Posted last month
Solutions Architect
@ Qorsa
Waterloo, Ontario
Responsibilities:
- Lead technical discovery with customers, mapping their PKI, HSM, identity and network architecture, and finding integration problems before deployment begins
- Design deployment architectures that fit our platform into each customer’s existing security, identity and key management infrastructure
- Run each engagement from scoping, statement of work input and scheduling through on-site or remote installation, integration testing, and handoff to the…
- Adapt deployments for air-gapped networks, classified enclaves, and sites under Government of Canada and DND security requirements
- Integrate our platform with customer systems, including existing certificate authorities, HSMs and identity providers
- Write deployment runbooks, reference architectures and integration guides that the next engagement can reuse
Requirements summary:
- Adapt deployments for air-gapped networks, classified enclaves, and sites under Government of Canada and DND security requirements
- Deep working knowledge of PKI: certificate lifecycle, CA hierarchies, enrollment protocols, revocation, and HSM-backed key management
- Hands-on experience with PKCS#11 and integrating cryptographic hardware or tokens with enterprise applications
- Experience deploying into regulated or restricted environments in defence, government, financial services or critical infrastructure
- Understanding of how FIPS 140-3 or Common Criteria requirements affect deployment configuration
- Experience as a first or early professional-services hire who built the delivery process from scratch
Source and dates
Source type not verified · apify-linkedin
- Employer posting date
- 2026-10-11
- First seen by our source
- 2026-11-11
- Source record updated
- 2026-11-11
These dates describe the source record, not a live verification that the employer is still hiring. Check the original posting.
Qorsa
| Field | Value |
|---|---|
| Open jobs on Jobsy | 4 |
About Qorsa
Qorsa is a Canadian post-quantum cryptography and cybersecurity company building CasQade — a crypto-agile security platform protecting sovereign government, defence, financial, and critical-infrastructure networks against current and emerging cryptographic threats. We are headquartered in Waterloo, Ontario, with a European subsidiary in The Hague, Netherlands. Our work spans post-quantum cryptography, explainable AI, AI-driven threat intelligence, cryptographic agility, hardware security, and distributed systems, with active engagements across Canadian defence, NATO, and allied partner organizations.
The Role
We are hiring a Solutions Architect to lead deployments of CasQade in customer environments, from first scoping through production cutover. You will know our platform well enough to fit it into each customer’s existing infrastructure, and you will write the deployment playbook that later engagements follow.
This is a senior, customer-facing role with real influence on the product. You will be the technical lead our customers’ engineering teams work with day to day, and what you learn in the field will shape what we build next.
Our customers include government, defence, financial and critical-infrastructure organizations, many of them running restricted, air-gapped or classified networks. No two environments are alike, and much of the value you bring will be judgement in the places where a standard deployment plan stops being enough.
Responsibilities
- Lead technical discovery with customers, mapping their PKI, HSM, identity and network architecture, and finding integration problems before deployment begins
- Design deployment architectures that fit our platform into each customer’s existing security, identity and key management infrastructure
- Run each engagement from scoping, statement of work input and scheduling through on-site or remote installation, integration testing, and handoff to the customer’s operations team
- Adapt deployments for air-gapped networks, classified enclaves, and sites under Government of Canada and DND security requirements
- Integrate our platform with customer systems, including existing certificate authorities, HSMs and identity providers
- Write deployment runbooks, reference architectures and integration guides that the next engagement can reuse
- Report back to product and engineering on which integrations were hard, which features customers needed, and which of our assumptions about customer environments were wrong
- Serve as the senior technical escalation point during and after deployment
What We’re Looking For
- 5+ years in solutions architecture, professional services or infrastructure engineering roles with direct customer delivery responsibility
- Deep working knowledge of PKI: certificate lifecycle, CA hierarchies, enrollment protocols, revocation, and HSM-backed key management
- Hands-on experience with PKCS#11 and integrating cryptographic hardware or tokens with enterprise applications
- Comfort deploying and debugging software on Linux servers, including reading logs, packet captures and code
- Experience deploying into regulated or restricted environments in defence, government, financial services or critical infrastructure
- Strong technical writing for runbooks, architecture documents and customer reports
- Excellent communication skills and genuine comfort working across disciplines, translating between customer teams and our engineers
- Eligibility for Government of Canada security clearance (Secret level)
Strong Assets
- An existing Reliability or Secret clearance
- Familiarity with post-quantum cryptography migration (ML-KEM, ML-DSA) and crypto-agility
- Understanding of how FIPS 140-3 or Common Criteria requirements affect deployment configuration
- Experience as a first or early professional-services hire who built the delivery process from scratch
Compensation
We compensate exceptionally well — a strong base salary plus meaningful stock options in a rapidly growing company.
Benefits
- Dental care
- Extended health care
- Vision care
- On-site parking
Work Location: In person, Waterloo, Ontario, with travel to customer sites as needed.
Journal
Only you can see this. Kept on this device, and in your account when you sign in.