Staff IT Systems Engineer, ICT Lead (R5660)

On-site

Posted 2 days ago

Enterprise Operations Division

AI summary

The Staff IT Systems Engineer will lead a small ICT team, overseeing the design, delivery, and secure operation of IT services for Shield AI's Australian hub, while ensuring compliance with local regulations and managing technical operations in networking and cloud services.

Eligible from: Unclear

Job Description

Job Description:

The Regional ICT Lead is accountable for the design, delivery and secure operation of all information and communications technology supporting Shield AI’s Australian regional hub and its programs across the Asia Pacific and Middle East. The role leads a small, high-calibre ICT team and is the single point of regional accountability for network, cloud, endpoint and identity services, and for the compliance controls that allow a US-parented business to deliver sovereign Australian defence outcomes.

This is a hands-on leadership role. It combines people and vendor management with deep technical credibility, and it requires the judgement to reconcile global enterprise standards with Australian sovereignty, export-control and need-to-know obligations. The successful candidate will be equally comfortable in a server room, in front of a customer or certifier, and in a policy discussion with the parent company’s security and IT leadership.

Responsibilities

What you'll do:

Team leadership and ICT management

Lead, develop and grow a small team of ICT professionals; own hiring, performance management, workload allocation, on-call rostering and capability development.

Set the regional ICT strategy, roadmap and annual operating plan; own the regional ICT budget, forecasting and capital planning.

Manage local vendors, managed service providers, carriers and licensing agreements, including commercial negotiation and service-level accountability.

Establish and enforce regional standards for documentation, change management, incident response and service delivery, aligned to ITIL or an equivalent framework.

Network and infrastructure

Own the end-to-end regional network: campus and access-layer switching, wireless, routing, SD-WAN and WAN services, firewalls, VPN, DNS, DHCP, and monitoring.

Design and maintain segmented network enclaves that separate corporate, program and test environments in line with data-handling and need-to-know requirements.

Own site-to-site connectivity with the US parent company and partner organisations, including the controls that govern what traverses those links.

Deliver connectivity and compute for deployed, remote and flight-test locations, including transportable and low-bandwidth environments.

Manage server, storage, virtualisation and colocation infrastructure supporting regional engineering and program workloads.

Cloud and platform operations

Own regional cloud architecture and operations across AWS and/or Azure, including landing-zone design, tenancy and subscription structure, identity federation and network integration.

Ensure workloads and data reside in appropriate sovereign regions, and that data residency, jurisdiction and access constraints are enforced by design rather than by policy alone.

Drive infrastructure-as-code, automation and configuration management; use scripting and agentic AI tooling to reduce manual operational load.

Own cloud cost governance, capacity planning, backup, resilience and disaster recovery for the region.

Export control, data classification and sovereignty

Act as the regional ICT authority for export-control compliance, working with Trade Compliance and Legal to implement ITAR, EAR and Australian Defence Trade Controls Act obligations in the technical environment.

Design and operate access controls that reliably segregate data by nationality, program, clearance and need-to-know — including AUS-only, US-only and AUS/US-EYES-ONLY handling.

Translate Technical Assistance Agreements, licences and program security instructions into enforceable IT controls, and evidence that enforcement to auditors and customers.

Manage the interface with the US parent company on global tooling, tenancy and security policy; negotiate regional variations where sovereignty or export control requires them, and articulate the rationale clearly to both sides.

Support onboarding of foreign nationals, visitors and seconded personnel with correct system access, monitoring and offboarding.

Security and compliance

Maintain regional alignment to the ASD Essential Eight and the Information Security Manual, and support Defence Industry Security Program (DISP) membership obligations.

Own identity and access management, privileged access, endpoint security, logging, and patch and vulnerability management for the region.

Partner with global security and the regional security officer on incident response, insider-risk controls, audits, assessments and certification activity.

Support the accreditation and ongoing assurance of program-specific and classified environments.

Service delivery and program support

Deliver reliable day-to-day IT services across Windows, macOS and Linux endpoints, identity, collaboration tooling and asset management.

Provide high-touch support to regional executives, visiting leaders, customers and board members.

Provide ICT input into new site establishment, facility fit-out, program bids and customer engagements, including cost and schedule estimates.

Manage the regional IT asset lifecycle from procurement and deployment through inventory, licensing, refresh and secure decommissioning or destruction.

Experience with a defence prime, defence SME or Defence itself, delivering ICT into Australian Defence programs.

Familiarity with AUKUS Pillar 2 arrangements, licence-free environment provisions, or equivalent bilateral technology-sharing frameworks.

Experience establishing or maintaining DISP membership, or supporting IRAP assessments and ISM-aligned accreditation.

Experience standing up ICT for a new site, facility or country entry.

Exposure to Indo-Pacific delivery, partner-nation engagement or deployed operations.

Experience automating IT operations and workflows using agentic AI capability.

Relevant certifications: AWS or Azure architecture, CCNP or equivalent, CISSP, ITIL.

Requirements

Required qualifications:

Australian citizenship, and an NV1 security clearance held or the demonstrated ability to obtain and maintain one.

10+ years in enterprise ICT across infrastructure, network and systems administration, with progressive increases in scope and accountability.

3+ years directly leading technical teams, including hiring, performance management and development of engineers.

Demonstrated ownership of enterprise networking: routing and switching, SD-WAN or WAN services, firewalls, VLANs and segmentation, wireless, VPN, DNS, DHCP and network monitoring.

Hands-on cloud engineering and operations experience in AWS and/or Azure, including identity federation, network integration, IaC and cost management.

Strong administration across Windows, macOS and Linux, with Active Directory, Microsoft Entra ID, group policy, IAM, Intune and Jamf.

Practical experience working inside a multinational structure — ideally as the in-country lead reconciling a foreign parent company’s global standards with local regulatory obligations.

Working knowledge of export control and data-classification regimes, and the ability to translate them into technical controls: ITAR, EAR, the Defence Trade Controls Act 2012, and Australian Government classification and handling requirements.

Experience operating in classified, need-to-know or otherwise access-restricted environments.

Scripting and automation capability (PowerShell, Bash or Python) and a strong bias toward automating operational work.

Excellent written and verbal communication, with the credibility to brief executives, customers and certifiers, and the clarity to explain constraints to non-technical stakeholders.

Willingness to travel domestically and regionally, participate in an on-call rotation and support scheduled after-hours maintenance.

Ready to Apply?

Take the next step in your career journey

Apply Now

About the job

Posted on: Oct 7, 2026
Job type: Full-time
Location: MelbourneOn-site

Keep looking

Related roles you might like

15 open positions

Staff Safety-Critical Software Engineer (R5788)

Shield AI

On-siteFull-time1 day ago

Staff IT Systems Engineer, ICT Lead (R5660)

AI summary

Job Description

Job Description:

Responsibilities

What you'll do:

Requirements

Required qualifications:

Ready to Apply?

About the job

Related roles you might like

Staff Safety-Critical Software Engineer (R5788)

Staff Engineer, HMS DevOps/DevEx (R6196)

Senior Manager, Program Management - International Programs (R6163)

Director, Program Management Europe and Africa V-BAT Programs

Engineer I, Simulation Framework (R6203)

Engineer II, Integration (R6202)

Engineer II, Simulation Framework (R6204)

Network Architect (R6158)

Staff Loads and Dynamics Analyst (RX) (R5841)

Software Development Engineer - New Graduate

Chief Engineer, Air Vehicle Lead - MMA

Capture Team Lead – Poland (X-BAT Programme)

Staff Engineer, Advanced Manufacturing (R4968)

Associate Engineer, Manufacturing

Staff Organizational Change Management Specialist (R6184)

Browse more jobs like this

Category

Job type

Work arrangement