Yes it can.

It is network activated and can be used but there are current no provision for sub-sites on a WPMS site. 

We will be providing more granular controls for Sub-sites in a future Shield Pro release, though there is no ETA on this.

So, Shield protects multisites, but there are no controls available for admin of sub-sites.