Shuang Luo

Commercial lending platform: origination, underwriting, and servicing.

• Largest contributor to a 5,042-commit TypeScript monorepo, with 1,198 commits over 19 months on a multi-person team.
• Led the shared-package boundary architecture separating runtime-neutral, frontend-only, and backend-only code, enforced by lint in CI rather than by convention.
• Drove whole-monorepo upgrades to Node 24 with full ESM, TypeScript 6, and pnpm 11, and replaced fire-and-forget background work with an SQS-backed job pipeline that is retryable and observable.
• Designed the OpenTelemetry tracing conventions that auto-instrument 100+ database methods and 60+ external service calls, so production latency is diagnosed from a trace instead of a guess.
• Built the MCP server exposing the platform to AI agents, secured by full OAuth rather than a shared API key, with presigned direct-to-S3 upload for large documents.
• Authored the agent context contracts (AGENTS.md, CLAUDE.md) codifying architecture rules, test layout, and invariants, so coding agents and new engineers work from the same brief. Shipped production code at volume with agent tooling alongside conventional review.
• Integrated roughly two dozen third-party services across banking data, credit, CRM, identity, and e-signature. Implemented role-based access control on every API endpoint and ran the dependency-patching and vulnerability-review cadence.

Core member of the Communications Solutions Innovation Team, building nationwide call-authentication infrastructure.

• Designed and built the STIR/SHAKEN Interoperability Test Automation Platform, replacing manual cross-carrier testing with a repeatable automated suite.
• Prototyped STIR for Messaging, extending signed-identity guarantees from voice to SMS.
• Drove rollout of call authentication and verification across Brazilian carriers, resolving per-carrier signaling differences one operator at a time.
• Owned the certificate lifecycle underpinning SHAKEN (CA generation, signing, revocation, CRL, verification), and did the SIP integration work across Oracle SBC, Kamailio, and Asterisk.

Led cross-functional engineering teams while remaining the lead full stack engineer on core products.

• Owned three revenue products end to end: OpenCNAM, a caller-ID platform with REST, SS7/SIGTRAN, ENUM, and SIP interfaces; EveryoneAPI, a reverse phone append API for fraud prevention; and the OpenCNAM Storage Platform.
• Architected high-availability, low-latency services against an explicit cost-per-query target, and standardized build and deployment across dev, test, and production.
• Built the monitoring stack on CloudWatch, InfluxDB, and Grafana, plus an invoicing system integrated with external financial platforms.
• Owned the technical due diligence package through the acquisition: the architecture and infrastructure documentation the acquirer's technical review was conducted against.

• Built player-facing web features and promotional campaigns for Tencent's gaming portfolio in the Interactive Entertainment Group (IEG), shipping in step with game release cycles.

• Built the cross-platform monitoring agent (Windows and Linux) for in-warehouse PCs and servers, with centralized remote deployment and updates.
• Led DevOps for JD.com's mobile division: built the Configuration Management Database (CMDB) that became its single source of truth for infrastructure, plus server monitoring and a status-code system that turned silent HTTP error spikes into actionable alerts.

• Built the async job engine that runs numpy/scipy matching of monitoring stations or coordinates to pollutant values over a requested time range, plus geocoding of Chinese addresses across Baidu, Gaode, and Tianditu with per-vendor throttling and Chinese-to-international coordinate conversion.
• Designed the commercial layer from scratch: signed license files, per-installation activation, feature gates, a charge ledger with prepaid reservations, and settlement reconciliation that survives delivery succeeding while billing fails. 1,067 tests, zero type-checker errors enforced at merge.

• Hourly health indices for cities across China on the Go standard library with one external dependency. When the upstream data feed is late, the cache serves the previous hour's snapshot rather than an error page.
• Selects the map provider by visitor origin, with fallback, so the site stays compliant with Chinese mapping regulation and usable from outside China. Dual .org and .cn deployment with versioned releases, one-command rollback, and Chinese ICP registration.

• Master of Engineering, Computer Science 2010 - 2013
• Bachelor of Economics (second bachelor's degree) 2009 - 2011
• Bachelor of Engineering, Mechanical Engineering 2005 - 2009