Humayun Khan builds cloud security, networking, content delivery, cost control and IT support systems

I build real things in the cloud.

I’m Humayun Khan, and I build secure, cost efficient systems in the cloud. Every project below runs live in production today, built on principles that hold up on any platform: least privilege, event driven automation, edge delivery and cost guardrails. I’m also sharpening my networking and IT infrastructure skills every day, working toward a full picture of how modern systems run.

Open to entry level cloud & IT roles · Karachi · Remote

Explore my work → Download resume
Portrait of Humayun Khan
2Live cloud projects
9+Cloud services in production
<$0.01Monthly infrastructure spend
2027Graduation year

Cloud projects

Both systems below run live, right now, in a real production account. Not demos, not screenshots.

SECURITYEVENT DRIVENSERVERLESSARMED

Real Time Root Login Alert System

CLOUDTRAIL → EVENTBRIDGE → SNS

A serverless tripwire around the most powerful login in any cloud account. CloudTrail records every root login, an EventBridge rule matches the event the moment it lands, and SNS pushes an email alert straight to my inbox within seconds. No polling, no dashboards, no manual checks.

  • Implements a core CIS benchmark security control: alert on any root account use
  • Fully serverless and event driven, nothing to patch and effectively zero cost at idle
  • The same rule and target pattern extends to any account activity worth watching
Ask me how it works →
DELIVERYSTORAGEFINOPSLIVE

Secure Global Document Delivery Pipeline

S3 → CLOUDFRONT · S3 VERSIONING · AWS BUDGETS

A locked down CDN for documents. Files live in a private S3 bucket with every form of public access blocked, and CloudFront serves them worldwide through Origin Access Control, so the edge is the only door in. S3 Versioning protects each file against overwrites and deletion, while AWS Budgets holds the whole pipeline under one cent a month.

  • Zero public buckets. The origin is reachable only through the CDN
  • Point in time recovery for every file via S3 Versioning
  • Global edge delivery for less than $0.01 a month, enforced by a budget alarm
Ask me about the architecture →

Why hire me

Proof beats promises. Here is what already runs, and why it will keep running on whatever platform your team uses.

Security that reacts in seconds

Root login alerts flow from CloudTrail through EventBridge straight to my inbox. Zero manual checks.

Global delivery under one cent

CloudFront serves my documents worldwide while AWS Budgets holds the monthly bill below $0.01.

Locked down by default

Public access blocked on every bucket, Origin Access Control in front, versioning behind. I secure first, then ship.

Principles over platforms

Event rules, edge caching, identity controls and budget alarms exist on every major cloud. New platform, new names, same ideas.

Built in production, not theory

Everything here runs in a live production account, with a cloud certification in progress alongside it.

Ships complete, polished work

This site is a project too: hand coded, secure, accessible and fast, with live visitor analytics in the footer.

Skills and certifications

What I practice
Cloud SecurityNetworkingServerless ArchitectureFinOpsCloud OperationsIT Support
What I build with today
AWSCloudTrailEventBridgeSNSS3CloudFrontS3 VersioningAWS BudgetsIAMCloudflareGit & GitHub
Concepts that travel to any platform
IAM & Least PrivilegeEvent Driven AutomationEdge Delivery / CDNDNS & TLSObject Storage & VersioningCost GovernanceMonitoring & Alerting

Platform flexible by design. Every pattern above has a direct twin on Microsoft Azure, Google Cloud and beyond, and the same fundamentals run networks and infrastructure everywhere. I learned the principles, not just one console, so switching platforms means learning new names, not new ideas.

AWS Certified Cloud PractitionerFoundational cloud certification
In progress
AWS Solutions Architect AssociateNext on the roadmap
Target 2027

Experience

Software Development Intern · CodersCave Remote · Sep 2023 to Oct 2023
  • Built and debugged application features against real project requirements and user needs
  • Collaborated with a fully remote team to ship improvements that made the software easier to use
  • Delivered every assigned task on schedule in a fast paced virtual environment

Education

BS Computer ScienceSZABIST University Karachi
Class of 2027

Let’s talk cloud.

Hiring for cloud support, networking, infrastructure or IT support? I would love to talk. I read everything and reply fast.

Connect on LinkedIn → Say hello See my GitHub