Senior Software Developer (Full Stack) (JavaScript, Java, Python, API)

Source Code; Toronto; On-site; CAD 80,000 - 110,000; Full time

Job summary

A technology development organization in Toronto is looking for a candidate to develop and extend open-source credential exchange protocols and secure messaging workflows. This role demands in-depth development experience with JWT/JWS, PKI (X.509), and OAUTH2 while ensuring strong security practices. Ideal candidates will collaborate with architects and security specialists, implement secure APIs, and document key workflows. This position offers a vital role in shaping next-generation digital credential environments.

Qualifications

• In-depth development experience with JWT/JWS, PKI (X.509), OAUTH2, and SHA/SHA2.
• Experience integrating backend systems using REST APIs and secure messaging.

Responsibilities

• Develop and extend open source Open Wallet Foundation ACA-PY.
• Implement credential lifecycle features aligned with decentralized identity standards.
• Build secure APIs and asynchronous services to support verification flows.
• Apply strong security practices, implementing cryptographic operations.
• Ensure best practices for authentication, authorization, and secure data exchange.

Skills

JWT/JWS

PKI (X.509)

OAUTH2

SHA/SHA2

REST APIs

Secure messaging systems

Job description

Security Level: CRJMC

Key Responsibilities

• Develop and extend open source Open Wallet Foundation ACA-PY, credential exchange protocols, DID resolution services, and secure messaging workflows.
• Implement credential lifecycle features—including issuance, presentation, revocation, and IETF Status List support—aligned with W3C Verifiable Credentials and decentralized identity standards.
• Build secure APIs and asynchronous services to support verification flows, trust framework compliance, and interoperability across issuers, holders, verifiers, and external systems.
• Apply strong security practices, implementing cryptographic operations, secure key management, and hardware‑backed storage patterns.
• Ensure back‑end integrations follow best practices for authentication, authorization, encryption, and secure data exchange.
• Support front‑end user interfaces and admin dashboards that interact with credential services, ensuring usability, performance, and accessibility.
• Develop automated tests (unit, integration, API‑level), participate in code reviews, and uphold high engineering standards across the stack.
• Collaborate closely with architects, DevOps, security specialists, and cross‑ministry stakeholders to ensure end‑to‑end functional integrity.
• Document system designs, workflows, schema definitions, and operating procedures to support maintainability and knowledge sharing.
• Participate in Agile ceremonies, support milestone planning, and assist in troubleshooting distributed digital credential environments.

Must-Haves:

• In-depth development experience with JWT/JWS, PKI (X.509), OAUTH2, and SHA/SHA2.
• Integrate backend systems into broader enterprise and cross‑ministry ecosystems using REST APIs, event‑driven services, and secure messaging systems.