Job description
is setting the standard for large load interconnection. ON’s patented AI UPS™ is a medium-voltage UPS that serves as a firewall, protecting the data center from the grid, and the grid from the data center. With multiple gigawatts currently under construction, we are enabling grid-safe data centers.
**ROLE SUMMARY**
We're looking for a Senior QA Engineer to validate our AWS cloud infrastructure, data platforms and operational tooling. You'll make sure that access controls, deployments, pipelines, security fixes and data products work correctly, securely and reliably before they reach production. You'll work closely with the DevOps, Cyber Security, Data Engineering and Data Science teams in a multi-account AWS environment.
**KEY RESPONSIBILITIES**
- Validate AWS access management (IAM, SSO, cross-account access, SCP guardrails).
- Test deployments, configuration changes and environment consistency.
- Validate network and firewall changes (Transit Gateway, VPN, Route 53, WAF).
- Verify remediation of security findings and retest to confirm closure.
- Validate CI/CD pipeline adoption, quality gates and rollback.
- Test alerts, alarms and Grafana dashboards for accuracy and correct routing.
- Perform database checks and performance testing.
- Test data lake and ETL pipelines, including the Data Catalog and Data Quality Dashboard.
- Validate legacy asset management data and track related bugs to resolution.
- Support AWS service upgrades and migration testing as needed.
- Maintain test plans, test cases, reports and runbooks.
**REQUIRED EXPERIENCE**
- 5+ years of experience in QA or test engineering, ideally for cloud infrastructure and data platforms.
- 3+ years of experience in writing Python scripts
- Cloud management: Hands-on experience with AWS Organizations in a multi-account setup, including IAM and Service Control Policies (SCPs).
- Compute: Experience testing workloads on AWS Lambda, ECS on EC2 and ECS on Fargate.
- Networking: Working knowledge of AWS Transit Gateway, Site-to-Site VPN, Client VPN, Route 53, AWS WAF, Route 53 DNS Firewall and AWS Network Firewall.
- Security: Familiarity with GuardDuty, Security Hub, Inspector, Detective, AWS Config and CloudTrail, and how findings are remediated.
- Databases: Strong SQL skills with RDS PostgreSQL and Aurora PostgreSQL.
- CI/CD and tooling: Experience with Azure DevOps (ADO) Pipelines, Repos and Boards, or similar tools such as Bitbucket and Jira.
- Observability: Experience with monitoring tools and CloudWatch.
- FinOps: Understanding of tagging strategies and tag enforcement through SCPs.
- Scripting skills in Python, Bash or PowerShell for test automation, with experience using the AWS CLI or SDK (boto3).
- Strong documentation and communication skills.
***PREFERRED EXPERIENCE***
- Exposure to Infrastructure as Code (Terraform, CloudFormation or CDK).
- Experience with data testing frameworks
- Experience with performance testing tools (JMeter, k6, Locust).
- Experience validating legacy-to-cloud migrations.
- AWS certification (Solutions Architect, SysOps Administrator or Security Specialty).
---
**For US-based roles - What you’ll get:**
- Competitive salary + annual performance-based bonus eligibility
- Medical, dental, and vision insurance
- 401(k) with company match
- Paid time off and company holidays
**For Mexico-based roles - What you’ll get:**
- Competitive salary + annual performance bonus eligibility
- Christmas Bonus (Aguinaldo): 30 days
- Major medical expenses and life insurance
- Paid time off and holidays (per local policy)
**For all roles:**
- Professional development and growth opportunities
- Opportunity to grow with a mission-driven team shaping the future of clean energy
- Equal Opportunity: is committed to equal employment opportunity and to maintaining a work environment free of harassment, discrimination, or retaliation.
- Benefits vary by role and location and are subject to change.
**Agency Notice:** does not accept unsolicited resumes from staffing agencies, search firms, or third-party recruiters. Resumes submitted without a fully executed Master Services Agreement (MSA) and a written request from an authorized member of our Talent Acquisition team will be considered the property of . No placement fees or compensation will be paid for unsolicited candidate submissions.
