Hongkun Wang

Digital Development Manager · Full-Stack Engineer · Shanghai

Experience

Moidas · NIHPLOD Greater China Division

Joined as an intern in Oct 2025, converted to full-time in Jul 2026, and reports directly to the brand lead. As the division's first engineer, independently owns full-stack delivery from requirements and design to development and launch with a product mindset and AI-assisted workflows; delivered 7 core systems and 2,100+ automated test cases from 0 to 1 within 12 months, connecting the business loop of "skin analysis → personalized regimen → AI advisor follow-up → repurchase" through unified accounts and profile data.

  • Owned planning, technology selection and full-stack delivery of the brand's Greater China digital product portfolio, covering the full lifecycle of 7 core systems from requirements and design to development, launch and operations.
  • Contributed to defining the Greater China membership system with brand and operations teams — four membership tiers, benefits, points and redemption rules — and delivered it across the official website and mini-program member center to support retention and repurchase.
  • Established AI-assisted development workflows and design standards, reducing average delivery cycles by over 50% while ensuring parallel multi-project delivery.
  • As technical lead, took in requirements from product and marketing teams and broke them down into schedules, owning requirement reviews and iteration cadence, supporting the brand's online retail channel (official China website) from 0 to launch.
  • Led ICP filing, privacy policy and user agreement drafting, and data compliance review to ensure compliant launches across systems; dynamically adjusted server resources based on traffic to optimize costs.

Shanghai Lingang Jinghong Security Technology Development Co., Ltd.

  • Independently delivered the company website end-to-end, from architecture and UI/UX design to production deployment.
  • Completed an internal MVP campus patrol management platform via secondary development on the Unitree robot dog SDK, validating product feasibility.
  • Drove the company's first internal adoption of AI Q&A tools and participated in the company's business engagement with Baidu's official Enterprise Q&A team.

Product, design & full-stack development: independent nihplod.cn

Brand website and membership platform for the China market: integrates product discovery, e-commerce referral, member points and skin profiles into one experience, unifies WeChat / Douyin / phone-number identities, and supports online retail and repurchase from 0 to 1; 205 API routes / 51 models / 2,100+ tests.

  • Brand Website & Member Platform: Built the brand's official website and member platform with Next.js 16 + Prisma + PostgreSQL — product showcases, third-party e-commerce referral (Tmall / Douyin / Xiaohongshu / WeChat Shop links + GA event tracking), membership tiers, points ledger, points redemption (SF Express tracking), consumption backfill, skin profiles, and a security center; aggregated WeChat, Douyin, and phone OTP identities into a unified account system — 205 API routes, 51 data models, and 2,100+ automated test cases.
  • Product & Interaction Design: Independently designed the information architecture, Figma interactive prototypes, and visual styling; built multi-step skincare ritual guides and immersive brand storytelling with Framer Motion + View Transitions, integrated the product drawer with detail pages, and delivered fully responsive layouts.
  • Admin Console & Security Governance: Built an admin console covering products / categories / members / points redemption / consumption backfill / jobs / messages / OAuth clients (Tiptap rich text), with TOTP two-factor authentication and step-up verification for sensitive actions, operation audit logs and daily integrity anchors, scheduled jobs, database-persisted rate limiting, and webhook failure retries; completed SEO / GEO (sitemap / JSON-LD / llms.txt / Baidu push).

Product & full-stack development: independent

Unified identity foundation for Greater China: a self-built OAuth 2.0 / OIDC single sign-on that connects the website, skin-analysis site, two mini-programs and admin console, and enables cross-domain login and global logout across 5 systems, with TOTP 2FA on the admin console, packaged as a reusable npm SDK.

  • Protocol Implementation: Built a self-hosted OAuth 2.0 / OIDC SSO, deployed isomorphically with the official main site, which acts as the Authorization Server issuing RS256 JWTs — fully implementing the authorize / token / userinfo / introspect / revoke / end-session protocol endpoints with support for PKCE and DPoP; the admin console is protected by TOTP two-factor authentication.
  • SDK & Integration: Packaged and published npm SDKs (@nihplod/sso-sdk / @nihplod/sso-verify) for minute-level sub-project integration, enabling cross-domain SSO and global sign-out via Token Introspection + Backchannel Logout, supporting unified login across the official website, skin-analysis site, both WeChat mini-programs, and the admin console.
  • Security Hardening: Supports secret rotation, token revocation (RFC 7009), and multi-instance blacklist sharing for an operable and auditable auth system.

Product, interaction & full-stack development: independent Visual design in collaboration smart.nihplod.cn

AI skincare advisor for consumers: dual-channel skin analysis via questionnaire + face scan, personalized product recommendations based on skin type, season and region, with reports and profiles passed to WeCom advisors — closing the loop from analysis to regimen, follow-up and repurchase; 93 API routes / 531 tests.

  • AI Skin Analysis & Personalized Recommendations: Integrated Tongyi Qianwen VL / DeepSeek LLMs for dual-channel (questionnaire + facial scan) skin analysis; a custom rule engine scores and matches products against 8 skin-type personas plus seasonal / regional environmental factors, configurable through a visual admin console (zero-code adjustments for operations).
  • Conversion & Attribution: Led model integration and core API development; e-commerce outbound links (Tmall / Douyin / Xiaohongshu / WeChat Shop) support UTM / pid tracking and click-event instrumentation, forming an attributable consultation-to-conversion path together with WeCom advisor short links.
  • Growth & Membership Operations: Connected four-tier member skin-analysis quotas (Standard 10 lifetime sessions; Silver 10 + 20 per ¥1,000 spent, max 10/day; Gold / Diamond unlimited total, max 10/day), with reports and profiles tied to the logged-in account; designed share posters, channel ref attribution, and registration-conversion popups, and exported desensitized aggregate CSV statistics to feed the brand whitepaper and market insights.
  • AI Cost & Reliability Engineering: Designed an AI request queue with concurrency control, circuit breakers, daily / monthly token and cost budget cutoffs, persisted per-call billing, and a model whitelist with provider fallback; used idempotent retries and quota reservation / release to prevent duplicate charges; current skin profiles carry a rolling 90-day validity for retest prompts, full reports are retained for 365 days, and hot / cold tiered archiving keeps the latest 10 full reports plus desensitized cold-tier summaries for up to 3 years.
  • Data Asset Loop: Designed a server-to-server API with HMAC signatures + IP rate limiting; skin-analysis reports and skincare profiles pass through to WeCom AI customer service via session_id, turning one-off skin tests into continuously operable, repurchase-driving user data assets.

Tech Stack

Frontend & Mini Programs: TypeScript · React · Next.js · Vue 3 · uni-app · WeChat Mini Program · Tailwind CSS · Canvas 2D
Backend & Data: Node.js · Python (FastAPI) · Prisma · PostgreSQL · Redis · RESTful API
AI Engineering: LLM integration · vision-based skin analysis · RAG · prompt / knowledge base · AI cost engineering (circuit breakers / budgets) · evaluation & regression · AI-assisted development (Claude Code / Codex)
Engineering & Platform: Linux · Docker · Nginx · CDN · automated testing (unit / integration / regression)
Security & Compliance: OAuth 2.0 · OIDC · SSO · JWT · TOTP · CSP · RLS · ICP filing · privacy & data compliance
Product & Design: Figma · design systems · interaction prototypes · design-to-code

Awards & Certifications

3rd Prize in "Web Technology" at the Shanghai "Starlight Plan" Vocational Skills Competition (16th in Shanghai) May 2025
MOHRSS Vocational Skill Level Certificate · Computer Programmer (Grade III/Advanced, Competition) May 2025
National Information Security Test Program (NISP) Level II May 2025
CTyun Advanced Developer / O&M Engineer May 2024 & Nov 2024
Alibaba Cloud ACA Cloud Security Associate Oct 2024

Education

Shanghai Scientific and Technical Vocational College

School of Communication & Electronic Engineering, Information Security Technology Application, Associate Degree

Academic Performance: GPA 3.41/4.00

School Awards: 2nd-Class Scholarship for two consecutive academic years (2023-2025), Outstanding Student (2023-2024), Outstanding Graduate

English Proficiency: College English Test Band 4 (CET-4)

Major Courses: Network Security, Programming, Algorithms & Data Structures, Computer Architecture, Operating Systems, Database Systems, Computer Networks, etc.