Solution architecture – IAM uplift program at Department of Employment and Workplace Relations

Project Summary

Avec successfully enhanced the IAM posture of the Department of Employment and Workplace Relations (DEWR), leading to significant improvements in the security and integrity of their ICT environment. The ongoing collaboration with Avec continues to provide essential support to the DEWR team, ensuring sustained enhancement of their IAM practices.

The challenge

Avec was engaged by the Department of Employment and Workplace Relations (DEWR), a Federal Government agency, to elevate their Identity and Access Management (IAM) posture. DEWR required Avec’s expertise to address capacity and capability constraints, as well as to assess their current state, design their target state, and implement suitable solutions. Together, Avec and DEWR outlined these objectives as part of a multi-year program of works commencing in 2020.

The solution

Avec’s comprehensive solutions encompassed tactical measures to mitigate immediate risks identified in a current state audit, including privileged access management for key applications, multi factor authentication, auditable group policies and just in time access for legacy applications. Additionally, Avec provided solution design and migration of on-prem active directory environments to EntraID, analysis on source of authority artefacts for IAM lifecycle, development of workflows, and integration with ServiceNow. The solutions also involved IAM governance, zero trust identity model development, various architectural patterns, and ongoing agile DevOps oriented delivery of projects. These bespoke solutions were developed with a strategic focus on aligning with best practice architectural principles and providing a pathway to modern cloud-based infrastructure and applications for DEWR.

The result

As a result of Avec’s collaboration, DEWR significantly enhanced its IAM posture and practices, ensuring the security and integrity of its ICT environment. The Avec team remains an essential delivery partner, maintaining an ongoing presence to support and augment the DEWR team, thus ensuring the sustained improvement of their IAM practices.