We're building a greenfield web platform delivering modern, cloud-based dental practice experiences aligned with Sensei Cloud. The application is modular in nature and will grow over time. As a QA Engineer, you will be a core contributor to quality across both the Rails API backend and the React frontend — ensuring that features are correct, compliant, and performant before they reach dental practice users. Your primary ownership area is test strategy, test automation, and quality gates: designing and maintaining E2E test suites, validating API contracts, catching regressions, and enforcing compliance standards in a HIPAA-regulated healthcare environment. You will collaborate directly with engineers to make TDD workflows effective and will own the automation layer that gives the team confidence to ship at pace.
You will work within a Human → AI → Human engineering workflow, using AI tools to accelerate test authorship and coverage analysis
Primary Responsibilities (QA / Test Automation)
- Design, build, and maintain an automated test suite covering E2E, integration, and API-contract layers across the Rails backend and React frontend
- Own and maintain Playwright E2E test suites covering critical user journeys (scheduling, provider workflows, huddle boards, patient lookups, authentication)
- Collaborate with engineers on RSpec integration and unit test coverage — reviewing test quality, identifying gaps, and contributing tests where needed
- Define and enforce quality gates in the CI/CD pipeline: test pass thresholds, coverage floors, Brakeman/bundler-audit clean runs, and ESLint/RuboCop compliance
- Develop and maintain test data strategies using synthetic data exclusively — patient names with -SYN suffix, IDs with SYNTHETIC_ prefix — ensuring no PHI enters any test artifact
- Validate data mapping correctness across dental practice management systems (DPMS): Orthotrac, PracticeWorks, SoftDent, WinOMS, and others
- Write and maintain VCR cassettes and WebMock stubs for external HTTP integrations, ensuring tests remain deterministic and do not call live services
- Review and triage Brakeman security findings, coordinating remediation with engineers before PRs are merged
- Perform exploratory testing against staging environments, filing clear, reproducible bug reports with steps, environment context, and expected vs. actual behavior
- Maintain and evolve the QA section of the AI Code Review Checklist as the team's practices mature
Shared (Full-Stack Quality)
- Participate in pull request reviews with a quality and compliance lens: PHI exposure, OWASP Top 10 risks, hardcoded secrets, overly broad rescue blocks, invalid dependencies
- Collaborate with frontend-focused engineers to ensure React components and TanStack Query state management are covered by meaningful tests
- Contribute to and validate API contract tests as the Rails API evolves
- Participate in AI-augmented development workflows, reviewing AI-generated tests for correctness, hallucinated mocks, and phantom assertions
- Proactively update test documentation, coverage reports, and QA runbooks when behavior or architecture changes