Staff Software Engineer

Role overview Build and operate foundational backend platform services that connect workflow execution, identity, event routing, secrets, and audit capabilities. This hands-on role focuses on Go or Rust, event-driven architecture, tenant isolation, and reliable production operations, with careful attention to security, correctness, and traceability.

Responsibilities - Develop and operate platform services such as API gateways, event routing, identity integrations, secrets management, and audit infrastructure. - Turn events, alerts, and partner webhooks into durable workflow execution using Kafka and a workflow orchestration system. - Design key management for cloud KMS providers, customer-managed keys, envelope encryption, and per-tenant cryptographic isolation. - Implement fine-grained permissions for tenants, workflows, operations, and service-to-service requests. - Maintain GitOps deployment pipelines for versioned workflows and automate tenant onboarding, identity provisioning, compliance configuration, and key setup. - Build secure third-party connectors with scoped access, request validation, managed credentials, and audit logging; improve observability, recovery, and incident readiness.

Requirements - Production backend development and operations experience with Go or Rust. - Experience designing event-driven systems with Kafka or similar tools, including retries, idempotency, replay, and at-least-once delivery. - Experience implementing authentication and authorization with OAuth 2.0, OIDC, token lifecycle management, or fine-grained access controls. - Experience with encryption or key management, including cloud KMS, envelope encryption, or key hierarchy designs. - Experience operating multi-tenant production systems with structured logs, metrics, distributed tracing, and incident response.

Nice to have - Experience with Temporal or another durable workflow orchestration platform, and identity services such as Keycloak, Auth0, Okta, or similar. - Familiarity with ClickHouse or another audit-focused data store; GitOps, CI/CD, Kubernetes, or infrastructure as code. - Integrations with MSP, PSA, RMM, security, or Microsoft 365 APIs; regulated environments; or multi-cloud services across AWS, Azure, or GCP.

Benefits and work setup - The source lists a base salary range of CAD $180,000–$250,000 per year. Individual pay depends on location, experience, skills, and other qualifications; some roles may include additional rewards or incentives.