← All roles

Staff IT Systems Engineer, ICT Lead (R5660)

Shield AI· Enterprise Operations Division – Service Delivery / International Office Entity
Apply on company site
MelbourneA$0International Office EntityPosted 2w ago

About the role

Regional ICT Lead responsible for design, delivery and secure operation of information and communications technology supporting Shield AI’s Australian regional hub and its Asia Pacific and Middle East programs. Hands-on leadership of a small ICT team with accountability for network, cloud, endpoint, identity services and export-controls compliance.

Responsibilities

  • Lead, develop and grow a small ICT team; own hiring, performance management, workload allocation, on-call rostering and capability development.
  • Set the regional ICT strategy, roadmap and annual operating plan; own regional ICT budget, forecasting and capital planning.
  • Manage local vendors, managed service providers, carriers and licensing agreements, including commercial negotiation and service-level accountability.
  • Establish and enforce regional standards for documentation, change management, incident response and service delivery, aligned to ITIL or an equivalent framework.
  • Own the end-to-end regional network: campus and access-layer switching, wireless, routing, SD-WAN and WAN services, firewalls, VPN, DNS, DHCP, and monitoring.
  • Design and maintain segmented network enclaves that separate corporate, program and test environments in line with data-handling and need-to-know requirements.
  • Own site-to-site connectivity with the US parent company and partner organisations, including the controls that govern what traverses those links.
  • Deliver connectivity and compute for deployed, remote and flight-test locations, including transportable and low-bandwidth environments.
  • Manage server, storage, virtualisation and colocation infrastructure supporting regional engineering and program workloads.
  • Own regional cloud architecture and operations across AWS and/or Azure, including landing-zone design, tenancy and subscription structure, identity federation and network integration.
  • Ensure workloads and data reside in appropriate sovereign regions, and that data residency, jurisdiction and access constraints are enforced by design rather than by policy alone.
  • Drive infrastructure-as-code, automation and configuration management; use scripting and agentic AI tooling to reduce manual operational load.
  • Own cloud cost governance, capacity planning, backup, resilience and disaster recovery for the region.
  • Act as the regional ICT authority for export-control compliance, working with Trade Compliance and Legal to implement ITAR, EAR and Australian Defence Trade Controls Act obligations in the technical environment.
  • Design and operate access controls that reliably segregate data by nationality, program, clearance and need-to-know — including AUS-only, US-only and AUS/US-EYES-ONLY handling.
  • Translate Technical Assistance Agreements, licences and program security instructions into enforceable IT controls, and evidence that enforcement to auditors and customers.
  • Manage the interface with the US parent company on global tooling, tenancy and security policy; negotiate regional variations where sovereignty or export control requires them, and articulate the rationale clearly to both sides.
  • Support onboarding of foreign nationals, visitors and seconded personnel with correct system access, monitoring and offboarding.
  • Maintain regional alignment to the ASD Essential Eight and the Information Security Manual, and support Defence Industry Security Program (DISP) membership obligations.
  • Own identity and access management, privileged access, endpoint security, logging, and patch and vulnerability management for the region.
  • Partner with global security and the regional security officer on incident response, insider-risk controls, audits, assessments and certification activity.
  • Support the accreditation and ongoing assurance of program-specific and classified environments.
  • Deliver reliable day-to-day IT services across Windows, macOS and Linux endpoints, identity, collaboration tooling and asset management.
  • Provide high-touch support to regional executives, visiting leaders, customers and board members.
  • Provide ICT input into new site establishment, facility fit-out, program bids and customer engagements, including cost and schedule estimates.
  • Manage the regional IT asset lifecycle from procurement and deployment through inventory, licensing, refresh and secure decommissioning or destruction.

Qualifications

  • Australian citizenship, and an NV1 security clearance held or the demonstrated ability to obtain and maintain one.
  • 10+ years in enterprise ICT across infrastructure, network and systems administration, with progressive increases in scope and accountability.
  • 3+ years directly leading technical teams, including hiring, performance management and development of engineers.
  • Demonstrated ownership of enterprise networking: routing and switching, SD-WAN or WAN services, firewalls, VLANs and segmentation, wireless, VPN, DNS, DHCP and network monitoring.
  • Hands-on cloud engineering and operations experience in AWS and/or Azure, including identity federation, network integration, IaC and cost management.
  • Strong administration across Windows, macOS and Linux, with Active Directory, Microsoft Entra ID, group policy, IAM, Intune and Jamf.
  • Practical experience working inside a multinational structure — ideally as the in-country lead reconciling a foreign parent company’s global standards with local regulatory obligations.
  • Working knowledge of export control and data-classification regimes, and the ability to translate them into technical controls: ITAR, EAR, the Defence Trade Controls Act 2012, and Australian Government classification and handling requirements.
  • Experience operating in classified, need-to-know or otherwise access-restricted environments.
  • Scripting and automation capability (PowerShell, Bash or Python) and a strong bias toward automating operational work.
  • Excellent written and verbal communication, with the credibility to brief executives, customers and certifiers, and the clarity to explain constraints to non-technical stakeholders.
  • Willingness to travel domestically and regionally, participate in an on-call rotation and support scheduled after-hours maintenance.

Skills

Required:Team leadershipNetwork design and administrationCloud engineering (AWS/Azure)Scripting and automation

Benefits

  • Salary compensation is influenced by a wide array of factors including but not limited to skill set, level of experience, licenses and certifications, and specific work location.
  • Shield AI is an equal opportunity employer and supports equal employment opportunity regardless of race, colour, ancestry, religion, sex, national origin, sexual orientation, age, marital status, disability, gender identity or Veteran status. Accommodation available on request.
Last updated Oct 23, 2026. Interested? Apply on the company site.

About Shield AI

Autonomy for the world.

Our mission is to protect service members and civilians with intelligent systems.

AerospaceAutonomyDefenseliquid-ai-recruiting-targetsetter-30setter-30-2026-q1
Company profileWebsite

More open roles at Shield AI