Piyush Yadav | System Administrator & Cloud Architect

$ cat about.txt

System Administrator & Cloud Architect with 3 years of experience in AWS cloud infrastructure, Linux server administration, networking, security hardening, and website hosting. Skilled in server setup, cloud deployment, DNS configuration, SSL installation, reverse proxy design, and automated backups.

Experienced in managing secure and scalable environments with minimal downtime — intrusion prevention with fail2ban, firewall management with UFW/iptables, and proactive log monitoring. Dedicated to delivering reliable IT support and efficient technical solutions.

Location Rohini, Delhi — India
Role System Administrator & Cloud Architect
Company Indev Consultancy Pvt. Ltd., Noida
Education B.A. — Delhi University (2021)
Training AWS, Linux & CCNA — Ducat · 1-Year Computer Diploma
Languages English · Hindi

infra.yaml

# production stack I run daily
cloud:
  provider: AWS
  services: [EC2, S3, VPC, Route53, ELB, AutoScaling]
os:
  linux: [Ubuntu, RHEL]
stack:
  web: Apache
  db: MySQL
  panels: [cPanel/WHM, CyberPanel]
automation:
  - bash + crontab
  - rsync incremental backups
security:
  - Certbot SSL
  - Cloudflare WAF / DNS
  - SPF · DKIM · DMARC
uptime_target: "24/7"

$ ls -la /skills

☁️ Cloud Platforms

AWS — EC2 · S3 · VPC · Route 53 · Auto Scaling

Hosting — GoDaddy · SiteGround · Hostinger

Cloudflare — DNS · SSL · DDoS Protection

🐧 Operating Systems

Linux — Ubuntu

Linux — RHEL

Windows Server / Desktop Support

🌐 Networking

LAN / WAN · Routers · Switches

DNS — A · CNAME · MX · SPF · DKIM · DMARC

Port Forwarding · Reverse Proxy

🖥️ Server Administration

Apache · MySQL · FTP · SSH

cPanel / WHM · CyberPanel

SSL — Certbot / Let's Encrypt

⚙️ Automation

Bash Scripting

Crontab Scheduling

rsync Backup Automation

🔐 Security & Monitoring

fail2ban — Intrusion Prevention · SSH Protection

UFW / iptables — Firewall Management

Log Monitoring — auth.log · access logs · uptime checks

🤝 Soft Skills

Teamwork

Ownership

Time Management

$ journalctl --unit=career

System Administrator & Cloud Architect

Sep 2023 — Present

Indev Consultancy Pvt. Ltd. — Noida, UP, India

Managed and maintained IT infrastructure to ensure 24/7 uptime and scalability.
Handled Linux servers, Apache, MySQL, FTP, and SSH across production environments.
Designed and deployed scalable cloud infrastructure on AWS using EC2, ELB, and Auto Scaling.
Configured secure AWS networking — VPC, VPC Peering, Route Tables, Elastic IPs, Route 53 — with firewall-level security controls.
Migrated websites and applications between GoDaddy, SiteGround, Hostinger, and AWS.
Configured DNS records (A, AAAA, CNAME, MX, TXT — SPF, DKIM, DMARC) for domain and email services.
Implemented SSL certificates in Linux environments using Certbot with Apache.
Hardened servers with fail2ban intrusion prevention and UFW/iptables firewall rules — automatic banning of brute-force SSH and login attempts.
Designed a reverse proxy serving 8 in-house servers behind a single static IP with centralized access control.
Monitored server health, auth/access logs and uptime; resolved incidents proactively before user impact.
Managed 70+ desktops/laptops, printer setups, and hardware inventories.

$ ls /projects

🚀

Scalable AWS Infrastructure Deployment

Designed and deployed scalable cloud infrastructure on AWS using EC2, Elastic Load Balancer and Auto Scaling to ensure high availability and performance optimization.

AWSEC2ELBAuto Scaling

🔒

Secure VPC & Network Architecture

Configured secure AWS networking environments — VPC, VPC Peering, Route Tables, Elastic IPs and Route 53 — with firewall-level security controls protecting production.

VPCRoute 53Security

🔀

Multi-Server Reverse Proxy Architecture

Connected 8 in-house servers through a single static IP via reverse proxy configuration — secure routing, centralized access management and optimized internal traffic flow.

Reverse ProxyNetworkingLinux

🛡️

SSL Deployment & Web Server Hardening

Generated and deployed SSL certificates using Certbot with Apache on Linux. Configured secure HTTPS environments and optimized server configuration.

CertbotApacheHTTPS

💾

Automated Backup System — 50+ Websites

Developed automated backup solutions using rsync and crontab scheduling for over 50 websites, with incremental backup strategies and disaster recovery planning.

rsynccrontabBashDR

📦

Large-Scale Website Migration

Migrated WordPress, CodeIgniter 4 and CMS platforms between GoDaddy, SiteGround, Hostinger, AWS and local servers — data integrity with near-zero downtime.

WordPressCodeIgniterMigration

🚨

fail2ban Intrusion Prevention & SSH Hardening

Deployed fail2ban across production Linux servers — real-time parsing of auth logs, automatic IP banning after repeated failed password attempts, custom jail rules for SSH, Apache and panel logins.

fail2banSSHiptablesSecurity

🌩️

Cloudflare & Domain-Level Security

Integrated Cloudflare for DNS management, IP masking, SSL security and DDoS protection. Improved performance with load balancers and DNS optimization.

CloudflareDNSDDoS

$ terraform graph aws-production TRAFFIC

The production AWS architecture I design and run — watch requests travel from users through Cloudflare, Route 53 and the load balancer into the Auto Scaling VPC, with rsync backups flowing to S3.

$ apachectl -S reverse-proxy ROUTING

A real project: 8 in-house servers published through one static IP. The reverse proxy reads the Host header of every request and routes it to the right internal machine — one public address, eight services, centralized SSL and access control.

/etc/apache2/sites-available/wordpress.conf

# one vhost per service — all behind 203.0.113.10
<VirtualHost *:443>
    ServerName wp.company.com
    SSLEngine on
    SSLCertificateFile /etc/letsencrypt/live/wp.company.com/fullchain.pem
    SSLCertificateKeyFile /etc/letsencrypt/live/wp.company.com/privkey.pem

    ProxyPreserveHost On
    ProxyPass        / http://192.168.1.11:8081/
    ProxyPassReverse / http://192.168.1.11:8081/
</VirtualHost>

# router: forward ONLY 80/443 to the proxy box
# wp.company.com  → 192.168.1.11  (WordPress)
# crm.company.com → 192.168.1.12  (CodeIgniter)
# mail.company.com→ 192.168.1.14  (webmail)
# …8 subdomains → 8 internal servers, 1 public IP

✔ Internal servers are never exposed — only the proxy has a public route.

✔ SSL certificates renewed centrally with Certbot on the proxy.

✔ fail2ban on the proxy bans brute-force attempts for all 8 services at once.

✔ Adding server #9 = one new vhost + DNS record. No new IP needed.

$ fail2ban-client status sshd WATCHING

How I protect servers in real time: fail2ban tails the auth log, counts failed password attempts per IP, and bans the attacker at the firewall after 5 strikes. Watch it happen live below — this site's own admin login uses the same rule (5 wrong passwords = 15-minute IP ban).

LIVE — /var/log/auth.log 0 attempts blocked

🚫 BANNED IPs — iptables f2b-sshd chain

/etc/fail2ban/jail.local

[sshd]
enabled  = true
port     = ssh
filter   = sshd
logpath  = /var/log/auth.log
maxretry = 5      # strikes before ban
findtime = 10m    # window for strikes
bantime  = 1h     # firewall ban duration

[apache-auth]
enabled  = true
port     = http,https
logpath  = /var/log/apache2/error.log

$ watch -n1 noc-dashboard LIVE

A live network-operations view. Host metrics below are served in real time by this very Apache/PHP server (api/stats.php) — the racks and traffic simulate a production floor.

HOST — …

OS…

Web Server…

PHP…

Server Time…

Session Uptime…

Disk C: Free…

PHP Memory…

API Latency…

HTTP

PHP

MySQL

DNS

CPU LOAD 0%

NETWORK I/O 0 Mbps

RACK FLOOR — A1..A4

healthy busy alert

EVENT STREAM — /var/log/syslog

$ ssh visitor@piyush-yadav

A real interactive shell. Type help to explore my profile the sysadmin way.

visitor@piyush-yadav: ~

visitor@piyush-yadav:~$

$ ping piyush

✉️EMAIL piyushyadav2497@gmail.com 📞PHONE +91 99903 49960 💼LINKEDIN piyush-yadav-b92863263

📍LOCATION Rohini, Delhi — 110086

⬇ Download Resume (PDF)