The full wall — including e-government, transmission and low-voltage work going back to 2011 — is on theproject page. Write-ups are in Chinese.

1. Laservall China Co., Ltd. · 镭射沃激光科技（深圳）

   Network Engineer · Shenzhen · covering Vietnam / Hong Kong / Korea / Suzhou

   Oct 2025 – Present
   • Built an SD-WAN backbone centred on the Shenzhen HQ covering four overseas and domestic sites: hybrid private-line and Internet access, path selection, policy routing and unified operations.
   • Designed Active Directory from scratch: Windows Server and SQL Server on virtualisation, AD DS, corporate DNS egress, IIS portal, AD CS, NPS RADIUS and password self-service; Configuration Manager for boundaries, endpoint inventory, remote support and reporting.
   • Integrated the Huawei wireless controller with NPS, Entra ID and Portal authentication so corporate Wi-Fi admits only directory accounts, with SSO into Teams and Outlook; Azure AD Connect syncs on-prem AD to Entra ID, LDAP covers the remaining apps.
   • Migrated an entire firewall platform (Huawei USG to QiAnXin NGFW) using Python against the device API: 42 address objects, 77 services, 31 routes, 12 policy-routing rules, 19 DNAT and 4 SNAT rules, 44 security policies and two SSL-VPN gateways — plus an audit script for full post-migration reconciliation.
   • Group network architecture and core upgrade: replaced the core switch with a Huawei CloudEngine S6730 — only the 27 VLANs in use, 25 layer-3 interfaces pre-built shut down and cut over VLAN by VLAN; moved 24 AirEngine APs from a standalone controller into the new core's built-in AC across a V200→V600 major version, reconciled line by line, with a single-line enable / rollback switch.
   • Wireless tuning: found 11 APs on the same 2.4 GHz channel and 131 of 244 clients piled onto two APs; restored automatic channel and power calibration with caps, moved internal SSIDs to WPA2 with 802.11r fast roaming, and drove extra AP placement from measurements. Wrote PowerShell tooling to collect and push switch configs with prompt checks and error cut-offs.
   • Operate and consolidate Fortinet, AhnLab and other firewalls across Shenzhen, Hong Kong, Vietnam and Korea; built Zabbix monitoring with automated reports and device onboarding.
   • Led classified-workshop network compliance: workshop / office segmentation, endpoint admission, guest isolation, monitoring, least-privilege access and a controlled-device issue-and-return ledger.
   • Network design and procurement for overseas sites such as Vietnam: multi-vendor side-by-side comparison, bill of materials, quotations and vendor briefings, in both Chinese and English; evaluated open-source software such as Odoo ERP for group-wide adoption.
   • Outsourced project delivered through the company: a GB/T 28181 video front-end gateway — a DMZ host acting as both upper-level platform and lower-level domain with mandatory two-stage RTP relay, WVP-PRO + ZLMediaKit deployed offline; followed by an MCU conferencing SIP relay (Kamailio + rtpengine).
   • Domain registration, filing, DNS and SSL lifecycle; corporate website and access security; office and public-area network access control.
2. GEM Co., Ltd. · 格林美

   IT Engineer (Deputy Manager) · China–Indonesia industrial park

   Nov 2024 – Jul 2025
   • Operated core campus equipment — QiAnXin firewalls, traffic management, H3C wireless controllers and Panabit SD-WAN — across three ISP uplinks, serving both Chinese and Indonesian staff.
   • Linked Sulawesi plant CCTV across mine and park sites over SD-WAN; integrated Hikvision HCE overseas with Dahua domestically via GB/T 28181; synced Hikvision access control and Dashi attendance into Kingdee.
   • H3C hyper-converged infrastructure operations, core switching and ACL tuning; Starlink enterprise trial; on-site technical support for a group product launch in Indonesia.
3. Cambodia Digital Television Co., Ltd.

   IT Technical Manager · Cambodia

   Jul 2023 – Oct 2024
   • Built and ran the OTT platform: a commercial IPTV management panel as the backend for channels, EPG, multi-bitrate transcoding, subscriptions and edge load balancing; a self-developed Android client for branding, Khmer localisation and both phone and set-top-box interaction.
   • OTT iteration, product development and capacity expansion; Belt-and-Road DTMB terrestrial platform maintenance.
   • ICT solution design and project management; maintained a co-located equipment room with the Ministry of Information — UPS, transmitters, servers, satellite receivers, transcoders and cooling.
4. Zhejiang Huayou Cobalt · Huayue Nickel-Cobalt

   IT Supervisor

   Jan 2023 – Jun 2023
   • IT planning, policy and standards for an overseas subsidiary; servers, databases, backup and virtualisation tuning; campus network and load balancing for roughly 2,000 staff; IT asset compliance.
   • Internal file storage and mini-apps; CCTV, video wall, IPTV, barrier and access control, Huawei conferencing and Zoom.
5. Tibet Information Industry Co., Ltd.

   ELV Systems Project Manager

   Jun 2018 – Oct 2021
   • Owned IT projects end to end: requirements, design, vendor selection, budgeting, tendering, construction, trial operation, acceptance, payment collection and handover — contracts totalling over RMB 200 million.
   • Key projects: smart-court facilities for regional courts; provincial education cloud; a civil-affairs emergency command platform (command hall, 76-county video conferencing, grain warehousing, BeiDou, software on the government cloud); a 403 dedicated-network security hardening project; provincial tourism informatisation.
   • Self-taught and shipped afterwards: Alibaba / Tencent / AWS cloud, Cloudflare, Node.js and Express, PHP / Nginx / MySQL, Proxmox, OpenWrt, ZeroTier, Docker and Kubernetes, ffmpeg / streaming / CDN — the foundation for later building production systems myself.
6. Aerospace Changfeng, Xinjiang Branch

   ELV Systems Project Manager

   Jun 2016 – May 2018
   • Delivered a provincial e-government extranet and a dedicated secure network, border security gateway, one-way optical gate and conferencing system; completed MLPS Level-3 and classified-network assessment.
   • Project manager for a regional video-sharing platform built on GB/T 28181 (~70% complete, 50% invoiced), coordinating four sub-platforms; a video-conferencing rollout covering 889 municipal, county, township and village endpoints.
   • Security and Internet networks for a regional command centre; equipment room, shielded room and MDF power/environment build-out; pre-design and tendering for a government office relocation.
7. Raisecom Co., Ltd.

   Transmission / Data Communications Engineer

   Jun 2012 – Jan 2016
   • E-government networks: 127 central and 889 remote sites in Urumqi; 117 classified sites across six Altay counties on a self-organised PTN; commissioning across Changji, Kashgar, Kizilsu and Hotan.
   • Education Layer-4 network: 1,174 primary-school sites between Kashgar and Artux over mobile PTN.
   • CCTV: 27 high and 34 low points for Winter-Games traffic policing, 57 heating-plant points, 48 campus points.
   • Transport rings: 10GE PTN ring, SDH 2.5G and 10GE access rings, a 10G self-organised ring.
   • WLAN: 110 PoE switches with Ruijie APs aggregated into a controller at a vocational college, plus a commercial bank and several universities.
8. China Unicom, Changji Branch

   Telecom Project Manager

   Jun 2011 – May 2012
   • Network-construction projects from initiation through construction, commissioning and final acceptance.