Azure Cloud DevOps Engineer

About Contour Contour Software has grown from a dozen people to over 2,000 staff across 3 cities, in less than 14 years. As a subsidiary of Constellation Software Inc., we are proud to be part of a global enterprise software conglomerate that has grown to become one of the top 10 software companies in the world, with employees and customers in 100+ countries. With a broad-based and ever-growing portfolio of market-leading, vertical-market enterprise solutions covering more than 100 industry domains in predominantly mature markets, CSI's recipe creates the perfect environment for professionals to build fulfilling, long-term careers. What started as an R&D & Accounting back-office, has progressed into a full-service Global Centre serving all functions and departments, at the divisional as well as operating group/corporate level. Today Contour employees, located in Karachi, Lahore & Islamabad, are serving CSI divisions located in time zones spanning the globe, from Sydney to Vancouver. With the global growth of Constellation as the wind in our sails, we are only just getting started! The role Auto-IT builds the dealer management systems that run automotive, agricultural, and equipment dealerships across Australia, New Zealand, and Asia — part of the Perseus Operating Group within Constellation Software, with engineering across Australia, New Zealand, Pakistan and India. We are moving from on-premises deployment to a managed SaaS platform on Microsoft Azure. This role exists to build that infrastructure as code. Provisioning a tenant, rebuilding an environment, promoting a change, or standing up disaster recovery should each be a reviewed, versioned, automated operation with a predictable outcome — not a sequence of portal clicks reconstructed from memory. What you'll do Design and maintain the Bicep codebase defining our entire Azure footprint, with reusable modules so a new customer tenancy is a parameterised deployment rather than a bespoke build. Own remote state, environment separation, drift detection, and policy-as-code, so non-compliant infrastructure fails in the pipeline rather than in production. Build deployment pipelines covering infrastructure, database schema, and application artefacts, with safe promotion and reliable rollback. Operate the Azure Virtual Desktop platform that delivers our Windows applications to customers. Build the hosting platform for our web products — multi-tenant by design, with version-specific routing so customers can sit on different releases concurrently and upgrade on their own schedule. Run our SQL Anywhere 17 and PostgreSQL 18 databases, and provide the infrastructure for the migration between them. Define service objectives, instrument the alerting behind them, and rehearse disaster recovery for real. Technical environment Azure Virtual Desktop — host pools, session hosts, application groups, workspaces, RemoteApp, scaling plans and autoscale · FSLogix profile containers on Azure Files or Azure NetApp Files · golden images via Azure Compute Gallery and Azure VM Image Builder · Microsoft Entra ID , Entra Domain Services , Microsoft Intune , Azure Update Manager Web platform — multi-tenant — .NET and Blazor products on Azure App Service or Azure Container Apps · Azure Front Door and Application Gateway for tenant and version-specific routing · deployment slots and revision traffic splitting · Azure API Management · Azure Container Registry · Azure App Configuration for per-tenant settings and feature flags · Azure Cache for Redis · Azure SignalR Service Platform — Azure Virtual Network · Private Link and Private Endpoints · Azure DNS Private Resolver · Azure Firewall · Network Security Groups · Azure Bastion · Azure Key Vault · Azure Storage · Azure Backup · Azure Site Recovery · Azure Monitor · AVD Insights · Log Analytics · Azure Cost Management · Cloudflare Tunnel and Access Data — SAP SQL Anywhere 17 (dbsrv17, dbbackup, dbvalid, transaction log management, SQL Remote replication) · PostgreSQL 18 on Azure Database for PostgreSQL Flexible Server (zone-redundant HA, PgBouncer, logical replication, PITR, pgvector) What you'll bring Essential — Production Azure experience at scale. Strong hands-on infrastructure as code in Terraform, Bicep, or ARM, with real examples of module design and pipeline-driven deployment. Azure Virtual Desktop or comparable Windows remote-desktop experience. Multi-tenant SaaS hosting patterns, including tenant isolation and routing. Solid Azure networking. CI/CD with Azure DevOps Pipelines or GitHub Actions. PowerShell plus one of Python, Bash, or C#. Relational database operations — backup, recovery, replication, performance. A bias toward automating work rather than repeating it, and toward writing things down. Clear English, and the communication discipline distributed work demands. Desirable — PostgreSQL on Azure Flexible Server · SQL Anywhere or Sybase ASA, particularly SQL Remote · legacy-to-SaaS migration · Cloudflare Zero Trust · per-tenant cost attribution · AZ-104, AZ-140, AZ-400, or AZ-305. Exciting Benefits we offer: Market-leading Salary Medical Coverage – Self & Dependents Parents Medical Coverage Provident Fund Employee Performance-based bonuses Home Internet Subsidy Conveyance Allowance Profit Sharing Plan [Tenured Employees Only] Life Benefit Child Care Facility Company Provided Lunch/Dinner Professional Development Budget Recreational area for in-house games Sporadic On-shore training opportunities Friendly work environment Leave Encashment Disclaimer: At Contour, we attribute our success to the unique contributions of our diverse staff. We’re committed to fostering a culture of respect that thrives on the varied perspectives and experiences of all individuals we recruit, employ, promote, and compensate. Since day one, we’ve adhered to a policy that champions a work environment honoring the worth and dignity of each person while being free from all forms of employment discrimination. In our continuous effort to promote inclusivity, we extend our commitment to individuals with special needs by providing reasonable accommodations. We actively encourage qualified individuals with special needs to apply for the various openings within our company. Should you require assistance in completing the application process or have any inquiries regarding special facilities, please do not hesitate to contact our HR team. Your unique talents and abilities are welcomed and valued here.