Case study · Leading essential infrastructure services provider
Building secure, scalable cloud foundations with Microsoft Azure
How nexwave helped a leading essential infrastructure services provider modernise its Microsoft Azure network foundations, reduce costs, and design a scalable, secure landing zone to support growth and multi-cloud integration.
Modernised Microsoft Azure network foundations, reduced costs through gateway optimisation, and designed a scalable, secure landing zone supporting multi-cloud integration and regional expansion.
- New landing zonealigned to the Well-Architected Framework
- Cost optimisedreduced network gateways
- Multi-cloudAWS and Oracle OCI enabled
- RegionalAzure New Zealand region incorporated
- Roadmaphigh level migration plan to the future state
- DevOps readypositioned to move from ClickOps to DevOps
About the client
This organisation is one of the largest essential infrastructure services providers in Australia and New Zealand, making infrastructure work for communities across both countries. An ASX Top 200 company with a secondary NZX listing, it specialises in the long-term operation, maintenance and management of critical public and private assets across industries including defence, social infrastructure, transport, telecommunications and infrastructure services.
Formed in 2015 through the merger of three major services businesses, and expanded further with the 2020 acquisition of a large operator, the company draws on more than 50 years of expertise. Today it has a workforce of 35,000+ people operating across 400 sites, delivering tailored outcomes that serve customers and communities at scale.
The challenge
The organisation's Microsoft Azure environment had grown organically, with workloads spanning multiple business units. The existing network design limited scalability and efficiency, creating rising costs and complexity.
- Integration challenges between SD-WAN and MPLS networks.
- Excessive network gateways driving up cost.
- Limited regional coverage, with no support for the Azure New Zealand region.
- A need to integrate with other cloud environments, including AWS and Oracle OCI.
- Internet facing applications and security controls requiring review.
- A lack of alignment to Microsoft's Well-Architected Framework pillars of operational excellence, security, reliability, performance efficiency, cost optimisation and sustainability.
What we delivered
nexwave partnered with the client to review, redesign and future-proof their Azure Landing Zone.
Platform audit
- Analysed the IP address scheme, routing and traffic flows.
- Identified ingress and egress requirements and the internet security setup.
- Reviewed WAN and multi-cloud integration points.
Design workshops
- Validated audit findings with the client's network team.
- Ensured recommendations aligned with operational priorities.
New Azure Landing Zone design
- Delivered a detailed design optimised for scalability, cost and security.
- Integrated the Azure New Zealand region for future workloads.
- Reduced network gateways to streamline operations and lower costs.
Migration planning
- Identified candidate workloads for transition.
- Produced a high level migration roadmap to the new environment.
Outcomes
Future ready
- A secure, scalable Azure Landing Zone aligned to Microsoft best practices.
Cost optimised
- Reduced reliance on multiple gateways, lowering operating costs.
Multi-cloud enabled
- Microsoft Azure integrated with AWS and Oracle OCI for flexibility.
Expansion ready
- Incorporation of the Azure New Zealand region supports growth.
Operational uplift
- Set the stage for a shift from ClickOps to DevOps with improved automation.
Security strengthened
- Aligned to the six pillars of the Well-Architected Framework, ensuring resilience and governance.
Change management and enablement
Workshops with the client's team ensured that knowledge was transferred, findings were validated, and the new design could be adopted smoothly. nexwave provided recommendations in a way that empowered the organisation's network engineers to confidently own the next steps.
What’s next
With a future state landing zone designed, the client can begin migrating workloads, leveraging automation to scale efficiently while maintaining cost control and security across its Microsoft Azure environment.
Your route
Build a result like this.
Tell us what is relevant to your organisation. The case study comes with your enquiry.
Discuss this work →