Open to new opportunities · Chengdu, China (UTC+8)

Chao Ma

Senior QA Engineer & Mobile Full-Stack Developer

17+ years spanning quality engineering and hands-on product development, now AI-empowered with LLM agents across the testing lifecycle. Today I ship consumer mobile apps end-to-end — native Android (Kotlin/Compose) and iOS (Swift/SwiftUI), with on-device AI and offline-first sync — backed by 12+ years at Citrix building automation frameworks from scratch, CI/CD quality gates, and quality-built clients across Web, Mobile, Desktop and Cloud.

Get in touch → GitHub Download CV
📍 Chengdu, China 🕐 UTC+8 · flexible with US / EU / APAC 🌐 English (professional) · Mandarin (native) · German (basic)
Quality engineering and Android automation abstract illustration
17+ yrsTesting & Development
0Major production incidents
0%
Faster release cycles
0%+
Less regression effort
0%+
Core-scenario automation
0
Engineers led across teams
About Me

A developer who thinks like a QA,
and a QA who ships code

I'm a hybrid quality engineer and software developer with 17+ years of experience. I spent over 12 years at Citrix, a global software company, where I led QA for the Citrix Workspace App — a cloud-desktop client serving millions of enterprise users across Windows, macOS, Linux, Android, iOS and Web.

Most recently I lead native mobile development for a consumer IoT companion app — building the Android (Kotlin/Compose) and iOS (Swift/SwiftUI) clients from scratch, with on-device AI recognition and an offline-first sync engine — while leading QA on a nationwide biometric identity platform and serving as Senior QA Engineer on a security-critical cross-platform password manager.

I have built automation frameworks from scratch (Robot Framework + Appium/Selenium, Playwright, REST Assured), wired them into Jenkins and GitHub Actions as PR-level quality gates, and led QA teams through agile transformation and shift-left testing. I also shipped production Android features — audio/video/webcam/USB redirection, network monitoring and Smart Tools — using Kotlin/Java with testable architecture by design.

I'm an AI-empowered QA practitioner: I run LLM agents (Copilot, Claude Code, DeepSeek, Qwen, Cursor, Trae) across the whole testing lifecycle — generating test cases and boundary scenarios from requirements, templating repetitive test tasks, authoring and reviewing automation scripts, triaging failures through AI log analysis, and drafting reproducible bug reports — turning hours of manual work into minutes while keeping human judgment on the final call.

With 10+ years in multinational teams (India, US, UK), I communicate clearly in English, write technical documentation, and adapt quickly — whether you need a test strategy, a CI/CD pipeline, or an Android engineer with a quality mindset.

Quick Facts

🎯
Focus
Quality Engineering · Automation · Android
🏢
Main tenure
Citrix, 2013 – 2025
👥
Leadership
5+ yrs team mgmt · up to 30 engineers
🤖
AI in QA
Copilot · Claude Code · DeepSeek · Qwen · Cursor · Trae · LLM-assisted testing
🎓
Certified
ISTQB (2008) · SCJP Java (2012)
📱
Devices
iPhone/iPad, Galaxy/Pixel, Win 11, macOS
🗣️
Languages
English (professional) · Mandarin (native) · German (basic)
Tech Stack

Tools I use to ship with confidence

From white-box unit tests to 24-hour soak tests, from Android framework code to cloud CI pipelines.

🧪

QA & Test Automation

PlaywrightSeleniumAppium CypressRobot FrameworkREST Assured PostmanJUnitTestNG JMeterk6Espresso UI Automator
🤖

Mobile — Android & iOS

KotlinJavaSwift Jetpack ComposeSwiftUIAndroid SDK MVVM / MVICoroutines / FlowRetrofit / OkHttp RoomCameraXMedia3 / ExoPlayer WorkManagerVision / CoreImageKeychain ONNX RuntimeHardware RedirectionADB
💻

Languages & Web

PythonTypeScriptJavaScript C#Shell / BashPowerShell Vue.jsReactFlutterSpring BootHTML5 / CSS3
🚀

CI/CD & DevOps

JenkinsGitHub ActionsGitLab CI Quality GatesDockerBVT Pipelines LinuxmacOS
☁️

Cloud, Data & Debugging

AWSMicrosoft AzureGoogle Cloud XenServerSQLPostgreSQL MySQLMongoDBWireshark Charles / FiddlerChrome DevTools
📋

Testing & Management

Functional / RegressionExploratory / UAT E2E / IntegrationAPI Testing Performance / SoakCross-browser Accessibility (WCAG)Data Migration 2FA / FIDO2 / PasskeysSSO / OIDC Biometric / FingerprintOffline-first apps Active Directory / Entra ID Jira / XrayTestRail / Zephyr Figma Scrum / TDD / BDD
Career

Where I've made an impact

17+ years across govtech identity, security products, enterprise cloud, mobile and freelance SaaS engagements.

Senior QA Engineer — Lead QA

May 2026 – Present
Nationwide Biometric Identity Platform (client name withheld)
Government identity registration & verification · tablet + web · 30-person cross-functional team
  • Own the end-to-end test strategy for fingerprint capture, 1:1 verification, 1:N identification and nationwide deduplication workflows.
  • Design and execute cases for online/offline registration, low/high-confidence match handling, override and skip flows, and scanner health monitoring.
  • Validate server-side deduplication logic, quarantine-queue behavior and admin review workflows against detailed acceptance criteria.
  • Verify offline registration with AES-256 encrypted local storage, deferred deduplication and sync-and-resolve behavior.
  • Perform API testing with Postman and data-integrity checks with SQL; build and maintain Appium automation suites on Android SDK for tablet regression.
  • Translate Figma designs and Jira stories into traceable scenarios; chase edge cases such as scanner disconnection mid-capture, timeouts and partial-fingerprint rejection.
  • AI-empowered QA: Built LLM-driven test-case generation agents (Claude Code / DeepSeek / Qwen) that rapidly produce boundary-condition scenarios for fingerprint capture, reducing case-creation time by ~60%.
  • AI-empowered QA: Created parameterized test templates via AI prompt engineering for deduplication confidence-threshold scenarios (≥85%, 60–84%), enabling same-day validation of new threshold adjustments.
  • AI-empowered QA: Deployed AI-assisted bug triage — LLM-analyzed scanner health logs to pre-classify failure patterns, cutting root-cause identification from hours to minutes.

Senior QA Engineer

Mar 2026 – Present
AceBIT — Password Depot (Remote)
Security-critical cross-platform password manager · Enterprise Server, Windows, macOS, Android, iOS, Web clients & browser add-ons
  • Own test design and execution across six clients plus the Enterprise Server; maintain a structured Test Repository in Jira Xray.
  • Run beta and pre-release cycles (19.0.x – 20.0.x), including full regression passes and release-candidate validation.
  • Tested the fully rebuilt Android v20 client on phones, tablets and foldables — autofill, passkeys, cloud sync and enterprise features.
  • Validated 2FA (Email / TOTP / FIDO2), SSO with Active Directory, Entra ID and OpenID Connect, plus RBAC and permission models.
  • Tested REST API v2.0 endpoints for user, database and server administration.
  • Built test environments with Windows Server 2022 as Domain Controller, Entra ID tenants and OIDC providers.
  • Created a custom HTML test-checklist tool with bug logging, closed-bug tracking and automated HTML/Markdown report generation.
  • Reported multiple security-relevant issues — license bypass, session leakage, permission persistence and passkey handling — and drove UX/UI improvements.
  • AI-empowered QA: Integrated AI agents into the QA workflow — automated regression script generation, intelligent log analysis for authentication failures, and rapid environment-setup verification via LLM-guided scripts.
  • AI-empowered QA: Used Cursor / Trae to build and iterate the custom test-checklist tool; AI-assisted refactoring and report-generation logic cut tool maintenance time by ~40%.
  • AI-empowered QA: Employed LLM-assisted security analysis to proactively identify vulnerability patterns (license bypass, session leakage, permission persistence) before formal penetration testing.

Lead Mobile / Full-Stack Engineer

Jan 2026 – Present
IBTH — Smartwatch Companion App (Android & iOS)
Consumer IoT companion · scan-to-collect game layer on physical smartwatches · Kotlin/Compose + Swift/SwiftUI against a Java/Spring Boot REST backend
  • Built the Android client from scratch in Kotlin + Jetpack Compose with strict MVVM (Composable → ViewModel/StateFlow → Repository): Retrofit/OkHttp with JWT 401-refresh-and-retry, Room, Coil, Media3 ExoPlayer, WorkManager and CameraX.
  • Designed an on-device AI recognition pipeline (ONNX Runtime): a self-trained YOLOv8-nano model locates the 6×6 QR-matrix on watch dials, a CNN classifies 36 code cells and an OCR model reads dial codes — scanning works fully offline.
  • Ported the entire product to iOS with SwiftUI (iOS 16.4+) at 1:1 feature/UI parity, with zero third-party core dependencies; re-implemented the ML pipeline natively with Vision + CoreImage.
  • Engineered an offline-first sync engine — actor-based DAG scheduler for 11 interdependent entities, exponential backoff, network-recovery auto-resume and sharded JSON caches.
  • Built a 1 GB network-aware LRU media cache, carrier one-tap login (Mob FlyVerify), Keychain JWT storage, deep-link coupon gifting, and full English/Chinese localization (300+ strings).
  • AI-empowered testing from the left: Applied AI-assisted code review (Copilot + Claude Code) throughout development, embedding testability hooks and structured logging into every module — enabling downstream QA to rapidly trace issues through AI-analyzable log pipelines.
  • AI-empowered testing from the left: Built AI-powered test data generation scripts for the 11-entity DAG sync system; LLM-generated edge-case scenarios (network dropout mid-sync, cache corruption, concurrent watch pairing) compressed validation cycles significantly.
  • AI-empowered testing from the left: Used Trae / Cursor AI IDE features to generate unit-test scaffolding and API contract tests for the Spring Boot backend, establishing a shift-left baseline that caught issues before QA handoff.

Staff / Senior Systems Software Engineer

2017 – 2025
Citrix — Nanjing · Global teams
Citrix Workspace App for Android · Smart Tools (Optimizer, Smart Check) · Release management
  • Owned core Android architecture and feature modules — Audio, Video, Webcam and USB device redirection, network optimization and monitoring.
  • Led cross-functional, cross-country delivery (India / US / UK), improving cross-team collaboration efficiency by 50%.
  • Built and iterated CI/CD pipelines with automated BVT on PR, shortening delivery cycles by 60% and raising pre-merge defect detection by 60%.
  • Managed the full release process: plans, risk contingencies, Epic tracking and bug burn-down for high-quality on-time launches.
  • Designed and developed Scout UI and Citrix Smart Tools, cutting support log requests by 90%.
  • AI-empowered (Copilot): Pioneered GitHub Copilot adoption in the QA workflow — AI-generated test-case drafts from requirements, Copilot-assisted automation script authoring, and AI code review on PRs, cutting test-script development time significantly.
  • AI-empowered (Copilot): Used Copilot to analyze CI failure logs and flaky-test patterns, rapidly locating root causes in BVT pipelines and reducing pipeline triage time.

Senior Quality Development Engineer

2013 – 2017
Citrix — Nanjing
Citrix Lifecycle Management · Workspace Cloud · Multi-cloud (AWS / Azure / GCP / XenServer)
  • Built the front-end automation framework from scratch (Robot Framework + Selenium, Postman + curl, SQL + shell), improving regression efficiency by 40%.
  • Covered functional, API, performance and database-migration testing — validating data integrity with zero data loss across upgrades.
  • Led test planning, case design/review, defect lifecycle management and release quality reports for go/no-go decisions.
  • Drove Scrum/agile practices and standardized test-process templates reused across product lines.

Software Development Engineer

2012 – 2013
Symbio Group — Chengdu R&D Center
Android IPTV / network-TV client (Tvoli)
  • Developed Android client features: live TV, EPG, pause, catch-up and DRM for 80+ standard & encrypted channels.
  • Optimized UI layouts and rendering; kept core playback response latency under 100 ms, collaborating closely with QA on testability.

Software Engineer / SDET · Scrum Master

2008 – 2012
Cybercom
Android apps · Web front-end & back-end APIs · Embedded multimedia
  • Served as Scrum Master promoting TDD; built Android features plus web/server interfaces for mobile-network products.
  • Delivered projects including a geofenced ad/rewards app (Swarm), restaurant e-menu (Emenu), dual-mode GSM/VoIP phone (Phreedom) and an OpenMax/GStreamer media player — including Perl automation scripts that halved repetitive manual testing.

Freelance & Contract QA

Recent
Remote · International clients
  • Fintech SaaS (Paybacker UAT) — 94 cases / 16 sections, Stripe & Open Banking flows; filed 15 bugs (2 Critical, 8 High), including a free-tier entitlement revenue-risk defect.
  • Youhui (geofenced ad platform) — GPS/geofence reliability, boundary oscillation, background location and anti-spoofing security testing.
Selected Work

Projects that defined my career

Nationwide identity verification, consumer IoT, security-critical products and enterprise cloud-desktop clients.

GovTech · Biometric QA

Biometric Identity Registration & Verification Platform

2026 – Present · Lead QA Engineer

Nationwide fingerprint-based identity platform for citizen registration, verification and duplicate detection across tablet and web, delivered with a 30-person cross-functional team.

  • Full 10-finger capture: live quality indicators, retake, skip and documented override flows
  • 1:1 verification outcomes (pass / reduced-confidence / inconclusive / fail) with per-finger threshold scoring; 1:N multi-candidate identification
  • Nationwide deduplication: ≥85% high-confidence blocking, 60–84% low-confidence flagging, asynchronous post-sync quarantine
  • Offline registration with AES-256 local storage, deferred deduplication and sync-and-resolve; scanner auto-reconnect within 30 seconds
  • Admin quarantine dashboard: dual face/fingerprint lists, filters, concurrent review locking and audit logging
  • Appium/Android regression suites, Postman API tests and SQL data-integrity checks
Results: end-to-end quality ownership of registration & verification across tablet and web, with high-risk capture and deduplication scenarios covered by automation
Security · Cross-Platform QA

Password Depot — Enterprise Password Manager

2026 – Present · Senior QA Engineer @ AceBIT

Security-critical password management product: Enterprise Server plus Windows, macOS, Android, iOS and Web clients with browser add-ons.

  • 1,000+ test cases across six platforms; structured Test Repository maintained in Jira Xray
  • Beta & pre-release cycles (19.0.x – 20.0.x): full regression passes and RC validation
  • Rebuilt Android v20 on phones, tablets and foldables — autofill, passkeys, cloud sync, enterprise features
  • 2FA (Email/TOTP/FIDO2), SSO via Active Directory, Entra ID & OIDC, RBAC and REST API v2.0
  • Built AD/Entra ID/OIDC test environments; custom HTML checklist tool with automated reports
Results: caught multiple security-relevant defects pre-release — license bypass, session leakage, permission persistence & passkey handling — verified across multiple release candidates
Consumer IoT · Android & iOS

IBTH — Smartwatch Companion App

2026 · Lead Mobile Engineer

Scan-to-collect game layer on physical smartwatches, shipped natively on both platforms against one Java/Spring Boot REST backend.

  • Android built from scratch: Kotlin + Jetpack Compose, strict MVVM, Retrofit/Room/CameraX/Media3/WorkManager
  • On-device AI (ONNX Runtime): YOLOv8-nano detection + CNN cell classifier + OCR, fully offline
  • iOS port in SwiftUI at 1:1 parity, zero third-party core deps, native Vision + CoreImage ML
  • Offline-first DAG sync engine, 1 GB LRU media cache, carrier one-tap login, EN/ZH localization
Results: full Android & iOS feature parity · offline scanning · 73-file native iOS codebase · zero third-party core dependencies
Cloud Desktop · Android

Citrix Workspace App for Android

2020 – 2025 · Staff Engineer

Core client giving millions of enterprise users access to virtual desktops/apps — hardware redirection, network monitoring and multi-session management.

  • Three-layer automation: JUnit unit tests, integration tests, Appium/Robot UI suites
  • Jenkins PR quality gates with BVT; automated startup, FPS and memory benchmarks
  • Shipped Audio/Video/Webcam/USB redirection features from design to release
  • AI-assisted UI case generation to expand boundary coverage
Results: +60% PR defect detection · 80%+ core automation coverage · zero major production incidents · −60% release cycle
Diagnostic Tool · CVAD

Citrix Scout UI

2017 – 2020 · Senior Engineer

Graphical diagnostics tool for Citrix Virtual Apps & Desktops — server health monitoring and one-click multi-dimensional log collection (C#, PowerShell, Python).

  • Intuitive UI halving log collection & analysis steps
  • Real-time monitoring dashboard with anomaly alerts
  • Automated log collection via Robot Framework + PowerShell
  • Front-end CI/CD for automated build & deployment
Results: issue localization +60% faster · support log requests down 90%
Multi-cloud Platform

Citrix Lifecycle Management

2013 – 2017 · Senior QD Engineer

Application-lifecycle automation platform across AWS, Azure, Google Cloud and XenServer, with complex management UIs and frequent releases.

  • Built the UI automation framework from zero (Robot Framework + Selenium)
  • REST API suites for cloud-host lifecycle: create, start, stop, snapshot, migrate
  • SQL-validated data migration: consistency, integrity, zero loss
  • Quality metrics & release reports for decision-making
Results: +40% regression efficiency · SLA consistently met · zero major UI failures
🔓 Open Source & Public Work
github.com/ShevaLabs/playwright-test-framework

Playwright Test Framework

Enterprise-ready Python framework: Page Object Model, UI + API testing, parallel runs, cross-browser, Allure/HTML reports and ready CI configs (Jenkins, GitLab, GitHub Actions).

Python
github.com/ShevaLabs/playwright-test-demo

Playwright Demo Framework

TypeScript e-commerce demo suite: data-driven tests for six user types, parallel cross-browser matrix, HTML/JSON reports, failure screenshots & video, pipeline configs.

TypeScript
github.com/ShevaLabs/bug-hunter-kit

Bug Hunter Kit

Production-ready QA templates: structured bug reports, test plans, regression suites and checklists for mobile, web, SaaS (multi-tenancy, RBAC, billing) and API testing.

Python · Markdown

🌐 Domain Expertise

  • SaaS & multi-tenant platforms
  • Biometric identity verification
  • Cloud desktops (VDI / DaaS)
  • Payments & subscriptions
  • RBAC & access control
  • Android / iOS mobile
  • Linux / macOS / Windows
  • Cross-browser & responsive web
  • Accessibility (WCAG)
  • Database migration
  • Hardware-integrated systems
  • Security & authentication (2FA / SSO)
  • GPS / geofencing security
  • AI-assisted testing

🎓 Certifications & Education

ISTQB Certified Tester — Foundation Level 2008
SCJP — Sun Certified Java Programmer 2012
B.S. Information & Computing Science Panzhihua University · 2004 – 2008
Languages Mandarin Chinese — Native · English — Professional working proficiency · German — Basic
Availability Open to new opportunities · part-time or full-time · long-term preferred
Let's Collaborate

Need quality you can ship with confidence?

I'm available for native mobile development (Android & iOS), test strategy, automation architecture, CI/CD quality gates, API testing and cross-browser validation.

✉️ sheva8.ma@gmail.com GitHub: ShevaLabs
📱 +86 189 8086 9207 💬 WeChat: sheva_ma 📍 Chengdu, China · UTC+8