Since only one channel at a time can use a given port, and you have the possibility of needing this third party to connect to multiple channels/zones, and the third party is unable to use a custom port, you'll need to utilize a reverse proxy or load balancer in front of QIE.
The reverse proxy will be listening on port 443 with SSL enabled and accept connections from the third party system. It will then route those messages to QIE, using the port that QIE is listening on (i.e. port 20001)