Staff IT Systems Engineer, ICT Lead (R5660)

Shield AI is a venture-backed defense-tech company with the mission of protecting service members and civilians with intelligent systems. Its products include Hivemind autonomy software, V-BAT and X-BAT aircraft, and Aechelon simulation and synthetic reality technologies. With offices and facilities across the U.S., Europe, the Middle East, and Asia-Pacific, Shield AI’s technology actively supports operations worldwide. For more information, visit www.shield.ai https://shield.ai/. Follow Shield AI on LinkedIn https://www.linkedin.com/company/shield-ai, X https://x.com/shieldaitech, Instagram https://www.instagram.com/shield_ai, and YouTube https://www.youtube.com/@Shield_AI. JOB DESCRIPTION: The Regional ICT Lead is accountable for the design, delivery and secure operation of all information and communications technology supporting Shield AI’s Australian regional hub and its programs across the Asia Pacific and Middle East. The role leads a small, high-calibre ICT team and is the single point of regional accountability for network, cloud, endpoint and identity services, and for the compliance controls that allow a US-parented business to deliver sovereign Australian defence outcomes. This is a hands-on leadership role. It combines people and vendor management with deep technical credibility, and it requires the judgement to reconcile global enterprise standards with Australian sovereignty, export-control and need-to-know obligations. The successful candidate will be equally comfortable in a server room, in front of a customer or certifier, and in a policy discussion with the parent company’s security and IT leadership. What you'll do: - Team leadership and ICT management - Lead, develop and grow a small team of ICT professionals; own hiring, performance management, workload allocation, on-call rostering and capability development. - Set the regional ICT strategy, roadmap and annual operating plan; own the regional ICT budget, forecasting and capital planning. - Manage local vendors, managed service providers, carriers and licensing agreements, including commercial negotiation and service-level accountability. - Establish and enforce regional standards for documentation, change management, incident response and service delivery, aligned to ITIL or an equivalent framework. Network and infrastructure - Own the end-to-end regional network: campus and access-layer switching, wireless, routing, SD-WAN and WAN services, firewalls, VPN, DNS, DHCP, and monitoring. - Design and maintain segmented network enclaves that separate corporate, program and test environments in line with data-handling and need-to-know requirements. - Own site-to-site connectivity with the US parent company and partner organisations, including the controls that govern what traverses those links. - Deliver connectivity and compute for deployed, remote and flight-test locations, including transportable and low-bandwidth environments. - Manage server, storage, virtualisation and colocation infrastructure supporting regional engineering and program workloads. Cloud and platform operations - Own regional cloud architecture and operations across AWS and/or Azure, including landing-zone design, tenancy and subscription structure, identity federation and network integration. - Ensure workloads and data reside in appropriate sovereign regions, and that data residency, jurisdiction and access constraints are enforced by design rather than by policy alone. - Drive infrastructure-as-code, automation and configuration management; use scripting and agentic AI tooling to reduce manual operational load. - Own cloud cost governance, capacity planning, backup, resilience and disaster recovery for the region. Export control, data classification and sovereignty - Act as the regional ICT authority for export-control compliance, working with Trade Compliance and Legal to implement ITAR, EAR and Australian Defence Trade Controls Act obligations in the technical environment. - Design and operate access controls that reliably segregate data by nationality, program, clearance and need-to-know — including AUS-only, US-only and AUS/US-EYES-ONLY handling. - Translate Technical Assistance Agreements, licences and program security instructions into enforceable IT controls, and evidence that enforcement to auditors and customers. - Manage the interface with the US parent company on global tooling, tenancy and security policy; negotiate regional variations where sovereignty or export control requires them, and articulate the rationale clearly to both sides. - Support onboarding of foreign nationals, visitors and seconded personnel with correct system access, monitoring and offboarding. Security and compliance - Maintain regional alignment to the ASD Essential Eight and the Information Security Manual, and support Defence Industry Security Program (DISP) membership obligations. - Own identity and access management, privileged access, endpoint security, logging, and patch and vulnerability management for the region. - Partner with global security and the regional security officer on incident response, insider-risk controls, audits, assessments and certification activity. - Support the accreditation and ongoing assurance of program-specific and classified environments. - Service delivery and program support - Deliver reliable day-to-day IT services across Windows, macOS and Linux endpoints, identity, collaboration tooling and asset management. - Provide high-touch support to regional executives, visiting leaders, customers and board members. - Provide ICT input into new site establishment, facility fit-out, program bids and customer engagements, including cost and schedule estimates. - Manage the regional IT asset lifecycle from procurement and deployment through inventory, licensing, refresh and secure decommissioning or destruction. Required qualifications: - -  Australian citizenship, and an NV1 security clearance held or the