Transforming Identity and Cyber Capability for a Federal Government Department
A large Australian Government department partnered with Modern 42 to overhaul its identity infrastructure and strengthen its cyber security posture.
At a glance
- Multi-year partnership
- Legacy MIM replaced
- ASD ISM aligned
The situation
This department delivers essential services to a broad Australian community. Its identity and access management (IAM) environment had grown organically over many years, creating a complex web of legacy systems, fragmented processes and inconsistent access controls.
The department recognised that a comprehensive evaluation of its IAM capability was essential. Without a clear understanding of its current posture, it could not chart a path toward a modern, cloud-native identity platform. At the same time, the department was establishing new shared infrastructure and needed assurance that its privileged access controls met the required security standards.
Internal reviews had identified gaps in how privileged access was being governed, adding urgency to the initiative.
What we did
- 01
Strategy and Architecture
We conducted a thorough current state analysis, benchmarking IAM maturity against our proprietary IAM Capability Model. From this assessment, we developed the IAM Strategy, Roadmap, Target Architecture and High-Level Design, giving the department a clear, sequenced plan for transformation.
- 02
Privileged Access Management
We designed the PAM Blueprint, defined use cases and delivered a prioritised implementation plan, directly addressing review findings and securing the shared infrastructure environment.
- 03
Zero Trust and Network Security
We led a Zero Trust Network Architecture Proof of Concept, validating the approach for integration into the department's broader security posture.
- 04
Platform Engineering
We designed and built a new cloud-native Identity and Access Management platform to replace the legacy Microsoft Identity Manager. This included deploying Apporetum Access Manager into production and transitioning it into service. The new platform leverages event-driven architecture with microservices, with all deployments managed through DevOps CI/CD pipelines.
- 05
Additional Deliverables
Stabilisation of critical legacy Active Directory infrastructure. Security advisory for privileged access in response to internal review findings. Security classification uplift for the department's network. Uplift of Microsoft Entra capabilities to reduce reliance on on-premises Active Directory.
The outcome
The department now operates a contemporary cloud-based identity solution built on Microsoft Entra ID, supported by automated provisioning, modern access governance, and a fully defined service design. Identity data remediation and migration activities are actively progressing.
What began as a strategic advisory engagement has evolved into a deep, multi-year partnership spanning strategy through to engineering, with Modern 42 continuing to deliver across the department's IAM and Cyber Uplift program.
Key wins
- Delivered end-to-end IAM Strategy, Architecture and Roadmap aligned to ASD ISM and Essential Eight
- Addressed privileged access findings with a comprehensive PAM Blueprint and implementation plan
- Successfully deployed and transitioned a cloud-native identity platform into production
- Validated Zero Trust Network Architecture through a successful Proof of Concept
- Supported security classification uplift for the department's network
- Automated IAM capabilities across multiple environments and Azure tenants using CI/CD pipelines