Solutions Architect

Qorsa Corp; Southwestern Ontario; On-site; CAD 130,000 - 190,000; Full time

Benefits offered by this job

Dental care

Extended health care

Vision care

On-site parking

Job summary

Qorsa Corp in Waterloo, Ontario is seeking a Senior Solutions Architect to lead deployments of CasQade in customer environments, from scoping to production cutover. You will align our platform with each customer’s infrastructure and write deployment runbooks.

This is a senior, customer-facing role with real influence on the product. You will be the technical lead for customers’ engineering teams and shape future capabilities through field learnings.

Qualifications

• 5+ years in solutions architecture, professional services or infrastructure engineering with direct customer delivery responsibility.
• Deep working knowledge of PKI: certificate lifecycle, CA hierarchies, enrollment protocols, revocation, and HSM-backed key management.
• Hands-on experience with PKCS#11 and integrating cryptographic hardware with enterprise applications.
• Experience deploying into regulated or restricted environments in defence, government, financial services or critical infrastructure.

Responsibilities

• Lead technical discovery with customers, mapping their PKI, HSM, identity and network architecture, and finding integration problems before deployment begins.
• Design deployment architectures, including CA hierarchy placement, certificate enrollment workflows and out-of-band bootstrap procedures, PKCS#11 proxy integration with customer applications and HSMs, and fleet management rollout.
• Run each engagement from scoping, statement of work input and scheduling through on-site or remote installation, integration testing, and handoff to the customer’s operations team.
• Adapt deployments for air-gapped networks, classified enclaves, and sites under Government of Canada and DND security requirements.
• Integrate our platform with customer systems, including existing certificate authorities and SSO/OIDC infrastructure where crypto-agility components are in scope.
• Write deployment runbooks, reference architectures and integration guides that the next engagement can reuse.
• Report back to product and engineering on which integrations were hard, which features customers needed, and which of our assumptions about customer environments were wrong.
• Serve as the senior technical escalation point during and after deployment.

Skills

PKI expertise

HSM integration

Go/Rust/C

Security clearance

Linux deployment

Client-facing

Documentation

Tools

PKCS#11

Job description

About Qorsa

Qorsa is a Canadian post-quantum cryptography and cybersecurity company building CasQade - a crypto-agile security platform protecting sovereign government, defence, financial, and critical-infrastructure networks against current and emerging cryptographic threats. We are headquartered in Waterloo, Ontario, with a European subsidiary in The Hague, Netherlands. Our work spans post-quantum cryptography, explainable AI, AI-driven threat intelligence, cryptographic agility, hardware security, and distributed systems, with active engagements across Canadian defence, NATO, and allied partner organizations.

The Role

We are hiring a Solutions Architect to lead deployments of CasQade in customer environments, from first scoping through production cutover. You will know our platform well enough to fit it into each customer’s existing infrastructure, and you will write the deployment playbook that later engagements follow.

This is a senior, customer-facing role with real influence on the product. You will be the technical lead our customers’ engineering teams work with day to day, and what you learn in the field will shape what we build next.

Our customers include government, defence, financial and critical-infrastructure organizations, many of them running restricted, air-gapped or classified networks. No two environments are alike, and much of the value you bring will be judgement in the places where a standard deployment plan stops being enough.

Responsibilities

• Lead technical discovery with customers, mapping their PKI, HSM, identity and network architecture, and finding integration problems before deployment begins.
• Design deployment architectures, including CA hierarchy placement, certificate enrollment workflows and out-of-band bootstrap procedures, PKCS#11 proxy integration with customer applications and HSMs, and fleet management rollout.
• Run each engagement from scoping, statement of work input and scheduling through on-site or remote installation, integration testing, and handoff to the customer’s operations team.
• Adapt deployments for air-gapped networks, classified enclaves, and sites under Government of Canada and DND security requirements.
• Integrate our platform with customer systems, including existing certificate authorities and SSO/OIDC infrastructure where crypto-agility components are in scope.
• Write deployment runbooks, reference architectures and integration guides that the next engagement can reuse.
• Report back to product and engineering on which integrations were hard, which features customers needed, and which of our assumptions about customer environments were wrong.
• Serve as the senior technical escalation point during and after deployment.

What We’re Looking For

• 5+ years in solutions architecture, professional services or infrastructure engineering roles with direct customer delivery responsibility.
• Deep working knowledge of PKI: certificate lifecycle, CA hierarchies, enrollment protocols, revocation, and HSM-backed key management.
• Hands-on experience with PKCS#11 and integrating cryptographic hardware or tokens with enterprise applications.
• Comfort deploying and debugging software on Linux servers, including reading logs, packet captures and code (Go, Rust or C a plus).
• Experience deploying into regulated or restricted environments in defence, government, financial services or critical infrastructure.
• Strong technical writing for runbooks, architecture documents and customer reports.
• Excellent communication skills and genuine comfort working across disciplines, translating between customer teams and our engineers.
• Eligibility for Government of Canada security clearance (Secret level).

Strong Assets

• An existing Reliability or Secret clearance.
• Familiarity with post-quantum cryptography migration (ML-KEM, ML-DSA) and crypto-agility.
• Understanding of how FIPS 140-3 or Common Criteria requirements affect deployment configuration.
• Experience as a first or early professional-services hire who built the delivery process from scratch.

Compensation

We compensate exceptionally well - a strong base salary plus meaningful stock options in a rapidly growing company.

Benefits

• Dental care
• Extended health care
• Vision care
• On-site parking

Work Location:

In person, Waterloo, Ontario, with travel to customer sites as needed.