Skip to main content
Modern 42
Contact Us
Managed Services

Your identity platform, managed by the team that understands it.

Not every organisation has the internal capacity to operate a complex identity and privilege platform day-to-day. Modern 42's managed services extends your team to include engineers who are experts in their field.

Discuss managed servicesAll services
100+IAM & PAM projects delivered
100%Australian-delivered
25+Specialist staff
24/7Monitoring available
Managed Services

Your identity platform, managed by the team that understands it.

Ongoing operations, monitoring, and staff augmentation delivered by the same engineers who build and configure these platforms. Not a generic operations centre.

01

Managed PAM

Ongoing operations for your BeyondTrust Password Safe, EPM, and PRA environment. Includes credential rotation oversight, account onboarding, policy management, patching, and health checks.
02

Managed Identity Observability

Continuous monitoring and management of your Apporetum deployment. Dashboard maintenance, alert tuning, anomaly investigation, and monthly posture reports.
03

Staff Augmentation

Embed our IAM and PAM engineers directly into your team. For organisations with an established identity programme that need specialist capacity for specific initiatives.
04

Access Reviews

Automated access reviews and recertification campaigns operated on your behalf, ensuring access remains appropriate and audit-ready.
Coming soon05

Managed IGA

Identity governance operations for organisations using Microsoft Entra ID Governance. Access review management, lifecycle workflow operations, role management, and governance reporting.
Managed PAM

BeyondTrust operations, handled.

Running BeyondTrust Password Safe, EPM, or PRA in production requires ongoing attention. Credential rotation policies need tuning. New accounts need onboarding. Platform updates need testing and deployment. Connector configurations need maintaining.

Our Managed PAM service covers all of this. Your internal team retains ownership and governance while we handle the operational work. Because our engineers understand the platform configuration, they can operate it efficiently and spot issues early.

  • Credential rotation oversight and exception management
  • Privileged account onboarding and lifecycle management
  • BeyondTrust platform patching and upgrade management
  • Policy tuning and configuration management
  • Connector and integration maintenance
  • Quarterly platform health checks
  • Incident response for PAM-related events
  • Monthly operational reporting
Modern 42 engineers operating a BeyondTrust privileged access platform for a client
Managed Identity Observability

Identity Observability, continuously tuned.

Visibility is only half the job. Our team monitors your identity posture continuously, triages alerts, and surfaces risks before they become audit findings.

Because we built Apporetum, our managed engineers work alongside the product team. If your environment needs a monitoring capability that does not yet exist, we build it.

Operate

  • Continuous posture monitoring
  • Alert triage and investigation
  • Dashboard and threshold tuning
  • Integration maintenance (Entra ID, BeyondTrust)

Improve

  • Proactive risk identification
  • Custom monitoring capabilities, built by us
  • Monthly identity posture reports
  • Audit evidence preparation and export
Apporetum identity observability dashboard monitored by Modern 42 managed service engineers
Staff Augmentation

Your team, extended with specialists.

Sometimes you don't need a managed service or a project-based engagement. You need an experienced IAM or PAM engineer embedded in your team, working on your priorities, on a time-and-materials basis.

Our staff augmentation model places senior Modern 42 engineers directly into your team. They work under your direction, use your tools, and attend your stand-ups. You get specialist capacity without the overhead of hiring, onboarding, and retaining niche security talent.

  • Senior IAM and PAM engineers with current certifications
  • Embedded in your team, working to your priorities
  • Time-and-materials or fixed-term engagement models
  • BeyondTrust, Entra ID, and IGA platform expertise
  • Security-cleared staff available for government engagements
  • Knowledge transfer built into every engagement
  • Flexible commitment from weeks to months
  • No recruitment fees or onboarding overhead
Managed IGAComing soon

Identity governance, operated for you.

Managed IGA will extend our service portfolio to cover Microsoft Entra ID Governance operations. This includes access review management, identity lifecycle workflow operations, entitlement management, and governance reporting.

The service is designed for organisations that have deployed Entra ID Governance but need specialist support to operate it effectively at scale. We are currently building this offering and will announce availability in the coming months.

  • Access review campaign management and follow-up
  • Identity lifecycle workflow operations
  • Entitlement management and access package maintenance
  • Role management and periodic recertification
  • Governance dashboard and reporting
  • Policy compliance monitoring
How it works

A consistent operating model.

Every managed service engagement follows the same four-stage approach. Mix and match the services you need, whether that's full platform operations, observability only, or specialist staff embedded in your team.

  1. 01

    Onboard

    We review your current platform configuration, establish baselines, and set up monitoring and alert thresholds.

  2. 02

    Operate

    Our engineers handle day-to-day operations: policy updates, account onboarding, credential rotation oversight, and platform maintenance.

  3. 03

    Monitor

    Continuous monitoring through Apporetum with proactive alerting. We identify and address issues before they become incidents.

  4. 04

    Report

    Monthly service reports covering platform health, coverage metrics, and recommendations. Quarterly strategic reviews with your security leadership.

Why Modern 42

The difference between managed and truly managed.

Most managed service providers operate platforms they didn't implement. We manage what we build, so we know your environment inside out and can operate it efficiently.

Product knowledge
Modern 42
Built and deployed the platform in your environment
Typical managed provider
Inherited from previous vendor documentation
Engineering depth
Modern 42
Microsoft and BeyondTrust-certified, Apporetum product team
Typical managed provider
General IT operations staff
Escalation path
Modern 42
Direct access to the engineers who wrote the code
Typical managed provider
Tiered support with vendor ticket escalation
Delivery model
Modern 42
100% Australian-delivered, security-cleared staff
Typical managed provider
Offshore or mixed delivery
Platform evolution
Modern 42
Can extend monitoring and automation for your environment
Typical managed provider
Limited to existing product capabilities
Case Studies

See the work delivered

Comparable engagements we have delivered. Client names are withheld; the work is not.

View all case studies
Financial Services01

Comprehensive Entra Security Review and Ongoing Partnership with a Global Financial Services Group

A global financial services group operating across multiple international markets engaged Modern 42 for an independent security review of its Microsoft Entra environment. What began as a focused assessment has since evolved into a strategic, ongoing partnership.

Entra ID + M365 assessedCA framework deliveredOngoing blended team
Higher Education02

PAM Implementation and Essential Eight Uplift for an Australian Research University

A leading Australian research university engaged Modern 42 to expand its Privileged Access Management capability and progress toward ASD Essential Eight Maturity Level 2.5.

Delinea to BeyondTrustEssential Eight upliftChange management
FAQ

Common questions

Do we need to have Modern 42 implement the platform first?
No. We can take over management of existing BeyondTrust, Microsoft Entra, and Apporetum deployments regardless of who implemented them. We conduct an onboarding review to understand the current configuration before taking on operational responsibility.
What are the service hours?
Standard managed services operate during Australian business hours (AEST/AEDT). Extended and after-hours support arrangements are available for critical infrastructure. Contact us to discuss your requirements.
How do you handle change management?
All changes follow a documented change management process. Standard changes are pre-approved under a service catalogue. Non-standard changes go through your existing change advisory board or approval process.
Can we retain some operational tasks internally?
Yes. We offer flexible engagement models. Some organisations prefer us to manage the entire platform, while others retain certain functions internally and use us for specific areas like credential rotation oversight or policy management.
How does staff augmentation work?
We place one or more senior IAM or PAM engineers into your team on a time-and-materials basis. They work under your direction, attend your meetings, and use your tools. Engagements can run from a few weeks to several months. We handle all employment, certification, and clearance requirements.
What does the Managed IGA service include?
Managed IGA is currently in development. It will cover identity lifecycle operations, access review management, role management, and governance reporting for organisations using Microsoft Entra ID Governance. Register your interest and we will notify you when it becomes available.
Do you bring your own IP to managed services?
Yes. We don't like to reinvent the wheel. Where we have existing runbooks, monitoring templates, or operational frameworks that cater for your needs, we use them and the price reflects that. We would rather start from a proven foundation than waste time rebuilding the same artefact from scratch.

Where do you need help with PAM?

BeyondTrust assessment

Health check your existing BeyondTrust deployment or assess readiness for a new PAM programme.

Learn more

PAM deployment

Password Safe, Privileged Remote Access, or Endpoint Privilege Management. Designed, built, and transitioned.

Learn more

Managed PAM

Ongoing BeyondTrust operations, monitoring, and optimisation. Your platform, our specialist team.

Learn more

We use cookies

We use cookies and similar technologies to help personalise content, measure the performance of our site, and provide a better experience. By clicking Accept, you consent to the use of all cookies.
Learn more.