Code-first infrastructure
Everything is deployed through Terraform, Bicep or Ansible. Nothing gets built by hand in a portal, which means the environment can be rebuilt from scratch and the code comes with you if we part ways.
Solution
Cloud Services.
Built. Automated. Managed.
Cloud environments built as code from the first day, not clicked together and documented later. Azure, hybrid or private, depending on what the workload actually needs. Run from Australia, around the clock.
Moving to cloud is the easy part. Making it secure, cost-efficient and operationally sustainable is where most organisations struggle. Onel handles all three, with code-first deployment and managed support once you're live.
Most people arrive here via a referral. If that's you, here's who to call.
Partner of the Year
HPE Hybrid IT Gold
2025
Recognition
CRN Fast 50
Five times · 2017–2025
Panel member
MAV · DPC
+ Procure Australasia
Code-first
Terraform · Bicep
Codebase handed to your team
Microsoft
Azure Infrastructure
Solutions Partner · Migration specialty
Why Onel
Three principles behind every Onel cloud build.
Cloud projects fail not because the technology is hard, but because nobody owns the operational outcome. Onel does. From the first whiteboard session to the 3am alert response.
Right cloud, right workload
Not every workload belongs in the same place. We work through them one at a time and say where each should sit, weighing what it costs to run there against where the data has to live and who has to support it at 2am.
Operational from day one
Go-live isn't the end. 24/7 monitoring, FinOps cost governance, patch management, and security posture monitoring. All part of the service, not a bolt-on. Deeper controls come from our IT security services.
Cloud models
The right cloud model for your business.
Not every workload belongs in the same place. Onel helps you decide what should run where, then builds and manages it accordingly.
Public Cloud (IaaS)
Azure · AWS
Compute, storage and networking consumed from Azure or AWS: on demand, at scale, billed monthly.
- →Azure VMs, Azure VMware Solution
- →Azure VNet, ExpressRoute, VPN Gateway
- →Blob / Files / Managed Disks
- →AWS EC2, VPC, S3, EBS equivalents
- →Azure SQL, App Service, AKS PaaS
- →Cost management & right-sizing
Hybrid Cloud
Azure Arc · ExpressRoute
On-premises infrastructure connected to public cloud, workloads running where they make the most sense.
- →Azure Arc, manage on-prem from Azure
- →ExpressRoute private connectivity
- →Site-to-site VPN with failover
- →Unified identity via Entra ID
- →Hybrid backup, on-prem & cloud tiers
- →Consistent security across both
Private Cloud
HPE GreenLake · AVS · Onel MPC
Dedicated infrastructure at Australian data centres: a cloud operating model on your own hardware.
- →HPE GreenLake, consumption on-prem
- →Azure VMware Solution
- →Onel Managed Private Cloud
- →Data sovereignty, never leaves AU
- →Consistent mgmt via Azure Arc
- →Regulated workloads ready
Services
End-to-end cloud capability.
From initial strategy through to day-two operations. Onel covers the full cloud services lifecycle. No vendor lock-in, no junior engineers learning on your bill.
Cloud Readiness Assessment
Know before you commit
A structured review of your current environment: workload inventory, dependency mapping, cloud readiness scoring, cost modelling and a prioritised migration roadmap. Where the decision is bigger than the migration, start with IT strategy consulting.
- →Application & infrastructure discovery
- →Dependency & compatibility analysis
- →Total cost of ownership modelling
- →Prioritised migration wave plan
Landing Zone Design
Foundations done right
The landing zone is the part everything else inherits. Get identity, networking and governance right at this stage and the next three years are easy; get it wrong and you are unpicking it while running production on top.
- →Azure Landing Zone / AWS Control Tower
- →Hub-and-spoke or Virtual WAN
- →Identity & RBAC (Entra ID)
- →Security baseline & policies
- →Deployed via Terraform / Bicep
IaaS Deployment
Compute, storage, networking
VMs, virtual networks, load balancers, storage accounts and all supporting infrastructure: deployed, configured and tested via IaC, ready to run your workloads.
- →Azure VMs, VMSS, AVS
- →Virtual networks, NSGs, route tables
- →Azure Files, Blob, Managed Disks
- →Load balancing & traffic management
- →Azure Backup & Site Recovery
Infrastructure as Code
Terraform · Bicep · Ansible
Every environment deployed using Infrastructure as Code. Repeatable, version-controlled, and handed over to your team at project close. The same pipeline discipline drives our application modernisation services.
- →Terraform modules for Azure & AWS
- →Azure Bicep for native Azure
- →Ansible for configuration management
- →CI/CD via GitHub Actions / Azure DevOps
- →State management & drift detection
Cloud Migration
Lift, shift & modernise - safely
Structured wave-based migration from on-premises to cloud. Onel manages the full process: pre-migration testing, cutover, post-migration validation, rollback plans.
- →Azure Migrate & AWS Migration Hub
- →Wave-based cutover planning
- →Data migration & replication
- →Post-migration validation
- →Rollback planning per wave
Hybrid Connectivity
ExpressRoute · VPN · Virtual WAN
Azure ExpressRoute, site-to-site VPN and Virtual WAN, designed and deployed so your on-premises and cloud environments work as a single, unified network. Designed with our managed network services team.
- →ExpressRoute design & provisioning
- →Site-to-site VPN with BGP failover
- →Azure Virtual WAN multi-site
- →Private DNS across hybrid
- →Azure Arc unified management
Infrastructure as Code
Every environment built in code. Never clicked together.
Hand-built cloud configuration works right up until the person who built it leaves. We deploy everything as code instead, so the environment is described somewhere other than in someone's memory and can be stood up again if it has to be.
Version-controlled infrastructure
The infrastructure lives in Git, so every change has an author, a date and a review attached. That also means going back to last Tuesday's state is a revert rather than an archaeology project.
Consistent, repeatable environments
Dev, test and production are built from the same code, which removes the most tedious class of bug there is: the one that only happens in production because production was configured by a different person on a different day.
Automated CI/CD pipelines
Infrastructure changes go through an automated pipeline: plan, validate, approve, apply. No one manually logs into the portal and changes production.
Security & policy baked in
Security controls, tagging policies, NSG rules and RBAC are all defined in code, enforced automatically on every deployment.
Handed over to your team
At project close, Onel hands over the full IaC codebase, pipeline configuration and documentation. Your team owns and can maintain it.
main.tf - Azure infrastructure
# ── Resource Group ──────────────────
resource "azurerm_resource_group" "onel_rg" {
name = var.resource_group_name
location = "australiasoutheast"
}
# ── Virtual Network ─────────────────
resource "azurerm_virtual_network" "vnet" {
name = "onel-prod-vnet"
address_space = ["10.0.0.0/16"]
location = azurerm_resource_group.onel_rg.location
resource_group_name = azurerm_resource_group.onel_rg.name
}
# ── VM Scale Set ────────────────────
resource "azurerm_linux_virtual_machine_scale_set" "vmss" {
name = "onel-app-vmss"
sku = "Standard_D4s_v5"
instances = var.instance_count
admin_username = "azureuser"
tags = local.common_tags
}
# ── State stored in Azure Blob ──────
terraform {
backend "azurerm" {
storage_account_name = "oneltfstate"
container_name = "tfstate"
key = "prod.terraform.tfstate"
}
}IaC toolchain · Onel standard
Terraform
Azure Bicep
Ansible
GitHub Actions
Azure DevOps
Packer
Helm / Kubernetes
Azure Policy
Cloud journey
A structured path to cloud no shortcuts.
Cloud migrations that fail do so because they skip steps. Onel follows a five-phase methodology that ensures every workload lands correctly and runs well after go-live.
Assess
Inventory workloads, map dependencies, assess cloud readiness, identify what to migrate, modernise or retire.
Design
Cloud architecture, IaC module structure, network topology, security baseline and migration wave plan.
Build
Deploy landing zone via IaC, build CI/CD pipelines, configure identity and security policies, validate.
Migrate
Wave-based workload migration, cutover window management, validation, rollback rehearsal.
Operate
24/7 managed services, cost optimisation, security monitoring, patching, continuous improvement.
Ongoing support
Cloud managed services that keep working.
Going live is the beginning, not the end. Three tiers, pick the level of operational ownership that fits your team.
Essential
Cloud Essentials
Monitoring and alerting, a safety net while you manage cloud day-to-day yourselves.
- ✓24/7 infrastructure monitoring
- ✓Critical alert response & escalation
- ✓Monthly cloud cost report
- ✓Patch & vulnerability notifications
- Patch management & execution
- Cost optimisation actions
- IaC change management
- Dedicated cloud engineer
Most popular
Cloud Managed
Full operational management. Onel runs your cloud environment so your team can focus on business outcomes.
- ✓24/7 infrastructure monitoring
- ✓P1, 15 minute response SLA
- ✓Monthly cost & health report
- ✓Patch management & execution
- ✓Cost optimisation & right-sizing
- ✓IaC change management
- ✓Security posture monitoring
- ✓Dedicated Service Delivery Manager
Enterprise
Cloud Enterprise
Full managed services plus embedded cloud engineering for complex or evolving environments.
- ✓Everything in Cloud Managed
- ✓Embedded cloud engineer (part-time)
- ✓Quarterly architecture reviews
- ✓IaC development & automation work
- ✓Cloud governance & policy mgmt
- ✓FinOps, detailed cost attribution
- ✓Security incident response
- ✓Roadmap planning & advisory
Service Level Agreement
Every Onel Cloud Managed service is backed by a defined SLA with measurable response and resolution targets.
| Priority | Response | Resolution |
|---|---|---|
| P1, Cloud down | 15 min | 4 hours |
| P2, Major degradation | 30 min | 16 business hrs |
| P3, Partial impact | 4 business hrs | 24 business hrs |
| P4, Advice / change | 8 business hrs | 40 business hrs |
99.9% uptime SLA across monitored cloud environments - with service credits if we miss a target.
What's included in Cloud Managed
Twelve operational disciplines, all running 24/7, including FinOps cost governance so your bill stays predictable.
✓24/7 monitoring & alerting
✓Patch & update management
✓Cost governance & reporting
✓Security posture monitoring
✓Backup validation
✓Capacity & performance analysis
✓IaC change management
✓Incident response
✓Monthly service reports
✓Dedicated SDM
✓Right-sizing recommendations
✓Compliance reporting
Microsoft 365
M365: deployed, secured, governed.
Most organisations use a fraction of what they already pay Microsoft for. Deployed properly, 365 is your identity platform and a large part of your security posture, not just email. We set the tenant up, then run it.
Productivity
Exchange · Teams · SharePoint · OneDrive
Modern collaboration platform: email, chat, files, and meetings on a single, governed tenant.
Identity
Entra ID · MFA · Conditional Access
Single sign-on, multi-factor authentication, and risk-based access policies across every Microsoft and SaaS app.
Security
Defender · Sentinel · Intune
Threat protection across email, endpoints, identity and cloud, unified in Defender XDR with Sentinel SIEM behind it.
Compliance
Purview · DLP · eDiscovery
Data classification, DLP, retention and eDiscovery, aligned to Privacy Act, Essential Eight and IRAP.
Migration & tenant setup
Moving to M365, or consolidating tenants?
Whether you're migrating from on-premises Exchange, moving from Google Workspace, or merging multiple M365 tenants after an acquisition. Onel manages the full migration with minimal disruption to your users.
Talk to us about M365 migration- ✓Exchange on-prem → Exchange Online
- ✓Google Workspace → M365
- ✓Tenant-to-tenant (M&A)
- ✓SharePoint & OneDrive data migration
- ✓Security baseline post-migration
Who we help
Common cloud challenges we solve.
If any of these sound familiar, you're not alone, and we've fixed every one of them more than once.
01
Starting a cloud journey
Organisations moving to cloud for the first time who want a structured, low-risk path, not a rushed migration that creates more problems than it solves.
02
Cloud bill running out of control
Azure or AWS spend growing faster than expected with limited visibility into what's driving costs, and no one accountable for optimisation.
03
Environments built manually, not in code
Cloud resources clicked together in the portal with no documentation: making changes risky, environments inconsistent, and audits painful.
04
Security posture gaps in the cloud
Missing security controls, overprivileged identities, exposed storage accounts, and no visibility into what's happening across the cloud environment.
05
Hybrid connectivity that doesn't work well
On-premises and cloud environments that feel disconnected: latency, split DNS, inconsistent security policies, and users experiencing reliability issues.
Onel IaC standard
What you get from every Onel cloud build
- 01Modular Terraform codebase, reusable modules for every resource type.
- 02Git repository with feature branches, PR reviews and protected main.
- 03Automated plan & apply pipeline, no manual portal access in production.
- 04Remote state with locking, Terraform state in Azure Blob, no concurrent conflicts.
- 05Full documentation & handover: README per module, architecture diagram, knowledge transfer.
No lock-in
The codebase is yours.
Every environment we build is deployed via Terraform, Bicep or Ansible, never clicked together in a portal. At project close, the full IaC codebase, pipeline configuration and runbooks transfer to your team. You're not dependent on us to make a change.
FAQ
Questions we get before first call.
If your question isn't answered here, the fastest way to a clear answer is a 15-minute phone call. No sales pitch, no obligation.
1300 609 101 →Should we move everything to public cloud, or is hybrid better?
It depends on the workload. Variable, internet-facing applications benefit from public cloud elasticity. Steady-state systems with predictable load or sovereignty constraints often run more cost-effectively on private cloud or on-prem. That is where our data centre solutions fit. Onel assesses each workload individually - we don't sell you a single answer.
How do you control cloud cost from creeping up?
FinOps is part of the managed service, not an add-on. Monthly cost reviews, anomaly alerts, reserved-instance planning, and rightsizing recommendations are included. Most clients see a 20–35% reduction in cloud spend within the first six months of taking on Cloud Managed.
What happens to our codebase if we move providers?
The Terraform/Bicep codebase lives in your Git repositories from day one. Documentation, pipelines and runbooks are handed over as part of the build. If you switch providers, you take the working environment with you - no rebuild required.
Get started
Ready to build cloud infrastructure that actually works?
Talk to one of our cloud architects. We'll assess your current environment, identify what belongs in the cloud, and show you how to get there, no obligation.