Ahmed Belhaj
All systems

Platform architecture

Tekouin Platform

Multi-tenant EdTech architecture from my role as Technical Manager at Campusna — Moodle product layer, shared lab infrastructure, and AWS control plane for 40,000+ learners across 7+ deployments.

MoodlePHPKubernetesECS FargateTerraformAWS CDKAuthentikJupyterHubVPLHelm

The challenge

As Technical Manager at Campusna, I led architecture for a platform that had to serve institutions — not just host Moodle. Each client needs isolated environments, shared live-class and lab capacity, auto-graded exercises across many languages, teacher analytics, mobile-money enrollment for telecom programs, and Holberton-style international curriculum delivery on a governable multi-account cloud footprint.

Campusna (product brand: Tekouin) unifies product engineering, shared services, and cloud operations. The platform and its codebase are employer IP; this page describes the system design and my technical leadership, not a personal open-source portfolio.

Architecture

Each client gets a dedicated Moodle instance extended with custom plugins for labs, SSO, payments, collaboration, and gamification. Shared services — JupyterHub, VPL checkers, browser-based VS Code, BigBlueButton, Matrix, and a gaming hub — run across tenants with domain routing and SSO boundaries. A company intranet shares the same identity plane. Infrastructure is maintained as code with internal runbooks for operations, compliance, and curriculum integration.

Moodle product layer

  • OAuth2 authorization server — Moodle as identity provider for external apps
  • Hands-on lab activities — cyber, cloud, and big-data environments with gradebook integration
  • VM simulation modules — 3D and Windows lab scenarios via webservices
  • Matrix messaging — room-per-course collaboration
  • Mobile-money enrollment — carrier billing integration for telecom LMS programs
  • In-course AI assistant — support at cohort scale
  • Gradebook automation — weighted structures and bulk course export
  • Teacher analytics — dashboards fed by LMS and lab activity

Shared services

Moodle is per-tenant; labs, classrooms, and checkers are shared platform capacity — first on Kubernetes with Helm, then large client workloads on dedicated ECS stacks where autoscaling requirements differ.

  • JupyterHub — multi-user notebooks for data science and cloud curricula
  • VPL checker farm — Python, Java, C/C++, JavaScript/TypeScript, SQL, Dart, R, Octave
  • Browser-based VS Code — IDE with SSO for international cohorts
  • BigBlueButton — shared virtual classrooms with per-client routing
  • Gaming hub — gamification API with CDN-hosted client
  • Teacher analytics — aggregates Moodle, BBB, and VPL signals

Cloud control plane

Campusna operates a documented multi-account AWS organization — Terraform and CloudFormation modules, Ansible configuration management, CDK stacks for large clients, CI pipelines, and internal wiki runbooks for SSO and compliance. See also the Teacher Platform page for instructor FinOps. Platform evolution moved from multi-tenant delivery on EKS to production telecom LMS on ECS Fargate with payment microservices.

  • Organizational units — Infrastructure, Platform, Security, Workloads, Students, Sandbox, Quarantine
  • Authentik → LDAP → IAM Identity Center — permission sets for staff, mentors, students, interns
  • Account vending and tagging standards — SCPs, cost management, student lab isolation
  • Client provisioning modules — on-demand Moodle deployment per institution
  • Automated health checks across platform deployments

Programs & curriculum delivery

Tekouin underpins university pathways, EU-funded hackathons, regional bootcamps, Santander-bound international cohorts, and Holberton curriculum integration — including cross-campus engineering coordination during my earlier AfricaTek delivery work.

  • Paris Dauphine Tunis — digital culture and certificate programs
  • ELIFE regional bootcamps — Python and inclusion-focused cohorts
  • TechLink — EU4Innovation auto-graded hackathon platform
  • Holberton international pathways — curriculum and checker integration with global engineering teams
  • National telecom LMS — production ECS stack (detailed on MTN E-Campus page)

Results

40,000+
Learners supported
7+ institutional deployments
15+
Moodle extensions
Custom product layer on stock Moodle
7+
Auto-grading languages
VPL checker ecosystem
7+
Organizational units
AWS org structure

Key decisions

Per-client Moodle, shared everything else

Isolation for grades and data governance; economies of scale for labs, classrooms, and checkers. Matches how institutions buy — their own domain, shared platform muscle.

IaC plus internal runbooks

Infrastructure-as-code paired with operational documentation — OU structure, SSO flows, Holberton integration steps, and tech stack standards — so onboarding engineers and clients does not depend on tribal knowledge.

Kubernetes for platform, ECS for flagship clients

Kubernetes fit multi-tenant shared services and intranet. ECS Fargate fit a national telecom LMS with tight autoscaling on Moodle, payment API, and async workers — without forcing one orchestrator for every workload.

Plugins over forks

Tekouin stays upgradeable because capabilities ship as Moodle plugins and shared services — not a forked LMS that drifts from upstream security patches.

My role

  • Technical Manager at Campusna — platform architecture, cloud organization, and client delivery from day one
  • Led design of multi-account AWS landing zone, SSO federation, and FinOps rationalization
  • Directed Moodle product extensions, Kubernetes platform delivery, and ECS evolution for telecom LMS
  • Defined standardized tech stack and platform team operating model for Campusna-managed projects
  • Holberton curriculum integration and cross-campus engineering coordination