Test Engineer (Data Platform, Security and Accessibility)

ECI is looking for a test engineer to own quality for a secure, role-based analytics platform. You will build the automated tests that prove every user sees exactly what their role allows and nothing more, that every number reconciles to its source data, and that the application meets WCAG 2.1 Level AA, then lead the client’s user acceptance testing through to production. About the Project: Estrada Consulting, Inc. (ECI) is assembling the team for a secure, web-based analytics platform for a public university research institute that monitors law enforcement traffic stop data. The institute holds millions of stop records reported monthly by more than one hundred police agencies, and today it analyzes them once a year through a largely manual reporting process. The new platform makes that analysis continuous: statewide, agency-level and officer-level measures on demand, statistical tests that separate real disparities from noise, role-based access for researchers, police executives, agency analysts and the public, and a foundation for early intervention indicators and predictive analytics. ECI has already built a working prototype on the public data. The platform is built in Python with an accessible web interface, a columnar analytics engine and Microsoft Azure hosting, and it must meet WCAG 2.1 Level AA. Responsibilities:

• Write the test plan and keep every test traced to a numbered requirement in the requirements register.
• Build and maintain automated API tests that exercise every endpoint as every role (researcher, agency executive, agency analyst, public, administrator), including the requests that must be refused.
• Test data loads: reconcile platform totals to source files and published figures, verify duplicate removal, quarantine rules and load reports.
• Automate browser tests for dashboards, filters, maps, drill-down and exports across Chrome, Edge, Firefox and Safari, on desktop and tablet.
• Run accessibility testing to WCAG 2.1 Level AA: automated checks (axe), keyboard-only walkthroughs and screen reader testing with NVDA; log and verify fixes.
• Run performance tests on large selections and concurrent users, and support security testing (permission bypass attempts, session handling, export controls).
• Coordinate user acceptance testing with the client: scripts, test data, defect triage, retesting and sign-off evidence.
• Manage defects by severity and report quality status in the weekly project update., Estimated effort: About 440 hours over the nine-month implementation, roughly 12 hours per week, heaviest in months five to seven during system and user acceptance testing. Work arrangement: Remote. All team members must be US based. Regular video meetings with the client’s project team are scheduled on Eastern time. Duration: About nine months for implementation, with possible regression testing for quarterly releases over a three-year term, contingent on contract award. The expected start is the first quarter of 2027.

• 5 or more years of software testing, including at least 3 years of test automation for web applications and APIs.
• Hands-on Python (pytest) or JavaScript (Playwright, Puppeteer or Cypress) automation.
• Experience testing role-based access control and data-level permissions in multi-tenant or multi-agency systems.
• Experience testing data pipelines or reporting: SQL for reconciliation, record counts, totals and duplicate checks.
• Accessibility testing experience to WCAG 2.1 AA with axe and a screen reader.
• Experience leading user acceptance testing with business users and producing sign-off evidence.
• US based and able to pass a background check., * Public sector, justice or research data experience, including handling sensitive or restricted data.
• Experience with CI/CD test pipelines (GitHub Actions or Azure DevOps) and Microsoft Azure.
• Performance testing with k6, Locust or JMeter.
• ISTQB or Trusted Tester (Section 508) certification.