Azure Cloud DevOps Engineer

Contour Software; Islamabad; On-site; PKR 1,800,000 - 2,400,000; Full time

Benefits offered by this job

Market-leading salary

Medical coverage

Provident Fund

Performance-based bonuses

Lunch/Dinner provided

Professional development budget

Leave encashment

Job summary

Contour Software in Pakistan is seeking a Senior Infrastructure/Cloud Engineer to design and implement our Azure-based SaaS platform. You will code infrastructure as code (Terraform, Bicep/ARM), own remote state, drift detection, and policy-as-code, and build deployment pipelines across databases and applications.

You will operate Azure Virtual Desktop, support multi-tenant hosting with per-tenant routing, manage SQL Anywhere and PostgreSQL, and contribute to disaster recovery planning.

Qualifications

• Production Azure experience at scale.
• Experience with infrastructure as code (Terraform, Bicep/ARM).
• Windows remote-desktop experience or equivalent.

Responsibilities

• Design and maintain the Azure footprint with reusable modules for parameterised deployment.
• Own remote state, drift detection, and policy-as-code to enforce compliance.
• Build deployment pipelines for infrastructure, database schemas, and app artefacts with safe promotion and rollback.
• Operate Azure Virtual Desktop delivering Windows applications to customers.
• Support multi-tenant hosting with per-tenant routing and scheduled upgrades.
• Manage SQL Anywhere 17 and PostgreSQL 18 databases and migrations between them.

Skills

Azure infra

Terraform

Bicep/ARM

Azure Virtual Desktop

CI/CD

PowerShell

Python

Multi-tenant SaaS

Education

Bachelor's degree in CS or related field

Tools

Azure DevOps

GitHub Actions

Azure Compute Gallery

Job description

Job Description:

About Contour

Contour Software has grown from a dozen people to over 2,000 staff across 3 cities, in less than 14 years.

As a subsidiary of Constellation Software Inc., we are proud to be part of a global enterprise software conglomerate that has grown to become one of the top 10 software companies in the world, with employees and customers in 100+ countries. With a broad-based and ever-growing portfolio of market-leading, vertical-market enterprise solutions covering more than 100 industry domains in predominantly mature markets, CSI's recipe creates the perfect environment for professionals to build fulfilling, long-term careers.

What started as an R&D & Accounting back-office, has progressed into a full-service Global Centre serving all functions and departments, at the divisional as well as operating group/corporate level. Today Contour employees, located in Karachi, Lahore & Islamabad, are serving CSI divisions located in time zones spanning the globe, from Sydney to Vancouver. With the global growth of Constellation as the wind in our sails, we are only just getting started!

The role

We are moving from on-premises deployment to a managed SaaS platform on Microsoft Azure. This role exists to build that infrastructure as code. Provisioning a tenant, rebuilding an environment, promoting a change, or standing up disaster recovery should each be a reviewed, versioned, automated operation with a predictable outcome not a sequence of portal clicks reconstructed from memory.

What you'll do

• Design and maintain the Bicep codebase defining our entire Azure footprint, with reusable modules so a new customer tenancy is a parameterised deployment rather than a bespoke build.
• Own remote state, environment separation, drift detection, and policy-as-code, so non-compliant infrastructure fails in the pipeline rather than in production.
• Build deployment pipelines covering infrastructure, database schema, and application artefacts, with safe promotion and reliable rollback.
• Operate the Azure Virtual Desktop platform that delivers our Windows applications to customers.
• Build the hosting platform for our web products multi-tenant by design, with version-specific routing so customers can sit on different releases concurrently and upgrade on their own schedule.
• Run our SQL Anywhere 17 and PostgreSQL 18 databases, and provide the infrastructure for the migration between them.
• Define service objectives, instrument the alerting behind them, and rehearse disaster recovery for real.

Technical environment

Azure Virtual Desktop host pools, session hosts, application groups, workspaces, RemoteApp, scaling plans and autoscale · FSLogix profile containers on Azure Files or Azure NetApp Files · golden images via Azure Compute Gallery and Azure VM Image Builder · Microsoft Entra ID, Entra Domain Services, Microsoft Intune, Azure Update Manager

Web platform multi-tenant .NET and Blazor products on Azure App Service or Azure Container Apps· Azure Front Door and Application Gateway for tenant and version-specific routing · deployment slots and revision traffic splitting · Azure API Management · Azure Container Registry · Azure App Configuration for per-tenant settings and feature flags · Azure Cache for Redis · Azure SignalR Service

Platform Azure Virtual Network · Private Link and Private Endpoints · Azure DNS Private Resolver · Azure Firewall · Network Security Groups · Azure Bastion · Azure Key Vault · Azure Storage · Azure Backup · Azure Site Recovery · Azure Monitor · AVD Insights · Log Analytics · Azure Cost Management · Cloudflare Tunnel and Access

Data SAP SQL Anywhere 17 (dbsrv17, dbbackup, dbvalid, transaction log management, SQL Remote replication) · PostgreSQL 18 on Azure Database for PostgreSQL Flexible Server (zone-redundant HA, PgBouncer, logical replication, PITR, pgvector)

What you'll bring

Essential Production Azure experience at scale. Strong hands-on infrastructure as code in Terraform, Bicep, or ARM, with real examples of module design and pipeline-driven deployment. Azure Virtual Desktop or comparable Windows remote-desktop experience. Multi-tenant SaaS hosting patterns, including tenant isolation and routing. Solid Azure networking. CI/CD with Azure DevOps Pipelines or GitHub Actions.

PowerShell plus one of Python, Bash, or C#. Relational database operations backup, recovery, replication, performance. A bias toward automating work rather than repeating it, and toward writing things down. Clear English, and the communication discipline distributed work demands.

Desirable PostgreSQL on Azure Flexible Server · SQL Anywhere or Sybase ASA, particularly SQL Remote · legacy-to-SaaS migration · Cloudflare Zero Trust · per-tenant cost attribution · AZ-104, AZ-140, AZ-400, or AZ-305.

Work Timings:

8 AM to 5 PM PKT

Exciting Benefits we offer:

• Market-leading Salary
• Medical Coverage – Self & Dependents
• Parents Medical Coverage
• Provident Fund
• Employee Performance-based bonuses
• Home Internet Subsidy
• Conveyance Allowance
• Profit Sharing Plan [Tenured Employees Only]
• Life Benefit
• Child Care Facility
• Company Provided Lunch/Dinner
• Professional Development Budget
• Recreational area for in-house games
• Sporadic On-shore training opportunities
• Friendly work environment
• Leave Encashment

Disclaimer: At Contour, we attribute our success to the unique contributions of our diverse staff. We’re committed to fostering a culture of respect that thrives on the varied perspectives and experiences of all individuals we recruit, employ, promote, and compensate. Since day one, we’ve adhered to a policy that champions a work environment honoring the worth and dignity of each person while being free from all forms of employment discrimination.

In our continuous effort to promote inclusivity, we extend our commitment to individuals with special needs by providing reasonable accommodations. We actively encourage qualified individuals with special needs to apply for the various openings within our company. Should you require assistance in completing the application process or have any inquiries regarding special facilities, please do not hesitate to contact our HR team. Your unique talents and abilities are welcomed and valued here.

Requirements: