/solutions/microsoft-azure/azure-migration
OAS provides expert Azure cloud migration services for South African enterprises. Assessment, planning, and execution with Azure SA regions for POPIA compliance.
Your Roadmap to Microsoft Azure in South Africa
Moving to the cloud is not a single event. It is a structured programme of assessment, planning, and execution that determines whether your Azure environment performs, stays secure, and controls costs from day one. OAS manages the full migration lifecycle for South African enterprises — from initial workload assessment through production cutover to ongoing optimisation.
Why Azure for South Africa
Microsoft Azure is the only global hyperscaler with data centres on South African soil. Two regions serve the local market:
- South Africa North (Johannesburg) — primary production region with Availability Zones for high availability and fault isolation across physically separate data centres - South Africa West (Cape Town) — secondary region for disaster recovery and geo-redundant backup
This means your data stays within South African borders. Protection of Personal Information Act (POPIA) compliance is built into the infrastructure — no workarounds, no exceptions. AWS and Google Cloud have no South African data centres, making Azure the clear choice for organisations with data sovereignty requirements.
Microsoft has invested an additional ZAR 5.4 billion in South African cloud infrastructure, reinforcing its long-term commitment to the local market.
Migration Approaches
Every workload is different. OAS assesses each application and system individually to determine the right migration strategy:
Lift-and-Shift (Rehost)
Move workloads to Azure virtual machines with minimal changes. Fastest path to cloud. Suitable for stable applications that do not require redesign. Reduces on-premises hardware dependency immediately.
Re-Platform (Optimise)
Migrate workloads with targeted modifications to take advantage of Azure platform services. Move databases to Azure SQL Managed Instance, shift file storage to Azure Files or Blob Storage, and replace legacy components with managed services. Better performance and lower operational overhead without full application rewrite.
Modernise (Re-Architect)
Redesign applications to use Azure-native services — containers, serverless functions, managed databases, and event-driven architectures. Highest long-term value but requires development investment. OAS recommends this approach for applications with active development teams and growth roadmaps.
Citrix-to-Azure Migration
OAS's key differentiator. Migrate existing Citrix Virtual Apps and Desktops (CVAD) environments to Citrix DaaS running on Azure SA infrastructure. This combines Citrix's enterprise session management with Azure's local data centres — delivering virtual desktops with South African data residency and low-latency performance.
Azure Landing Zone
Every OAS migration starts with an Azure Landing Zone built on Microsoft's Well-Architected Framework. This provides the foundational architecture for your cloud environment:
- Subscription structure — organised by workload, environment, and business unit - Network topology — hub-and-spoke or Virtual WAN, with proper segmentation and security controls - Identity integration — Microsoft Entra (formerly Azure AD) connected to on-premises Active Directory - Governance — Azure Policy, management groups, and role-based access control (RBAC) - Security baseline — Microsoft Defender for Cloud, Network Security Groups, and logging configured from the start
The Landing Zone ensures your Azure environment is secure, scalable, and well-governed before the first workload arrives.
March 2026: Zero-Trust Networking by Default
As of March 2026, Microsoft has removed default outbound internet access for all new Azure virtual networks. Every new VNet now requires explicit outbound connectivity — NAT Gateway, Azure Firewall, or user-defined routes. This is a significant shift toward zero-trust networking posture. OAS designs all new Landing Zones with this requirement built in, ensuring your network architecture meets current Azure standards from day one.
Hybrid Identity With Microsoft Entra
Most South African enterprises run hybrid environments. OAS configures secure identity across on-premises and cloud:
- Azure AD Connect — synchronisation between on-premises Active Directory and Microsoft Entra - Conditional access — policies that control access based on user, device, location, and risk level - Multi-factor authentication (MFA) — enforced across all users and applications - Privileged identity management — just-in-time access for administrators, reducing standing privilege exposure
One identity. Intelligent access policies. Consistent security across every environment.
Cost Optimisation and Right-Sizing
Cloud costs escalate without active management. OAS implements cost controls from the start and manages them ongoing:
- Right-sizing — match VM sizes to actual workload requirements, not over-provisioned guesses - Reserved instances — commit to one- or three-year terms for predictable workloads at significant discounts - Auto-scaling — scale resources up during peak demand and down during quiet periods - Unused resource cleanup — identify and remove orphaned disks, idle VMs, and unused public IPs - Azure Cost Management — dashboards, budgets, and alerts configured for visibility and accountability
Migration is not the finish line. OAS provides ongoing Azure management to ensure your environment stays optimised, secure, and cost-effective.
Why OAS for Azure Migration
- Citrix Platinum Partner — 40+ years of Citrix expertise combined with Azure migration capability. No other SA partner matches this depth in virtualised workload migration
- Local expertise — OAS understands South African network infrastructure, POPIA requirements, and local business practices. We operate from Johannesburg with direct access to both Azure SA regions
- End-to-end delivery — from initial assessment through architecture design, pilot deployment, production migration, and ongoing managed services. Our structured engagement process ensures nothing is left to assumption
- AWS has no SA data centres — Azure's Johannesburg and Cape Town regions are the definitive advantage for data sovereignty. OAS helps you maximise this advantage with properly architected deployments
Key Capabilities
- Azure SA regions — Johannesburg (SA North with Availability Zones) and Cape Town (SA West)
- Full migration lifecycle — assessment, planning, execution, and optimisation
- Citrix DaaS on Azure SA — virtualised workloads with local data residency
- Azure Landing Zone — Well-Architected Framework foundation
- Zero-trust networking — compliant with March 2026 default outbound removal
- Hybrid identity — Microsoft Entra with conditional access and MFA
- Cost management — right-sizing, reserved instances, and ongoing optimisation
- POPIA compliance — data sovereignty with in-country infrastructure
Get Started
Your Azure migration starts with a structured assessment. OAS evaluates your current environment, identifies the right migration approach for each workload, and delivers a clear roadmap with timelines and costs.
> Schedule Azure Assessment | Download Cloud Migration Checklist