Senior QA & Release Engineer

Vedi l’offerta su Go Lavoro: golavoro.it/annuncio-lavoro/7zjxp2

About MedicilioAt Medicilio, we're building the bridge from remote patient monitoring to remote patient intelligence — software that doesn't just track healthcare operations, but actively improves clinical decisions and patient outcomes at scale.

We are a remote-first company with teams across multiple continents, building products for Italy today and expanding across Europe tomorrow.

You'll work closely with product, operations, clinical stakeholders, and external technical partners to solve complex real-world problems in a high-trust environment where ownership matters more than process.

We care about

- shipping meaningful products that work in production,
- building systems that remain maintainable over time,
- learning fast and adapting continuously,
- and enjoying the process of building together.

Remote-first within the EU. Optional offices in Milan and Sicily. Why this jobTests exist. Releases ship. RPM meets its regulatory obligations today. What's missing is the system connecting it all — how the layers combine into a release gate, evidence that's generated rather than assembled by hand, and where automation ends and judgment begins.

Two things make this role unusual:

- You run two quality regimes at once — regulated medical device software and a fast-moving operations platform, sharing infrastructure but not process.
- You have an explicit mandate to push agentic AI into regulated verification, where few working answers exist yet.

You own the toolchain and the standards. You also inherit decisions you didn't make. About the roleYou own the chain from ticket-done to live-verified-documented: QA → Regression → Release Management — one owner, with test coverage and reporting as the instrumentation running across all three stages.

Two domains, two regimes. RPM is regulated medical device software (MDR, ISO 13485, IEC 62304) with the traceability a notified body expects. Centro Servizi is business-critical but not a medical device, and should move faster. Same standards, same tooling, deliberately different levels of process, evidence and cadence — and the judgment to hold that line under schedule pressure.

Where we are today. Checksum gives us a first layer of automated end-to-end coverage, alongside unit/integration tests in the codebase, software system tests before release, and targeted exploratory testing. What's missing is the system around it: what each layer covers, how they combine into a release gate, and how to generate regulatory evidence along the way as efficiently as possible.

This is not a manual test department to run, but a quality system to engineer, including how far agentic workflows can compress the cycle without weakening the evidence behind it. Reports to the VP of Engineering; works closely with the GRC Lead, Engineering Leads, and our QA Specialist.

What you'll doOwn the flow end to end

- Define stages and ownership across QA, regression, release.
- Cut release candidates, scope regression,



drive go/no-go.
- Own the testing stage review (a formal, recorded verdict).
- Bind the release to its evidence.
- Own the hotfix path and keep it a compliant path.

Build the test automation platform
- Extend Checksum into a real platform; decide what belongs there vs. in code-level tests vs. manual tests.
- Make in-code tests count as evidence: named, traceable, with retained execution records.
- Cover backend (Python), web (TypeScript/React), and mobile.
- Own pipelines, environments, test data, and flake management.

Run verification and validation properly
- Continuous verification in CI on every change.
- Software system testing before release, covering all requirements.
- Create and maintain the system testing plan, keeping it current as requirements evolve.
- Validation against real clinical needs under IEC 62366.
- Rigour proportional to IEC 62304 safety classification, rationale written down.

Make compliance evidence a by-product
- Own the traceability chain: requirement → risk control → test case → execution record → release.
- Own the known-anomalies list.
- Generate release evidence packs from the pipeline.
- Create and maintain the compliance documentation with automated workflows: Procedures and records that hold up under audit.
- Own SOUP governance and tool qualification for anything producing verification evidence, AI included.

Apply AI where it earns its place
- Agentic workflows for test generation, failure classification, defect drafting, regression scoping.
- Design the guardrails that make this defensible under MDR.
- Partner with the AI Enablement Engineer.
- Measure it: if it doesn't reduce cycle time or escape rate, it doesn't stay.

Engineer resilience & coordinate
- Self-healing recovery, environment reset, real-defect-vs-noise classification.
- Track cycle time, escape rate, flake rate, coverage against risk.
- Run QA together with our QA Specialist (technical leadership, not line management).
- Hold independent verification.
- Coordinate rollouts with the applications team.
- Feed field incidents back into regression, escalating real safety impact into change control.

Tech stackPython (Django/FastAPI, pytest) · TypeScript (React, Playwright) · PostgreSQL · GCP · CI/CD & ephemeral environments · Checksum · mobile test automation & device farms · AI-assisted workflows (Claude, MCP, sandboxed agents) What we're looking forMust-haves
- 3+ years in QA engineering, test automation, or engineering with a strong quality focus — you write code, this isn't manual testing.




- Strong Python and/or TypeScript, with real test-automation ownership at more than one level of the pyramid.
- CI/CD pipeline ownership: execution, environments, test data, reliability.
- Solid SQL; comfort verifying data integrity below the UI.
- Test strategy judgment — what to automate, what stays exploratory, what shouldn't be tested at all.
- Experience in a regulated/safety-relevant environment, or demonstrated fluency with formal V&V; and traceability.
- Coordination: running release cycles and holding the thread without formal authority.
- Hands-on with LLM and agentic tooling, with opinions from real use.
- Comfort partnering with GRC and translating regulation into what engineers will actually follow.
- Comfort inside a quality system: controlled procedures, training before regulated activities, signed records.
- Security/data protection awareness — no production patient data in test environments, ever.
- Clear English communication across technical and non-technical audiences.

Nice-to-havesMDR, IEC 62304, ISO 13485, ISO 14971, IEC 62366 · notified body audit support · SOUP/dependency governance · tool qualification (CSV) · mobile test automation · synthetic test data under GDPR · performance/security testing · HL7/FHIR · internal platform tooling · Italian. Skills that matter most in this role
- Risk-based judgment: Depth matched to actual patient risk, not applied uniformly
- Knowing when a bug stops being a bug: Real safety impact goes through change control, not the fix route
- Running two quality regimes side by side without collapsing them into one compromise that serves neither
- Evidence thinking: Proof of quality falls out of the work, not reconstructed afterwards
- Judgment about where AI creates leverage vs. unverifiable output
- Influence without authority
- Pragmatism: a compliant release this week beats a perfect process next year

Compensation€55,000–€70,000 depending on experience, plus equity discussed openly at offer stage. LocationRemote-first within the EU, office in Milan available anytime. Two days on site per quarter (preferably 2 days/week if in or around Milan.); travel covered.

Our valuesTrustWe communicate directly, keep our word, and operate with high autonomy. Trust increases speed by reducing unnecessary process.

CareWe care about the people we work with and the problems we solve. We give honest feedback, support each other, and create space to learn from mistakes.

CuriosityWe stay open, ask questions, and continuously learn from systems, users, and each other.

ExpansionWe take on ambitious problems and grow through them. We value progress over perfection.

JoyWe build serious systems without losing enjoyment in the process. Strong morale improves both outcomes and quality of work.

ApplyMake sure to use the job reference 86cbe358f when applying:

- https://forms.clickup.com/36224228/f/12hf74-57695/R2UU4708HGSPWQTB3Q

Vedi l’offerta su Go Lavoro: golavoro.it/annuncio-lavoro/7zjxp2