Arif Rahman

Final-year BSc Cloud Engineering · Coventry University · United Kingdom

I build and document cloud infrastructure on AWS.

I’m Arif Rahman, graduating in June 2027 and looking for a graduate cloud role in the UK. Below are 14 projects I’ve built and written up, from a multi-AZ AWS migration to Terraform, CloudFormation, Docker and security work. Each one has an architecture diagram, evidence and, where possible, code.

See the projects Download CV GitHubLinkedIn
Arif Rahman
Graduating
June 2027
Looking for
Graduate cloud, DevOps & platform roles
Right to work
British citizen, no sponsorship needed
Right now
Studying for AWS SAA-C03 · learning Kubernetes
Flagship projectDeployedPersonal project · fictional fintech brief

Starling Digital Cloud Migration

A three-tier AWS build across two availability zones: four chained security groups, a bastion host and Simple AD, RDS, DynamoDB, EFS and S3, and an auto-scaled API tier bootstrapped from user data. Every phase is evidenced with console screenshots.

Starling Digital — multi-AZ AWS architectureA VPC (10.0.0.0/16) in us-east-1 spanning two availability zones. Public subnets hold a bastion host, a NAT gateway and an Application Load Balancer; private subnets hold an auto-scaled Node.js API tier and Multi-AZ RDS. EFS and Simple AD sit inside the VPC; DynamoDB and S3 are regional services. Step 1: Users reach the VPC through the internet gateway over HTTPS. Step 2: The Application Load Balancer in the public subnets takes the request. Step 3: It forwards to the Node.js API tier, auto-scaled 2–4 instances across both AZs. Step 4: The API reads and writes RDS; the DB security group only accepts the backend. Step 5: Market data is stored in DynamoDB. Step 6: User data mounts shared EFS storage when each instance boots. Step 7: Instances join the Starling.Digital domain in Simple AD through SSSD. Step 8: Admins SSH to the bastion host, then on to private instances. No direct SSH from the internet.AWS Region us-east-1VPC 10.0.0.0/16us-east-1aus-east-1bPublic subnetPublic subnetPrivate subnetsPrivate subnets:443123345:204967:2288AdminSSH via bastionUsersHTTPSInternet gatewayBastion hostBastion-SGLoad balancerALB-SG :80/:443NAT gatewayoutbound onlyNode.js APIASG 2–4 · AZ aEFSshared app dataNode.js APIASG 2–4 · AZ bRDS primaryDB-SGSimple ADStarling.DigitalRDS standbyMulti-AZDynamoDBmarket dataS3 × 2frontend + vault
Each tier's security group only accepts traffic from the tier in front of it. · scroll sideways to see it allOpen full-size SVG
  1. Step 1: Users reach the VPC through the internet gateway over HTTPS.
  2. Step 2: The Application Load Balancer in the public subnets takes the request.
  3. Step 3: It forwards to the Node.js API tier, auto-scaled 2–4 instances across both AZs.
  4. Step 4: The API reads and writes RDS; the DB security group only accepts the backend.
  5. Step 5: Market data is stored in DynamoDB.
  6. Step 6: User data mounts shared EFS storage when each instance boots.
  7. Step 7: Instances join the Starling.Digital domain in Simple AD through SSSD.
  8. Step 8: Admins SSH to the bastion host, then on to private instances. No direct SSH from the internet.
High availability
Multi-AZ
Compliance posture
Audit-ready
API tier
Auto-scaled
Read the case study Code on GitHub

Selected projects

All 14 projects →

Academic and personal projects are labelled as such. Each card shows the problem, what I built it with and the result; the case study has the full diagram and evidence.

14 · 2026 · Academic multi-cloud architecture projectCompleted

Multi-Cloud Hospitality Platform — AWS CloudFormation + Azure Front Door

Problem
App, data and admin tiers had to be isolated and deployed by pipeline, with HD video kept off the web servers.
Services & tools
CloudFormationGitHub ActionsVPC peeringALBRDSAzure Front Door
Result
Two peered VPCs deployed in one pipeline run; HLS video served from Azure's edge at ~91 ms per segment.
Read case study Code
01 · 2025 · Academic cloud security architecture projectDeployed

Cloud Security Framework — CivicNexus

Problem
A smart-city platform with its database open to 0.0.0.0/0, unencrypted volumes, and no MFA or logging.
AWS services
VPCSecurity GroupsIAM + MFAKMSCloudTrailCloudWatch
Result
Two Critical (score 9) risks treated down to Low; controls mapped to 8 ISO 27001 Annex A domains.
Read case study
13 · 2026 · Infrastructure-as-code portfolio projectDeployed

Terraform — EC2 Deployment with Cloud-Init

Problem
Manual server setup over SSH was slow and drifted between builds.
Services & tools
TerraformEC2cloud-initNGINX
Result
Each instance boots straight into a working NGINX endpoint, identical on every run.
Read case study Code
09 · 2026 · Personal projectCompleted

AWS ECR — Private Container Registry Pipeline

Problem
Images on a laptop or public Docker Hub had no access control and nowhere AWS could pull from.
AWS services
ECRIAMAWS CLIDocker Compose
Result
A 66.68 MB arm64 image in a private, IAM-governed repo, pulled straight into Compose.
Read case study Code
07 · 2026 · Personal AWS projectCompleted

AWS KMS — Encrypting a DynamoDB Database

Problem
AWS-owned keys gave the account no say over who could decrypt the table.
AWS services
KMSDynamoDBIAM
Result
Unauthorised reads blocked until the key policy explicitly granted five actions.
Read case study
03 · 2025 · Academic network architecture projectCompleted

Enterprise Network — TechBridge

Problem
Two sites needed room for 50% growth, no single point of failure and a private link between them.
Tools
Cisco IOSOSPFHSRPVLANsGRE/IPSecNAT/PAT
Result
22 VLANs, HSRP failover and an encrypted site-to-site tunnel, validated by 18 end-to-end tests.
Read case study
View all 14 projects →Hiring? Check my projects against your job description

Certifications & badges

1 certification · 4 learning badges · SAA-C03 in progress

  • AWS

    AWS Certified Solutions Architect – Associate (SAA-C03)

    Amazon Web Services

    In progress

    Studying now

  • Alteryx Designer Core

    Alteryx · 2024

    Certification

  • AWS Cloud Quest: Cloud Practitioner

    Amazon Web Services · 2025

    Learning badge

    Hands-on labs in AWS Cloud Quest, not the CLF-C02 exam

  • AWS Cloud Quest: Generative AI Practitioner

    Amazon Web Services · 2025

    Learning badge

    Hands-on labs in AWS Cloud Quest, not the AIF-C01 exam

  • AWS Educate: Getting Started with Cloud Ops

    Amazon Web Services · 2025

    Learning badge

  • Cisco Networking Basics

    Cisco Networking Academy · 2025

    Course badge

About me

Curious, hands-on, and focused on what the system is for.

When something doesn’t make sense to me, I build it from the ground up until it does. That’s how I taught myself Terraform, rebuilt a multi-AZ AWS migration from scratch, and ended up reading AWS release notes for fun.

What I value most in cloud engineering is turning a business requirement into a dependable system: less manual effort, lower risk, better continuity, and an architecture a team can understand, run and grow.

Outside tech I train in wrestling and grappling, follow every Formula 1 race weekend and enjoy meeting people. I’m outgoing, and I bring the same energy to quietly fixing an IAM policy until it’s right.

Favourite AWS service
VPC. Everything interesting starts with the network.
Currently learning
Kubernetes and Terraform module design
Off the clock
Wrestling, Formula 1, football, gaming and a homelab
Looking for
Graduate cloud, platform and DevOps roles from 2027

Hiring for a graduate cloud role?

Every project is documented with its architecture and the evidence behind it. I’m happy to walk you through any of them on a call.

Get in touch Download CV