless, PostgreSQL Flexible Server, Cosmos DB), including connectivity, Entra auth, firewall rules, and private endpoints.
• Ensure platform reliability and robust access controls across all environments, and act as the senior escalation point for platform-level issues.

CI/CD & Software Delivery – 15%

• Define and own the CI/CD strategy using GitHub Actions for container builds, infrastructure deployments, and application releases, setting the patterns other engineers extend.
• Establish the container image lifecycle standard: build, scan, push to a container registry (e.g. Azure Container Registry, Cloudsmith), and deploy to AKS or App Services.
• Design environment promotion workflows with appropriate gating, secrets management (Key Vault), and rollback strategies.
• Architect and operate GitHub-hosted private runners where required, including network integration with Azure VNets.

Monitoring, Security & Assurance – 15%

• Own the observability strategy using the team's monitoring stack (e.g. Datadog, Azure Application Insights). Define what the team monitors, alerts on, and how it optimizes cost and reliability.
• Lead the response to security findings: triage, containment, IAM scoping, container image CVE remediation, and endpoint hardening, and set the remediation standards others follow.
• Lead L2/L3 incident escalations, including root-cause analysis, user journey tracing, and log analysis, and drive the improvements that prevent recurrence.
• Define and enforce solution compliance across products: network isolation, least-privilege access, secrets hygiene, and deployment guardrails.
• Own the developer experience: set the standard for local development environments and deployment documentation so engineers across the distributed team can onboard quickly and operate with minimal infrastructure friction.

Technical Leadership & Team Development – 20%

• Lead and mentor DevOps engineers: set technical direction, review designs, grow the team's depth, and raise the bar on engineering practice.
• Anticipate the needs of stakeholders across NGSS and the wider business, and shape the platform roadmap proactively rather than reactively.
• Partner with architects, product engineers, and security teams to align on infrastructure standards and shape platform roadmaps across NGSS.
• Drive DevOps culture and automation-first thinking across the engineering organization, and lead knowledge sharing.
• Contribute to and often lead technical discovery, POCs, and innovation workstreams to validate new tools, technologies, and architectural patterns.

ABOUT YOU

Education & Experience

• Bachelor's or Master's degree in Computer Science, Engineering, or a related technical field.
• 7–9 years
  of experience in DevOps, infrastructure engineering, or cloud platform engineering, with time spent at a senior or staff level.
• Proven track record of architecting and operating cloud infrastructure in production at scale, owning technical decisions end to end.
• Demonstrated experience leading and mentoring DevOps or platform engineers in fast-paced product organizations.

Professional Skills & Mindset

• Excellent communication and collaboration skills, with the ability to translate complex technical topics for diverse stakeholders and to set direction others can follow.
• Proactive, analytical, and systematic, with strong problem-solving skills and the ability to trace issues across multiple layers (DNS, networking, identity, application).
• Results-driven with a strong bias for automation and continuous improvement, and a track record of driving operational load down over time.
• Comfortable owning ambiguity and working with limited direction: able to define standards and roadmaps where none exist yet, and to manage multiple stakeholders independently.
• Familiarity with Agile methodologies and a genuine commitment to team enablement and growth.

Technical Expertise

• Deep hands-on expertise with
  Terraform
  and Terraform Cloud (or equivalent): module design, state strategy, and remote backends at scale.
• Strong mastery of Azure services, including
  AKS, Networking (VNets, subnets, private endpoints, NSGs, DNS zones), App Services, Key Vault, Container Registry, and Storage Accounts
  .
• Deep experience with containerization technologies (
  Docker, Kubernetes
  ) and container image lifecycle management.
• Expertise in
  roles, permissions, and IAM,
  particularly
  Microsoft Entra ID and Okta
  .
• Advanced CI/CD automation using
  GitHub Actions
  , Azure DevOps, and related DevOps toolchains, with the ability to define patterns for a team.
• Proficient in Linux administration and automation scripting (
  Bash, PowerShell, Python
  ) for reusable workflows.
• Strong command of monitoring and observability platforms (e.g.
  Datadog, Azure Application Insights
  ).
• Deep familiarity with
  Azure private networking: private endpoints (blob, DFS, SQL, PostgreSQL), Private DNS Zones, and VNet integration for App Services and AKS
  .
• Command of database deployment and management from an infrastructure perspective,
  Azure SQL Serverless, PostgreSQL Flexible Server
  , and Cosmos DB.
• Strong foundation in
  security remediation
  : container CVE patching, IAM scoping, NSG/firewall tightening, and WAF/Front Door rule management.

Preferred Qualifications

• Professional certifications such as Azure DevOps Engineer Expert, Azure Administrator, Terraform Associate, or CKA (or equivalent).
• Experience owning multi-environment governance, cost optimization (FinOps), and compliance frameworks in cloud environments.
• Familiarity with
  Azure OpenAI, Cognitive Search, Databricks
  , and the integration of AI services into enterprise platforms.
• Experience with workflow orchestration tools (Airflow, or similar DAG/pipeline systems).
• Snowflake
  administration or connectivity from a DevOps lens.
• Experience with AI/ML observability tools such as LangSmith or Arize.
• Familiarity with AI coding assistants such as Cursor, Claude Code, or Codex to speed up development.