Hamza Elkhatri
·
Platform Engineer
Open to work
UTC+1 · Full CET overlap
EN C1 · FR B2 · AR Native
I build the infrastructure layer
that makes enterprise SaaS
deployable in minutes.
Architecture, automation, monitoring, and team training across 7 countries on 3 continents. I designed and deployed ORVEXA — a monitoring platform running on 2,320+ endpoints — while owning the full cycle from Ansible playbooks to on-site handoff. 01Edu is a peer-learning tech education company operating across Africa, MENA, and Europe.
Bare-metal provisioning time
~1 week (manual USB install per machine)
↓ via Ubuntu Autoinstall + Ansible
~4 min
PXE boot → auto-partition → ORVEXA agent
Measured across 216 installs at Zone01 Oujda
99.5% first-attempt success · auto-retry on failure
Measured across 216 installs at Zone01 Oujda
99.5% first-attempt success · auto-retry on failure
Endpoints monitored2,320+
Campus deployments7
Local teams trained10+
Flagship · Enterprise SaaS · Production since 2022
ORVEXA
Enterprise endpoint monitoring & infrastructure automation platform
H
Z
Co-built with Zainab — engineer & partner
Context: 01Edu (a peer-learning tech education company with ~3,000 students) was manually provisioning Ubuntu on each workstation — taking ~1 week per campus, requiring on-site senior engineers, and failing unpredictably. No unified monitoring, no remote management, no cross-campus visibility.
Solution: A full-stack platform owning the lifecycle — automated PXE provisioning, real-time endpoint monitoring via Prometheus, remote VNC management through Tailscale mesh VPN, and a custom PAM module in C integrating with the 01 platform API for access control (also ported to macOS). All config-managed via Ansible, deployed via GitHub Actions CI/CD.
Solution: A full-stack platform owning the lifecycle — automated PXE provisioning, real-time endpoint monitoring via Prometheus, remote VNC management through Tailscale mesh VPN, and a custom PAM module in C integrating with the 01 platform API for access control (also ported to macOS). All config-managed via Ansible, deployed via GitHub Actions CI/CD.
System architecture
Grafana · Node Exporter Full · per-endpoint CPU / RAM / Net / Disk
ORVEXA · Campus Map Editor · HQ-Yaba-Lagos · 15 PCs · live status
🎬 ORVEXA Walkthrough
↓ Download
Why Redis pub/sub over DB polling?
300+ concurrent users per campus. DB polling would saturate PostgreSQL connections. Redis pub/sub gives sub-100ms event latency while PostgreSQL handles durable state.
Why Tailscale over traditional VPN?
Campus admins in Nigeria and Bahrain had strict firewall policies. Tailscale's WireGuard-based NAT traversal required zero firewall changes — critical when we don't control the network.
Why custom PAM over LDAP?
LDAP required platform-side code changes for every access rule. The C-based PAM module queries the 01 platform API directly at login — banned users see their message on the TTY. Zero platform code touched. Also ported to macOS via DirectoryServices.
Primary stack (daily use)
TypeScript
Next.js
PostgreSQL
Docker / Compose
Ansible
GitHub Actions
Secondary (production experience)
Redis
C (PAM module)
Python
Prometheus / Grafana
Tailscale VPN
Ubuntu Autoinstall
MikroTik
Wayland/Sway
Deployment breakdown
Nigeria1,000
Oujda, MO300
Bahrain300
Kazakhstan300
Kisumu, KE200
Dakar, SN120
Athens, GR100
Total endpoints2,320+
What I'd do differently
I'd introduce Redis Streams earlier. At 300+ concurrent users the WebSocket architecture works but creates tight coupling. A stream-based queue would decouple collection from display and improve resilience to dashboard downtime.
EdTech · Founder
CyberStand
EdTech platform for Francophone Africa — virtual Arduino & Raspberry Pi simulation where students wire circuits and write firmware in-browser, no hardware needed.
Stack: Next.js, AI content pipeline (n8n → ElevenLabs TTS → video generation → FFmpeg)
Next.js
n8n
ElevenLabs
Virtual Sim
Systems · Security · Deployed
Wayland Exam Kiosk
Replaced a fragile X11 lockdown stack with a Sway/Wayland-based secure exam environment. Wayland's process isolation prevents keystroke capture by default — X11 can't do this.
Deployed: Across all 01Edu campuses via Ansible. Custom PAM integration enforces exam-mode access at login.
Wayland/Sway
C
Ansible
Linux
About
I started writing code in 2017 at ISTA Mirleft. That foundation led me to 1337 School (42 Network) where I reached Level 13 of 21 — placing in the top ~15% of the cursus — building shells, memory allocators, and process managers in C through pure peer-to-peer mastery with no lectures or instructors.
I've taken companies from zero infrastructure to fully operational — deploying servers, CI/CD, monitoring, and training the local teams who run it after we leave. I build for handoff, not dependency.
I've taken companies from zero infrastructure to fully operational — deploying servers, CI/CD, monitoring, and training the local teams who run it after we leave. I build for handoff, not dependency.
Timezone
UTC+1
Full CET/CEST overlap
Languages
EN C1 · FR B2
Arabic: native
Work style
Async-first
Documented decisions
Data handling
GDPR-aware
Two-tier data design
Available for
FULL-TIME REMOTE
Platform / DevOps Engineer, Technical Lead — infrastructure, automation, deployment at scale
B2B CONTRACT
Multi-site infrastructure setup, monitoring deployment, team training & handoff
Experience & Education
Platform Engineer
2022 — Present
01Edu · 01Talent Africa · 01Talent International
Designed and deployed ORVEXA — 2,320+ endpoints monitored across 7 campus deployments in Nigeria, Morocco, Bahrain, Kazakhstan, Kenya, Senegal, Greece
Automated bare-metal provisioning: PXE + Ubuntu Autoinstall + Ansible reduced per-campus setup from ~1 week to ~4 minutes (measured across 216 installs at Zone01 Oujda)
Sole senior infrastructure engineer on-site; trained 10+ local teams to independently operate the platform after handoff
Wrote a custom PAM module in C — queries 01 platform API at login for access control. Ported to macOS via DirectoryServices
Deployed Prometheus + Grafana monitoring; configured MikroTik QoS for 300+ concurrent users per campus
Founder
2023 — Present
CyberStand · EdTech
Building virtual hardware simulation platform for Francophone Africa — Arduino & Raspberry Pi in-browser
Automated AI content pipeline: n8n → ElevenLabs TTS → video generation → FFmpeg
Software Engineering — 42 Network
2019 — 2025
1337 School · Khouribga · Level 13 of 21 (~top 15%)
42 Network context: A global network of tuition-free coding schools (Paris, Silicon Valley, Tokyo, etc.) using project-based, peer-evaluated curriculum with no lectures or instructors. Selection via a 26-day intensive coding bootcamp ("Piscine")
Built shell interpreter, memory allocator, multi-threaded process manager, and ray tracer — all in C
Education
2017 — 2021
ENSA Khouribga · ISTA Mirleft
Bachelor's in Engineering Maths & CS — ENSA Khouribga · 2020–2021
Associate Degree in CS — ISTA Mirleft · 2017–2019
Certifications
All 12 on Credly ↗
AWS Cloud Practitioner
Amazon Web Services · 2026
✓ Verified
42 Cursus Developer
1337 · 42 Network · 2025
✓ Level 13 · Verified
Containers & Kubernetes V2
IBM · 2024
✓ Verified
CI/CD
IBM · 2024
✓ Verified
Monitoring & Observability
IBM · 2024
✓ Verified
Agadir, Morocco
UTC+1 · Full CET overlap · 7 deployments
30.4278°N
9.5981°W
9.5981°W
Currently at
01Edu
Peer-learning tech education company with ~3,000 students across Africa, MENA, and Europe. CDI (permanent contract) since Dec 2023.
Full-time · 7 campus deployments
01Talent Africa · 01Talent International
Platform Engineer · Morocco 🇲🇦 · UTC+1 · EN C1 · FR B2
LinkedIn
↗
GitHub
Let's work together.
Remote EMEA full-time roles · B2B infrastructure contracts. UTC+1, full CET overlap. English C1, French B2.
© 2026 Hamza Elkhatri · hamzaelkhatri@gmail.com · Built with Zainab 💙 · Morocco 🇲🇦