Enterprise IT Analyst

About Contour

Contour Software has grown from a dozen people to over 2,000 staff across 3 cities, in less than 14 years.

As a subsidiary of Constellation Software Inc., we are proud to be part of a global enterprise software conglomerate that has grown to become one of the top 10 software companies in the world, with employees and customers in 100+ countries. With a broad-based and ever-growing portfolio of market-leading, vertical-market enterprise solutions covering more than 100 industry domains in predominantly mature markets, CSI's recipe creates the perfect environment for professionals to build fulfilling, long-term careers.

What started as an R&D & Accounting back-office, has progressed into a full-service Global Centre serving all functions and departments, at the divisional as well as operating group/corporate level. Today Contour employees, located in Karachi, Lahore & Islamabad, are serving CSI divisions located in time zones spanning the globe, from Sydney to Vancouver. With the global growth of Constellation as the wind in our sails, we are only just getting started!

About Division:

CORA Loyalty is part of the CORA Group, a division of Jonas Software, an operating group of Constellation Software, Inc. (TSX: CSU).

About Position:

The Enterprise IT Analyst is responsible for the implementation, administration, support, and continual improvement of CORA Loyalty's enterprise IT infrastructure, cloud platforms, and end-user computing environment. This role ensures the availability, security, performance, and scalability of enterprise technology services while delivering an exceptional employee experience.

The successful candidate will have deep expertise across Microsoft technologies including Microsoft 365, Microsoft Entra ID, Intune, Azure, Windows Server, and endpoint management, complemented by strong operational knowledge of modern security platforms such as Microsoft Defender, CrowdStrike, Zscaler, and Qualys.

Beyond day-to-day operational support, this role continuously evaluates infrastructure and security controls to ensure they appropriately balance cybersecurity, operational efficiency, and business productivity.

Key Responsibilities

Microsoft 365 & Cloud Administration

• Administer Microsoft 365 services including Exchange Online, SharePoint Online, Teams, OneDrive, Microsoft Entra ID, and related cloud platforms.

• Manage user identities, licenses, distribution groups, security groups, and authentication policies.

• Administer Azure infrastructure supporting corporate IT services.

• Manage Conditional Access, Multi-Factor Authentication (MFA), identity governance, and Zero Trust security controls.

• Ensure platform availability, reliability, and compliance with organizational standards.

Endpoint Management & Device Administration

• Administer Microsoft Intune and enterprise endpoint management solutions.

• Manage Windows device lifecycle including provisioning, enrollment, configuration, compliance, and retirement.

• Develop and maintain device configuration profiles and compliance policies.

• Support mobile device management across Windows, macOS, iOS, and Android where applicable.

• Maintain secure endpoint standards while optimizing user productivity.

Infrastructure & Server Operations

• Support Windows Server environments and core enterprise infrastructure.

• Manage operating system updates, patching, and vulnerability remediation.

• Assist with cloud migrations, infrastructure modernization, and technology refresh initiatives.

• Monitor infrastructure health, capacity, and performance.

• Participate in disaster recovery and business continuity planning. Security Operations & Governance

• Administer and support Microsoft Defender, CrowdStrike, Zscaler, Qualys, and related security technologies.

• Investigate endpoint, identity, and infrastructure security alerts.

• Review and optimize security controls including:

• Conditional Access

• Device Compliance

• Data Loss Prevention (DLP)

• Intune Compliance Policies

• Network Security Rules

• Secure Web Gateway Policies

• Continuously improve the organization's security posture while ensuring business applications remain accessible and productive.

• Partner with Security and Compliance teams to implement security best practices.

Security Policy Optimization

• Review existing security controls to identify unnecessary complexity or overly restrictive configurations.

• Recommend improvements that maintain Zero Trust and least-privilege principles while improving user experience.

• Evaluate business requests and recommend risk-based security decisions.

• Balance operational efficiency with security requirements through practical, measurable improvements.

Operational Support

• Provide Level 2 and Level 3 technical support across infrastructure, cloud platforms, and enterprise applications.

• Support Incident, Problem, and Change Management processes.

• Create and maintain technical documentation, knowledge articles, and operational runbooks.

• Develop troubleshooting procedures and technical guidance for Tier 1 Service Desk teams.

• Participate in on-call support and major incident resolution as required.

Automation & Continuous Improvement

• Identify opportunities to automate infrastructure administration using PowerShell, Microsoft Graph, and automation platforms.

• Utilize AI tools, where appropriate, to improve documentation, troubleshooting, scripting, and operational efficiency.

• Continuously evaluate emerging technologies and automation opportunities that improve service quality, security, and operational effectiveness.

• Champion a culture of continuous improvement across Infrastructure Operations.

Qualifications & Experience

Required

• Bachelor's degree in Computer Science, Information Technology, or a related discipline, or equivalent practical experience.

• 5+ years of enterprise IT Infrastructure, Systems Administration, or IT Operations experience.

• Strong experience administering Microsoft 365 environments.

• Hands-on experience with:

• Microsoft Entra ID

• Microsoft Intune

• Microsoft Azure

• Exchange Online

• SharePoint Online

• Microsoft Teams

• OneDrive

• Experience supporting Windows Server environments.

• Experience with enterprise endpoint security solutions.

• Strong PowerShell scripting skills.

• Experience supporting cloud and hybrid infrastructure.

• Excellent troubleshooting, analytical, and root cause analysis abilities.

• Strong written, verbal, and interpersonal communication skills.

Preferred

• Microsoft 365 Certified: Enterprise Administrator Expert

• Microsoft Certified: Azure Administrator Associate

• Microsoft 365 Certified: Information Security Administrator Associate

• Microsoft 365 Certified: Messaging Administrator Associate

• Experience with:

• Microsoft Defender XDR

• CrowdStrike

• Zscaler (ZIA/ZPA)

• Qualys

• ITIL Foundation Certification.

• Experience working within SOC 2, ISO 27001, or similar compliance frameworks.

• Working knowledge of PCI DSS requirements is considered an asset.

• Experience using AI productivity tools (e.g., Microsoft Copilot, ChatGPT, Claude, or similar) to assist with documentation, scripting, troubleshooting, or operational analysis is considered an asset.

Competencies

Core Competencies

• Functional / Technical Skills

• Problem Solving

• Customer Focus

• Priority Setting

• Drive for Results

Supporting Competencies

• Business Acumen

• Innovation Management

• Learning on the Fly

• Dealing with Ambiguity

• Peer Relationships

Exciting Benefits we offer:

• Market-leading Salary
• Medical Coverage - Self & Dependents
• Parents Medical Coverage
• Provident Fund
• Employee Performance-based bonuses
• Home Internet Subsidy
• Conveyance Allowance
• Profit Sharing Plan [Tenured Employees Only]
• Life Benefit
• Child Care Facility
• Company Provided Lunch/Dinner
• Professional Development Budget
• Recreational area for in-house games
• Sporadic On-shore training opportunities
• Friendly work environment
• Leave Encashment

Disclaimer: At Contour, we attribute our success to the unique contributions of our diverse staff. We’re committed to fostering a culture of respect that thrives on the varied perspectives and experiences of all individuals we recruit, employ, promote, and compensate. Since day one, we’ve adhered to a policy that champions a work environment honoring the worth and dignity of each person while being free from all forms of employment discrimination.

In our continuous effort to promote inclusivity, we extend our commitment to individuals with special needs by providing reasonable accommodations. We actively encourage qualified individuals with special needs to apply for the various openings within our company. Should you require assistance in completing the application process or have any inquiries regarding special facilities, please do not hesitate to contact our HR team. Your unique talents and abilities are welcomed and valued here.