Identity & Access Management Analyst at Hubsec Solutions · Oracle Cloud Infrastructure 2025 Certified Architect Associate · Based in Lesotho.
I work across identity and access management, information security, cloud architecture, platform engineering, and data engineering — and the places they meet. Directory services and privileged access on one side, Kubernetes platforms and ELT pipelines on the other, database security and compliance reporting running through both. I document as I go, and I document evidence-led: if a claim isn't backed by a retained log, command, or screenshot, it's labelled as unverified rather than asserted.
OCI Architect Associate Oracle Cloud OpenShift Kubernetes Keycloak Helm Terraform Docker Linux Python PostgreSQL Apache Spark DuckDB Tableau
flowchart LR
OCI["Cloud foundation<br/>OCI · GCP · VCN · load balancers · block storage"]
PLAT["Platform<br/>OKD/OpenShift · Kubernetes · Helm · CSI · Docker"]
DATA["Data engineering and analytics<br/>Spark · Hive Metastore · MinIO · dlt · DuckDB<br/>PostgreSQL · MySQL · Tableau · distributed databases"]
AI["AI<br/>Grounded RAG · evaluated retrieval · edge vision"]
IAM["Identity, security and governance<br/>IGA · PAM · SSO and federation · directory services<br/>Oracle Data Safe · database security · audit and compliance"]
OCI --> PLAT --> DATA --> AI
IAM -.-> OCI
IAM -.-> PLAT
IAM -.-> DATA
IAM -.-> AI
Identity, security, and governance span the whole stack rather than sitting at the end of it — that's the thread running through most of what I build. The cloud, platform, data, and AI layers are each work I do in their own right.
oud-oudsm-on-okd-oci — Oracle Unified Directory, OUD Proxy, and OUDSM on a six-node OKD/OpenShift cluster in OCI, backed by NFS CSI storage. Enterprise directory services end to end: replication topology, LDAP/LDAPS access paths, and the storage and ingress underneath. A sanitized reconstruction with graded evidence — every claim marked verified, observed, or unresolved — where CI enforces redaction scanning and keeps the architecture diagrams consistent with their sources.
→ Graded evidence table · 12 architecture diagrams · Troubleshooting and recovery
credit-risk-advisor — A grounded Basel III credit-risk RAG assistant with evaluated retrieval, citations, user feedback, and monitoring.
→ Architecture · Data handling
iomete-mac-vmware-single-node-lab — A single-node IOMETE data lakehouse on Ubuntu ARM64 under VMware Fusion on Apple Silicon: K3s, Helm, Spark, MinIO, and Hive Metastore, with the failures and fixes recorded rather than tidied away.
Mothusi — An assistive Raspberry Pi system for users with visual or motor impairments, combining YOLOv8 object recognition with voice activation and spoken feedback.
jaffle-shop-dlt — A dlt pipeline extracting an API into DuckDB, scheduled and automated through GitHub Actions.
| Area | In practice |
|---|---|
| Identity & access | Soffid IGA, PAM, joiner-mover-leaver lifecycle, SSO and federation, role and SoD modelling, least-privilege enforcement, audit and compliance reporting |
| Directory services | Oracle Unified Directory (DS/RS/Proxy), OUDSM/WebLogic, eDirectory migration, LDIF export and schema mapping, replication, ACLs, LDAP/LDAPS troubleshooting |
| Database security | Oracle Data Safe activity auditing, security assessments, monitoring and compliance reporting; database security reviews across Oracle, PostgreSQL, and MySQL |
| Security | Threat and vulnerability assessment, penetration testing, incident response support, redaction pipelines, secret scanning in CI, trust-boundary modelling |
| Cloud & platform | Oracle Cloud Infrastructure, OKD/OpenShift, Kubernetes, K3s, Helm, NFS CSI storage, load-balancer and ingress design |
| Data engineering & analytics | ETL/ELT with dlt, DuckDB, PostgreSQL, MySQL, Spark, Hive Metastore, MinIO, distributed databases, orchestration with Kestra and Prefect; reporting and dashboards in Tableau |
| AI | Retrieval-augmented generation with grounded citations and evaluated retrieval, computer vision on edge hardware |
- Oracle Cloud Infrastructure 2025 Certified Architect Associate — Oracle
- Oracle Cloud Infrastructure 2025 Certified Foundations Associate — Oracle
- Networking in Google Cloud: Network Architecture — Google
- Network Defense — Cisco
- dlt ELT Advanced Specialist and dlt ELT Specialist — dltHub
BEng in Computer Systems and Networks, National University of Lesotho (2020–2025), CGPA 3.9.
Final-year project: an AI-based medical decision support system integrating OpenMRS/Bahmni — EfficientNet for medical image classification, Random Forest over structured clinical data, and retrieval-augmented workflows using Pinecone and LangChain, with Keycloak providing authentication and role-based access control.
🥈 2nd place, Lesotho Cyber Security Hackathon 2024 (ISOC Lesotho & LCA)
I like problems where the infrastructure, the identity model, and the data all have to be reasoned about together — and I'd rather publish one deeply documented system than ten shallow ones.
📍 Lesotho · 💼 LinkedIn