01 / BUILD
IT infrastructure
Reliable platforms built on hands-on enterprise systems, networking, and storage experience.
IT Infrastructure & Cloud Security | IAM | IT OperationsReliable systems.
Olana Kenea Lemesa
Reliable systems.
Confident security.
I build secure cloud infrastructure, automate security controls, and translate frameworks like NIS2, DORA and ISO 27001 into practical engineering solutions.
Open to Werkstudent / internship roles in Germany
Berlin, Germany
Enterprise experience. Cloud perspective.Erasmus Mundus scholar · Applied Cybersecurity
HOW I WORK
Strong foundations. Thoughtful security.
A connected approach to building, securing, and operating technology.
02 / SECURE
Cloud security & IAM
Identity-first thinking, purposeful access controls, and security built into cloud infrastructure.
03 / OPERATE
IT operations
Resilient services, clear documentation, and practical improvements that keep systems dependable.
SELECTED WORK
All projects Ideas made operational.
PROJECT SPOTLIGHT
Azure Cloud Security WAF Lab
A cloud security lab that balances threat operations with modern infrastructure engineering. It deploys an Azure Web Application Firewall (WAF) to defend a deliberately vulnerable target (DVWA), while utilizing a DevSecOps CI/CD pipeline to automate provisioning, enforce shift-left security, and validate SIEM telemetry.
Explore case study ↗THE EXPERIENCE BEHIND THE WORK
From critical infrastructure to the cloud.
Practical lessons from enterprise environments, carried forward into secure cloud systems.
My full story ↗Dec 2023 – Oct 2025
IS Officer — Server Management
Commercial Bank of Ethiopia · Addis Ababa
- Enterprise Server Administration: Provisioned, configured, monitored, and troubleshot enterprise server infrastructure supporting multiple internal teams across IBM Power Systems/AIX and VMware environments running Linux and Windows.
- Infrastructure Provisioning & Operations: Managed server provisioning, resource allocation, configuration, performance monitoring, troubleshooting, patching, and operational maintenance across production and standby datacenter environments.
- Automation & Infrastructure-as-Code:Designed and implemented Ansible automation for AIX server provisioning, reducing provisioning time from ~2 hours to ~ 30 minutes and standardizing configuration across 150+ servers.
- Security Remediation: Collaborated closely with the information security team to address server security findings, reviewing reported vulnerabilities and implementing corrective configurations and hardening measures across affected systems.
- High-Availability Infrastructure: Supported PowerHA clustering and enterprise storage environments, contributing to the availability and resilience of infrastructure supporting critical banking services.
- Cross-Platform Infrastructure Support: Provided infrastructure support across AIX, Linux, Windows, VMware, and enterprise storage platforms, troubleshooting complex server and virtualization issues for internal technology teams.
- Process Standardization & Knowledge Management: Collaborated as part of a 5-member team to consolidate infrastructure provisioning, configuration, and operational procedures from senior technical teams into a centralized internal knowledge repository, improving documentation, knowledge transfer, and onboarding of new team members.
- Operational Knowledge Transfer: Helped transform previously distributed and team-specific infrastructure procedures into standardized, accessible documentation, reducing dependency on individual team knowledge and improving consistency in day-to-day operations.
Oct 2023 – Jan 2024
Junior System Administrator
Ethiopian Electric Utility · Addis Ababa
- Active Directory & Identity Administration: Administered Active Directory Domain Services (AD DS), managing the full user lifecycle including account creation and deletion, password resets, account unlocks, group membership, permissions, and domain joining.
- Directory & Policy Management: Managed Organizational Units (OUs) and Group Policy Objects (GPOs) to support standardized user, workstation, and access configurations across the organization.
- Access & Incident Resolution: Served as a second-level escalation point for AD/DS access issues raised by regional offices, diagnosing authentication, account, permission, and domain-related problems and restoring user access.
- Enterprise Systems Infrastructure Support: Collaborated with infrastructure and application teams to support the underlying infrastructure of SAP and other enterprise systems, troubleshooting connectivity, availability, and infrastructure-related issues.
- ICT Operations: Performed system monitoring, troubleshooting, maintenance, patching, and performance-related activities within the ICT Operations Support environment.
NOTES FROM THE FIELD
All writing Building. Learning. Documenting.
ARTICLE / 2026-07-19
Building an Entra Conditional Access library
Writing policies is easy. Proving they respond to real events is the part that matters, so I built a monitoring layer. Entra sign-in and audit logs flow into a Log Analytics workspace, and Microsoft Sentinel sits on top with KQL detections tied to the patterns.
Read articleSERIES / 2026-06-09
Building a NIS2-Compliant AWS Landing Zone
An open-source AWS landing zone in Terraform, mapped explicitly to NIS2 Article 21 and ISO 27001:2022 Annex A — built in public, module by module, over six weeks.
Explore series 6 of 7 parts publishedLET’S CONNECT
Good systems start with a conversation.
I'm looking for Werkstudent and internship roles across cybersecurity - cloud security, IAM, GRC, SOC/security operations, and beyond - based in Germany. If you have an opportunity or just want to talk security, reach out.