SysOps Engineer

About Contour

Contour Software has grown from a dozen people to over 2,000 staff across 3 cities, in less than 14 years.

As a subsidiary of Constellation Software Inc., we are proud to be part of a global enterprise software conglomerate that has grown to become one of the top 10 software companies in the world, with employees and customers in 100+ countries. With a broad-based and ever-growing portfolio of market-leading, vertical-market enterprise solutions covering more than 100 industry domains in predominantly mature markets, CSI's recipe creates the perfect environment for professionals to build fulfilling, long-term careers.

What started as an R&D & Accounting back-office, has progressed into a full-service Global Centre serving all functions and departments, at the divisional as well as operating group/corporate level. Today Contour employees, located in Karachi, Lahore & Islamabad, are serving CSI divisions located in time zones spanning the globe, from Sydney to Vancouver. With the global growth of Constellation as the wind in our sails, we are only just getting started!

The SysOps Engineer is a hands-on, versatile engineer who keeps the infrastructure, identity, security tooling and integration services behind the ExtendAg and Tibersoft businesses running reliably and securely. This is a deliberately broad role: on any given day it covers OS and application patching, Windows and Linux server administration in Oracle Cloud Infrastructure (OCI), account and access management, integration and FTP/SFTP job support, vulnerability remediation, and DevOps automation with Terraform and Ansible. The SysOps Engineer works a ticket queue shared across both businesses, owns requests from intake to documented closure, and uses AI tools such as Claude Code and OpenAI Codex to automate repetitive work and move faster.

Key Responsibilities

• Own the monthly patch cycle for Windows Server and Linux (Ubuntu) hosts across production, QA and development: schedule, apply, verify and report patch status, and apply critical security patches within the defined SLA
• Remediate vulnerabilities and endpoint findings from Rapid7 and CrowdStrike, including third-party application CVEs (browsers, Visual Studio, Tomcat and similar), and confirm security agents are deployed on every new server
• Build, configure and maintain Windows Server/IIS and Linux servers in OCI (compute, VCN/NSG networking, block and object storage, DNS), including resizing, disk capacity management and new environment builds for dev, QA and customer workloads
• Manage OCI infrastructure as code with Terraform, and use Ansible for repeatable server builds, patching and configuration changes
• Administer identity and access: Active Directory, Microsoft Entra ID, MFA resets, SSO (Okta, Auth0, SAML), group and distribution-list membership, file-share permissions, and access to GitLab, Azure DevOps and Atlassian
• Run onboarding and offboarding: provision and remove accounts, licenses, mailboxes, VPN and system access, and verify access removal as part of quarterly access reviews
• Support integration and data jobs: FTP/SFTP/FTPS and AS2/EDI servers, scheduled import/export jobs, Pentaho jobs, notification recipient changes, queue purges and restarts, and certificate and cipher updates for customer connections
• Support Oracle-connected applications: TNS/Oracle client and wallet configuration, read-only users and schema grants, stuck sessions, and deployment support with Database Engineering
• Manage TLS/SSL certificate renewals and DNS entries, maintain email security (SPF, DKIM, DMARC), and troubleshoot SMTP delivery for application and integration email
• Troubleshoot VPN (Cisco AnyConnect, OpenVPN), RDP, remote access and connectivity issues affecting staff, developers and customer connections
• Monitor systems and respond to alerts (CPU, disk, IIS response time, service health) using the observability/APM platform, Elastic and PagerDuty; take part in incident response and write post-incident notes
• Contribute to DevOps work: maintain build agents and CI/CD pipeline infrastructure in Azure DevOps and GitLab, automate deployments and scheduled tasks, and keep internal tooling and AI agent hosts running
• Use AI tools such as Claude Code and OpenAI Codex to write and review PowerShell, Bash, Terraform and Ansible code, analyze logs, diagnose issues and draft runbooks, following company guardrails for credentials, customer data and production access; help administer AI tool seats and access for both businesses
• Provide evidence and complete control tasks for GRC and audit programs (SOC 1 Type 2, security attestations, KnowBe4 training campaigns, backup and restore verification)
• Provide tier-2 end-user and collaboration support when needed (Microsoft 365, Teams, Outlook, SharePoint, endpoint management with NinjaOne)
• Log all work in the helpdesk ticketing system the same day with company, time spent and a plain-language description; acknowledge requests promptly and send a written completion notice when work is done
• Keep runbooks, server inventories and system documentation current so any team member can pick up the work

Required Skills & Experience

• 5+ years of hands-on systems administration, SysOps or infrastructure engineering experience
• Strong Windows Server administration skills, including IIS, Active Directory, DNS, Group Policy and certificate management
• Solid Linux administration skills (Ubuntu or RHEL family): package management, services, users, SSH and troubleshooting
• Proven ownership of a patch management process across a mixed Windows and Linux server fleet
• Hands-on experience with Terraform for provisioning cloud infrastructure
• Hands-on experience with Ansible for configuration management and automation
• Production experience with a major cloud platform; Oracle Cloud Infrastructure (OCI) strongly preferred, Azure or AWS acceptable
• Strong scripting skills in PowerShell and Bash; Python a plus
• Demonstrated, regular use of AI coding agents such as Claude Code or OpenAI Codex for scripting, infrastructure code, troubleshooting or documentation, including reviewing AI-generated changes before running them and understanding the security implications
• Experience with identity and access management in Microsoft Entra ID/Active Directory, including MFA and SSO
• Working knowledge of networking: TCP/IP, DNS, firewalls, VPN, load balancers and TLS
• Experience with vulnerability management and endpoint protection tools (e.g., Rapid7, CrowdStrike, Qualys, Defender)
• Experience with CI/CD and source control platforms such as Azure DevOps, GitLab or GitHub
• Disciplined ticket hygiene, strong written English and clear communication with U.S.-based stakeholders

Preferred Qualifications

• OCI certification (e.g., OCI Architect Associate or OCI Operations Associate)
• HashiCorp Terraform Associate or Red Hat Ansible certification
• Experience supporting applications that use Oracle Database (TNS, Oracle client/ODP.NET, wallets, grants)
• Experience with FTP/SFTP/FTPS, AS2/EDI or other B2B file-transfer integrations
• Experience with email security and deliverability (SPF, DKIM, DMARC, SMTP relays)
• Experience with observability and alerting platforms (Elastic, APM tools, PagerDuty)
• Experience with Cloudflare, Redis or Hyper-V
• Experience supporting SOC 1/SOC 2 audits or other compliance programs
• Experience extending AI agents with custom instructions, skills or MCP integrations to automate operational work
• Experience supporting multiple business units or clients from a shared support queue
• Bachelor's degree in Computer Science, Information Technology or related field (or equivalent experience)

Working Conditions

• Required daily overlap with U.S. Pacific Time from 8:00 AM to 12:00 PM PT for stand-ups, escalations and handoffs
• Participation in a rotating after-hours on-call schedule, with heightened support during customer harvest and receiving seasons
• Planned patching and maintenance windows outside U.S. business hours, which typically fall within the offshore working day
• Reliable high-speed internet and a secure home-office setup suitable for privileged access to production systems
• Standard home-office environment; prolonged computer work

Exciting Benefits we offer:

• Market-leading Salary
• Medical Coverage - Self & Dependents
• Parents Medical Coverage
• Provident Fund
• Employee Performance-based bonuses
• Home Internet Subsidy
• Conveyance Allowance
• Profit Sharing Plan [Tenured Employees Only]
• Life Benefit
• Child Care Facility
• Company Provided Lunch/Dinner
• Professional Development Budget
• Recreational area for in-house games
• Sporadic On-shore training opportunities
• Friendly work environment
• Leave Encashment

Disclaimer: At Contour, we attribute our success to the unique contributions of our diverse staff. We’re committed to fostering a culture of respect that thrives on the varied perspectives and experiences of all individuals we recruit, employ, promote, and compensate. Since day one, we’ve adhered to a policy that champions a work environment honoring the worth and dignity of each person while being free from all forms of employment discrimination.

In our continuous effort to promote inclusivity, we extend our commitment to individuals with special needs by providing reasonable accommodations. We actively encourage qualified individuals with special needs to apply for the various openings within our company. Should you require assistance in completing the application process or have any inquiries regarding special facilities, please do not hesitate to contact our HR team. Your unique talents and abilities are welcomed and valued here.