Back to results

Solutions Architect

  • Waterloo, ON, Canada

Full-time

Applications open in a new tab.

Job details

Job type
Full-time
Apply by
Posting language
English
Posted

Original job description

About Qorsa

Qorsa is a Canadian post-quantum cryptography and cybersecurity company building CasQade - a crypto-agile security platform protecting sovereign government, defence, financial, and critical-infrastructure networks against current and emerging cryptographic threats. We are headquartered in Waterloo, Ontario, with a European subsidiary in The Hague, Netherlands. Our work spans post-quantum cryptography, explainable AI, AI-driven threat intelligence, cryptographic agility, hardware security, and distributed systems, with active engagements across Canadian defence, NATO, and allied partner organizations.

The Role

We are hiring a Solutions Architect to lead deployments of CasQade in customer environments, from first scoping through production cutover. You will know our platform well enough to fit it into each customer’s existing infrastructure, and you will write the deployment playbook that later engagements follow.

This is a senior, customer-facing role with real influence on the product. You will be the technical lead our customers’ engineering teams work with day to day, and what you learn in the field will shape what we build next.

Our customers include government, defence, financial and critical-infrastructure organizations, many of them running restricted, air-gapped or classified networks. No two environments are alike, and much of the value you bring will be judgement in the places where a standard deployment plan stops being enough.

Responsibilities

  • Lead technical discovery with customers, mapping their PKI, HSM, identity and network architecture, and finding integration problems before deployment begins
  • Design deployment architectures, including CA hierarchy placement, certificate enrollment workflows and out-of-band bootstrap procedures, PKCS#11 proxy integration with customer applications and HSMs, and fleet management rollout
  • Run each engagement from scoping, statement of work input and scheduling through on-site or remote installation, integration testing, and handoff to the customer’s operations team
  • Adapt deployments for air-gapped networks, classified enclaves, and sites under Government of Canada and DND security requirements
  • Integrate our platform with customer systems, including existing certificate authorities and SSO/OIDC infrastructure where crypto-agility components are in scope
  • Write deployment runbooks, reference architectures and integration guides that the next engagement can reuse
  • Report back to product and engineering on which integrations were hard, which features customers needed, and which of our assumptions about customer environments were wrong
  • Serve as the senior technical escalation point during and after deployment

What We’re Looking For

  • 5+ years in solutions architecture, professional services or infrastructure engineering roles with direct customer delivery responsibility
  • Deep working knowledge of PKI: certificate lifecycle, CA hierarchies, enrollment protocols, revocation, and HSM-backed key management
  • Hands-on experience with PKCS#11 and integrating cryptographic hardware or tokens with enterprise applications
  • Comfort deploying and debugging software on Linux servers, including reading logs, packet captures and code (Go, Rust or C a plus)
  • Experience deploying into regulated or restricted environments in defence, government, financial services or critical infrastructure
  • Strong technical writing for runbooks, architecture documents and customer reports
  • Excellent communication skills and genuine comfort working across disciplines, translating between customer teams and our engineers
  • Eligibility for Government of Canada security clearance (Secret level)

Strong Assets

  • An existing Reliability or Secret clearance
  • Familiarity with post-quantum cryptography migration (ML-KEM, ML-DSA) and crypto-agility
  • Understanding of how FIPS 140-3 or Common Criteria requirements affect deployment configuration
  • Experience as a first or early professional-services hire who built the delivery process from scratch

Compensation

We compensate exceptionally well - a strong base salary plus meaningful stock options in a rapidly growing company.

Benefits

  • Dental care
  • Extended health care
  • Vision care
  • On-site parking

Work Location: In person, Waterloo, Ontario, with travel to customer sites as needed.

More about this job

Responsibilities

Lead customer discovery and design, install, integrate, and hand off CasQade deployments across varied environments, including air-gapped and classified networks. Create reusable deployment documentation, serve as the senior technical escalation point, and relay customer integration needs and field learnings to product and engineering teams.

Requirements

Requires at least five years in solutions architecture, professional services, or infrastructure engineering with direct customer delivery, plus deep PKI knowledge and hands-on PKCS#11 and cryptographic hardware integration experience. Candidates should be comfortable deploying and debugging Linux software, have experience in regulated or restricted environments, communicate and write technical documentation effectively, and be eligible for a Government of Canada Secret clearance.

Skills

  • Solutions Architecture
  • PKI
  • PKCS#11
  • HSM Integration
  • Linux
  • CA Hierarchies
  • Certificate Enrollment
  • Cryptographic Key Management
  • Network Architecture
  • OIDC and SSO Integration
  • Deployment Planning
  • Technical Writing
  • Customer Delivery
  • Post-Quantum Cryptography
  • Crypto-Agility

Benefits

  • Dental Care
  • Extended Health Care
  • Vision Care
  • On-Site Parking
  • Stock Options

Visa sponsorship

Not detected in the job text

Categories

  • Technology
  • Software
  • Engineering
  • Security & Safety
  • Consulting

Keywords

  • CasQade
  • Post-Quantum Cryptography
  • Crypto-Agility
  • PKI
  • HSM
  • PKCS#11
  • Linux
  • Go
  • Rust
  • C
  • ML-KEM
  • ML-DSA
  • FIPS 140-3
  • Common Criteria
  • Certificate Authorities
  • Certificate Enrollment
  • Certificate Revocation
  • CA Hierarchies
  • OIDC
  • SSO
  • Air-Gapped Networks
  • Classified Enclaves
  • Government of Canada Security Clearance
  • DND Security Requirements
  • Deployment Runbooks
  • Reference Architectures
  • Integration Testing
  • Distributed Systems
  • Explainable AI
  • AI-Driven Threat Intelligence

Report this job