About Qorsa
Qorsa is a Canadian post-quantum cryptography and cybersecurity company building CasQade - a crypto-agile security platform protecting sovereign government, defence, financial, and critical-infrastructure networks against current and emerging cryptographic threats. We are headquartered in Waterloo, Ontario, with a European subsidiary in The Hague, Netherlands. Our work spans post-quantum cryptography, explainable AI, AI-driven threat intelligence, cryptographic agility, hardware security, and distributed systems, with active engagements across Canadian defence, NATO, and allied partner organizations.
The Role
We are hiring a Senior Software Engineer to build on SiQcure, our post-quantum platform for software supply chain integrity. SiQcure helps teams prove what is inside every software release, which cryptography it relies on, and whether it is ready for the quantum era, with results that anyone can verify.
Regulations such as the EU Cyber Resilience Act, with full requirements applying from 11 December 2027, expect companies that sell software in the EU to know exactly what is inside it. At the same time, quantum computers are expected to break much of the encryption software relies on today, likely as early as 2028–2029. Customers use SiQcure’s results to decide what they ship, what they fix first, and what they can prove to a regulator.
Knowing exactly what is inside a release, and being able to prove it later, is a data problem at scale. It takes reliable ingestion, careful consistency, strict tenant isolation and records that can be trusted, presented clearly to the security and platform engineers who depend on them. You will own features from the database to the browser: design, build, operate, and carry the pager. This is a senior role on a small team, where your work reaches customers within days.
Responsibilities
- Design and ship Go services in a monorepo: HTTP APIs, background workers, and the pipelines that move data between them
- Own data ingestion and processing as it scales, with clear freshness and correctness goals that other features depend on
- Evolve our multi-tenant Postgres layer as data volume and customer count grow
- Build customer-facing pages end to end in React and TypeScript, from the API contract to the data-dense tables and visualizations that present it
- Make a security signal legible at a glance in a table with thousands of rows, showing relationships between components without overwhelming the reader
- Own state management and data fetching against our generated TypeScript clients, and treat the API contract as a shared responsibility
- Share frontend ownership with the team, working with an established component system and typed API clients generated from our API spec
- Work with customers and our customer-facing teammates on the features customers ask for, and learn from how the product is used in practice
- Set the bar on operability: structured logging, tracing, alerting thresholds and incident retrospectives
- Mentor the engineers around you, and write clear, maintainable design docs
What We’re Looking For
- Experience building and operating backend services in production, including being on call for them. You can walk us through an outage you resolved and what changed afterward
- Strong Go, or deep experience in a comparable systems language (Rust, Java, Elixir/Erlang, C#) and a willingness to learn Go
- A production React and TypeScript interface you’ve shipped and maintained, with sound judgement on state, data fetching and component design
- Natural reasoning about failure modes: partitions, replays, idempotency, consistency windows, and what breaks first when load doubles
- Solid relational-database instincts: schema design, query performance, and migrations against live data
- A product mindset: you ask why before building, offer alternatives, and care what happens after a feature ships
- Excellent communication skills. You explain architecture clearly in conversation and in writing, and you can defend a trade-off with an open mind
Strong Assets
- Package-ecosystem internals (npm, Maven, Go modules, PyPI) or vulnerability-data experience
- Event-driven pipelines, queue-based workers, or feed-ingestion systems at scale
- Security, developer tools or compliance product experience. You know what a CVE or an audit log is
- Experience with AWS, Docker, Kubernetes, and observability stacks such as Datadog or Grafana
Compensation
We compensate well - a strong base salary plus potential for bonuses.
Benefits
- Dental care
- Extended health care
- Vision care
- On-site parking
Work Location: In person, Waterloo, Ontario.
