Staff IT Systems Engineer, ICT Lead (R5660)

What you'll do:

Team leadership and ICT management
Lead, develop and grow a small team of ICT professionals; own hiring, performance management, workload allocation, on-call rostering and capability development.
Set the regional ICT strategy, roadmap and annual operating plan; own the regional ICT budget, forecasting and capital planning.
Manage local vendors, managed service providers, carriers and licensing agreements, including commercial negotiation and service-level accountability.
Establish and enforce regional standards for documentation, change management, incident response and service delivery, aligned to ITIL or an equivalent framework.
Network and infrastructure
Own the end-to-end regional network: campus and access-layer switching, wireless, routing, SD-WAN and WAN services, firewalls, VPN, DNS, DHCP, and monitoring.
Design and maintain segmented network enclaves that separate corporate, program and test environments in line with data-handling and need-to-know requirements.
Own site-to-site connectivity with the US parent company and partner organisations, including the controls that govern what traverses those links.
Deliver connectivity and compute for deployed, remote and flight-test locations, including transportable and low-bandwidth environments.
Manage server, storage, virtualisation and colocation infrastructure supporting regional engineering and program workloads.
Cloud and platform operations
Own regional cloud architecture and operations across AWS and/or Azure, including landing-zone design, tenancy and subscription structure, identity federation and network integration.
Ensure workloads and data reside in appropriate sovereign regions, and that data residency, jurisdiction and access constraints are enforced by design rather than by policy alone.
Drive infrastructure-as-code, automation and configuration management; use scripting and agentic AI tooling to reduce manual operational load.
Own cloud cost governance, capacity planning, backup, resilience and disaster recovery for the region.
Export control, data classification and sovereignty
Act as the regional ICT authority for export-control compliance, working with Trade Compliance and Legal to implement ITAR, EAR and Australian Defence Trade Controls Act obligations in the technical environment.
Design and operate access controls that reliably segregate data by nationality, program, clearance and need-to-know — including AUS-only, US-only and AUS/US-EYES-ONLY handling.
Translate Technical Assistance Agreements, licences and program security instructions into enforceable IT controls, and evidence that enforcement to auditors and customers.
Manage the interface with the US parent company on global tooling, tenancy and security policy; negotiate regional variations where sovereignty or export control requires them, and articulate the rationale clearly to both sides.
Support onboarding of foreign nationals, visitors and seconded personnel with correct system access, monitoring and offboarding.
Security and compliance
Maintain regional alignment to the ASD Essential Eight and the Information Security Manual, and support Defence Industry Security Program (DISP) membership obligations.
Own identity and access management, privileged access, endpoint security, logging, and patch and vulnerability management for the region.
Partner with global security and the regional security officer on incident response, insider-risk controls, audits, assessments and certification activity.
Support the accreditation and ongoing assurance of program-specific and classified environments.
Service delivery and program support
Deliver reliable day-to-day IT services across Windows, macOS and Linux endpoints, identity, collaboration tooling and asset management.
Provide high-touch support to regional executives, visiting leaders, customers and board members.
Provide ICT input into new site establishment, facility fit-out, program bids and customer engagements, including cost and schedule estimates.
Manage the regional IT asset lifecycle from procurement and deployment through inventory, licensing, refresh and secure decommissioning or destruction.

Required qualifications:

 Australian citizenship, and an NV1 security clearance held or the demonstrated ability to obtain and maintain one.
10+ years in enterprise ICT across infrastructure, network and systems administration, with progressive increases in scope and accountability.
3+ years directly leading technical teams, including hiring, performance management and development of engineers.
Demonstrated ownership of enterprise networking: routing and switching, SD-WAN or WAN services, firewalls, VLANs and segmentation, wireless, VPN, DNS, DHCP and network monitoring.
Hands-on cloud engineering and operations experience in AWS and/or Azure, including identity federation, network integration, IaC and cost management.
Strong administration across Windows, macOS and Linux, with Active Directory, Microsoft Entra ID, group policy, IAM, Intune and Jamf.
Practical experience working inside a multinational structure — ideally as the in-country lead reconciling a foreign parent company’s global standards with local regulatory obligations.
Working knowledge of export control and data-classification regimes, and the ability to translate them into technical controls: ITAR, EAR, the Defence Trade Controls Act 2012, and Australian Government classification and handling requirements.
Experience operating in classified, need-to-know or otherwise access-restricted environments.
Scripting and automation capability (PowerShell, Bash or Python) and a strong bias toward automating operational work.
Excellent written and verbal communication, with the credibility to brief executives, customers and certifiers, and the clarity to explain constraints to non-technical stakeholders.
Willingness to travel domestically and regionally, participate in an on-call rotation and support scheduled after-hours maintenance.

Experience with a defence prime, defence SME or Defence itself, delivering ICT into Australian Defence programs.
Familiarity with AUKUS Pillar 2 arrangements, licence-free environment provisions, or equivalent bilateral technology-sharing frameworks.
Experience establishing or maintaining DISP membership, or supporting IRAP assessments and ISM-aligned accreditation.
Experience standing up ICT for a new site, facility or country entry.
Exposure to Indo-Pacific delivery, partner-nation engagement or deployed operations.
Experience automating IT operations and workflows using agentic AI capability.
Relevant certifications: AWS or Azure architecture, CCNP or equivalent, CISSP, ITIL.