Platform, Security & FinOps Engineer

Remote (work from home), Hyderabad • Full-time • Australian business hours

You will own the Azure platform our products run on: keeping it secure, reliable and cost-efficient, and owning how changes reach production. Because we handle health data, this is core engineering, not a side job.

About RxTro

RxTro is a healthcare technology company that has connected medical practices with the people who support them for more than ten years. Every pharmaceutical company in Australia and over 2,000 specialist and allied health organisations use our platform, and we operate in Australia and Canada.

We are now building our next product: a guideline-driven patient recall platform that helps clinics bring the right patients back for the right care at the right time. To build it, we are forming a new engineering team in India through RxTro India Incorporated.

The team

Five people, each owning a whole area: a Principal Engineer, a Backend Engineer, an Experience Engineer, a Platform, Security and FinOps Engineer, and our existing Product Designer. You will work closely with the founder in Sydney and with our teams in Australia.

How we work

We are AI-native. Each engineer directs a set of AI agents that analyse code, draft plans, write implementation and tests, and review changes. People make every decision that matters: what to build, how a clinical guideline is interpreted, the architecture, and what goes to production. No AI-generated change reaches production without a named person approving it.

This is hands-on engineering. The agents take the repetitive work; you own the judgement, the quality and the outcome.

Our stack

C# and .NET, React, Microsoft Azure, Azure DevOps, GitHub and GitHub Actions, and Claude and GitHub Copilot for AI-assisted engineering.

Working with us

• Remote, working from home. We are hiring people based in or near Hyderabad so the team can meet in person when it helps
• Australian business hours: 9:00 am to 5:00 pm Sydney time, which is 3:30 am to 11:30 am IST from October to April, and 4:30 am to 12:30 pm IST from April to October
• Full-time role with RxTro India Incorporated
• Health data is at the heart of what we do, so privacy, security and careful handling of patient information are part of every role
• Background and reference checks are required before you start, because the role involves access to health-data systems

Benefits

• Group health insurance for you and your family
• Provident Fund and gratuity as per Indian law
• Paid annual leave, sick leave and public holidays
• Laptop, plus a monthly internet and home-office allowance
• Annual learning budget for courses and certifications

What you'll own

• Our Azure environments (compute, App Service, databases, storage, Key Vault, networking) as infrastructure as code in Bicep
• CI/CD through GitHub Actions, with approval gates, and the release process: what ships, when, and how it rolls back
• Security: working the findings our scanning agents raise each week, identity and least-privilege access, managed identities instead of secrets, and Microsoft Defender for Cloud
• Observability, backup and tested recovery
• Cloud costs: tagging, budgets, rightsizing and reservations, and clear cost trade-offs for the business
• The platform and security agents themselves: tuning their rules and prompts, and improving them through pull requests like any other code

Agents find issues, draft plans and propose changes. They sign in with short-lived identities, hold no passwords or keys, and cannot approve anything. You decide what matters and approve what goes to production.

What you'll bring

• 6+ years running production workloads on Microsoft Azure, including networking, PaaS databases, Key Vault, Entra ID and RBAC
• Infrastructure as code with Bicep, or ARM or Terraform and a willingness to work in Bicep, delivered through pull requests and CI/CD
• Hands-on cloud security: you have fixed real findings, not just reported them, and hardened Linux and Windows servers
• Cost awareness: you have read an Azure bill, found the waste and removed it
• Daily use of AI tools such as Claude Code or GitHub Copilot, and the judgement to explain when an agent is wrong and fix the rule that caused it

Nice to have

• Workload identity federation and OIDC for CI/CD
• Azure Policy, or scanners such as PSRule or Checkov
• Scripting in PowerShell, Python or Node.js
• AZ-104, AZ-500 or AZ-305, or FinOps Certified Practitioner
• Experience in a regulated industry such as healthcare or finance