Identity & Access Management Analyst at Hubsec Solutions · Oracle Cloud Infrastructure 2025 Certified Architect Associate · Based in Lesotho.
I work across identity and access management, information security, cloud architecture, platform engineering, and data engineering — and the places they meet. Directory services and privileged access on one side, Kubernetes platforms and ELT pipelines on the other, database security and compliance reporting running through both. I document as I go, and I document evidence-led: if a claim isn't backed by a retained log, command, or screenshot, it's labelled as unverified rather than asserted.
flowchart LR
OCI["Cloud foundation<br/>OCI · GCP · VCN · load balancers · block storage"]
PLAT["Platform<br/>OKD/OpenShift · Kubernetes · Helm · CSI · Docker"]
DATA["Data engineering and analytics<br/>Spark · Hive Metastore · MinIO · dlt · DuckDB<br/>PostgreSQL · MySQL · Tableau · distributed databases"]
AI["AI<br/>Grounded RAG · evaluated retrieval · edge vision"]
IAM["Identity, security and governance<br/>IGA · PAM · SSO and federation · directory services<br/>Oracle Data Safe · database security · audit and compliance"]
OCI --> PLAT --> DATA --> AI
IAM -.-> OCI
IAM -.-> PLAT
IAM -.-> DATA
IAM -.-> AI
Identity, security, and governance span the whole stack rather than sitting at the end of it — that's the thread running through most of what I build. The cloud, platform, data, and AI layers are each work I do in their own right.
oud-oudsm-on-okd-oci — Oracle Unified Directory, OUD Proxy, and OUDSM on a six-node OKD/OpenShift cluster in OCI, backed by NFS CSI storage. Enterprise directory services end to end: replication topology, LDAP/LDAPS access paths, and the storage and ingress underneath. A sanitized reconstruction with graded evidence — every claim marked verified, observed, or unresolved — where CI enforces redaction scanning and keeps the architecture diagrams consistent with their sources.
→ Graded evidence table · 12 architecture diagrams · Troubleshooting and recovery
credit-risk-advisor — A grounded Basel III credit-risk RAG assistant with evaluated retrieval, citations, user feedback, and monitoring.
→ Architecture · Data handling
iomete-mac-vmware-single-node-lab — A single-node IOMETE data lakehouse on Ubuntu ARM64 under VMware Fusion on Apple Silicon: K3s, Helm, Spark, MinIO, and Hive Metastore, with the failures and fixes recorded rather than tidied away.
Mothusi — An assistive Raspberry Pi system for users with visual or motor impairments, combining YOLOv8 object recognition with voice activation and spoken feedback.
jaffle-shop-dlt — A dlt pipeline extracting an API into DuckDB, scheduled and automated through GitHub Actions.
| Area | In practice |
|---|---|
| Identity & access | Soffid IGA, PAM, joiner-mover-leaver lifecycle, SSO and federation, role and SoD modelling, least-privilege enforcement, audit and compliance reporting |
| Directory services | Oracle Unified Directory (DS/RS/Proxy), OUDSM/WebLogic, eDirectory migration, LDIF export and schema mapping, replication, ACLs, LDAP/LDAPS troubleshooting |
| Database security | Oracle Data Safe activity auditing, security assessments, monitoring and compliance reporting; database security reviews across Oracle, PostgreSQL, and MySQL |
| Security | Threat and vulnerability assessment, penetration testing, incident response support, redaction pipelines, secret scanning in CI, trust-boundary modelling |
| Cloud & platform | Oracle Cloud Infrastructure, OKD/OpenShift, Kubernetes, K3s, Helm, NFS CSI storage, load-balancer and ingress design |
| Data engineering & analytics | ETL/ELT with dlt, DuckDB, PostgreSQL, MySQL, Spark, Hive Metastore, MinIO, distributed databases, orchestration with Kestra and Prefect; reporting and dashboards in Tableau |
| AI | Retrieval-augmented generation with grounded citations and evaluated retrieval, computer vision on edge hardware |
- Oracle Cloud Infrastructure 2025 Certified Architect Associate — Oracle
- Oracle Cloud Infrastructure 2025 Certified Foundations Associate — Oracle
- Networking in Google Cloud: Network Architecture — Google
- Network Defense — Cisco
- dlt ELT Advanced Specialist and dlt ELT Specialist — dltHub
BEng in Computer Systems and Networks, National University of Lesotho (2020–2025), CGPA 3.9.
Final-year project: an AI-based medical decision support system integrating OpenMRS/Bahmni — EfficientNet for medical image classification, Random Forest over structured clinical data, and retrieval-augmented workflows using Pinecone and LangChain, with Keycloak providing authentication and role-based access control.
🥈 2nd place, Lesotho Cyber Security Hackathon 2024 (ISOC Lesotho & LCA)
I like problems where the infrastructure, the identity model, and the data all have to be reasoned about together — and I'd rather publish one deeply documented system than ten shallow ones.
📍 Lesotho · 💼 LinkedIn