Alan Zheng

Cloud & Platform Engineer · Technical Consultant

About

Software and platform engineer based in Eindhoven. Most recently Technical Consultant at Philips, working on cloud security, platform modernisation and CI/CD in a regulated healthcare environment (PDLM/QMS). Builds with AWS, Azure and Tencent Cloud, Python, and agentic-AI tooling including MCP servers. Bilingual English/Mandarin, with cross-border EU–China experience.

Experience

Technical Consultant — IP&S, AM&D

Sep 2025 — May 2026

Philips

Cloud security, platform modernisation, and stakeholder delivery in a regulated healthcare enterprise.

  • Designed and deployed the platform's first AWS WAF using IaC: DDoS mitigation, IP filtering, OWASP Top 10 defences, and automated rule updates.
  • Built AWS-native observability behind the WAF — CloudWatch logging, metrics and alerting for the security signal.
  • Led the Vital Viewer project from concept to stakeholder demo, building front-end prototypes for key stakeholders.
  • Refactored the Health Analytics Engine and authored PDLM/QMS-compliant design documentation.
  • Set up the BDD environment used in the Health Analytics Engine's verification and validation process, and introduced it to the V&V team.
  • Led migration of a legacy field-study system to a modern platform and optimised CI/CD pipelines for stable releases.
  • Drove adoption of agentic development workflows (Claude, MCP servers, GitHub Copilot) among senior colleagues, cutting delivery time.

Software Engineer Intern — IP&S

Feb 2025 — Jul 2025

Philips

Medical-data availability tooling for BATDOK in low-connectivity environments.

  • Enhanced BATDOK through IPFS integration, improving EMR availability in low-connectivity environments.
  • Developed an Android plugin using Kotlin–Go integration for peer-to-peer medical data sharing.
  • Conducted technical feasibility analysis and security assessment for military-grade systems.

Solution Architect · Part-time (Remote)

Jan 2022 — Present

Jinan Minhao Trading Co., Ltd

Enterprise digitalisation for a 100-employee trading business.

  • Architected and implemented a WeCom (WeChat Work) platform, setting up OA workflows and integrating digital tools with business operations via platform APIs.
  • Drove business efficiency through digital solutions, optimising workflows and streamlining day-to-day operations.

Education

Bachelor ICT Software Engineering & Cybersecurity

Sep 2020 — Jul 2025

Fontys University of Applied Sciences

Certifications & Languages

Certifications

WeCom Solution Architect — Associate · Tencent

AI Fluency: Framework & Foundations · Anthropic

Languages

Mandarin (Native) · English (Full professional proficiency) · Dutch (A2)

Leadership

President, Proxy — Fontys ICT Study Association — Coordinated cross-team initiatives, managed a 150k+ budget, and facilitated stakeholder communication. Built the association's Microsoft 365 and Entra ID environment from scratch — identity and user management, email and collaboration, MFA and access policies.

Skills

Cloud & Security

AWS · Azure · Tencent Cloud · CloudFormation / IaC · AWS WAF · Cloud Security

DevOps & Infrastructure

CI/CD Pipelines · Docker · Kubernetes · Linux & Infrastructure

Software Engineering

Python (FastAPI) · TypeScript · React / Vue · Java Spring Boot · Kotlin · SQL

AI & Agentic Tooling

Claude / MCP · GitHub Copilot · LLM & GenAI tools · Agentic workflows · n8n

Practice

Project Management · Requirements Engineering · Stakeholder Management · Technical Documentation

Projects

IND Sponsor MCP

An MCP server that exposes the Dutch IND recognised-sponsor register to AI agents, so an assistant can answer "is this employer a recognised sponsor?" against the live register instead of guessing.

TypeScript · MCP · Agentic AI · Public data

Offline-capable medical records for BATDOK

Extended BATDOK so electronic medical records stay available where the network doesn't: IPFS-backed peer-to-peer sharing via an Android plugin bridging Kotlin and Go over JNI, with a feasibility and security assessment for military-grade deployment. Philips.

Kotlin · Go · JNI · IPFS · Medical data · Offline-first

AWS WAF and observability for a Philips platform

The platform's first WAF, delivered as infrastructure-as-code: OWASP Top 10 rules, IP filtering, DDoS mitigation and automated rule updates, with CloudWatch logging and alerting for the security signal. Enterprise work — no public code.

AWS · WAF · IaC · CloudWatch · Cloud security

Self-hosted n8n on Fly.io

Deployment automation for a self-hosted n8n instance on Fly.io — reproducible automation infrastructure you own, rather than a SaaS tier.

Fly.io · Docker · Shell · n8n · Automation