Skip to main content
Engineering & Delivery

We work beyond the documentation.

A highly skilled engineering team spanning administration, auditing, software engineering, and platform SMEs. We deliver professional solutions tailored to your requirements, excelling in highly complex and regulated environments and delivering business outcomes from data-driven decisions.

100+Implementations
2BeyondTrust Technical Excellence Awards, 2024-2026
6Platforms
100%Australian
Engineering at Modern 42

When the standard approach falls short.

We are an engineering house with specialised, deep technical knowledge of the platforms we implement. We focus on a deliberate product set so our engineers genuinely know and are highly experienced with the tools they work with, not just the documentation. Over time, we have built strong relationships with the product teams behind the platforms we implement, giving us direct access to roadmap insight and escalation paths that benefit our clients.

Most IAM and PAM implementations follow vendor guides, and that works for straightforward cases. Modern 42 is called in when it doesn't: when the environment has accumulated years of technical debt, when there is no precedent to follow, or when the stakes are too high for trial and error.

Our team includes architects who have led BeyondTrust deployments across Australia's largest enterprises, built complex Entra ID tenants for regulated industries, and migrated CIAM platforms with millions of external identities. Our engineers also bring experience across Okta, SailPoint, CyberArk, and Saviynt, giving them the context to navigate multi-vendor environments even where those platforms are not our primary focus.

Modern 42 engineering team collaborating

BeyondTrust Advanced Partner

Partner of the Year 2024-2026 (Technical Excellence). Deep specialisation across Password Safe, Endpoint Privilege Management, and Privileged Remote Access.

Microsoft IAM Specialisation & Cloud Security Partner

The full Entra suite: Entra ID, Entra External ID, Entra ID Governance, Security Copilot, and Global Secure Access across regulated enterprise environments.

Engineering & Delivery

Specialist Engineers
that know the platforms inside out.

From BeyondTrust PAM deployments to complex Entra ID migrations, our engineers are brought in when the standard implementation approach falls short. We bring in the right tools to test, gain observability, and deliver data-driven decisions.

01

Secure Microsoft Entra ID

Conditional Access frameworks, application governance, and continuous monitoring. Strengthen your identity foundation with proven design and deployment expertise.
02

Privileged Access Management

BeyondTrust Password Safe, EPM, and PRA implementations for Australian enterprise. Full onboarding of privileged accounts and assets.
03

MIM Replacement to Entra ID

Migrate from legacy Microsoft Identity Manager to Entra ID Governance and Lifecycle Workflows with minimal disruption.
04

Azure B2C to Entra External ID

CIAM platform migration with JIT password migration and custom policy rebuild for external identity scenarios.
05

Workforce IAM & IGA

Identity lifecycle, access governance, and IGA for the enterprise workforce. HR-driven provisioning, access reviews, and role management.
06

Identity Observability

Deploy and configure Apporetum for continuous visibility across your identity and privilege controls. Available on Azure Marketplace.
07

SSO Application Migration

Consolidate and modernise federation across your application estate. Migrate legacy SSO configurations to Entra ID.
08

Outbound Collaboration

Secure external collaboration through properly governed guest access, B2B direct connect, and cross-tenant access policies.
Platforms we Engineer

Technology we specialise in

Our engineers hold deep, vendor-certified expertise across the platforms that power enterprise identity.

Microsoft Entra ID

Workforce Identity

  • Conditional Access

    Build framework driven policies for Zero Trust

  • PIM

    Manage Privileged Roles and Identities

  • MFA

    Enable Multi-factor and move towards Phish-Resistant Methods

  • Access Reviews

    Periodic entitlement review

  • Lifecycle Workflows

    Joiner, mover, leaver

  • Global Secure Access

    Zero-Trust Networking

  • Govern Application

    Govern your Workload Identities and Agent AIs

Entra External ID

Customer Identity

  • Identity Migration

    Migrate users from Azure B2C and Auth0

  • SSO Customisation

    Customize sign-in and registration experiences

  • CIAM MFA

    Multi-factor authentication for customer identities

  • Closed Community

    Invite-only access for partner ecosystems

  • Customer Lifecycle

    Onboarding, Offboarding, Step Up

  • B2B / B2C

    External identity federation

  • JIT Migration

    Just-In-Time migration from B2C and Legacy CIAM IDPs

BeyondTrust

Privileged Access

  • Password Safe

    Credential vault & rotation

  • Pathfinder

    Credential vault & rotation

  • EPM

    Endpoint Privilege Management

  • PRA

    Privileged Remote Access

  • Remote Support

    Secure remote assistance

  • Entitle

    Privilege just-in-time access.

  • Identity Security

    Directory bridge & SSO

Active Directory

Hybrid Identity

  • Entra Connect

    Optimize and build monitoring for Entra Connect

  • Hybrid Identity Management

    CIAM at scale

  • Windows Hello for Business

    Single sign-on

  • MIM / FIM

    Provisioning & deprovisioning

  • ASD AD Assessment

    Provisioning & deprovisioning

  • AD Security

    Provisioning & deprovisioning

Microsoft 365

Secure Collaboration

  • Intune

    Device & application management

  • SharePoint

    Collaboration and content management

  • Microsoft Teams

    Unified communication and collaboration

  • Security Copilot

    AI-powered security operations

  • M365 Copilot

    AI assistant for productivity and collaboration

  • Defender

    Unified security and threat protection

Case Studies

See the work delivered

Platform builds, migrations and deployments across regulated and complex environments.

View all case studies
Federal Government01

Transforming Identity and Cyber Capability for a Federal Government Department

A large Australian Government department partnered with Modern 42 to overhaul its identity infrastructure and strengthen its cyber security posture.

Multi-year partnershipLegacy MIM replacedASD ISM aligned
Retail Property / Real Estate02

End-to-End PAM Capability Uplift for a Major Australian Retail Property Group

A major Australian retail property group partnered with Modern 42 over multiple years to embed a mature Privileged Access Management capability.

BeyondTrust deployed24 app access reviewsMulti-year partnership
State Government03

Delivering a CIAM Capability on Entra External ID for a State Government Organisation

A state government organisation partnered with Modern 42 to rapidly deliver a Customer Identity and Access Management (CIAM) capability on Microsoft Entra External ID, enabling a critical departmental transition.

Fixed deadline metEntra External IDSeamless BAU transition
FAQ

Questions about engineering engagements

How do you staff engineering engagements?
We name our resources on every work package so you get to know your engineering team. All engagements are backed by senior architects who are available when needed and review the work throughout. You always know who is delivering and who is accountable.
Can you work alongside our internal IT team?
Yes. Most of our engagements are collaborative. Knowledge transfer is part of how we deliver, so your team understands what was built and why.
How long do engineering projects typically take?
Timelines vary by scope. A BeyondTrust Password Safe deployment can be completed in six to eight weeks for a focused scope. A full workforce IAM programme with HR integration and access reviews is typically three to six months. We provide clear scoping before any work begins.
Do you offer post-delivery support?
Yes. Post-delivery configuration management and architecture review services are available. We also offer managed services for BeyondTrust PAM, Entra, and Apporetum deployments for ongoing operational support.
Do you bring your own IP to engineering engagements?
Yes. We don't like to reinvent the wheel. Where we have existing blueprints, SOPs, or delivery accelerators that cater for your needs, we use them and the price reflects that. You don't pay us to rebuild something we have already proven in a similar environment.

Let’s talk about your identity platform

No pitch decks. No pressure. Just a straightforward conversation about your Entra ID environment, what’s working, and what needs to change.

  • Review your current Entra ID and identity architecture
  • Identify migration paths and modernisation opportunities
  • Get practical engineering guidance, no strings attached

Free 30 min discussion

No commitment required

Book a time that works for you. We’ll come prepared with initial observations about your identity platform and common engineering challenges.

We use cookies

We use cookies and similar technologies to help personalise content, measure the performance of our site, and provide a better experience. By clicking Accept, you consent to the use of all cookies.
Learn more.