Ashu Saini logo

Ashu Saini

Cloud Infrastructure & Migration Specialist

Cloud Consultant

Cloud infrastructure leader focused on Cloud (AWS/ Azure) migrations and day-2 reliability.

11 years moving enterprise workloads to Cloud (AWS/ Azure), automating with Terraform, and hardening platforms with DR strategy, cost controls, and secure network architectures.

11+ Years ExperienceCloud (AWS/ Azure) MigrationsTerraform AutomationDevOps & SRE
Secure by design
Business-first outcomes
AWS & Azure Certified
Ashu Saini professional portrait

Experience

Guiding platforms from design to day-2 success

11-year track record across architecture, enablement, and resilient operations.

SoftwareOne logo

Nov 2022 — Present

Expert Technology Infrastructure

SoftwareOne

Leads regulated Cloud (AWS/ Azure) migration programs, landing-zone architecture, and deployment readiness for banks/FSIs in Malaysia and APAC, combining AWS and Azure platform engineering with policy-as-code aligned to BNM RMiT.

  • Led AWS and Azure cloud migration initiatives using AWS MGN, Azure Migrate, Azure Site Recovery, Azure DMS, RiverMeadow, Veeam, and Cloudamize for discovery, dependency mapping, migration wave planning, and workload cutovers.
  • Architected secure and scalable AWS and Azure platforms spanning EC2, VPC, Security Groups, NACLs, Direct Connect, VPN, VPC Peering, Virtual Machines, VNet, NSG, Azure Firewall, ExpressRoute, VPN Gateway, and VNet Peering.
  • Built enterprise-scale AWS and Azure landing zones with organizational guardrails, multi-account/subscription governance, hub-and-spoke VPC/VNet design, and automated policy enforcement mapped to Bank Negara Malaysia RMiT controls.
  • Automated infrastructure provisioning and configuration management with Terraform for standardized, repeatable, and compliant Infrastructure-as-Code deployments across multi-cloud environments.
  • Implemented cloud operations, governance, and compliance frameworks using AWS Systems Manager, Azure Automation, Azure Arc, Azure Policy, Azure Monitor, and Log Analytics.
  • Designed disaster recovery and business continuity solutions with AWS Backup, Azure Backup, Azure Site Recovery, Recovery Services Vaults, and Geo-Redundant Storage aligned to RTO/RPO objectives.
  • Conducted cloud readiness assessments, TCO analysis, and migration business case evaluations aligned with the AWS Well-Architected Framework, Azure Well-Architected Framework, and Microsoft Cloud Adoption Framework.
  • Led technical consulting, post-sales engagements, and executive stakeholder discussions to translate business requirements into scalable cloud architectures and transformation roadmaps.
  • Delivered architecture workshops, migration discovery sessions, and cloud adoption enablement programs with Cloud Solution Architects, Professional Services, and Sales teams.
Accenture logo

Nov 2019 — Oct 2022

Cloud Operations Architect Specialist

Accenture

Owned IaC, Kubernetes operations, CI/CD deployment pipelines, monitoring, cost optimization, and operational handover across AWS and Azure environments.

  • Authored and maintained Terraform scripts for EC2, VMs, load balancers, VPCs, bastion hosts, and scale sets across AWS and Azure; converted CloudFormation templates to Terraform and automated delivery via Azure DevOps and GitHub.
  • Managed Docker and Kubernetes clusters including pod health, upgrades, patching, and AMI updates.
  • Built Jenkins CI/CD pipelines, deployed the Amdocs suite on Vodafone AWS, managed Docker images with Dockerfiles and Docker Compose, and developed Ansible playbooks for automated patching with Systems Manager Patch Manager.
  • Monitored environment health with CloudWatch, optimized performance and cost with AWS Trusted Advisor, managed root credential rotation through CyberArk, and implemented tag-compliance strategies.
  • Worked with SageMaker and QuickSight analytics, configured Cassandra clusters, provided security oversight, led knowledge transitions, and created SOPs for support teams.
Cognizant logo

Oct 2015 — Nov 2019

Tech Lead

Cognizant

Managed ITIL-aligned incident/change operations, IAM and Active Directory access controls, CI/CD deployment support, and AWS-hosted service reliability for enterprise applications.

  • Managed L1/L2 incident and change management aligned with ITIL, coordinating major incidents, emergency deployments, IIS-level configuration changes, and critical production issue resolution with vendors.
  • Administered IAM roles, policies, and Active Directory groups; enforced resource tagging and access control strategies; managed network-shared path permissions and SFTP connections.
  • Automated build and deployment pipelines with Jenkins and Git; built and deployed Docker containers; created JAR/WAR files with Maven and deployed to Apache Tomcat across DEV, QA, and UAT environments.
  • Used AWS services including EC2, S3, IAM, AMI, ELB, VPC, and CloudWatch to support fault-tolerant infrastructure; collaborated with SQL teams on database deployments and produced operational and monthly service reports.

Projects

Featured builds & accelerators

Curated work spanning landing zones, platform reliability, and data observability.

Adaptive Cloud Landing Zone

12min to provision a compliant sandbox; accelerates RMiT evidence with built-in policy checks and conformance packs.

Opinionated Cloud (AWS/ Azure) blueprint with org guardrails, multi-account VPC/VNet topology, and policy packs mapped to BNM RMiT controls (encryption, egress, IAM/RBAC, logging).

Cloud (AWS/ Azure)TerraformControl TowerRMiT

Kubernetes Reliability Kit

Reduced Sev-1 frequency by 30% after adopting SLO-driven alerting and autoscaling recipes.

Collection of K8s operators, Prometheus rules, and chaos scenarios to harden critical workloads.

KubernetesAzure DevOpsPrometheusLitmus

Data Pipeline Observability

Decreased data incident triage time from hours to minutes with standardized runbooks.

End-to-end lineage, quality gates, and anomaly detection for streaming + batch pipelines.

DatabricksdbtAirflowGreat Expectations

Credentials

Certifications that back the craft

Credentials across hyperscalers and SRE ensure recommendations align with best practices and compliance.

Amazon Web Services

AWS Certified Cloud Practitioner

2023

Amazon Web Services

Certification of Completion: AWS Solutions Architect

2020

HashiCorp

HashiCorp Certified: Terraform Associate

2022

Microsoft

Azure Fundamentals (AZ-900)

2020

Microsoft

Azure Data Fundamentals

2021

Skills

Where I move fastest

Battle-tested toolchain spanning architecture, platform enablement, and reliability.

Architecture

Well-Architected ReviewsMulti-Region DesignEvent-Driven SystemsData PlatformsZero Trust

Platform Engineering

KubernetesService Mesh (Istio)GitOps (Azure DevOps)Progressive DeliveryPlatform APIs

DevSecOps & Reliability

IaC (Terraform/CDK)SRE PlaybooksObservabilityChaos EngineeringCost Guardrails

Contact

Let’s build your next resilient release

Book a discovery call to review goals, map options, and align on a pragmatic plan.

Kuala Lumpur, Malaysia
Response within 24h

Engagement snapshot

  • Discovery workshop to align success metrics and constraints.
  • Architecture blueprint + backlog to reach day-2 readiness.
  • Guided delivery with playbooks, runbooks, and enablement.