NLM QA Specialist I - III

Job Description:\n\nQA Specialist I – III\n\nLexical Intelligence provides software and services related to processing large-scale biomedical information sources. Our Natural Language Processing (NLP) and analytics software is used by policy and decision makers to evaluate and prioritize current and emerging areas of research.\n\nWe are looking for QA Specialists (I – III) to work within the National Library of Medicine (NLM), Lister Hill National Center for Biomedical Communications (LHNCBC), located at Building 38A on the NIH campus in Bethesda, MD. The QA Specialists will have experience in software quality assurance and testing, automated testing frameworks and configuration management, and federal IT compliance and secure software development practices. The QA Specialists will have a firm understanding of software testing methodologies, quality control processes, and federal security and accessibility requirements applicable to government software systems. The QA Specialists shall be able to work well within a team of software developers, DevOps engineers, data scientists, and biomedical informatics professionals. The selected applicant(s) will be subject to a pre-employment background and reference check.\n\nLevel Descriptions\nQA Specialist I – Entry to mid-level professional with foundational experience in software quality assurance and testing. Works under supervision, executing defined test plans and contributing to QA activities across the software development lifecycle. Focuses primarily on test execution, defect documentation, and supporting automated testing and accessibility validation efforts.\n\nQA Specialist II – Mid to senior-level professional with demonstrated experience leading QA activities across complex software development programs. Works with greater independence, designing test strategies, managing automated testing frameworks, and providing technical guidance to junior QA staff. Contributes to DevSecOps integration, security validation, and accessibility compliance governance.\n\nQA Specialist III – Senior-level professional serving as the strategic QA lead for enterprise software quality programs. Provides expert guidance on QA architecture, governance, and process improvement across multi-team development efforts. Leads the design and implementation of enterprise testing frameworks, oversees accessibility and security compliance programs, and serves as the primary QA liaison to government stakeholders and senior leadership.\n\nRequired Qualifications\nQA Specialist I\n\n2 years of relevant software quality assurance, testing, or related experience\nAssociate's degree or other degree(s) in Computer Science, Information Technology, Software Engineering, or related fields\nExperience conducting software testing and quality control across multiple phases of the software development lifecycle, including analysis, design, implementation, testing, deployment, and maintenance\nFamiliarity with automated testing environments and configuration management tools and practices\nBasic knowledge of secure coding best practices in accordance with US-CERT standards and OWASP guidelines\nExperience working in or supporting software development in Linux environments, with additional familiarity with Windows, MacOS, or web-based environments\nFamiliarity with common programming languages and environments used in testing and QA, such as Python, Java, JavaScript, or shell scripting\nStrong written and oral communication skills, including the ability to document test results, defects, and quality metrics clearly and concisely\n\nQA Specialist II\n\n4 years of progressive software quality assurance and testing experience, including demonstrated leadership of QA activities on complex software development programs\nBachelor's degree or other degree(s) in Computer Science, Information Technology, Software Engineering, or related fields; advanced degree preferred\nDemonstrated experience designing, implementing, and managing automated testing frameworks and configuration management systems across multiple software development environments\nProven ability to develop comprehensive test strategies, test plans, and quality metrics for enterprise-level software applications and tools\nExperience integrating QA and security validation activities within CI/CD pipelines and DevSecOps frameworks\nWorking knowledge of federal information security requirements, including FISMA compliance considerations relevant to software testing and quality assurance\nExperience conducting and overseeing Section 508 accessibility testing and validation, including WCAG 2.0 Level A and AA compliance assessment\nDemonstrated ability to provide technical guidance to junior QA staff and coordinate QA activities across cross-functional development teams\n\nQA Specialist III\n\n6+ years of senior-level software quality assurance experience, with demonstrated leadership of enterprise QA programs in federal government or government contracting environments\nBachelor's degree or other degree(s) in Computer Science, Information Technology, Software Engineering, or related fields; Master's degree strongly preferred\nExpert-level experience designing and governing enterprise automated testing frameworks, CI/CD security integration, and DevSecOps quality assurance architectures across large, complex multi-team software development programs\nDemonstrated strategic leadership in federal software quality governance, including oversight of FISMA compliance validation, security testing programs, and enterprise accessibility conformance initiatives\nProven ability to brief and advise senior government officials and program leadership on QA program status, risk, and strategic improvement initiatives\nExpert knowledge of Section 508 requirements, HHS digital accessibility conformance standards, and federal ICT accessibility governance\nDemonstrated experience mentoring and leading teams of QA professionals, establishing enterprise quality standards and performance frameworks\n\n Preferred Qualifications\n\nExperience with Agile and Scrum development frameworks and participation in sprint-based QA activities at varying levels of leadership\nFamiliarity with CI/CD pipeline testing integration using tools such as GitLab, GitHub Actions, Nexus, or equivalent platforms\nExperience with version control systems such as Bitbucket or GitLab for managing test scripts and QA documentation\nKnowledge of ticketing and issue tracking systems such as JIRA and documentation platforms such as Confluence Wiki\nExperience testing web-based and user interface applications, including Responsive and RESTful design standards, and proficiency with graphic design, data visualization, and user-centered design evaluation techniques\nFamiliarity with or experience in web accessibility testing and Section 508 compliance validation, including WCAG 2.0 Level A and AA success criteria, and experience preparing Accessibility Conformance Reports (ACRs) or Supplemental Accessibility Conformance Reports (SARs)\nExperience testing applications across multiple environments including Linux, Windows, MacOS, Android, web-based, and mobile platforms\nExperience with cloud computing platforms such as AWS, Google Cloud (GC), or Microsoft Azure and their implications for software testing across IaaS, PaaS, SaaS, and CI/CD configurations\nKnowledge of containerization tools such as Docker and orchestration platforms such as Kubernetes as they relate to software testing and deployment validation\nFamiliarity with database platforms such as MySQL, MongoDB, MS SQL, PostgreSQL, or Elasticsearch and experience conducting database-level testing and validation\nExperience testing applications that handle Personally Identifiable Information (PII) or Protected Health Information (PHI), with awareness of applicable privacy and security requirements including FISMA, HIPAA, and NIH data governance policies\nFamiliarity with programming languages and environments such as Python, Java, JavaScript, R, Matlab, SAS, SQL, and Jupyter notebooks as they relate to testing and QA activities\nExperience with AI, machine learning (ML), deep learning (DL), or natural language processing (NLP) application testing, including validation of model outputs and algorithmic behavior\nKnowledge of open-source software security and quality requirements in accordance with US-CERT and OWASP standards\nRelevant certifications such as ISTQB Foundation or Advanced Level, CompTIA Security+, CISSP, or equivalent QA or security credentials\n(For Levels II and III) Experience managing subcontractor QA activities and coordinating quality assurance across multi-vendor development teams\n(For Level III) Demonstrated experience developing and delivering QA training programs and establishing enterprise quality governance frameworks for large federal IT programs\n\nResponsibilities\nAll Levels\n\nParticipate as a team member in all phases of software, application, and tool development and maintenance, including analysis, design, implementation, testing, deployment, and maintenance activities in support of NLM/LHNCBC research and development programs\nConduct software testing and quality control activities employing automated testing environments and configuration management practices to ensure the accuracy, reliability, and security of software applications and tools\nExecute functional, regression, integration, and performance testing activities across software applications developed for NLM programs, documenting test cases, test results, and identified defects clearly and accurately\nEnsure that all tested software is fully functional and operates correctly on systems configured in accordance with government policy and federal configuration standards, including testing with all relevant and current updates and patches applied prior to installation in the HHS environment\nVerify that developed software applications meet all applicable HHS, NIH, NLM, and LHNCBC security and operational policies, including FISMA compliance requirements\nSupport the validation of software security by assisting with the review of vulnerability scan results and coordinating with development and security teams to ensure identified vulnerabilities are remediated within prescribed timelines\nAssist in ensuring that IT applications designed and developed for end users run in the standard user context without requiring elevated administrative privileges\nSupport secure coding quality assurance activities in accordance with US-CERT specified standards and OWASP guidelines, helping to identify and document potential software vulnerability exploits\nConduct accessibility testing to validate conformance with Section 508 requirements and HHS digital accessibility conformance standards, including WCAG 2.0 Level A and AA success criteria, for all ICT deliverables\nAssist in preparing or lead the preparation of Supplemental Accessibility Conformance Reports (SARs) and Accessibility Conformance Reports (ACRs) based on required test methods, documenting accessibility test results, features supporting accessibility, and core functions that may not be accessible to individuals with disabilities\nSupport or lead the demonstration of completed ICT items to government stakeholders to validate conformance with agency accessibility requirements prior to final acceptance\nEnsure that no sensitive data is used during software testing activities, in compliance with HHS and NIH data protection policies\nDocument technical project requirements, testing timelines, and quality metrics, and contribute to or lead status updates for project management and government oversight purposes\nTrack and report defects, issues, and test progress using ticketing systems such as JIRA and ServiceNow or equivalent platforms, and maintain testing documentation using Confluence Wiki or equivalent documentation tools\nParticipate in or lead Agile and Scrum development processes, contributing to sprint planning, backlog refinement, and retrospective activities from a QA perspective\nSupport or oversee testing and validation of software developed across multiple environments, including Linux, Windows, MacOS, Android, web-based, and mobile platforms as applicable to assigned projects\nAssist in or lead the validation that software architecture is secure, extensible, and able to integrate with existing internal or external systems, and that all developed software is documented for internal and external users and future maintenance purposes\nSupport or oversee testing activities for applications leveraging commercial cloud computing services across GC, AWS, and Azure in IaaS, PaaS, SaaS, and CI/CD configurations\nContribute to or lead the testing and validation of open-source software and non-commercial software procurements in accordance with secure coding best practice requirements and federal standards\nMaintain awareness of and compliance with HHS/NIH information security policies, completing mandatory annual HHS/NIH Information Security Awareness, Privacy, and Records Management training prior to beginning work and annually thereafter\nAdhere to the HHS Information Technology General Rules of Behavior and applicable Rules of Behavior prior to accessing government data, systems, and networks\nComplete and maintain required Non-Disclosure Agreements (NDAs) for access to non-public government information prior to performing work under the contract\nIdentify themselves as contractor personnel in all contract-related meetings, communications, and correspondence in accordance with contract requirements\nSupport transition activities by contributing to or leading documentation, knowledge transfer, and testing continuity planning as directed by the Program Manager and COR\n\nAdditional Responsibilities – QA Specialist II\n\nDesign, implement, and manage comprehensive automated testing frameworks and configuration management systems across multiple software development programs and environments\nDevelop test strategies, test plans, and quality metrics for enterprise-level software applications and tools, ensuring alignment with project timelines, technical requirements, and government acceptance criteria\nLead the integration of QA and security validation activities within CI/CD pipelines and DevSecOps frameworks using tools such as GitLab, GitHub Actions, Nexus, and equivalent platforms\nProvide technical guidance and mentorship to QA Specialist I staff, reviewing test plans and results and coordinating QA activities across cross-functional development teams\nLead Section 508 accessibility testing and compliance validation programs, overseeing the preparation of ACRs and SARs and coordinating remediation activities with development teams\nCoordinate with security teams to validate FISMA compliance requirements, support ATO documentation efforts, and ensure that security testing activities are int