Platform Backend Engineer - Go/Rust & Distributed SystemsLocations: Toronto
Employment Type: Full-time
Job SummaryWe're hiring Platform Backend Engineers to build the services connecting workflow execution, identity, event routing, secrets management, and audit infrastructure within the Kaseya Intelligence Platform. This is hands-on backend engineering in Go or Rust for a platform used by other engineering teams and agentic AI workloads. Correctness, reliability, security, and operational clarity are core design requirements for everything you build.
Roles & Responsibilities- Build and operate platform services supporting API access, Kafka-based event routing, workflow execution, machine identity, and immutable audit records
- Design event-driven workflows that convert PSA webhooks, RMM alerts, and platform events into durable execution using Kafka and Temporal
- Implement a pluggable secrets-management and KMS abstraction supporting multiple cloud providers, bring-your-own-key models, envelope encryption, and customer-level cryptographic isolation
- Build capability-grant enforcement for individual customers, workflows, operations, and service-to-service requests
- Own GitOps-based deployment pipelines for versioned workflow definitions across isolated customer environments
- Develop onboarding automation for identity provisioning, compliance configuration, and customer-specific key-management setup
- Build secure connector services for third-party APIs, including scoped access, managed credentials, request validation, and pre-execution audit logging
- Improve platform observability, performance, failure recovery, operational readiness, and production incident response
Required Qualifications- Experience building and operating production backend services using Go or Rust
- Experience designing event-driven systems using Kafka or similar technologies, including retries, idempotency, replay, and at-least-once delivery
- Experience implementing authentication and authorization using OAuth 2.0, OIDC, token lifecycle management, or fine-grained access controls
- Experience implementing encryption or key-management solutions using cloud KMS platforms, envelope encryption, or key-hierarchy designs
- Experience operating multi-tenant production systems using structured logging, metrics, distributed tracing, and incident-response practices
Preferred Qualifications- Experience with Temporal or another durable workflow orchestration platform
- Experience integrating identity platforms such as Zitadel, Keycloak, Auth0, Okta, or similar technologies
- Experience with ClickHouse or another columnar, append-only, or audit-focused data store
- Experience with GitOps, CI/CD, Kubernetes, or infrastructure-as-code deployment practices
- Experience integrating MSP, PSA, RMM, security, or Microsoft 365 platform APIs
- Experience building software for environments subject to SOC 2, HIPAA, CMMC, or similar requirements
- Experience developing multi-cloud platform services across AWS, Azure, or GCP
Compensation RangeThe base salary range for this job is CAD $160,000 - $240,000 / year.
An individual's base pay depends on various factors including geographical location and review of experience, knowledge, skills, and abilities of the applicant. At Kaseya, certain roles are eligible for benefits and additional rewards. These rewards are allocated based on individual impact in role. In addition, certain roles also have the opportunity to earn sales incentives based on revenue or utilization, depending on the terms of the plan and the employee's role.
