Yuan Zhou Senior Full-Stack & Applied AI Engineer Canonical page: https://yuanzhou.dev/resume PDF: https://yuanzhou.dev/Yuan_Zhou_Resume.pdf Senior full-stack and applied AI engineer with an M.S. in Computer Science from Tsinghua University. Delivered five GolfJoy software projects as project lead and sole developer, spanning regional commerce, venue operations, native mobile, and CMS. Earlier work covers distributed systems, document AI, and offline inference. Co-first author of IEEE TDSC Android security research and former U.S. Army Apache avionics specialist. California | U.S. citizen · No sponsorship required Email: yuanzhou93@gmail.com LinkedIn: https://www.linkedin.com/in/yuan-zhou-tsinghua-university/ GitHub: https://github.com/yuanzd123 EXPERIENCE GolfJoy Project lead & sole developer | 2026 · Completed project-based delivery - CMS & platform architecture: Built Next.js/TypeScript storefronts and a Payload CMS/PostgreSQL content system. Translated China operations feedback into page-aligned editing, draft previews, and audited price updates, then carried the changes through testing and production rollout. - China commerce & reliable releases: Delivered the China storefront with customer accounts, payments, and regional content management. Designed Ed25519-signed CMS snapshots, atomic deployments, and rollback so releases could run without a live cross-border database connection. - U.S. commerce & AI guidance: Built the U.S. commerce experience to help buyers compare products and configure simulators through guided selection and a 3D room builder. Integrated Shopify checkout and webhook reconciliation; grounded AI guidance in approved sources with response guardrails and human handoff. - GolfJoy Play | Venue operations: Built a venue platform for bookings, memberships, payments, refunds, waivers, device ingestion, and access control. Led technical decisions and an eight-bay New Zealand rollout with the operator and field support, aligning local rules, vendor device registration, and acceptance checks. Enforced tenant-scoped permissions and server-side pricing. - GolfJoy Play | Native sensor app: Released the Android app on Google Play with 11 interface languages, live shot metrics, practice history, landscape displays, placement guidance, and English shot readout. Connected Bluetooth discovery and Wi-Fi sensor data through Java/Swift bridges and a shared C++ protocol core. Product gallery & engineering case study: https://yuanzhou.dev/work/golfjoy Android app on Google Play: https://play.google.com/store/apps/details?id=com.golfjoy.play Company-confirmed delivery: https://yuanzhou.dev/golfjoy/project-accomplishment-letter-2026-10-09.jpg Multiverse Labs Senior Full-Stack Engineer | Jul 2021 - Mar 2024; rejoined Nov 2024 | Remote - BNCopy | Distributed decision engine: Architected a deterministic Python decision engine with real-time TCP/WebSocket ingestion and multi-shard execution on GCE. Added TTL-based deduplication, daily reconciliation, Firestore audit trails, VM recovery, and Prometheus/Grafana monitoring. Evaluated changes in rolling out-of-sample windows with fee, slippage, and drawdown gates. - Iron Horse RAG AI | Document intelligence: Built a React document workspace for upload, retrieval, document merging, and chat. Implemented dual embedding pipelines, Firestore knowledge bases, Cloud Storage indexing, administration controls, and Google OAuth authentication for uploads. - Iron Horse Local Chat | Offline AI: Built an offline AI workspace on Apple Silicon with llama.cpp inference, a FastAPI backend, and a SvelteKit frontend. Implemented ChromaDB document retrieval, model switching, WebSocket response streaming, and Metal GPU acceleration. - TTSH Caregiver AI | Clinical assistant: Delivered a clinical AI assistant for Tan Tock Seng Hospital with persistent chat history, session management, and sentiment analysis. Built the TypeScript backend with AWS Lambda, DynamoDB, Bedrock, and API Gateway, plus automated tests and deployment tooling. - Ethereum Defender | Transaction recovery: Engineered recovery tooling for a compromised Ethereum account, detecting pending transactions over WebSocket and coordinating fee-aware counter-transactions. Integrated Flashbots private relays to submit recovery transactions outside the public mempool. - Cards on TON | Collection game: Built a card collection game with AEON payments, pack purchasing, rarity logic, card forging, fragments, and referrals. Implemented TON Connect authentication and game workflows using React, TypeScript, and Firebase Cloud Functions. - Hodlnodes | Ethereum staking: Led delivery of an Ethereum staking platform connecting Solidity contracts, WalletConnect/MetaMask, a Next.js interface, and Firestore. Deployed an ARM Linux staking device with firewall configuration and uptime monitoring. - Helix SuperMint | NFT deployment: Built tools to create and manage NFT collections through a React Native/Expo application and management CLI. Integrated ERC-721 contracts, ERC721A batch minting, IPFS uploads, Firebase Cloud Functions, and Hardhat deployment tooling. The Venetian Resort Las Vegas Digital Innovation Engineer | Apr & Oct 2024 | Las Vegas, NV - Blackjack Computer Vision: Designed a YOLOv10 proof of concept for blackjack-table digitization and playing-card recognition, connecting camera detections to structured game analysis. - Model training & evaluation: Generated annotated training frames and evaluated card recognition on recorded camera feeds to assess the feasibility of automated table digitization. - Game-event processing: Connected card detections to blackjack event logic and SQLite records, capturing hit, stand, double, and split actions for downstream analysis. U.S. Army AH-64 Apache Armament / Electrical / Avionic Systems Repairer (MOS 15Y) | Jan 2016 - Jan 2017 | Fort Eustis, VA - Maintained and troubleshot AH-64D/E Apache avionics, fire-control, armament, and electrical systems under strict maintenance procedures and flight-safety standards. - Completed AH-64 avionics training and an SSBI background investigation; received the Sky Master commendation and an Honorable Discharge. arcPI iOS & Android Engineer | Jun 2014 - Jan 2016 | Denver, CO - Native mobile applications: Shipped iOS and Android applications for university community users with Swift, Objective-C, Java, and Kotlin. Supported the applications with PHP services and MySQL/MongoDB backends. EDUCATION Tsinghua University | M.S. Computer Science | 2017 - 2020 Android systems security research University of Denver | B.S. Computer Science | 2011 - 2014 Completed the four-year degree in three years RESEARCH AND CERTIFICATIONS JNI Global References Are Still Vulnerable: Attacks and Defenses Co-first author. IEEE Transactions on Dependable and Secure Computing, 19(1), 607-619 (2022). Developed JGREAnalyzer to trace Android service paths across Java and native code and validate resource-exhaustion flaws. The study identified 21 vulnerable interfaces across 12 of 148 Android 10 system services, including nine services exploitable without permissions. https://doi.org/10.1109/TDSC.2020.2995542 https://arxiv.org/html/2405.00526v1 Cosmos SDK Developer, Interchain Developer Academy, 2023. TECHNICAL SKILLS Languages: TypeScript, Python, Java, C/C++, Swift, Objective-C, Kotlin, Go, Rust, Solidity Web & mobile: React, Next.js, SvelteKit, React Native, Capacitor, Redux, Tailwind CSS, Framer Motion, Progressive Web Apps Backend & protocols: Node.js, Express, FastAPI, Flask, Django, Payload CMS, GraphQL, Kafka, WebSocket, TCP/UDP Databases: PostgreSQL, Firestore, DynamoDB, SQLite, MongoDB, MySQL, Redis, InfluxDB Cloud & infrastructure: AWS (Lambda, API Gateway, Bedrock, S3), GCP (GCE, Cloud Run, Cloud Functions, Cloud Storage), Azure (Cognitive Search, OpenAI), Docker, Kubernetes, Vercel, Tencent COS AI & machine learning: RAG, embeddings, OpenAI, LangChain, PyTorch, TensorFlow, YOLOv10, Hugging Face, ChromaDB, llama.cpp, Metal GPU acceleration Reliability & security: OAuth 2.0, multi-tenant RBAC, Ed25519, static analysis, Android AOSP security, CI/CD, Prometheus, Grafana, firewall management Commerce & payments: Shopify, Stripe, Alipay, WeChat Pay, webhook reconciliation