Azure Cloud DevOps Engineer

EWS Group; Pakistan; On-site; PKR 1,800,000 - 3,000,000; Full time

Benefits offered by this job

Medical Coverage Self & Dependents

Provident Fund

Bonuses

Lunch/Dinner

Development Budget

Leave Encashment

Internet Subsidy

Conveyance Allowance

Job summary

Contour Contour Software, a CSI subsidiary, is moving from on‑prem to a managed SaaS platform on Microsoft Azure. The role designs and maintains the Azure footprint with reusable modules, enabling tenancy and versioned deployments.

You will own remote state, drift detection, and policy‑as‑code, build deployment pipelines, and operate the Azure Virtual Desktop platform to deliver our Windows apps securely to customers worldwide.

Qualifications

• Production Azure experience at scale.
• Infrastructure as code using Terraform, Bicep or ARM.
• Azure Virtual Desktop or Windows remote-desktop experience.
• Multi-tenant SaaS hosting patterns and tenant isolation.
• Strong Azure networking knowledge.
• CI/CD with Azure DevOps or GitHub Actions.
• PowerShell plus Python/Bash/C#.
• Relational database operations including backup and replication.
• A bias toward automating repetitive work and documenting it.
• Clear English communication for distributed teams.

Responsibilities

• Design and maintain the Bicep codebase defining our Azure footprint with reusable modules.
• Own remote state, environment separation, drift detection, and policy-as-code.
• Build deployment pipelines for infrastructure, DB schema, and app artifacts with safe rollback.
• Operate the Azure Virtual Desktop platform for Windows applications.
• Host the multi-tenant web product platform with per-tenant routing and versioning.
• Manage SQL Anywhere 17 and PostgreSQL 18 databases and migrations.
• Define service objectives, instrument alerting, and rehearse disaster recovery.

Skills

Azure at scale

Infrastructure as code

Azure Virtual Desktop

Multi-tenant SaaS

Azure networking

CI/CD pipelines

PowerShell

Python

Database ops

Communication

Tools

Azure DevOps

GitHub Actions

Bicep

Job description

About Contour Contour Software has grown from a dozen people to over 2,000 staff across 3 cities, in less than 14 years. As a subsidiary of Constellation Software Inc., we are proud to be part of a global enterprise software conglomerate that has grown to become one of the top 10 software companies in the world, with employees and customers in 100+ countries. With a broad-based and ever-growing portfolio of market-leading, vertical-market enterprise solutions covering more than 100 industry domains in predominantly mature markets, CSI's recipe creates the perfect environment for professionals to build fulfilling, long-term careers. What started as an R&D & Accounting back-office, has progressed into a full-service Global Centre serving all functions and departments, at the divisional as well as operating group/corporate level. Today Contour employees, located in Karachi, Lahore & Islamabad, are serving CSI divisions located in time zones spanning the globe, from Sydney to Vancouver. With the global growth of Constellation as the wind in our sails, we are only just getting started!

The role Auto-IT builds the dealer management systems that run automotive, agricultural, and equipment dealerships across Australia, New Zealand, and Asia — part of the Perseus Operating Group within Constellation Software, with engineering across Australia, New Zealand, Pakistan and India.

We are moving from on-premises deployment to a managed SaaS platform on Microsoft Azure.

This role exists to build that infrastructure as code. Provisioning a tenant, rebuilding an environment, promoting a change, or standing up disaster recovery should each be a reviewed, versioned, automated operation with a predictable outcome — not a sequence of portal clicks reconstructed from memory.

What you'll do

• Design and maintain the Bicep codebase defining our entire Azure footprint, with reusable modules so a new customer tenancy is a parameterised deployment rather than a bespoke build.
• Own remote state, environment separation, drift detection, and policy-as-code, so non-compliant infrastructure fails in the pipeline rather than in production.
• Build deployment pipelines covering infrastructure, database schema, and application artefacts, with safe promotion and reliable rollback.
• Operate the Azure Virtual Desktop platform that delivers our Windows applications to customers.
• Build the hosting platform for our web products — multi-tenant by design, with version-specific routing so customers can sit on different releases concurrently and upgrade on their own schedule.
• Run our SQL Anywhere 17 and PostgreSQL 18 databases, and provide the infrastructure for the migration between them.
• Define service objectives, instrument the alerting behind them, and rehearse disaster recovery for real.

Technical environment

• Azure Virtual Desktop — host pools, session hosts, application groups, workspaces, RemoteApp, scaling plans and autoscale
• FSLogix profile containers on Azure Files or Azure NetApp Files
• golden images via Azure Compute Gallery and Azure VM Image Builder
• Microsoft Entra ID, Entra Domain Services, Microsoft Intune
• Azure Update Manager Web platform — multi-tenant — .NET and Blazor products on Azure App Service or Azure Container Apps
• Azure Front Door and Application Gateway for tenant and version-specific routing
• deployment slots and revision traffic splitting
• Azure API Management
• Azure Container Registry
• Azure App Configuration for per-tenant settings and feature flags
• Azure Cache for Redis
• Azure SignalR Service
• Platform — Azure Virtual Network
• Private Link and Private Endpoints
• Azure DNS Private Resolver
• Azure Firewall
• Network Security Groups
• Azure Bastion
• Azure Key Vault
• Azure Storage
• Azure Backup
• Azure Site Recovery
• Azure Monitor
• AVD Insights
• Log Analytics
• Azure Cost Management
• Cloudflare Tunnel and Access Data
• SAP SQL Anywhere 17 (dbsrv17, dbbackup, dbvalid, transaction log management, SQL Remote replication)
• PostgreSQL 18 on Azure Database for PostgreSQL Flexible Server (zone-redundant HA, PgBouncer, logical replication, PITR, pgvector)

What you'll bring

• Essential — Production Azure experience at scale.
• Strong hands-on infrastructure as code in Terraform, Bicep, or ARM, with real examples of module design and pipeline-driven deployment.
• Azure Virtual Desktop or comparable Windows remote-desktop experience.
• Multi-tenant SaaS hosting patterns, including tenant isolation and routing.
• Solid Azure networking.
• CI/CD with Azure DevOps Pipelines or GitHub Actions.
• PowerShell plus one of Python, Bash, or C#.
• Relational database operations — backup, recovery, replication, performance.
• A bias toward automating work rather than repeating it, and toward writing things down.
• Clear English, and the communication discipline distributed work demands.
• Desirable — PostgreSQL on Azure Flexible Server
• Desirable — SQL Anywhere or Sybase ASA, particularly SQL Remote
• Desirable — legacy-to-SaaS migration
• Desirable — Cloudflare Zero Trust
• Desirable — per-tenant cost attribution
• Desirable — AZ-104, AZ-140, AZ-400, or AZ-305.

Exciting Benefits we offer:

• Market-leading Salary
• Medical Coverage – Self & Dependents
• Parents Medical Coverage
• Provident Fund
• Employee Performance-based bonuses
• Home Internet Subsidy
• Conveyance Allowance
• Profit Sharing Plan [Tenured Employees Only]
• Life Benefit
• Child Care Facility
• Company Provided Lunch/Dinner
• Professional Development Budget
• Recreational area for in-house games
• Sporadic On-shore training opportunities
• Friendly work environment
• Leave Encashment

Leave Encashment Disclaimer:

At Contour, we attribute our success to the unique contributions of our diverse staff. We’re committed to fostering a culture of respect that thrives on the varied perspectives and experiences of all individuals we recruit, employ, promote, and compensate. Since day one, we’ve adhered to a policy that champions a work environment honoring the worth and dignity of each person while being free from all forms of employment discrimination. In our continuous effort to promote inclusivity, we extend our commitment to individuals with special needs by providing reasonable accommodations. We actively encourage qualified individuals with special needs to apply for the various openings within our company. Should you require assistance in completing the application process or have any inquiries regarding special facilities, please do not hesitate to contact our HR team. Your unique talents and abilities are welcomed and valued here.

As a subsidiary of CSI, Contour Software serves as a dedicated Global Centre, currently housing employees and teams for more than 150 Divisional and Corporate departments. Contour employees are key players in implementing, supporting, extending, enhancing, and renewing enterprise systems that run thousands of medium and large businesses, as well as public institutions, globally!