Lead IT Support Engineer

**About the Company** At Future Secure AI, we're building something genuinely new — and we're looking for people bold enough to build it with us. We work at the frontier of AI, tackling big, real-world problems for global enterprises across multiple industries, armed with state-of-the-art technology and a culture that prizes courage, rigor, and relentless curiosity. Our BRAVER values aren't just words on a wall — they describe the kind of people we are and the standard we hold ourselves to every day. Our leadership team is entrepreneurial, experienced, and accessible, with an open-door policy that means you'll never be just a number here. We invest seriously in your growth because we know our success depends on yours. If you're ready to work alongside some of the brightest minds in the industry, push into uncharted territory, and do work that genuinely matters, Future Secure AI is the place for you. **About the Role** We're hiring a Lead IT Engineer, Support to own identity, access, and security operations as FSAI takes IT fully in-house. This is the highest-stakes seat in the build: you're taking over Global Admin and Managed Detection & Response responsibility currently held by our outsourced provider, standing up the tools and governance that don't exist today, and setting the technical standard the rest of the team builds on. You report directly to the Head of IT, and you work closely with an IT Engineer, Support who owns endpoint, device, and network operations, so between the two of you, the full stack is covered. This is a hands-on build role, not a pure architecture or oversight position. You're standing up real systems yourself in the first several months. **Responsibilities** Identity & Access Administration - Own Entra ID, SSO, and access governance end to end - Lead the reconciliation of employee, contractor, and service accounts across Entra ID, our HRIS, and our contractor platform, closing gaps on stale, orphaned, or unauthorized access - Build and maintain FSAI's identity and access inventory (systems, owners, user/admin counts, SSO/MFA/SCIM coverage) and run it on a quarterly access review cadence - Own the privileged access review process for admin roles, taking that responsibility fully in-house from our outsourced provider - Publish and enforce an SSO/MFA coverage standard across all critical business applications - Select and roll out an Identity Governance & Administration (IGA) tool (net-new purchase, currently unselected) Security Operations / Managed Detection & Response - Own the transition of our outsourced provider's SOC coverage (Managed EDR, Managed ITDR, Managed SIEM) into an internally owned security operations capability. CrowdStrike (Falcon) is confirmed as our EDR platform, deployment and logging rollout are still in progress, this is the single highest-risk handover in the transition, since the outsourced provider currently holds Global Admin here - Partner with the Security team and Head of IT on tool selection and coverage continuity during the transition Governance, Risk & Compliance - Co-author FSAI's core IT policy set (acceptable use, access control, device management, vendor review, incident response) with Security and Legal - Own the evidence tracker mapping IT-owned controls to system owners, supporting our SOC 2, ISO 27001, and GDPR audit readiness - Partner with Security and Legal on the due diligence process for new vendors and AI tooling, from intake through security review to contract - Contribute to ratifying FSAI's IT operating model, RACI, and escalation paths as we formalize how the team runs Documentation & Process - Build the runbooks, documentation, and escalation model the team will run on once the outsourced provider steps back - Rebuild the institutional knowledge currently held outside the company Cross-Department Partnership - Act as IT's standing partner to each business function, proactively improving how teams work with technology, not just closing tickets - Provide hands-on support alongside teams, not from behind a queue Vendor & Tool Ownership - Own the transition's core tool stack in partnership with the Head of IT: MDM (FleetDM is the leading candidate, final platform selection in progress), Freshdesk (ticketing/help desk, confirmed), remote access/RMM (TeamViewer One vs. NinjaOne, tool decision still being finalized), and 1Password (password manager, migration off our current tool in progress) **Minimum Qualifications** - 5+ years in IT or systems administration, including identity- or security-adjacent work - Hands-on Microsoft 365 and Entra ID administration experience - Experience reconciling identity data across multiple systems (HRIS, contractor platforms, directory services) to close access and offboarding gaps - Familiarity with SOC/EDR/SIEM concepts and vendor management, even if you haven't operated these tools hands-on day to day - Experience building documentation, runbooks, or operational process from scratch - Strong experience partnering with non-IT stakeholders and business functions **Preferred Qualifications** - Experience standing up an internal IT function previously run by an outsourced MSP - Identity Governance & Administration (IGA) tool selection or implementation experience - Experience scaling IT for a company growing from a few hundred to 700+ employees - Scripting or automation experience (PowerShell, Python) to reduce manual IT work - CISSP, CISM, Security+, or an identity-platform certification (Microsoft Entra, Okta, SailPoint, or similar) - Experience supporting SOC 2, ISO 27001, or GDPR audit cycles, including evidence collection and control ownership ## Future Secure AI Privacy Policy At Future Secure AI, we are committed to protecting your privacy and adhering to the principles of the General Data Protection Regulation (GDPR) and the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). Our [Privacy Policy](https://career.futuresecure.ai/privacy-policy) outlines how we collect, use, share, and protect your personal data when you visit our website at [](http://www.futuresecure.ai/) (the "Website") and use our services.