About Contour
Contour Software has grown from a dozen people to over 2,000 staff across 3 cities, in less than 14 years.
As a subsidiary of Constellation Software Inc., we are proud to be part of a global enterprise software conglomerate that has grown to become one of the top 10 software companies in the world, with employees and customers in 100+ countries. With a broad-based and ever-growing portfolio of market-leading, vertical-market enterprise solutions covering more than 100 industry domains in predominantly mature markets, CSI's recipe creates the perfect environment for professionals to build fulfilling, long-term careers.
What started as an R&D & Accounting back-office, has progressed into a full-service Global Centre serving all functions and departments, at the divisional as well as operating group/corporate level. Today Contour employees, located in Karachi, Lahore & Islamabad, are serving CSI divisions located in time zones spanning the globe, from Sydney to Vancouver. With the global growth of Constellation as the wind in our sails, we are only just getting started!
The SysOps Engineer is a hands-on, versatile engineer who keeps the infrastructure, identity, security tooling and integration services behind the ExtendAg and Tibersoft businesses running reliably and securely. This is a deliberately broad role: on any given day it covers OS and application patching, Windows and Linux server administration in Oracle Cloud Infrastructure (OCI), account and access management, integration and FTP/SFTP job support, vulnerability remediation, and DevOps automation with Terraform and Ansible. The SysOps Engineer works a ticket queue shared across both businesses, owns requests from intake to documented closure, and uses AI tools such as Claude Code and OpenAI Codex to automate repetitive work and move faster.
Key Responsibilities
Own the monthly patch cycle for Windows Server and Linux (Ubuntu) hosts across production, QA and development: schedule, apply, verify and report patch status, and apply critical security patches within the defined SLA
Remediate vulnerabilities and endpoint findings from Rapid7 and CrowdStrike, including third-party application CVEs (browsers, Visual Studio, Tomcat and similar), and confirm security agents are deployed on every new server
Build, configure and maintain Windows Server/IIS and Linux servers in OCI (compute, VCN/NSG networking, block and object storage, DNS), including resizing, disk capacity management and new environment builds for dev, QA and customer workloads
Manage OCI infrastructure as code with Terraform, and use Ansible for repeatable server builds, patching and configuration changes
Administer identity and access: Active Directory, Microsoft Entra ID, MFA resets, SSO (Okta, Auth0, SAML), group and distribution-list membership, file-share permissions, and access to GitLab, Azure DevOps and Atlassian
Run onboarding and offboarding: provision and remove accounts, licenses, mailboxes, VPN and system access, and verify access removal as part of quarterly access reviews
Support integration and data jobs: FTP/SFTP/FTPS and AS2/EDI servers, scheduled import/export jobs, Pentaho jobs, notification recipient changes, queue purges and restarts, and certificate and cipher updates for customer connections
Support Oracle-connected applications: TNS/Oracle client and wallet configuration, read-only users and schema grants, stuck sessions, and deployment support with Database Engineering
Manage TLS/SSL certificate renewals and DNS entries, maintain email security (SPF, DKIM, DMARC), and troubleshoot SMTP delivery for application and integration email
Troubleshoot VPN (Cisco AnyConnect, OpenVPN), RDP, remote access and connectivity issues affecting staff, developers and customer connections
Monitor systems and respond to alerts (CPU, disk, IIS response time, service health) using the observability/APM platform, Elastic and PagerDuty; take part in incident response and write post-incident…