Full Stack Software Engineer

Waterloo, ON
On-site
Posted Oct 14, 2026
1 position

Opens LinkedIn

Employment type: Full-time
Experience level: Mid-level · 2+ years
Apply by: Apr 11, 2027
Posting language: English
Working hours: 40 hours per week
Seniority: Mid-Senior level
Application method: Direct apply is available

Job summary

Build and maintain the CasQade fleet dashboard, versioned APIs, and real-time browser views, including host enrollment, fleet status, and operator controls. Ingest and store host telemetry, integrate with certificate authority and policy services, support air-gapped deployments, and contribute tests, code reviews, and customer-requested features.

Job details

About Qorsa Qorsa is a Canadian post-quantum cryptography and cybersecurity company building CasQade — a crypto-agile security platform protecting sovereign government, defence, financial, and critical-infrastructure networks against current and emerging cryptographic threats. We are headquartered in Waterloo, Ontario, with a European subsidiary in The Hague, Netherlands. Our work spans post-quantum cryptography, explainable AI, AI-driven threat intelligence, cryptographic agility, hardware security, and distributed systems, with active engagements across Canadian defence, NATO, and allied partner organizations. The Role We are hiring a Full Stack Software Engineer to build the operator side of CasQade, our crypto-agile TLS and PKI platform. Customers use our dashboard to enroll hosts, watch certificate and algorithm status across their network in real time, and push policy updates to their fleet. You will work on the Go services and APIs behind the dashboard and the browser interface on top, alongside the engineers building our certificate authority and TLS proxy. Our customers run sensitive networks, often fully offline. The dashboard has to be fast, clear and dependable for security and operations teams who rely on it to make decisions about their whole estate. Responsibilities Build features in the fleet dashboard, including host registration and enrollment, fleet status views, and operator controls for algorithm updates Design and maintain versioned HTTP APIs used by the UI, our other services and customer automation Build live views of fleet activity over WebSockets Ingest host telemetry over mTLS, parse it into events, and store what operators need to search later Integrate the dashboard with our certificate authority and policy services, including enrollment and authorization webhooks Make sure the product runs on air-gapped networks with no external services or CDNs Write unit and integration tests, and review other engineers’ code Work with solutions architects on features customers ask for during deployments What We’re Looking For 3+ years building web applications, with production work on both the backend and the frontend Strong Go, or strong in another backend language and willing to work mainly in Go Solid JavaScript or TypeScript, HTML and CSS Experience designing REST APIs and working with SQL databases An understanding of TLS and certificate-based authentication from an application developer’s point of view Experience building real-time features in the browser with WebSockets or server-sent events Excellent communication skills and comfort working across disciplines Eligibility for Government of Canada security clearance (Secret level) Strong Assets Data visualization or mapping experience Experience building tools for security or network operations teams Familiarity with PKI and certificate lifecycle management Compensation We compensate exceptionally well — a strong base salary plus meaningful stock options in a rapidly growing company. Benefits Dental care Extended health care Vision care On-site parking Work Location: In person, Waterloo, Ontario.

What you’ll do

Requirements

Candidates need at least three years of production web application experience across backend and frontend development, strong Go or another backend language with willingness to work mainly in Go, and experience with JavaScript or TypeScript, REST APIs, and SQL. They should understand TLS and certificate-based authentication, have experience with browser-based real-time features, communicate effectively across disciplines, and be eligible for Government of Canada Secret-level security clearance.