Expertise

Systems that stay correct under load, under attack, and under autonomous agents.
01

AI Agent Systems Architecture

Designing the control plane that keeps autonomous coding and workflow agents safe in production: an engineering handbook of sixteen ADRs and checklists, deterministic verification loops (red-green tests plus browser-driven UI checks), MCP servers with org-scoped, hashed, least-privilege tokens, and a scheduler that runs agent loops inside permission rules and usage budgets, pausing for a human when a decision is needed.

02

Security & Multi-Tenant Data Architecture

Tenant isolation enforced in the database, not the UI: Postgres row-level security that defaults to deny, AES-256-GCM envelope encryption with per-version data keys and ciphertext bound to its row, and one identity plane (sessions, JWTs, TOTP) shared by every app. Shaped by four years on CertiK Skynet, the Web3 security rating platform that became CertiK's second-largest revenue stream.

03

Distributed Web Infrastructure & Performance

Caching topologies and traffic engineering for spiky, read-heavy platforms: edge caching on Cloudflare, multi-layer application caches, a GraphQL gateway as the unified data-access layer (70% lower response times), and a self-hosted API cluster that absorbed a viral traffic spike while cutting infrastructure cost by $50K+ a year.

04

Real-Time & Rendering Systems

State synchronization and rendering pipelines in the browser: host-authoritative peer-to-peer play over WebRTC, deterministic headless simulation engines, canvas and WebGL renderers, and a compositing editor comparable to After Effects whose optimization engine expands product feeds into thousands of creative variants.

Experience

The systems I designed, and the constraints they were built against.
2026 – Present

Rising Company

Founder

Remote

Founded Rising Company, an independent engineering studio that ships production software for small businesses and churches. Every product is built AI-native: coding agents do most of the implementation, inside a shared platform (identity, secrets, design system, verification) that I designed so their output is safe to deploy.

  • Agent Control Plane - Wrote the agent handbook every project follows: sixteen ADRs (stack, security baseline, data retention, accessibility, MCP), checklists, and reusable skills, with strict red-green TDD and browser-driven UI verification as the gates. Built Automator, a local scheduler that runs Claude Code loops in persistent sessions under per-loop permission rules, compacts context past a threshold, holds a usage reserve, and routes every question, denied tool call and failed check to a human queue instead of guessing.
  • Identity Plane - A central identity service on Better Auth shared by every app: one cross-subdomain session, Convex-compatible JWTs, magic link, Google and TOTP with recovery codes. The trusted-app registry merges three sources behind a code-level floor that a database failure cannot remove, reaches every server instance within 30 seconds, and is fully audited; admin actions require a second factor.
  • Rising Safe - A multi-tenant secrets manager. Each secret version gets its own AES-256-GCM data key, wrapped by a server-only master key, with the row's identity as associated data so swapped ciphertext fails to decrypt. Org isolation is enforced in Postgres row-level security (default deny); services resolve secrets with scoped tokens and a CLI that injects them at process start.
  • AI-Native Products - MCP servers on Rising OS (operations and ledger), identity and Capture let agents act with org-scoped tokens that can only be minted from an MFA-verified session and are stored as hashes. Capture hosts the visual evidence agents attach to every UI pull request. Public tools Huddle, Venue Map and True Cost to Phone, the Rising Design System served to agents via llms.txt, and the open-source WebGL libraries wave-maker and mesh-maker.
  • Small Business & Church Tech - Websites and operations software for small businesses such as Maple Candy Bakery, and volunteer technology for Christian communities.
  • TypeScript
  • Next.js
  • React
  • Node.js
  • Claude Agent SDK
  • PostgreSQL
  • Convex
  • Supabase
  • Better Auth
  • WebGL
  • Vercel
2024 – 2026

XR Extreme Reach

Principal Architect

New York, NY, USA

Architect for AI systems and the creative platform behind XR's ad delivery, and the lead on its AI adoption:

  • Multi-Agent Order Pipeline - Designed a CrewAI multi-agent pipeline that turns order emails in any shape (plain text, PDF and Excel attachments) into structured orders: extraction, normalization to one schema, fuzzy entity resolution against master data, then order creation. Cut processing time by over 90% and removed a manual bottleneck.
  • Design Lab Rendering Platform - Architected a Next.js compositing and timeline editor comparable to Adobe After Effects and Figma, with AI-generated video, image and voiceover. Its Dynamic Creative Optimization engine expands product feeds into thousands of creative variants, replacing manual production with an automated pipeline.
  • XR Chat Agent - A tool-calling agent on the Vercel AI SDK with access to design state, DCO delivery logic and reporting data, so users refine creatives, generate delivery rules and query results in natural language. Won Best Technical Innovation at the XR Extreme Reach 2025 Hackathon.
  • Social Delivery Integration Layer - Architected one delivery layer over the Meta, TikTok and Snapchat APIs so clients build, deploy and manage social campaigns from the XR interface.
  • AI Adoption - Led organizational AI adoption: rolled out Cursor to engineers, set up the Vercel and Vercel AI Gateway partnership for model access, and started the AI agent interest group.
2020 – 2024

Certified Kernel, LLC

Software Architect

New York, NY, USA

Architect of CertiK Skynet, the Web3 security rating platform that became CertiK's second-largest revenue stream with high margins, through four years of continuous growth.

  • Traffic-Spike Architecture - When the Skynet Quest launch in 2024 brought a massive traffic spike, designed edge caching on Cloudflare in front of multi-layer application caches, and moved the API tier to a self-hosted Next.js cluster. Held performance SLAs through the spike and cut infrastructure cost by $50K+ a year.
  • GraphQL Data-Access Layer - Built a GraphQL gateway in 2022 as the single data-access layer over Skynet's services, with caching at the gateway. Cut API response times by 70% and eliminated redundant fetching across clients.
  • Content Decoupled from Deploys - Moved content into Contentful in 2021 so business teams publish without a code change or deploy. Updates went from days to minutes and developer overhead fell 40%.
  • Platform Migration - Led the migration to Next.js in early 2021, making CertiK an early adopter of Vercel.
2015 – 2020

FreeWheel Media, Inc (A Comcast Company)

Principal Software Engineer

New York, NY, USA

Architected and led modulajs, an open-source modularization framework for application state, with 97%+ test coverage. It became the foundation of FreeWheel's flagship MRM product and let several teams build on one consistent architecture.

Built FreeWheel's US Web engineering team from the ground up and led it through multiple critical product initiatives.

Education

Continuous learning and professional development.
2003 – 2007

Xiamen University

Bachelor of Computer Science

Xiamen, Fujian, China

Bachelor's degree in Computer Science with coursework in algorithms, data structures, software engineering, and systems design. This foundational education established the theoretical basis for a career focused on building scalable, reliable software systems.

Community Involvement

Using my technical skills to serve as a faithful humble servant.
2020 – Present

Rutgers Community Christian Church

Coworker

Volunteer

Created and maintain the Sunday school website for Rutgers Community Christian Church, providing an online platform for class management, registration, and resource sharing.

Developed and maintain the Quest for Life website and check-in/reporting system, enabling efficient participant registration, real-time attendance tracking, and comprehensive event reporting for the annual 1,000+ participant gospel camp.

2025

Quest for Life

Chairman

Volunteer Leadership

Served as Chairman for Quest for Life, an annual gospel camp event with over 1,000 participants. Led strategic planning, coordinated cross-functional volunteer teams, and oversaw end-to-end event execution including logistics, programming, and participant experience.

Responsibilities include budget management, vendor coordination, volunteer recruitment and training, program development, and ensuring seamless operations for large-scale community gatherings. This role demonstrates strong organizational leadership, stakeholder management, and ability to deliver complex events at scale.