Description We are seeking a Senior Test Engineer to drive quality engineering and test automation strategy for a modern cloud-based application environment supporting a federal customer. - This role is responsible for establishing and leading a comprehensive automated testing capability from the ground up, implementing end-to-end testing within an Azure-based architecture, and guiding a dispersed team of testers toward modern DevSecOps testing practices. - The ideal candidate combines hands-on test automation expertise, strategic leadership, and mentoring capability, ensuring high-quality software delivery across a full-stack environment built with Java Spring Boot services and Angular front-end applications. - The Senior Test Engineer will also oversee integration of manual testing, automated testing, and security validation within CI/CD pipelines while coordinating testing of software deployments and supporting customer-facing User Acceptance Testing (UAT) activities. Location: United States (Remote; DMV region preferred) Clearance Requirement: Must be US-based and currently hold or have previously held a Public Trust designation. Key Responsibilities Test Strategy & Leadership - Lead the design and implementation of a modern test automation strategy and framework across multiple applications and services. - Establish scalable automated testing frameworks from the ground up supporting UI, API, integration, regression, and end-to-end testing. - Provide technical leadership and mentorship to QA engineers and developers, helping elevate automation skills and testing best practices across the team. - Promote a quality engineering mindset within Agile and DevOps development teams. Automation & Technical Implementation - Develop and maintain automated tests for applications built with Java Spring Boot and Angular. - Implement UI automation using tools such as Cypress and backend/service testing using JUnit and other frameworks. - Design and implement end-to-end testing approaches that validate workflows across microservices and user interfaces. - Ensure automated tests run reliably within CI/CD pipelines and support rapid feedback during deployments. Cloud & DevOps Integration - Integrate testing frameworks and test execution into Azure DevOps pipelines and cloud-native deployment workflows. - Enable automated regression, smoke, and integration tests within the DevOps lifecycle. - Support test data management, environment strategy, and integration testing across distributed cloud services. Security & DevSecOps Testing - Implement automated application security testing within CI/CD pipelines. - Integrate security tools such as Prisma, Checkmarx, OWASP ZAP, and similar solutions to support vulnerability scanning and secure development practices. - Work with development and DevOps teams to ensure security findings are triaged, tracked, and remediated. User Acceptance Testing (UAT) - Support customer-facing UAT cycles, including test planning, execution coordination, and results reporting. - Partner with product owners and stakeholders to ensure acceptance criteria and validation processes align with mission needs. - Provide transparent reporting on testing progress, risks, and quality metrics. Required Qualifications - Current or previous Public Trust designation. - 5+ years of software testing and quality engineering experience, including test automation leadership. - 1+ Years of experience designing and implementing automated testing frameworks from the ground up. - 1+ years of experience testing applications built with Java Spring Boot and Angular. - 1+ years of experience with test automation tools such as Cypress, JUnit, or comparable frameworks. - 1+ years of experience integrating automated testing into CI/CD pipelines in a DevOps environment. - 1+ years of experience implementing end-to-end testing strategies in Azure cloud environments. - 1+years of experience supporting or leading User Acceptance Testing (UAT) with external stakeholders or customers. - Experience supporting federal government software development programs. - US Citizenship required due to federal contract requirements - Must be able to obtain and maintain a Public Trust clearance. Preferred Qualifications - Experience implementing DevSecOps testing practices. - Strong leadership, mentoring, and team development skills. - Familiarity with security testing tools such as Prisma Cloud, Checkmarx, OWASP ZAP, or similar. - Experience working within Agile/Scrum development environments. - Strong understanding of microservices architectures and API testing. What Success Looks Like - A robust automated testing framework supporting UI, API, and end-to-end testing across the platform. - Testing fully integrated into CI/CD pipelines, providing rapid feedback and improving deployment confidence. - Improved team automation capability through mentorship and technical leadership. - Efficient and well-coordinated UAT cycles with clear communication and quality outcomes. #DMX24 #Indeed #LI-CC1 #Clearance #yru22 Working at ICF ICF is a global advisory and technology services provider, but we’re not your typical consultants. We combine unmatched expertise with cutting-edge technology to help clients solve their most complex challenges, navigate change, and shape the future. We can only solve the world's toughest challenges by building a workplace that allows everyone to thrive. We are an equal opportunity employer. Together, our employees are empowered to share their expertise and collaborate with others to achieve personal and professional goals. For more information, please read our EEO policy. We will consider for employment qualified applicants with arrest and conviction records. Reasonable Accommodations are available, including, but not limited to, for disabled veterans, individuals with disabilities, and individuals with sincerely held religious beliefs, in all phases of the application and employment process. To request an accommodation, please email Candidateaccommodation@icf.com and we will be happy to assist. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations.  Read more about workplace discrimination rights or our benefit offerings which are included in the Transparency in (Benefits) Coverage Act. Candidate AI Usage Policy At ICF, we are committed to ensuring a fair interview process for all candidates based on their own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) tools to generate or assist with responses during interviews (whether in-person or virtual) is not permitted. This policy is in place to maintain the integrity and authenticity of the interview process.  However, we understand that some candidates may require accommodation that involves the use of AI. If such an accommodation is needed, candidates are instructed to contact us in advance at candidateaccommodation@icf.com. We are dedicated to providing the necessary support to ensure that all candidates have an equal opportunity to succeed.   Pay Range - There are multiple factors that are considered in determining final pay for a position, including, but not limited to, relevant work experience, skills, certifications and competencies that align to the specified role, geographic location, education and certifications as well as contract provisions regarding labor categories that are specific to the position. The pay range for this position based on full-time employment is: $81,499.00 - $138,549.00 Nationwide Remote Office (US99)

• Manage patch management systems to ensure all software and systems are up-to-date with the latest security patches. • Set up and configure Zero Trust Architecture to enhance network security and protect sensitive data. • Implement and maintain data backup solutions to ensure data integrity and availability in the event of a disaster. • Utilize forensic analysis tools to investigate security incidents, identify root causes, and gather evidence for further action. • Conduct regulatory compliance checks (e.g., FISMA, HIPAA) to ensure the organization meets all relevant security standards and regulations. • Plan and execute disaster recovery testing to validate the effectiveness of disaster recovery plans and ensure business continuity. • Collaborate with cross-functional teams to align cybersecurity strategies with business objectives and IT strategies. • Develop and maintain comprehensive documentation for cybersecurity processes, configurations, and procedures. • Stay current with emerging cybersecurity technologies, trends, and best practices. • Participate in the procurement and evaluation of cybersecurity tools and software. • Ensure compliance with industry regulations and internal policies in all cybersecurity efforts. • Conduct regular reviews and audits of cybersecurity processes to identify areas for improvement. • Contribute to the continuous improvement of cybersecurity strategies and methodologies. • Engage in knowledge-sharing activities and training sessions to enhance team skills and capabilities.

• Lead a team of cybersecurity engineers in implementing robust security frameworks and practices • Drive the adoption of NIST RMF and other industry standards to enhance the organization’s security posture • Innovate and implement advanced incident response planning and threat intelligence strategies • Ensure compliance with regulations and standards through rigorous auditing and oversight • Collaborate with cross-functional teams to align cybersecurity strategies with business objectives and IT strategies • Develop and maintain comprehensive documentation for cybersecurity processes, configurations, and procedures

• Configure and manage firewalls (e.g., Palo Alto) to protect network infrastructure and prevent unauthorized access • Manage encryption protocols (e.g., AES) to ensure data confidentiality and integrity across the organization • Deploy and maintain Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS) to detect and mitigate threats in real-time • Utilize penetration testing tools (e.g., Metasploit) to identify vulnerabilities and assess the security posture of systems and applications • Analyze logs using the ELK Stack (Elasticsearch, Logstash, Kibana) to detect anomalies, investigate incidents, and enhance security monitoring • Develop and implement risk assessment models to evaluate potential security risks and prioritize mitigation efforts • Collaborate with cross-functional teams to align cybersecurity strategies with business objectives and IT strategies • Develop and maintain comprehensive documentation for cybersecurity processes, configurations, and procedures • Stay current with emerging cybersecurity technologies, trends, and best practices • Participate in the procurement and evaluation of cybersecurity tools and software • Ensure compliance with industry regulations and internal policies in all cybersecurity efforts • Conduct regular reviews and audits of cybersecurity processes to identify areas for improvement • Contribute to the continuous improvement of cybersecurity strategies and methodologies • Engage in knowledge-sharing activities and training sessions to enhance team skills and capabilities