SysOps Engineer

Contour Software Pvt Ltd; Karachi Division, Lahore, Islamabad; On-site; PKR 3,000,000 - 4,200,000; Full time

Benefits offered by this job

Medical Coverage

Provident Fund

Performance-based bonuses

Company-provided Lunch/Dinner

Professional Development Budget

Conveyance Allowance

Home Internet Subsidy

Job summary

Contour Software Pvt Ltd invites a seasoned SysOps Engineer to manage and automate our OCI-based infrastructure. You will patch Windows and Linux hosts, manage identity, security tooling, and data integration services across production, QA and development environments.

You will build with Terraform and Ansible, maintain CI/CD pipelines, and work with AI tooling to accelerate operations. A strong emphasis on security, access control, and incident response is required.

Qualifications

• 5+ years of hands-on systems administration, SysOps or infra engineering experience.
• Strong Windows Server administration (IIS, AD, DNS, certificate management).
• Solid Linux administration (Ubuntu/RHEL), package management and SSH troubleshooting.
• Experience with patch management across mixed Windows/Linux fleets.
• Terraform for provisioning cloud infra; Ansible for config management/automation.
• Production experience with OCI; Azure or AWS acceptable.
• PowerShell and Bash scripting; Python a plus.
• Identity management with Microsoft Entra ID/AD; MFA and SSO.
• Networking knowledge: TCP/IP, DNS, VPN, TLS; security tooling familiarity.
• CI/CD and source control (Azure DevOps, GitLab, GitHub).
• Experience with AI agents for automation and scripting.

Responsibilities

• Own monthly patch cycle for Windows and Linux across production, QA, and dev environments.
• Remediate vulnerabilities from Rapid7 and CrowdStrike; ensure agents deployed on new servers.
• Manage OCI infrastructure as code with Terraform; use Ansible for repeatable builds and config changes.
• Administer identity/access: AD/Entra ID, MFA, SSO, and access reviews.
• Support FTP/SFTP/FTPS, AS2/EDI, and data jobs and certificate updates.
• Troubleshoot VPN, RDP, remote access for staff and customers.
• Monitor systems and respond to alerts using observability tools; participate in incident response.
• Contribute to DevOps: CI/CD pipelines, build agents, and automation.

Skills

Windows Server

Linux

Terraform

Ansible

OCI

Azure DevOps / GitLab

PowerShell

Bash

Python

Active Directory

MFA / SSO

Networking

Security Tools

Education

Bachelor's degree in Computer Science / IT or related field

Tools

OCI

Terraform

Ansible

Azure DevOps / GitLab

Job description

## SysOps EngineerApply: PER - Lahore, PK: PER - Karachi, PK: PER - Islamabad, PK: Full time: Posted Today: R54652**About Contour** Contour Software has grown from a dozen people to over 2,000 staff across 3 cities, in less than 14 years.As a subsidiary of Constellation Software Inc., we are proud to be part of a global enterprise software conglomerate that has grown to become one of the top 10 software companies in the world, with employees and customers in 100+ countries. With a broad-based and ever-growing portfolio of market-leading, vertical-market enterprise solutions covering more than 100 industry domains in predominantly mature markets, CSI's recipe creates the perfect environment for professionals to build fulfilling, long-term careers.What started as an R&D & Accounting back-office, has progressed into a full-service Global Centre serving all functions and departments, at the divisional as well as operating group/corporate level. Today Contour employees, located in Karachi, Lahore & Islamabad, are serving CSI divisions located in time zones spanning the globe, from Sydney to Vancouver. With the global growth of Constellation as the wind in our sails, we are only just getting started!The **SysOps Engineer** is a hands-on, versatile engineer who keeps the infrastructure, identity, security tooling and integration services behind the ExtendAg and Tibersoft businesses running reliably and securely. This is a deliberately broad role: on any given day it covers OS and application patching, Windows and Linux server administration in Oracle Cloud Infrastructure (OCI), account and access management, integration and FTP/SFTP job support, vulnerability remediation, and DevOps automation with Terraform and Ansible. The SysOps Engineer works a ticket queue shared across both businesses, owns requests from intake to documented closure, and uses AI tools such as Claude Code and OpenAI Codex to automate repetitive work and move faster.**Key Responsibilities*** Own the monthly patch cycle for Windows Server and Linux (Ubuntu) hosts across production, QA and development: schedule, apply, verify and report patch status, and apply critical security patches within the defined SLA* Remediate vulnerabilities and endpoint findings from Rapid7 and CrowdStrike, including third-party application CVEs (browsers, Visual Studio, Tomcat and similar), and confirm security agents are deployed on every new server* Build, configure and maintain Windows Server/IIS and Linux servers in OCI (compute, VCN/NSG networking, block and object storage, DNS), including resizing, disk capacity management and new environment builds for dev, QA and customer workloads* Manage OCI infrastructure as code with Terraform, and use Ansible for repeatable server builds, patching and configuration changes* Administer identity and access: Active Directory, Microsoft Entra ID, MFA resets, SSO (Okta, Auth0, SAML), group and distribution-list membership, file-share permissions, and access to GitLab, Azure DevOps and Atlassian* Run onboarding and offboarding: provision and remove accounts, licenses, mailboxes, VPN and system access, and verify access removal as part of quarterly access reviews* Support integration and data jobs: FTP/SFTP/FTPS and AS2/EDI servers, scheduled import/export jobs, Pentaho jobs, notification recipient changes, queue purges and restarts, and certificate and cipher updates for customer connections* Support Oracle-connected applications: TNS/Oracle client and wallet configuration, read-only users and schema grants, stuck sessions, and deployment support with Database Engineering* Manage TLS/SSL certificate renewals and DNS entries, maintain email security (SPF, DKIM, DMARC), and troubleshoot SMTP delivery for application and integration email* Troubleshoot VPN (Cisco AnyConnect, OpenVPN), RDP, remote access and connectivity issues affecting staff, developers and customer connections* Monitor systems and respond to alerts (CPU, disk, IIS response time, service health) using the observability/APM platform, Elastic and PagerDuty; take part in incident response and write post-incident notes* Contribute to DevOps work: maintain build agents and CI/CD pipeline infrastructure in Azure DevOps and GitLab, automate deployments and scheduled tasks, and keep internal tooling and AI agent hosts running* Use AI tools such as Claude Code and OpenAI Codex to write and review PowerShell, Bash, Terraform and Ansible code, analyze logs, diagnose issues and draft runbooks, following company guardrails for credentials, customer data and production access; help administer AI tool seats and access for both businesses* Provide evidence and complete control tasks for GRC and audit programs (SOC 1 Type 2, security attestations, KnowBe4 training campaigns, backup and restore verification)* Provide tier-2 end-user and collaboration support when needed (Microsoft 365, Teams, Outlook, SharePoint, endpoint management with NinjaOne)* Log all work in the helpdesk ticketing system the same day with company, time spent and a plain-language description; acknowledge requests promptly and send a written completion notice when work is done* Keep runbooks, server inventories and system documentation current so any team member can pick up the work**Required Skills & Experience*** 5+ years of hands-on systems administration, SysOps or infrastructure engineering experience* Strong Windows Server administration skills, including IIS, Active Directory, DNS, Group Policy and certificate management* Solid Linux administration skills (Ubuntu or RHEL family): package management, services, users, SSH and troubleshooting* Proven ownership of a patch management process across a mixed Windows and Linux server fleet* Hands-on experience with Terraform for provisioning cloud infrastructure* Hands-on experience with Ansible for configuration management and automation* Production experience with a major cloud platform; Oracle Cloud Infrastructure (OCI) strongly preferred, Azure or AWS acceptable* Strong scripting skills in PowerShell and Bash; Python a plus* Demonstrated, regular use of AI coding agents such as Claude Code or OpenAI Codex for scripting, infrastructure code, troubleshooting or documentation, including reviewing AI-generated changes before running them and understanding the security implications* Experience with identity and access management in Microsoft Entra ID/Active Directory, including MFA and SSO* Working knowledge of networking: TCP/IP, DNS, firewalls, VPN, load balancers and TLS* Experience with vulnerability management and endpoint protection tools (e.g., Rapid7, CrowdStrike, Qualys, Defender)* Experience with CI/CD and source control platforms such as Azure DevOps, GitLab or GitHub* Disciplined ticket hygiene, strong written English and clear communication with U.S.-based stakeholders**Preferred Qualifications*** OCI certification (e.g., OCI Architect Associate or OCI Operations Associate)* HashiCorp Terraform Associate or Red Hat Ansible certification* Experience supporting applications that use Oracle Database (TNS, Oracle client/ODP.NET, wallets, grants)* Experience with FTP/SFTP/FTPS, AS2/EDI or other B2B file-transfer integrations* Experience with email security and deliverability (SPF, DKIM, DMARC, SMTP relays)* Experience with observability and alerting platforms (Elastic, APM tools, PagerDuty)* Experience with Cloudflare, Redis or Hyper-V* Experience supporting SOC 1/SOC 2 audits or other compliance programs* Experience extending AI agents with custom instructions, skills or MCP integrations to automate operational work* Experience supporting multiple business units or clients from a shared support queue* Bachelor's degree in Computer Science, Information Technology or related field (or equivalent experience)**Working Conditions** * Required daily overlap with U.S. Pacific Time from 8:00 AM to 12:00 PM PT for stand-ups, escalations and handoffs* Participation in a rotating after-hours on-call schedule, with heightened support during customer harvest and receiving seasons* Planned patching and maintenance windows outside U.S. business hours, which typically fall within the offshore working day* Reliable high-speed internet and a secure home-office setup suitable for privileged access to production systems* Standard home-office environment; prolonged computer work**Exciting Benefits we offer:*** Market-leading Salary* Medical Coverage – Self & Dependents* Parents Medical Coverage* Provident Fund* Employee Performance-based bonuses* Home Internet Subsidy* Conveyance Allowance* Profit Sharing Plan [Tenured Employees Only]* Life Benefit* Child Care Facility* Company Provided Lunch/Dinner* Professional Development Budget* Recreational area for in-house games* Sporadic On-shore training opportunities* Friendly work environment* Leave Encashment