Building secure, scalable cloud foundations with Azure
How nexwave helped a leading essential infrastructure services provider modernise its Azure network foundations, reduce costs, and design a scalable, secure landing zone to support growth and multi-cloud integration
Client
Leading Essential Infrastructure Services Provider
Industry
Essential Infrastructure Services
Services
Azure landing zone review, Network architecture redesign, Migration planning
Technology
Microsoft Azure, ExpressRoute, SD-WAN, AWS, Oracle OCI
About the client
This organisation is one of the largest essential infrastructure services providers in Australia and New Zealand, making infrastructure work for communities across both countries. An ASX Top 200 company with a secondary NZX listing, it specialises in the long-term operation, maintenance, and management of critical public and private assets across industries including defence, social infrastructure, transport, telecommunications, and infrastructure services.
Formed in 2015 through the merger of three major services businesses - and expanded further with the 2020 acquisition of a large operator - the company draws on more than 50 years of expertise. Today, it has a workforce of 35,000+ people operating across 400 sites, delivering tailored outcomes that serve customers and communities at scale.
At a glance
The challenge
The organisation's Azure environment had grown organically, with workloads spanning multiple business units. The existing network design limited scalability and efficiency, creating rising costs and complexity.
Key issues included:
- Integration challenges between SD-WAN and MPLS networks
- Excessive network gateways driving up cost
- Limited regional coverage, with no support for Azure New Zealand
- Need to integrate with other cloud environments (AWS, Oracle OCI)
- Internet-facing applications and security controls requiring review
- Lack of alignment to Microsoft's Well-Architected Framework pillars of operational excellence, security, reliability, performance efficiency, cost optimisation, and sustainability
What we delivered
nexwave partnered with the client to review, redesign, and future-proof their Azure Landing Zone.
Platform audit
- Analysed IP address scheme, routing, and traffic flows
- Identified ingress/egress requirements and internet security setup
- Reviewed WAN and multi-cloud integration points
Design workshops
- Validated audit findings with the client's network team
- Ensured recommendations aligned with operational priorities
New Azure Landing Zone design
- Delivered a detailed design optimised for scalability, cost, and security
- Integrated Azure New Zealand region for future workloads
- Reduced network gateways to streamline operations and lower costs
Migration planning
- Identified candidate workloads for transition
- Produced a high-level migration roadmap to the new environment
Outcomes
Future-ready
A secure, scalable Azure Landing Zone aligned to Microsoft best practices
Cost-optimised
Reduced reliance on multiple gateways, lowering operating costs
Multi-cloud enabled
Azure integrated with AWS and Oracle OCI for flexibility
Expansion-ready
Incorporation of Azure New Zealand region supports growth
Operational uplift
Set the stage for a shift from ClickOps to DevOps with improved automation
Security strengthened
Aligned to the six pillars of the Well-Architected Framework, ensuring resilience and governance
Change management & enablement
Workshops with the client's team ensured that knowledge was transferred, findings were validated, and the new design could be adopted smoothly. nexwave provided recommendations in a way that empowered the organisation's network engineers to confidently own the next steps.
What's next
With a future-state landing zone designed, the client can begin migrating workloads, leveraging automation to scale efficiently while maintaining cost control and security across its Azure environment.
Need help with your Azure Landing Zone or cloud architecture?
Let's discuss how nexwave can help you build secure, scalable cloud foundations.
Get in Touch