Lead IT Engineer: Identity, Security & IT Ops Future Secure AI Inc. Sydney, NSW, AU

Job Description

At Future Secure AI, we're building something genuinely new — and we're looking for people bold enough to build it with us. We work at the frontier of AI, tackling big, real-world problems for global enterprises across multiple industries, armed with state-of-the-art technology and a culture that prizes courage, rigor, and relentless curiosity. Our BRAVER values aren't just words on a wall — they describe the kind of people we are and the standard we hold ourselves to every day. Our leadership team is entrepreneurial, experienced, and accessible, with an open-door policy that means you'll never be just a number here. We invest seriously in your growth because we know our success depends on yours. If you're ready to work alongside some of the brightest minds in the industry, push into uncharted territory, and do work that genuinely matters, Future Secure AI is the place for you.

About Our IT Team

IT at FSAI keeps every employee's tools, access, and devices working so the rest of the business can move rapid. We're growing from roughly 440 to around 700 people, distributed globally, and this role scales with that growth. We're also in the middle of bringing IT fully in-house: taking over day-to-day operations from an outsourced MSP, standing up our own tool stack and building a real global equipment program.

About the Role

We're hiring a Lead IT Engineer, Support to own identity, access, and security operations as FSAI takes IT fully in-house. This role will involve taking over administration and management responsibility currently held by our outsourced provider, standing up the tools and governance that don't exist today, and setting the technical standard the rest of the team builds on. You report directly to the Head of IT, and you work closely with an IT Engineer, Support who owns endpoint, device, and network operations, so between the two of you, the full stack is covered.

This is a hands‑on build role, not a pure architecture or oversight position. You're standing up real systems yourself in the first several months.

Responsibilities

Identity & Access Administration

- Own Entra ID, SSO, and access governance end to end
- Lead the reconciliation of employee, contractor, and service accounts across Entra ID, our HRIS, and our contractor platform, closing gaps on stale, orphaned, or unauthorized access
- Build and maintain FSAI's identity and access inventory (systems, owners, user/admin counts, SSO/MFA/SCIM coverage) and run it on a quarterly access review cadence
- Own the privileged access review process for admin roles, taking that responsibility fully in-house from our outsourced provider
- Publish and enforce an SSO/MFA coverage standard across all critical business applications
- Select and roll out an Identity Governance & Administration (IGA) tool (net-new purchase, currently unselected)

Security Operations / Managed Detection & Response

- Own the transition of our outsourced provider's SOC coverage (Managed EDR, Managed ITDR, Managed SIEM) into an internally owned security operations capability. CrowdStrike (Falcon) is confirmed as our EDR platform, deployment and logging rollout are still in progress, this is the single highest-risk handover in the transition, since the outsourced provider currently holds Global Admin here




- Partner with the Security team and Head of IT on tool selection and coverage continuity during the transition
- Provide input to FSAI's core IT policy set (acceptable use, access control, device management, vendor review, incident response) with Security and Legal
- Own the evidence tracker mapping IT-owned controls to system owners, supporting our SOC 2, ISO 27001, and GDPR audit readiness
- Partner with Security and Legal on the due diligence process for new vendors and AI tooling, from intake through security review to contract
- Contribute to ratifying FSAI's IT operating model, RACI, and escalation paths as we formalize how the team runs

Documentation & Process

- Build the runbooks, documentation, and escalation model the team will run on once the outsourced provider steps back
- Rebuild the institutional knowledge currently held outside the company

Cross-Department Partnership

- Act as IT's standing partner to each business function, proactively improving how teams work with technology, not just closing tickets
- Provide hands‑on support alongside teams, not from behind a queue
- Own the transition's core tool stack in partnership with the Head of IT: MDM (FleetDM is the leading candidate, final platform selection in progress), Freshdesk (ticketing/help desk, confirmed), remote access/RMM (TeamViewer One vs. NinjaOne, tool decision still being finalized), and 1Password (password manager, migration off our current tool in progress)

Required Qualifications

- 5+ years in IT or systems administration, including identity‑oriented or security‑adjacent work
- Hands‑on Microsoft 365 and Entra ID administration experience
- Experience reconciling identity data across multiple systems (HRIS, contractor platforms, directory services) to close access and offboarding gaps
- Familiarity with SOC/EDR/SIEM concepts and vendor management, even if you haven't operated these tools hands‑on day to day
- Experience building documentation, runbooks, or operational process from scratch
- Strong experience partnering with non‑IT stakeholders and business functions

Preferred Qualifications

- Experience standing up an internal IT function previously run by an outsourced MSP
- Identity Governance & Administration (IGA) tool selection or implementation experience
- Experience scaling IT for a company growing from a few hundred to 700+ employees
- Scripting or automation experience (PowerShell, Python) to reduce manual IT work
- CISSP, CISM, Security+, or an identity‑platform certification (Microsoft Entra, Okta, SailPoint, or similar)
- Experience supporting SOC 2, ISO 27001, or GDPR audit cycles, including evidence collection and control ownership

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self‑identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.





As set forth in Future Secure AI's Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:

- A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service‑connected disability.
- A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.
- An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.
- An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Voluntary Self-Identification of Disability

Select...

- Alcohol or other substance use disorder (not currently using drugs illegally)
- Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
- Blind or low vision
- Cancer (past or present)
- Cardiovascular or heart disease
- Celiac disease
- Cerebral palsy
- Deaf or serious difficulty hearing
- Diabetes
- Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
- Epilepsy or other seizure disorder
- Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
- Intellectual or developmental disability
- Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
- Missing limbs or partially missing limbs
- Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
- Nervous system condition, for example, migraine headaches, Parkinson's disease, multiple sclerosis (MS)
- Neurodivergence, for example, attention‑deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
- Partial or complete paralysis (any cause)
- Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
- Short stature (dwarfism)
- Traumatic brain injury

Disability Status Select...

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.

#J-18808-Ljbffr

📌 Lead It Engineer: Identity, Security & It Ops (New South Wales)
🏢 Future Secure AI
📍 New South Wales