Skip to content
GautamCloud infrastructure
Resume

Gautam / Cloud & Infrastructure Architect

building from the network up.

AWS infrastructure / Linux operations / Networking

View work Resume

Mohali, Punjab, India

Gautam, Cloud & Infrastructure Architect

GautamMohali, Punjab, India

About

Infrastructure makes more sense when you can trace the whole system.

I design, build, and document cloud infrastructure across AWS and Linux, with hands-on experience operating live application environments using Nginx, PM2, and PostgreSQL. I focus on the complete infrastructure lifecycle—from DNS, networking, and security boundaries to application processes, data, logging, monitoring, and recovery decisions—with an emphasis on secure, scalable, and cost-effective architecture.

focus
AWS cloud infrastructure
operations
Linux · Nginx · PM2
foundation
Networking · IAM · Security
direction
DevOps · active study

I started with networking fundamentals, then completed cybersecurity training and moved into Linux administration. That path shapes how I approach cloud infrastructure: understand the route, identity boundary, process and logs before changing a system.

At MartialXPro, I work across the Node.js and Express application, PostgreSQL data model and a single-host Ubuntu deployment behind Nginx. It provides hands-on experience with the complete path from application behaviour to production operations.

My AWS work is currently self-directed and lab-based. I have configured IAM, EC2, S3, a custom VPC, CloudWatch, CloudTrail, SNS and EventBridge, and documented the routing, permission and alerting failures behind the results.

Learn by operating

The lessons that stayed came from provisioning a VPC, applying a migration, tracing proxy failures and reading logs on a running host.

Bottom of the stack first

Networking, then security, then Linux, then the application. When something fails in production, that order is usually how I find it.

Own the whole path

Schema to endpoint to server to DNS. I'd rather understand the full route a request takes than be fast in one layer of it.

Infrastructure, layer by layer.

Each area reflects implemented work or hands-on labs. Current study remains labelled separately.

AWS infrastructure

  • AWS EC2
  • VPC
  • IAM
  • S3
  • Security Groups
  • Elastic IP
  • CloudWatch
  • CloudTrail
  • SNS
  • EventBridge
  • Billing & Cost

Linux operations

  • Ubuntu
  • Nginx
  • PM2
  • SSH
  • Reverse proxy
  • Services & logs
  • Git
  • GitHub

Currently learning: Docker · Terraform · Kubernetes

Networking

  • TCP/IP
  • Routing & Switching
  • DNS
  • HTTP/HTTPS
  • VPN
  • Subnetting

Application delivery

  • Node.js
  • Express.js
  • REST API design
  • JWT
  • Authentication
  • Authorization
  • RBAC

Database

  • PostgreSQL
  • Prisma ORM
  • Schema design
  • Relational modelling
  • Migrations

Security fundamentals

  • IAM
  • RBAC
  • Network security
  • Vulnerability assessment
  • Web app pentesting
  • Linux hardening

Infrastructure work

Evidence across cloud, Linux and deployed systems.

Three case studies show what I configured, operated and learned, with hands-on labs, current production and planned architecture clearly separated.

Live in production

MartialXPro

Deployed application system

A production tournament platform I co-founded and helped design, build and deploy. The case study traces the Node.js and Express application, relational data model and single-host Ubuntu deployment behind it.

Read case study View live platform ↗
  • Current production path: Nginx to a PM2-supervised Node.js API to PostgreSQL on one Ubuntu host
  • Three-role RBAC: admin, organiser, player
  • PostgreSQL and Prisma relational model with versioned migrations
  • Production diagnostics through PM2 and Nginx logs
  • Node.js
  • Express.js
  • PostgreSQL
  • Prisma ORM
  • JWT
  • Ubuntu
  • Nginx
  • PM2
Explore current production and planned AWS architecture

System route

From request to runtime.

Current production is separated from the proposed AWS direction.

Deployed now
Current production
Single Ubuntu host
01ClientBrowser request
02DNSPublic domain

Ubuntu host boundary

03NginxTLS and proxy
04Node + PM2Application process
05PostgreSQLRelational data

A deliberately small operational surface while the platform is at its current scale.

Not deployed
Planned AWS direction
Scale-out study
01ClientHTTPS request
02DNSRoute resolution

AWS VPC boundary

03Public ingressInternet gateway
04Private computeEC2 application
05NAT egressOutbound updates
06S3Generated files
07CloudWatchLogs and metrics

A proposed direction informed by hands-on AWS labs; final service choices and data placement remain future engineering work.

Solid borders represent the running system. Dashed borders represent architecture under study, not production infrastructure.
Hands-on labs

AWS Cloud Practical Labs

Cloud infrastructure

Configured IAM, EC2, S3, a custom VPC, CloudWatch, CloudTrail, EventBridge and SNS in an AWS Free Tier account. The case study records the configuration work and the failures that clarified it.

Read case study
  • Custom VPC with subnets, IGW and route tables
  • IAM users, groups and policy-based permissions
  • S3 bucket policies and versioning
  • CloudTrail + CloudWatch + SNS alerting path
  • IAM
  • EC2
  • VPC
  • S3
  • CloudWatch
  • CloudTrail
  • SNS
  • EventBridge
Explore the AWS lab architecture
AWS networking, audit and alerting lab flowsAn EC2 instance reaches the internet through its subnet route table and an internet gateway. CloudTrail captures API activity. A CloudWatch alarm sends a notification through SNS. EventBridge rules were configured separately.VPC NETWORK LABEC2 instanceinstance in subnetsubnet routeRoute table0.0.0.0/0 routetargetInternet gatewayVPC attachmentInternetAUDIT LABAWS API activitycaptured byCloudTrailALERTING LABMetric / test eventknown triggerCloudWatch alarmthreshold reachedSNS notificationdelivery verifiedEventBridge rules were configured as a separate event-routing exercise.
Lab flows verified separately: VPC egress, CloudTrail audit capture, and CloudWatch notifications through SNS.
Ongoing

Linux in Production

Systems & security

Administering the Ubuntu host for MartialXPro: Nginx reverse proxying, PM2 process supervision, SSH access, file permissions, environment configuration and production diagnostics.

Read case study
  • Nginx reverse proxy in front of a Node.js service
  • PM2 process supervision with restart on boot
  • Least-privilege permissions and SSH hardening
  • Environment-variable driven config, no secrets in the repo
  • Ubuntu
  • Nginx
  • PM2
  • SSH
  • systemd
  • Reverse proxy

From networking fundamentals to cloud infrastructure and a deployed system.

Networking and cybersecurity training led to Linux operations, self-directed AWS labs and running MartialXPro on one Ubuntu host.

  1. Networking foundations

    Learned TCP/IP, routing and switching, DNS, HTTP/HTTPS, VPNs and subnetting as the foundation for infrastructure work.

    • TCP/IP
    • Routing & Switching
    • DNS
    • VPN

  2. Cybersecurity course training

    Completed the CEHP, C|NPT - Certified Network Penetration Testing, and WAPT courses through Indian Institute of Cyber Security, in association with Indian Cyber Security Solutions.

    • CEHP
    • C|NPT
    • WAPT

  3. Linux administration

    Learned the operating system that everything else would end up running on. Services, permissions, logs, SSH.

    • Ubuntu
    • SSH
    • Permissions
    • Services

  4. Self-directed AWS labs

    Configured IAM, EC2, a custom VPC, S3, CloudWatch, CloudTrail, SNS and EventBridge in an AWS Free Tier account, then documented the routing, permission and alerting failures encountered along the way.

    • IAM
    • EC2
    • VPC
    • S3
    • CloudWatch

  5. Deployed MartialXPro system

    Took MartialXPro from an empty schema to a live system on one Ubuntu host behind Nginx, with the Node.js service supervised by PM2 and PostgreSQL managed through Prisma.

    • Production
    • Ubuntu
    • Nginx
    • PM2

Experience

Systems I've operated and supported.

MartialXPro

Co-Founder & Technical Architect

Period
2026 - Present
Location
Mohali, Punjab
  • Provision and operate the single-host Ubuntu deployment with Nginx, PM2, SSH, database migrations and production log diagnostics.
  • Designed the current request path from Nginx through the Node.js and Express API to PostgreSQL, with Prisma-managed schema changes.
  • Built application workflows for registrations, categories, fixtures, certificates, reports and analytics, with a centralised three-role access model for admin, organiser and player users.
  • Diagnose application, proxy, process and permission failures using PM2 and Nginx logs on the running host.

Education

Bachelor of Arts

D.A.V. College, Bathinda

2020 - 2022

Certifications & training.

AWS certified, with three cybersecurity course-completion certificates supporting my cloud and security foundation.

Contact

Open to Cloud Engineer and Cloud Infrastructure roles.

Available for cloud and infrastructure work

I'm interested in roles involving AWS, Linux, networking, deployment and infrastructure operations. Email is the fastest way to reach me.

Direct line

gautamdem@gmail.com

For a role or project discussion, email is the quickest way to reach me.

Open Resume ↗

A useful first note

Role, team and timeline.

A little context helps: the role or project, where the team works and when you would like to start a conversation.

Send a message

Use the up and down arrow keys to choose a result, Enter to open it, and Escape to close search.