Middle QA Engineer (Payment Gateway)

Опис
We are building our own high-throughput payment gateway. Merchants integrate via our API to accept payments and execute payouts across a dozen regions - spanning cards, mobile money, UPI, Interac, and local bank transfers. We currently have 14 live provider integrations and are expanding rapidly.
This isn't landing-page or UI testing. A transaction result often arrives as an asynchronous callback minutes after the initial request, and the cost of a missed edge-case bug directly impacts a merchant's balance.

Вимоги

• 2+ years in QA, strong background testing REST APIs (fintech, billing, e-commerce, or high-volume transactional backends)
• API testing, Apidog, Postman, Insomnia or Bruno; writing custom test scripts, constructing signed requests, verifying idempotency
• Database & logs, SQL (JOINs, aggregations for balance reconciliation) and tracing async operations across queues and webhooks in Kibana, Grafana or Datadog
• Async system logic, HTTP callbacks, message queues, scheduled cron jobs, distributed transaction states
• Test management & Agile, TMS tools (Qase, TestRail) and Agile/Scrum workflows in Jira
• English B1+, reading provider documentation, writing technical ticket reports

Обов'язки

• End-to-End Payment Testing - verify complete transaction lifecycles: API requests, 3DS/OTP flows, provider callbacks, final state transitions, and ledger/balance updates
• Payouts & Settlement Validation - test holds, settlements, payout operations, and automatic gateway cascade retries on provider failure
• API & Webhook Testing - merchant API integrations, HMAC signature generation and validation, idempotency enforcement, inbound IPNs, outbound webhooks
• Routing & Risk Rules - validate traffic distribution rules, velocity risk limits, and failover behavior across payment channels
• Security & Admin Controls - verify tenant isolation, role-based access control, and data integrity in the admin portal
• Test Operations - maintain regression suites in Qase, run post-deploy smoke checks, isolate defects using server logs and database queries

Буде плюсом

• PSP & acquiring background - 3DS protocols, chargeback lifecycles, settlement reconciliation
• Code reading - inspecting PHP or Node backend code to trace business logic
• API automation - Newman, Python, JS; running tests in CI/CD (GitHub Actions, GitLab CI)
• Security basics - OWASP API Security Top 10, access control testing, tenant isolation

Умови роботи

• Remote or hybrid
• 24 calendar days of vacation, 10 days of sick leave
• Advanced qualification courses and workshops
• Clear paths for career advancement and internal promotion