SysOps Engineer

Contour Software, a rapidly growing subsidiary of Constellation Software Inc., is seeking a skilled SysOps Engineer to join its dynamic team. With over 2,000 employees across Karachi, Lahore, and Islamabad, Contour supports global enterprise software operations spanning multiple time zones. The SysOps Engineer will play a critical role in maintaining the infrastructure, security, identity management, and integration services for the ExtendAg and Tibersoft businesses. This hands-on position involves a wide range of responsibilities, including server administration, patch management, vulnerability remediation, and DevOps automation, ensuring reliable and secure operations across cloud environments.

Key Responsibilities
- Manage the monthly patch cycle for Windows Server and Linux (Ubuntu) hosts across production, QA, and development environments, ensuring timely application of critical security patches within SLAs.
- Address vulnerabilities and endpoint security findings from tools like Rapid7 and CrowdStrike, including third-party application CVEs, and ensure deployment of security agents on all new servers.
- Build, configure, and maintain Windows Server/IIS and Linux servers in Oracle Cloud Infrastructure (OCI), handling compute, networking, storage, DNS, resizing, and capacity management.
- Use Terraform for OCI infrastructure as code and Ansible for automation of server builds, patching, and configuration changes.
- Administer identity and access management systems including Active Directory, Microsoft Entra ID, MFA resets, SSO (Okta, Auth0, SAML), group memberships, file-share permissions, and access to GitLab, Azure DevOps, and Atlassian.
- Oversee onboarding and offboarding processes by provisioning and removing accounts, licenses, mailboxes, VPN, and system access, and conduct quarterly access reviews.
- Support integration and data jobs involving FTP/SFTP/FTPS, AS2/EDI servers, Pentaho jobs, certificate updates, and queue management.
- Assist with Oracle-connected applications, including TNS/Oracle client configuration, schema grants, session troubleshooting, and deployment support.
- Manage TLS/SSL certificate renewals, DNS entries, email security protocols (SPF, DKIM, DMARC), and troubleshoot SMTP delivery issues.
- Resolve VPN (Cisco AnyConnect, OpenVPN), RDP, and remote access connectivity problems affecting staff and customers.
- Monitor system health using observability platforms such as Elastic, APM, and PagerDuty; participate in incident response and documentation.
- Contribute to DevOps initiatives by maintaining CI/CD pipelines, build agents, automating deployments, and supporting internal tooling and AI agent hosts.
- Utilize AI tools like Claude Code and OpenAI Codex for scripting, troubleshooting, and documentation while adhering to security policies.
- Support governance, risk, and compliance (GRC) activities including SOC 1 Type 2 audits, security attestations, training campaigns, and backup verification.
- Provide tier-2 end-user support for Microsoft 365, Teams, Outlook, SharePoint, and endpoint management tools.
- Maintain thorough documentation, ticketing hygiene, and timely communication with stakeholders.

Required Qualifications
- Minimum 5 years of hands-on experience in systems administration, SysOps, or infrastructure engineering.
- Strong expertise in Windows Server administration, including IIS, Active Directory, DNS, Group Policy, and certificate management.
- Proficient Linux administration skills (Ubuntu or RHEL), including package management, services, SSH, and troubleshooting.
- Proven experience managing patch processes across mixed Windows and Linux environments.
- Hands-on experience with Terraform and Ansible for cloud infrastructure provisioning and configuration automation.
- Production experience with Oracle Cloud Infrastructure (OCI) preferred; Azure or AWS also acceptable.
- Strong scripting skills in PowerShell and Bash; Python is a plus.
- Regular use of AI coding assistants such as Claude Code or OpenAI Codex for scripting and troubleshooting, with an understanding of security implications.
- Experience with identity and access management in Microsoft Entra ID/Active Directory, including MFA and SSO.
- Solid networking knowledge including TCP/IP, DNS, firewalls, VPN, load balancers, and TLS.
- Familiarity with vulnerability management and endpoint protection tools like Rapid7 and CrowdStrike.
- Experience with CI/CD and source control platforms such as Azure DevOps, GitLab, or GitHub.
- Excellent written communication skills and disciplined ticket management, with the ability to collaborate effectively with U.S.-based stakeholders.

Preferred Qualifications
- OCI certification (e.g., OCI Architect Associate or OCI Operations Associate).
- HashiCorp Terraform Associate or Red Hat Ansible certification.
- Experience supporting Oracle Database applications and B2B file-transfer integrations (FTP/SFTP/FTPS, AS2/EDI).
- Knowledge of email security protocols and SMTP relay troubleshooting.
- Familiarity with observability and alerting tools such as Elastic, APM, and PagerDuty.
- Experience with Cloudflare, Redis, Hyper-V, and compliance audits (SOC 1/SOC 2).
- Ability to extend AI agents with custom instructions or integrations to automate operational tasks.
- Experience supporting multiple business units or clients from a shared support queue.
- Bachelor’s degree in Computer Science, Information Technology, or related field (or equivalent experience).

Benefits
- Competitive market-leading salary.
- Comprehensive medical coverage for employees and dependents, including parents.
- Provident fund and employee performance-based bonuses.
- Home internet subsidy and conveyance allowance.
- Profit sharing plan for tenured employees.
- Life insurance benefits and child care facility.
- Company-provided meals and recreational areas.
- Professional development budget and occasional on-shore training opportunities.
- Supportive and friendly work environment with leave encashment options.

Contour Software is committed to fostering a diverse and inclusive workplace that respects the dignity of every individual. We encourage qualified candidates, including those with special needs, to apply and contribute their unique talents to our thriving global team.