Tajamul Mir

ABOUT

Building a cloud career on a foundation of precision and problem-solving.

My focus today is AWS cloud and IT support. I am developing practical skills by designing, deploying, testing, securing, and troubleshooting real AWS workloads rather than treating cloud concepts only as theory.

My previous work in forensic investigation, university support, manufacturing operations, technical documentation, and photography supports that direction: it trained me to work carefully under pressure, protect information integrity, communicate clearly, and follow problems through to resolution.

AWS CLOUD PORTFOLIO

Hands-on cloud projects built, tested, and troubleshot on AWS

Five practical projects demonstrating cloud hosting, serverless development, Python API design, private networking, security, high availability, databases, testing, and cost-aware operations.

FLAGSHIP AWS ARCHITECTURE PROJECT

Highly Available 3-Tier AWS Architecture

Designed and deployed a secure, highly available application architecture across two Availability Zones with an internet-facing Application Load Balancer, private EC2 application servers managed by Auto Scaling, and a private Amazon RDS MySQL database tier.

Built a custom VPC with public, private application, and private database subnets across two Availability Zones.
Placed EC2 application servers in private subnets behind an Application Load Balancer and Auto Scaling Group with a desired capacity of 2 and scaling range of 2–4 instances.
Created a golden Amazon Linux 2023 AMI with Apache preinstalled and used rolling instance refreshes to deploy updated launch-template versions.
Restricted application traffic with security-group chaining: internet → ALB, ALB → EC2 on HTTP 80, and EC2 → RDS MySQL on TCP 3306.
Enabled private administration through AWS Systems Manager using an EC2 IAM instance profile and VPC interface endpoints instead of public SSH access.
Added an Amazon S3 Gateway Endpoint so private instances could reach Amazon Linux package repositories without a NAT Gateway.
Validated the database tier from a private EC2 instance by authenticating to RDS, creating a database and table, inserting a record, and successfully querying it.

✓ 2 AZs✓ 2 Healthy Targets✓ Private EC2✓ RDS Read/Write

Internet
Client traffic

↓

Application Load Balancer
Public subnets • Multi-AZ

↓

EC2 • AZ A
Private app subnet

EC2 • AZ B
Private app subnet

Auto Scaling Group • 2–4 instances

↓ TCP 3306

Amazon RDS MySQL
Private database tier

Systems Manager VPC endpoints S3 Gateway Endpoint Golden AMI + Instance Refresh

Amazon VPCPrivate SubnetsAmazon EC2Auto ScalingApplication Load BalancerAmazon RDSMySQLSystems ManagerVPC EndpointsSecurity GroupsGolden AMIHigh Availability

tajamulmir.com

Built and deployed this portfolio using Amazon S3 for site assets, CloudFront for content delivery, Route 53 for DNS, and AWS Certificate Manager for HTTPS.

Kept the S3 bucket private and granted CloudFront controlled origin access.
Configured a custom domain and Route 53 alias records.
Configured TLS/HTTPS with an ACM certificate.
Troubleshot DNS, certificate, distribution, and deployment issues end-to-end.

Route 53
DNS

→

CloudFront
CDN + HTTPS

→

Private S3
Static assets

Amazon S3CloudFrontRoute 53ACM DNSHTTPS/TLSIAM fundamentalsCloud troubleshooting

SERVERLESS PROJECT

Portfolio Contact API

Built a serverless backend for this website so visitors can submit messages without a traditional web server. API Gateway receives the request, Lambda validates and processes it, DynamoDB stores each submission, and Amazon SES sends an email notification.

Created an HTTP API with a POST /contact route.
Configured CORS for the root and www portfolio domains.
Used least-privilege IAM permissions for DynamoDB writes and Amazon SES email delivery.
Configured DKIM-authenticated email notifications with Amazon SES and used CloudWatch logs to troubleshoot permissions.
Tested the complete path from the live website through API Gateway and Lambda to DynamoDB and email delivery.

Website
Contact form

→

API Gateway
HTTP API

→

Lambda
Python

→

DynamoDB
Messages

+

Amazon SES
Email notification

API GatewayAWS LambdaPythonDynamoDBAmazon SESCloudWatchCORSIAMServerless

PYTHON + SERVERLESS API

Cloud-Native Support Ticket API

Built a serverless CRUD REST API for IT support tickets using Python, Amazon API Gateway, AWS Lambda, and DynamoDB. The project focuses on cloud-native backend development, data handling, validation, error responses, and automated API testing.

Implemented POST, GET, PUT, and DELETE endpoints for ticket lifecycle operations.
Added input validation, UUID-based ticket IDs, priorities, statuses, and UTC timestamps.
Scoped the Lambda IAM policy to the required DynamoDB CRUD actions on the SupportTickets table.
Handled common API responses including successful requests, invalid input, missing records, and server-side errors.
Created and ran an automated Python integration test covering create, read, update, delete, and post-delete 404 behavior.

Client
API request

→

API Gateway
HTTP API

→

Lambda
Python 3

→

DynamoDB
SupportTickets

PythonREST APIAPI GatewayAWS LambdaDynamoDB CRUDInput ValidationHTTP Error HandlingIAMAutomated Testing

HIGH AVAILABILITY LAB

Multi-AZ EC2 Web Architecture

Designed and validated a load-balanced web architecture using two Amazon EC2 instances in separate Availability Zones, an Application Load Balancer, and a health-checked target group. The lab was securely decommissioned after testing to control cost.

Deployed Apache web servers across us-east-1c and us-east-1d for multi-AZ availability.
Configured an internet-facing Application Load Balancer with HTTP listener, target group, and health checks.
Verified both targets were healthy and confirmed requests were served successfully through the ALB endpoint.
Hardened the backend security group so EC2 accepted HTTP only from the ALB security group, blocking direct public web access.
Removed the ALB, EC2 instances, target group, EBS volumes, and project security groups after validation to avoid unnecessary ongoing charges.

Internet
HTTP traffic

→

Application Load Balancer
HTTP : 80

→

Target Group
Health checks

→

EC2 × 2
Separate Availability Zones

Amazon EC2Application Load BalancerTarget GroupsHealth Checks Multi-AZSecurity GroupsApacheCost Cleanup

EXPERIENCE

The experience behind my approach to technical support.

2025 — PresentColumbia, Missouri

Quality Assurance / Manufacturing Operations

PepsiCo — Quaker Oats

Support high-volume manufacturing operations while following quality, safety, and standardized process requirements. Identify production or quality issues, document findings accurately, and coordinate with team members to restore normal operations.

Feb 2024 — Aug 2025Columbia, Missouri

Office Support Assistant

University of Missouri — International Programs

Provided front-line support to students, scholars, staff, and visitors. Supported administrative systems and H-1B-related workflows, maintained accurate records, handled sensitive information, and managed concurrent requests with clear customer communication.

May 2018 — Oct 2023Srinagar, India

Forensic Technician / Medicolegal Death Investigation

SKIMS Medical College

Supported medicolegal autopsies while maintaining detailed documentation, evidence integrity, and chain-of-custody procedures. Performed forensic photography and specimen handling under strict protocols and worked across clinical, investigative, and court-related workflows.

2023 — 2025Remote

Editor / Content Developer

Publishing & Education Projects

Researched, edited, and quality-checked digital and written content for accuracy, consistency, and completeness. Identified errors and information gaps, managed multiple projects and deadlines, maintained organized documentation, and communicated with clients and collaborators regarding requirements, revisions, and deliverables.

2023Boonville, Missouri

Corrections Officer

Missouri Department of Corrections

Maintained security, documented incidents, followed established procedures, and communicated effectively in a controlled, high-accountability environment.

BEYOND CLOUD • SELECTED PHOTOGRAPHY