Skip to content
View avinashsinghhub's full-sized avatar

Block or report avinashsinghhub

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don't include any personal information such as legal names or email addresses. Markdown supported. This note will be visible to only you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
avinashsinghhub/README.md

Avinash Singh

Cloud Infrastructure & Modernization Architect


Professional Focus

I design and execute production-grade cloud modernization strategies for organizations transitioning from legacy on-premises infrastructure to secure, scalable AWS environments.

My work spans infrastructure transformation, backup & disaster recovery engineering, security remediation, and performance optimization for mission-critical workloads.


Core Expertise

Infrastructure Modernization

  • Full on-prem to AWS transformation
  • NAS replacement with Amazon FSx
  • Archival data migration (20+ TB scale)
  • Hybrid and fully cloud-hosted architectures
  • Hardware dependency elimination

Backup & Disaster Recovery Engineering

  • Incremental and full backup strategies
  • Geo-redundant replication
  • Defined RTO and RPO alignment
  • Ransomware-resilient immutable storage
  • Disaster recovery drill design

Tally Hosting & Protection

  • Secure cloud-hosted Tally environments
  • Automated daily backups
  • Snapshot-based recovery models
  • Role-based access control
  • Encrypted hybrid access

Security & Well-Architected Review

  • Post-breach infrastructure assessment
  • AWS security posture evaluation
  • IAM least-privilege redesign
  • Infrastructure vulnerability scanning
  • Log retention and compliance readiness
  • Encryption enforcement (at rest & in transit)

Performance & Scalability Engineering

  • Auto Scaling Group implementation
  • Application Load Balancer configuration
  • Peak traffic optimization (exam-time scaling)
  • Right-sizing EC2 workloads
  • Cost-performance balancing

Selected Engagements

Enterprise Cloud Modernization

  • 20 TB archival migration with lifecycle cost optimization
  • 5 TB hot storage migration replacing legacy NAS
  • Centralized log archival and retention framework
  • Geo-redundant disaster recovery strategy
  • Compliance-ready infrastructure design

Security Remediation Project

  • Conducted Well-Architected security review after two security breaches
  • Identified IAM misconfigurations and exposure risks
  • Implemented least-privilege model
  • Performed infrastructure-wide vulnerability assessment
  • Introduced monitoring and automated alerting

Performance Optimization for Education Platform

  • Designed Auto Scaling Groups for exam peak load
  • Implemented Application Load Balancer
  • Improved uptime resilience
  • Right-sized compute resources
  • Reduced infrastructure waste while improving scalability

Architecture Philosophy

  • Resilience before expansion
  • Security before exposure
  • Scalability without waste
  • Documentation as part of architecture
  • Cost efficiency aligned with performance

Current Focus Areas

  • Hybrid cloud transformation strategies
  • Disaster recovery architecture refinement
  • Infrastructure security hardening
  • Performance engineering for variable workloads
  • Sustainable and ESG-aligned IT modernization

Technical Stack

Cloud Platform

  • Amazon Web Services (AWS)

Storage

  • Amazon S3 (Intelligent-Tiering, Lifecycle Policies)
  • Amazon FSx for Windows
  • EBS Snapshots

Compute & Scaling

  • EC2
  • Auto Scaling Groups
  • Application Load Balancer

Security

  • IAM Architecture
  • Encryption (SSE-S3 / SSE-KMS)
  • Security Groups & NACLs
  • Vulnerability Assessment

Monitoring

  • SNS
  • Log Archival & Retention
  • Backup Failure Alerting

I build infrastructure that survives audits, breaches, peak load, and hardware failure.

Pinned Loading

  1. aws-tally-backup-fsx-hybrid-architecture aws-tally-backup-fsx-hybrid-architecture Public

    Hybrid architecture for Tally backup and NAS modernization using Amazon S3 (Intelligent-Tiering), Amazon FSx for Windows, IPSec VPN connectivity, and encrypted offsite backups with monitoring via SNS.

    1

  2. aws-physical-server-hybrid-backup-architecture aws-physical-server-hybrid-backup-architecture Public

    Hybrid backup architecture for a physical Windows server using AWS Backup and VPN-based offsite incremental copy.

    1

  3. aws-windows-erp-sql-deployment aws-windows-erp-sql-deployment Public

    End-to-end AWS deployment of Windows Server ERP infrastructure with SQL Server, secure remote access, automated backups, monitoring, and cost optimization.