About the Role
We're building a secure, multi-tenant SaaS platform on Next.js (App Router) and Node.js, deployed natively on the Cloudflare Edge ecosystem (Workers, Pages, D1, R2, KV). We're looking for a QA Tester who is equally comfortable breaking the product by hand and codifying that judgment into automated tests that run in CI.
This is not a generic manual-testing or basic-Selenium role. We need someone who understands why edge-deployed, serverless applications fail differently than traditional server-based apps — and who can catch those failures both exploratively and automatically, before they reach production.
What You'll Own
1. CI/CD & Test Automation (GitHub Actions)
- Write and maintain GitHub Actions workflows (.github/workflows) that trigger automated test suites (Playwright, Vitest) on every Pull Request.
- Manage environment secrets securely and configure staging/preview environments per branch.
- Build quality gates that block bad builds from deploying to Cloudflare Pages/Workers.
2. Cloudflare Edge Testing & Emulation
- Write automated integration tests for our serverless environment using Wrangler and Miniflare.
- Test Next.js App Router routes, tRPC endpoints, and Cloudflare-native services — D1 (SQL), R2 (object storage), and KV — in local/edge-emulated conditions.
- Validate behavior differences between local dev, staging, and true edge runtime.
3. Manual & Exploratory Testing (Multi-Tenant SaaS)
- Manually validate complex user workflows and edge cases across a multi-tenant environment.
- Deeply test authentication flows (Clerk or Better Auth), including session edge cases, token expiry, and permission boundaries.
- Validate rate-limiting behavior (ArcJet) and confirm graceful degradation under throttling.
- Verify multi-tenant account isolation — data, permissions, and billing boundaries between tenants must never leak.
- Cross-browser and responsive UI testing across real-world device/browser combinations.
4. API & Contract Testing
- Manually test APIs using Postman or Insomnia — auth flows, error handling, schema validation.
- Build automated contract/e2e test coverage using Playwright, Cypress, or Bruno.
- Validate data flow integrity through our end-to-end type-safe (tRPC) system, from client call to database write.
Must-Have Skills
- Hands-on experience authoring and maintaining GitHub Actions workflows (not just used CI/CD — you've written the YAML yourself)
- Working knowledge of Wrangler and/or Miniflare for local edge simulation
- Automated testing experience in Playwright, Cypress, or Vitest
- API testing fluency: Postman/Insomnia (manual) + at least one automated contract-testing tool
- Strong manual/exploratory testing methodology — not just scripted test-case execution
- Comfort with Next.js, Node.js, and modern JS/TS tooling
- Understanding of SaaS multi-tenancy concepts (tenant isolation, RBAC, subscription boundaries)
Nice to Have
- Experience with tRPC (as a tester or developer)
- Familiarity with Clerk, Better Auth, or similar modern auth providers
- Exposure to ArcJet or other rate-limiting/bot-protection tooling
- Experience with D1, R2, or KV specifically
- ISTQB certification or equivalent formal QA training
What We're Not Looking For
- Pure manual testers with no automation/CI exposure
- Selenium + Jenkins only profiles with no exposure to modern JS-based test frameworks or GitHub-native CI/CD
- Candidates who list tools without project-level evidence of using them (we will ask for specifics)
Email directly - [Confidential Information]
