Enterprise IT & Security Engineer

Work with cutting-edge AI technology that helps make the world a safer and more secure place. DroneShield (ASX:DRO) develops market-leading counter-drone solutions used by military organisations, government agencies, airports, critical infrastructure operators, and law enforcement operating in some of the most challenging and high-stakes environments in the world. Employees work at the forefront of innovation, solving complex technical problems and delivering mission-critical capabilities where performance, reliability, and speed matter.

As an ASX200-listed company and the world's only publicly listed pure-play counter-drone business, DroneShield is experiencing rapid growth. Revenue increased from A$57 million in 2024 to more than A$217 million in 2025, supported by record profitability, a global sales pipeline exceeding A$2.5 billion, and annual R&D investment of over A$50 million.

Since 2017, DroneShield has grown from 11 employees to more than 550 globally, with operations across Australia, the United States, Europe, and the Middle East, supporting customers in over 70 countries.

DroneShield's U.S. headquarters in Warrenton, Virginia, supports American customers through locally based R&D, sales, customer support, and engagement with defence and security stakeholders.

About the role

DroneShield is seeking an Enterprise IT & Security Engineer to be the on-site IT and security engineer for our U.S. headquarters in Warrenton, Virginia. This is a mid-level, hands-on role for someone with a few years in IT operations or security who is ready to own the day-to-day of a small office and grow into the security side of the work.

The role sits in the Enterprise Security (EntSec) team and reports to the Enterprise Security Team Lead in Sydney. EntSec is a small team inside the wider Security function, alongside Detection & Response (DnR) and Product Security, and works closely with IT. EntSec owns the security of DroneShield's corporate environment: identity, endpoints, patching and vulnerability management, remote access, and the technical controls that back our ISO 27001, Essential Eight and CMMC obligations.

You will be the face of IT and security for the Warrenton office. You keep people working, keep devices and identities secure, respond first when something goes wrong, and do the hands-on work that supports our CMMC program. You will build laptops and resolve tickets in the same week you tighten Conditional Access or pull evidence for an assessor.

The partnership model matters here. Sydney owns security governance, the CMMC program and infrastructure design. The global IT team builds and runs the foundational platforms and reviews significant infrastructure changes. You own local execution and first response, and you escalate early when something is outside your depth. Because of the time difference you will work alone for most of the U.S. business day, so sound judgement, clear documentation and knowing when to wake someone up are part of the job.

Strong communication skills and being a hands-on engineer are a must.

Responsibilities, Duties and Expectations

Own ticket intake, prioritisation and resolution for the U.S. office, and be the escalation point for local IT and security issues

Build, deploy and support Windows laptops and mobile devices, and provide hands-on hardware, software and collaboration tool support for onsite and remote U.S. staff

Run joiner, mover and leaver processes for U.S. staff in line with global procedures

Administer users, groups, devices and application access in Entra ID, including Conditional Access, MFA and role-based access, within the global baseline

Administer and harden Windows endpoints through Intune: compliance and configuration policies, patching, encryption and EDR, and remediate drift from the global baseline

Operate the Warrenton office network day to day (firewall, Wi-Fi, VPN and switching), make routine changes, and plan significant changes with the global IT team

Operate the small on-site server environment (virtualisation host, local services, backups) with design and change review from Sydney

Act as first responder for security incidents affecting U.S. users and devices: contain, preserve evidence and escalate to the global security team using the agreed criteria

Carry out the hands-on work that supports CMMC readiness in the U.S.: control implementation on endpoints and identity, evidence collection, remediation of findings and support to assessors

Keep the local environment documented, the asset register current, and local runbooks and incident contact lists up to date

Help the Team Lead and IT Manager plan local IT and security spend, and coordinate on-site vendors and contractors within approved access processes

Qualifications, Experience and Skills

Bachelor degree in Computer Science, Information Technology or a similar technical field, or equivalent practical experience

3 to 6 years in hands-on IT operations, systems administration or security operations roles. Backgrounds that fit well include:

Systems or endpoint administrator in a Microsoft 365 / Entra environment

IT generalist at a small or mid-sized company with a security focus

Security engineer supporting corporate infrastructure

On-the-tools experience, including end-user support. This is not a governance-only role

Excellent communication skills, able to explain technical risk to non-technical stakeholders

Comfortable working alone for most of the day, making sensible calls, documenting them and escalating the right things

Eligible to obtain and maintain a U.S. security clearance

Preferred Experience

Experience updating policies, procedures, standards, and technical documentation to support audit readiness and operational consistency.

Experience working in the United States Defense Industrial Base.

Experience supporting organizations requiring facility clearances.

Experience with Microsoft Government Community Cloud (GCC) platforms.

Security or IT certifications (e.g., CISSP, CISM, Security+, CMMC-RP, ITIL).

Experience developing and maintaining IT and security budgets.

Practical understanding of governance, risk, and compliance concepts and how they translate into technical and operational controls.

Essential

Entra ID administration, including Conditional Access and MFA

Endpoint management with Intune, including compliance and configuration policies, app deployment and patching

EDR and endpoint hardening on Windows

Working knowledge of office networking: firewalls, VPN, Wi-Fi, DNS and DHCP, and the ability to troubleshoot them

Experience supporting a security or compliance framework with evidence (ISO 27001, SOC 2, NIST 800-171 or similar)

Some incident response experience: triage, containment and escalation

Desirable

A current or previously held U.S. security clearance

Exposure to CMMC 2.0 or NIST SP 800-171

Experience in the U.S. Defense Industrial Base or at a company with a facility clearance

Virtualisation (Proxmox, Hyper-V or VMware), backups and basic monitoring

Linux administration basics

Microsoft GCC or GCC High

Scripting for automation in PowerShell or Microsoft Graph

Security+, SC-300, MD-102, AZ-500 or similar

Growth Path

This role is designed for someone who can run the Warrenton office with confidence and wants to deepen their security engineering skills. Working directly with the Global Security Team Lead and the global IT team, the right candidate will take on the U.S. IT and security platforms end to end, build real incident response and CMMC experience, and grow their technical depth across identity and endpoint security. Progression will be recognised and rewarded as capability and contribution are demonstrated.

Note for recruitment agencies: We do not accept unsolicited candidates from external recruiters unless specifically instructed.

Data Privacy

DroneShield Group Pty Ltd collects and processes personal information for recruitment and hiring purposes. Where applicable, personal information is processed on the basis of DroneShield's legitimate interests in assessing and selecting candidates for employment. For further information regarding how we collect, use, disclose, store and retain personal information, including your privacy rights, please refer to our Privacy Policy: https://www.droneshield.com/privacy-policy

This is an anticipated salary range for this role in Virginia. Actual salary varies due to factors that may include but not limited to relevant experience, skills, certifications and location. $110,000 — $130,000 USD