Cryptography Engineer: Post-Quantum TLS & PKI Innovator

Qorsa Corp; Southwestern Ontario; On-site; CAD 120,000 - 180,000; Full time

Benefits offered by this job

Dental care

Extended health care

Vision care

On-site parking

Job summary

Qorsa Corp in Waterloo, Ontario, seeks a Cryptography Engineer to advance the crypto core of CasQade—our crypto‑agile TLS and PKI platform—and related hardware programs. You will decide algorithms, implement them, and enable customers to migrate fleets without downtime, partnering with Go-based systems and hardware teams.

The role emphasizes production-grade cryptography, security standards, and collaboration across software, hardware, and security engineering.

Qualifications

• Experience implementing cryptography in production software.
• Strong understanding of TLS 1.3, X.509 certificate validation and public-key cryptography.
• Working knowledge of current issues in post-quantum cryptography.
• Comfort working in Go, Rust, C or similar languages.
• Eligibility for Government of Canada security clearance (Secret level).

Responsibilities

• Implement post-quantum and hybrid algorithms (ML-KEM, ML-DSA) in our TLS stack and certificate authority.
• Design how hosts negotiate, switch and retire algorithms across a fleet, and how those changes are signed and distributed.
• Maintain the crypto provider interface that lets the platform use software implementations or hardware-backed keys in HSMs and PKCS#11 tokens.
• Define certificate profiles and key hierarchies for post-quantum and hybrid agile PKI.
• Review cryptographic code across the product for correctness, constant-time behaviour and misuse of primitives.
• Write test vectors, fuzz targets and interoperability tests against other TLS and PKI implementations.
• Follow IETF and NIST standards work and decide when a draft is stable enough to implement.
• Support FIPS 140-3 and Common Criteria preparation where our products need validation.

Skills

Cryptography in prod

TLS 1.3 & X.509

Post-quantum crypto

Go / Rust / C

Security clearance eligibility

Tools

HSMs

PKCS#11

Job description

Qorsa Corp in Waterloo, Ontario, seeks a Cryptography Engineer to advance the crypto core of CasQade—our crypto‑agile TLS and PKI platform—and related hardware programs. You will decide algorithms, implement them, and enable customers to migrate fleets without downtime, partnering with Go-based systems and hardware teams.

The role emphasizes production-grade cryptography, security standards, and collaboration across software, hardware, and security engineering.