binayak@infra:~$ status
Kathmandu —:—
open to remote & on-site infrastructure roles

Binayak Kumar Mahato
keeps production up while everyone else sleeps.

cloud & infrastructure engineer — linux · proxmox · aws · hetzner

I design, deploy and harden the infrastructure underneath hosting platforms — virtualization, networking, DNS, mail, backups and monitoring — with a root-cause mindset honed across production incidents, not just lab environments. Based in Kathmandu, working with teams everywhere.

↳ email me view github linkedin
BKM
binayak_mahato.idCloud & Infrastructure Engineer
locationKathmandu, NP (UTC+5:45)
currentBISUP Innovations / BisupHost
sinceNov 2024 · hosting & infra
core stackAWS · Proxmox VE · Hetzner
degreeB.E. IT, Chandigarh Univ. — 2026
~/about · systemctl status

The stack I run in production

Every service below is something I've configured, broken, fixed and hardened on real customer-facing infrastructure — not just tutorials.

cloud-platforms.serviceactive
AWS EC2S3Route53VPCIAMGCPAzure
virtualization.serviceactive
Proxmox VEProxmox Backup Servercloud-initQEMU Guest AgentNetBox IPAM
hosting-platforms.serviceactive
WHM/cPanelDirectAdminCloudLinuxVPS & DedicatedCloudflare DNS
devops-automation.serviceactive
GitGitHub ActionsGitLab CI/CDDockerKubernetesTerraformJenkins
monitoring.serviceactive
GrafanaInfluxDBProxmox MetricsLog Analysis
security-networking.serviceactive
CSFfail2banSophos FirewallOpenVPNWireGuardnftablesSSL/TLSTCP/IP
mail-systems.serviceactive
PostfixEximModoboaMS Exchange 2019SPFDKIMDMARC
backup-dr.serviceactive
Proxmox Backup ServerHetzner StorageBoxVeeam BackupRetention Policies
scripting.serviceactive
PythonBashPowerShellC++Java ServletsJSP/JDBC
~/experience · deploy.log

Where I've kept things running

Four roles, one thread: production infrastructure that has to stay up — and the troubleshooting that happens when it doesn't.

NOV 2025 — PRESENT
Cloud & Infrastructure Engineer
BISUP Innovations / BisupHost — Remote
  • Managed production cloud and hosting infrastructure across AWS, Hetzner dedicated servers and Proxmox-based virtualization.
  • Designed Proxmox VE infrastructure for VPS hosting — VM provisioning, public IP assignment, resource and lifecycle management.
  • Configured routed public IPv4 networking for VMs: gateway routing, MTU tuning, firewall rules and access policy.
  • Built cloud-init templates to automate VPS provisioning with SSH keys, networking and user configuration.
  • Administered WHM/cPanel, DirectAdmin and CloudLinux for multi-tenant hosting customers.
  • Managed Cloudflare DNS, SSL, domain routing and traffic optimization.
  • Deployed mail infrastructure on Postfix, Exim and Modoboa with SPF, DKIM and DMARC.
  • Hardened servers with CSF, fail2ban, firewall rules and SSH security.
  • Set up Grafana, InfluxDB and Proxmox Metrics for monitoring and capacity tracking.
  • Ran Proxmox Backup Server with remote storage and retention policies for disaster recovery.
  • Migrated multiple production VPS instances from Hetzner to an EPYC-based dedicated server.
  • Provided L2/L3 support across hosting, VPS, server, email, DNS, SSL and infrastructure issues.
JUL 2025 — OCT 2025
IT Engineer — Cloud, Systems & Security
App and Website LLC — Remote
  • Managed Windows and Linux servers for availability, security and performance.
  • Administered Microsoft Exchange Server 2019, Remote Desktop Services and Active Directory.
  • Implemented Sophos Firewall, VPNs, secure routing and network access policies.
  • Designed backup and disaster recovery strategy using Veeam Backup.
  • Automated administrative tasks with PowerShell and Bash.
  • Provided remote L2/L3 support, coordinating with MSP vendors on issue resolution.
NOV 2024 — APR 2025
Cloud Engineer & IT Support
BISUP Innovations / BisupHost — Remote
  • Built and operated production hosting infrastructure on WHM/cPanel, DirectAdmin and CloudLinux.
  • Deployed AWS and Hetzner VPS and dedicated servers with Linux hardening.
  • Configured Cloudflare DNS, SSL, CSF firewall rules and automated backup workflows.
  • Managed mail servers on Postfix, Exim and Modoboa with SPF, DKIM and DMARC.
  • Integrated CI/CD pipelines using GitHub Actions and GitLab CI/CD.
  • Resolved resource abuse, 403/503 errors, outbound mail blocks, DNS and SSL failures.
NOV 2021 — MAY 2022
System Administrator Intern
Deerwalk Institute of Technology — Kathmandu, Nepal
  • Assisted with institutional IT infrastructure, server maintenance and internal support.
  • Configured and troubleshot Cisco switches, access points and local network connectivity.
  • Supported classroom systems, internal users and basic network operations.
~/projects · build artifacts

Things I've built and shipped

A mix of infrastructure platforms, migrations and automation — selected from real production and personal work.

Proxmox Virtualization Infrastructurevps-hosting

A virtualization-based VPS hosting platform built on Proxmox VE over dedicated hardware.

  • Multiple isolated VPS environments on shared Proxmox infrastructure.
  • cloud-init templates for automated provisioning, SSH keys and networking.
  • Bridged + routed networking with multiple public IPs per VM.
  • WireGuard VPN access and nftables firewall rules.
Proxmox VEcloud-initWireGuardnftables
Hetzner → EPYC Production Migrationmigration

Migrated client VPS workloads from Hetzner to an EPYC-based dedicated server with minimal disruption.

  • Planned cutover to protect live customer services.
  • Reconfigured public IP routing and firewall rules post-migration.
  • Coordinated client communication around IP changes and status.
  • Verified DNS propagation and service stability after cutover.
ProxmoxNetworkingDNS
Backup & Monitoring Infrastructureobservability

Backup and monitoring workflows for Proxmox-based production infrastructure.

  • Proxmox Backup Server integrated with remote Hetzner StorageBox.
  • Daily, weekly and monthly retention cycles.
  • Grafana + InfluxDB dashboards at host and VM level.
  • Used for capacity planning and performance troubleshooting.
GrafanaInfluxDBPBS
Ethereum RPC Hosting Infrastructureweb3-infra

Deployed and managed Ethereum mainnet RPC infrastructure with execution + consensus clients.

  • Geth as execution client, Lighthouse as consensus client.
  • Docker-based services with persistent data directories.
  • Monitored node sync, peer connectivity and service health.
  • Prepared for RPC hosting use cases and future scaling.
DockerGethLighthouse
CI/CD Pipeline Automationdevops

Pipelines for automated application deployment and infrastructure workflows.

  • GitHub Actions, GitLab CI/CD and Jenkins across environments.
  • Containerized builds with Docker and Kubernetes.
  • Terraform-managed infrastructure provisioning.
  • Reduced manual release work and improved deploy consistency.
GitHub ActionsTerraformKubernetes
Inventory Management Systemapplications

A terminal-based inventory management system written in C++.

  • CRUD operations for stock and product records.
  • Billing and stock-tracking features.
  • Reporting for basic business record management.
C++
~/publications · citations

Writing & research

Security Analysis of Post-Quantum Cryptographic Protocols Against Emerging Quantum ThreatsEPC UUNiT · 2025
Optimizing DevOps Processes: A Practical Framework for CI/CD Pipeline Design and DeploymentYMER · 2025
Algorithmic Analysis and Implementation Strategies for Targeted Advertising on Diverse Social Media PlatformsIEEE · 2024
~/credentials

Education & certifications

education
Bachelor of Engineering, Information Technology
Chandigarh University, Punjab, India
2022 - 2026 · CGPA 8.18 / 10
High School
Deerwalk Sifal School, Kathmandu, Nepal
2020 – 2022 · GPA 3.21 / 4.0
School
Loyalty Academy, Kathmandu, Nepal
GPA 3.80 / 4.0
certifications
cPanel Certified Partner Accreditation — cPanel Mar 2026 – Mar 2027
Internet of Things: Design Concepts and Use Cases — SWAYAM MHRD Jan 2025
Cloud Computing: A Hands-on Approach with AWS Cloud — Chandigarh University Jun 2024
Foundations of Cybersecurity — Google Mar 2024
Tata Group — Cybersecurity Analyst Job Simulation — Forage Mar 2024
Linux: I/O Redirection for DevOps — Coursera Project Network Mar 2024
Google Cloud Study Jams 23 — GDSC, Chandigarh University Nov 2023
Google I/O Extended 2023, Chandigarh — GDG Cloud Chandigarh Jul 2023
Academic Paper Writing and IPR — Chandigarh University May 2023
Machine Learning — Chandigarh University Feb 2023
Command Line in Linux — Coursera Feb 2023
Introduction to Git and GitHub — Coursera Nov 2021
~/contact

Let's talk infrastructure

$whoami
binayak kumar mahato — cloud & infrastructure engineer, kathmandu, nepal
$reach --any-channel
emailbinayakmahato01@gmail.com phone+977 974 7544926 linkedin/in/binayak-kumar-mahato github/Binayak72 facebookbinayak.mahato.2 locationKathmandu, Nepal