Capability Statement

IT Services for Federal Government

Profectus is an Australian-owned company delivering IT services for Federal Government. We’re cleared, we mobilise fast, and we deliver in some of the most demanding environments in government.

Modernise.
Establish.
Secure.
Recover.
Sustain.

What we do, and how we do it

Nine short sections. Open the ones you need.

  • 01 Who we areAustralian-owned, cleared, and built for secure government environments.

    Profectus is an Australian-owned company delivering IT services for Federal Government, whether that’s modernising a platform, establishing a new capability, securing an environment, getting a program back on track, or sustaining the capability that keeps it running. We work across cloud and infrastructure, cyber, identity, service management, data, AI adoption, engineering and program delivery.

    We’re cleared, we mobilise fast, and we deliver in some of the most demanding environments in government.

    Our work has involved

    • Sustaining the simulation and ICT infrastructure behind the Joint Collective Training Branch for more than four years, supporting every test and exercise without major issues
    • Migrating JCTB from an end-of-support Jira Server to a self-hosted ServiceNow platform
    • Supporting movement control through every phase of Exercise Talisman Sabre, Australia’s largest joint exercise with the United States
    • Delivering legislative reform for Defence Export Controls, and launching MADE AI, the first AI capability built inside Defence
    • Engineering and sustaining deployed command and control capability for Deployed ICT, on Army’s timeframes
    • Launching a modern platform for the Defence Industry Security Program on time, and standing up the service model to run it
    • Providing delivery management for the CMDB foundation behind Defence Digital Group’s whole-of-Defence ServiceNow rollout
    • Coordinating a CASG counter-UAS acquisition that the Minister for Defence Industry called a benchmark for delivering capability at pace
    • Guiding Icon Water’s people through a critical-infrastructure transformation

    All of this has been delivered inside secure, high-scrutiny government environments, where security controls, accreditation, assurance cycles and formal governance shape every decision. That is where we work best. Our people know how to operate inside classified networks, Authority to Operate conditions and Defence governance cadence from day one. Our customers don’t have to teach them, and they don’t have to carry the risk of someone learning on their program.

    Every person delivering capability for Profectus holds a clearance of NV1 or above. We hold DISP Level 3 for Governance and Personnel Security, sponsor clearances to NV2, hold ISO 27001:2022 certification, are an Australian Community member under the Australia-US Defence Trade Cooperation Treaty, and are a ServiceNow Consulting and Implementation Partner.

  • 02 How government engages usManaged outcomes, or cleared people inside your team. Same commitment either way.

    We deliver IT services through both of the ways government engages them.

    We manage and deliver.

    The work is scoped, with milestones and a fixed price. We own the delivery and the result.

    Our customer manages, we support.

    Our skilled, cleared people join the customer’s team and work under their direction. We look after continuity, performance and backfill so the capability keeps delivering.

    Either way, our customers get the same commitment to the outcome.

  • 03 Our servicesFive outcomes, backed by the depth and expertise of our people.

    Our services are grouped under five outcomes. All are backed by the depth and expertise of our people.

    • Modernise

      Moving ageing platforms, environments and ways of working onto modern, supportable foundations.

      • Platform and infrastructure modernisation
      • Cloud migration and adoption
      • Application and legacy system modernisation
      • Data platform and reporting modernisation
      • ITSM platform migration and consolidation
      • Automation and CI/CD
      • Records and information management modernisation
      • Reform and transformation delivery
    • Establish

      Taking a new capability from nothing to operating in service.

      • New capability design, build and transition into service
      • Enterprise, solution and business architecture
      • AI adoption, engineering and governance
      • Service operating models and SIAM
      • Service desk and support model stand-up
      • Configuration and CMDB foundations
      • Data, analytics and business intelligence capability
      • Training systems and capability uplift
    • Secure

      Making sure capability is accredited, assured and safe to operate.

      • Security architecture and secure engineering
      • Cyber security assessment and uplift, including the Essential Eight
      • Identity and access management
      • Accreditation, IRAP and Authority to Operate support
      • Governance, risk and compliance
      • Testing and evaluation
      • Software lifecycle and security scanning
      • Security operations and monitoring
    • Recover

      Getting programs back on track and moving.

      • Program recovery and delivery leadership
      • Independent assurance and health checks
      • Integrated project and program management
      • Supplier transition and handover
      • Platform and environment stabilisation
      • Organisational change management
    • Sustain

      Keeping critical capability running, current and staffed.

      • Managed ICT service delivery
      • Infrastructure and platform sustainment
      • Service desk and end-user support
      • Continual service improvement
      • Integrated logistics support and asset lifecycle
      • Procurement, contract and resource management
      • Operational and exercise support
  • 04 ServiceNowConsulting and Implementation Partner, with deep experience in secure on-premises government environments.

    As a ServiceNow Consulting and Implementation Partner, we deliver across five areas:

    1. Advisory and Consulting Services
    2. Technical Consulting
    3. Implementation and Deployment
    4. Integration, Extension and Automation
    5. Quality and Delivery Governance

    We have particular experience delivering ServiceNow into secure, on-premises government environments. That includes integrating it with legacy systems, then sustaining both the platform and the environment around it, with continual improvement built into how we run it.

  • 05 The disciplines behind our deliveryTwenty-two specialist disciplines, from architecture to simulation and training.

    Our services are delivered by specialist teams drawn from the disciplines below. Whether we’re managing an outcome or our people are working inside a customer’s team, this is the depth we bring to the work.

    • Architecture
    • Business analysis
    • Business architecture
    • Business management
    • Change and engagement
    • Cloud services
    • Data and analytics
    • Delivery management
    • Engineering
    • Cyber security
    • Infrastructure
    • ITSM and SIAM
    • ICT coordination
    • Governance, risk and compliance
    • Project management
    • Project and administrative support
    • ServiceNow
    • Testing and quality assurance
    • Resource management and procurement
    • AI engineering and governance
    • Records and information management
    • Simulation and training
  • 06 Our work in practiceJCTB, Defence Export Controls, MADE AI, Deployed ICT, DISP, and more across Defence and government.

    Joint Collective Training Branch, HQJOC J7

    • Modernise
    • Establish
    • Secure
    • Sustain

    JCTB sustains the simulation and ICT capability that prepares ADF elements for operations, delivered through the Defence Training and Experimentation Network (DTEN). We have delivered for JCTB continuously for more than four years. Our team of 25 ICT specialists sustains the J7 environments, and every test and exercise we have supported has run without major issues, including Exercise Vital Prospect with 1,200 ADF and coalition personnel.

    4+ yrscontinuous delivery
    25ICT specialists on the team
    1,200ADF and coalition personnel on Exercise Vital Prospect

    Over that time we have

    • migrated JCTB from Jira Server to a self-hosted ServiceNow platform, then kept it current through upgrades, new modules and load balancing
    • modernised the simulation environment, cutting build times from days to under an hour and prototyping AI-assisted orchestration
    • maintained the environment day to day, including patching, software currency, security scanning, hardware support renewals and scheduled maintenance across networks, servers, storage and simulation systems
    • established an authoritative configuration and asset baseline across DTEN, with ServiceNow as the single system of record
    • made asset dispatch 40 per cent faster and disposed of more than 2,000 obsolete items to Defence protocols, with zero WHS incidents
    • remediated and transitioned infrastructure in line with Authority to Operate conditions

    Defence Export Controls

    • Modernise
    • Establish
    • Secure

    New legislation required DEC to realign its structure, processes and ICT systems without interrupting its regulatory function. We led and supported the reform from start to finish.

    The reform ran from March 2024 to March 2025 and was delivered on schedule.

    What we delivered

    • strategic roadmap
    • ICT modernisation to the cloud
    • process re-engineering
    • commercial management
    • stakeholder engagement

    MADE AI for Defence Export Controls

    • First AI capability built inside Defence

    Profectus governed, assured and managed delivery of MADE AI, the first AI capability developed within the Department of Defence. It is a multilingual knowledge assistant that gives cited legislative guidance in more than 100 languages. We brought Defence, Microsoft, Accenture and the Defence Digital Transformation Agency under one governance model, and took the capability from concept to go-live in five months.

    MADE AI gives government a reusable model for responsible AI deployment.

    The work covered

    • responsible AI guardrails embedded throughout the build
    • oversight of design and independent testing of the hybrid semantic and keyword retrieval system
    • end-to-end scenario testing of multilingual accuracy and citation integrity
    • assurance of compliance with the Defence ISM and Australian data sovereignty requirements
    • a managed transition into operations, including service continuity planning
    150staff hours a week freed for higher-value work, around half of DEC’s operational capacity
    100+languages, with cited guidance
    5months from concept to go-live
    100%compliance with Defence accreditation

    Deployed ICT, Vehicle Platforms

    • Modernise
    • Establish
    • Secure
    • Sustain

    The Vehicle Platforms team designs, delivers and sustains bespoke deployed ICT for the ADF. Tasking is driven by Army operational objectives, so development windows are short. We provide five NV2-cleared specialists across four disciplines, with an engineer on site within two weeks of request.

    The team has since been asked to take on additional risk-reduction work for future capabilities.

    The team has delivered

    • a new Windows 11 SOE with no downtime on production nodes
    • a new baseline for a high-priority Army capability
    • a capability rebuilt onto a new enclave, reducing the number of deployed networks
    • a full test environment
    • a new command and control capability for the tactical edge, built from scratch

    Defence Industry Security Program

    • Recover
    • Modernise
    • Establish
    • Sustain

    DISP’s transformation needed structure and continuity after its previous delivery partner exited mid-program. We stepped in on transition management, then took on technical delivery lead and ultimately program lead. We put in a signed-off plan, traceable milestones and firm timelines leadership could commit to, and delivered a PowerApps portal and D365 platform that replaced manual triage. It reached initial operating capability on time, with one minor UI defect at launch.

    We also stood up a SIAM-aligned operating model, with process definitions for Change, Incident, Problem and Access Management and governance forums at every level. We trained DISP staff and handed over the knowledge they need to sustain the system on their own.

    Across Defence and Government

    • Defence Digital Group, Program Hornet
      • Establish

      Delivery management of the discovery engine and CMDB foundation for whole-of-Defence ServiceNow, at PROTECTED, across on-premises, AWS and Azure.

    • CASG, Land 156 CsUAS
      • Establish

      Integrated project management across three acquisition streams, with first systems delivered in Q3 2025. The Minister for Defence Industry called the project a benchmark for delivering capability at pace.

    • Exercise Talisman Sabre 2025
      • Sustain

      Six officers embedded in movement control through every phase of Australia’s largest joint exercise, across Canberra, Brisbane, Darwin and northern Australia.

    • Commonwealth digital identity programme

      79 named, cleared specialists submitted in 16 business days, on our own paper, with no teaming or subcontracting.

    • Icon Water
      • Establish

      Change managers embedded in the Digital Technology Group, guiding field and office staff onto new systems without disrupting essential services.

    Referees are available on request.

    View detailed capability statements

  • 07 Built for secure environmentsDISP Level 3, ISO 27001:2022, Treaty membership, and a workforce cleared to NV1 and above.

    Profectus holds

    • DISP Level 3 for Governance and Personnel Security, and sponsors clearances to NV2
    • ISO 27001:2022 certification
    • Australian Community membership under the Australia-US Defence Trade Cooperation Treaty, and is working toward AUKUS Authorized User status
    • Registration as a Labour Hire provider
    • ServiceNow Consulting and Implementation Partner status
    • Professional Indemnity, Public Liability, Cyber and Workers’ Compensation insurance

    Our people

    100%cleared to NV1 or above
    60%hold NV2
    50%+have over 20 years in their discipline
    1 in 4have served in the ADF or an allied force

    Our people range from junior through to SFIA Level 6. Our practitioners have held formal Commonwealth design-acceptance and technical governance authority, including:

    • Chief Architect and Contract Signatory Authority
    • Chief Engineer
    • Lead Domain Architect and Design Acceptance Authority Representative
    • a Director-level appointment inside a Defence customer
    • Account CISO across five Federal Government programs
  • 08 How we mobilise and keep capability in placeOur Readiness Pathway, managed continuity, and a network of 4,700+ cleared professionals.

    Our customers’ programs should never carry the cost of a vacancy. Behind every engagement is a back-of-house operation built to mobilise the right cleared capability quickly and keep it in place.

    Our Readiness Pathway

    1. Demand mappingWe align to our customer’s roadmap.
    2. Capability planningWe build cleared depth ahead of need.
    3. Contextual assessmentWe assess fit to the environment, not just the CV.
    4. Structured onboardingOur people are governance-ready from day one.
    5. Ongoing supportWe manage tenure and continuity.

    Continuity, managed

    • Monthly check-ins with every member of our delivery teams
    • A quarterly performance review with the customer’s manager, with actions tracked to close
    • An active backfill pipeline, so a departure never becomes a gap
    • Clearance sponsorship and upgrades handled by us

    We maintain a network of more than 4,700 cleared professionals ready to deliver. We typically have the right cleared people identified within 2 to 5 days of a request.

    We are based in Canberra and also deliver across Melbourne, Brisbane, Adelaide and Darwin, with deployment to exercise locations across northern Australia.

  • 09 Ways to buyDirect panel access and partner arrangements, without going to open market.

    Our customers can engage Profectus directly through the panels below, without going to open market.

    Direct panel access

    • BuyICT Digital Marketplace (Australian Government)
    • ICT Provider Arrangement (ICTPA, SON3520191) (Australian Government)
    • BuyNSW (NSW Government)

    Through partners

    • Defence Support Services Panel (SON3485107)
    • Defence Simulation Support Panel (SON3412268)
    • AFP Capability Support Services Panel (SON3538332)
    • IPP-aligned procurement through Curijudi Services and ServeGate Australia (Supply Nation)