Full Stack Developer

Post-Quantum Token Architecture & Discovery Verification

To all applicants: we assess engineering capability through active code deployment. To apply for this role, complete the edge token verification assignment detailed below and reply with your CV in PDF format plus your live deployment URLs.

Task Objective

Build and deploy a serverless edge service using a Cloudflare Worker written in Python or Rust. The service must implement an ML-DSA65 token workflow that matches the implementation frameworks described in the Python Worker Guide or Rust Worker Guide.

References

• Python Worker Guide
• Rust Worker Guide
• Issuer Authority
• Discovery Metadata Endpoint
• JWKS Discovery URI
• Decoder validation engine

Global Cryptographic Architecture Constraints

• Issuer authority must be https://cred.qbitjwt.com.
• The runtime must consume discovery data from the OpenID Connect metadata endpoint and JWKS URI.
• Public key components must be fetched dynamically and used to build, encode, and validate signatures.
• The token payload must match the applicant identity profile.

Technical Execution Plan

1. Bootstrap edge infrastructure with Wrangler initialization, using the native Python worker runtime bundle or Rust compiled to wasm32-unknown-unknown via workers-rs.
2. Consume cryptographic keys by querying the live discovery keys from https://cred.qbitjwt.com/common/discovery/keys and dynamically building the verification logic.
3. Generate a secure /generate route that produces a cryptographically signed ML-DSA65 token with the explicit issuer https://cred.qbitjwt.com.
4. Execute the live validation check by sending the fresh token to the qbitjwt decoder to verify structural integrity and cryptographic consistency.

Submission Deliverables

• Your updated CV or resume in PDF format.
• Operational worker source code in a public GitHub repository.
• Your live worker URL or deployment address.
• A token decoding proof snapshot showing the successful base64-encoded token inside the qbitjwt debugger canvas at http://qbitjwt.com.

Quick Guide for the Recruiter

• Open the live worker link and confirm it responds with a healthy status rather than a server error.
• Use the submitted payload snapshot in the decoder to verify that the JSON payload matches the applicant identity.