01
IT infrastructure
Resilient foundations, from enterprise servers and storage to virtualized environments.
IBM Power · VMware · Linux
Open to Werkstudent / internship roles in Germany
Hello, I’m Olana Kenea Lemesa.
Strong foundations.
Secure by design.
IT Infrastructure & Cloud Security IAM IT Operations
I build secure cloud infrastructure, automate security controls, and translate frameworks like NIS2, DORA and ISO 27001 into practical engineering solutions.
Enterprise IT experienceErasmus Mundus scholar
THE PERSON BEHIND THE SYSTEMS01 / OK
Olana Kenea LemesaEngineer. Builder. Problem solver.
MY ENGINEERING FOCUSReliable systems. Intentional access.
TOOLS I WORK WITH
AWSTerraformLinuxAnsibleVMwareKubernetes
01 / Expertise
A connected view of IT.
Infrastructure, security, and operations work best when they work together.
02
Cloud security & IAM
Secure cloud environments with deliberate access controls and infrastructure as code.
AWS · Terraform · Identity & access
03
IT operations
Keeping critical services reliable through automation, monitoring, and security hardening.
Ansible · Monitoring · High availability
02 / Selected work
All projects Theory, put to work.
Project 01
Azure Cloud Security WAF Lab
A cloud security lab that balances threat operations with modern infrastructure engineering. It deploys an Azure Web Application Firewall (WAF) to defend a deliberately vulnerable target (DVWA), while utilizing a DevSecOps CI/CD pipeline to automate provisioning, enforce shift-left security, and validate SIEM telemetry.
AzureTerraformGitHub ActionsCheckovGitleaks
Explore project Project 02
AI Policy Gate
A Policy-as-Code deployment gate that blocks non-compliant AI systems before they reach production and emits a tamper-evident audit record for every decision — evaluating each system against the EU AI Act, NIST AI RMF, ISO/IEC 42001, and GDPR, enforced at both the CI/CD and Kubernetes admission boundaries.
Open Policy AgentRegoPythonKubernetesOPA Gatekeeper
Explore project 03 / BackgroundBuilt on real-world
Built on real-world
responsibility.
Experience supporting the systems behind banking and energy. Now bringing that foundation into cloud security and identity.
More about meDec 2023 – Oct 2025
IS Officer — Server Management
Commercial Bank of Ethiopia
Oct 2023 – Jan 2024
Junior System Administrator
Ethiopian Electric Utility
Jul 2019 – Oct 2023
Junior ICT Officer
Ethiopian Electric Utility
04 / Field notes
All writing Documenting the process.
FIELD NOTE / 2026-07-19
Building an Entra Conditional Access library
Writing policies is easy. Proving they respond to real events is the part that matters, so I built a monitoring layer. Entra sign-in and audit logs flow into a Log Analytics workspace, and Microsoft Sentinel sits on top with KQL detections tied to the patterns.
BUILD JOURNAL / 2026-06-09
Building a NIS2-Compliant AWS Landing Zone
An open-source AWS landing zone in Terraform, mapped explicitly to NIS2 Article 21 and ISO 27001:2022 Annex A — built in public, module by module, over six weeks.
Let’s connectGood systems start with
Good systems start with
a conversation.
Interested in IT infrastructure, cloud security, IAM, or IT operations? Let’s talk about how I can contribute.