# John Wong (Wong Ka Hing) — Full-Stack Software Engineer, Hong Kong > Full-stack engineer in Hong Kong building enterprise platforms, LLM-driven IT service automation, clinic and factory systems and fintech integrations — from requirements to production. WorldSkills 2022 Web Technologies champion; CKA, CKAD and AWS certified. Open to full-time roles and freelance projects. Contact: iam@johnkhw.work - Website: https://johnkhw.work/ - CV (PDF): https://johnkhw.work/assets/John_Wong_CV.pdf - GitHub: https://github.com/JohnKHW - LinkedIn: https://www.linkedin.com/in/johnkhw/ ## Experience ### Analyst Programmer, Gammon Construction Limited (Nov 2024 – Present) Enterprise applications, finance workflows and operations automation for construction and engineering teams — from stakeholder requirements through design, build, deployment and support. On the Operations team since September 2026, working in an Agile team on IT service and procurement automation. - Designed and built an LLM-driven IT service request (ITSM) platform to replace a legacy ServiceNow-based eForm while keeping its user experience, approval processes and compliance: Azure OpenAI intent routing and slot filling, user confirmation before submission and Microsoft Graph approval chains (preparing for production rollout). - Built a reusable, in-process workflow engine inspired by n8n, with a VS Code extension where developers draw flows and drop them straight into the system — no third-party workflow service to depend on. - Designed and built a cross-domain Active Directory password-reset service with a Go master and Java / Spring Boot domain agents, encrypted agent commands, retries and idempotent jobs (preparing for production rollout). - Architected a React microfrontend shell hosting five business modules with runtime bundle loading, lifecycle contracts and independent releases on Docker, AKS and Azure DevOps — cutting deployment downtime from about 2 minutes to about 1 minute (~50%). - Re-engineered a data-heavy module view with parallel loading, data chunking and lazy rendering, taking the load-to-full-render path from about 30 seconds to about 100 ms. - Delivered an invoice-matching workflow for ~200 invoices a day, using LLM-assisted OCR, PO matching and preparer / checker / approver steps to cut manual field entry by about 30%. - Built forecasting modules and reusable components with Redis caching, Vitest and Playwright end-to-end tests, and revamped logistics and modular-construction progress dashboards. - Deployed and integrated an open-source CodePush server supporting rollout, rollback and version targeting for the company’s mobile apps. - Led the evaluation of AI coding assistants (Cursor vs GitHub Copilot) under legal and data-compliance constraints, then wrote usage guidelines and trained colleagues in a department of about 80 people. ### Founder & Full-Stack Engineer, Pulse Nova Inno Tech Limited (2024 – Present) Independent client delivery since 2024, incorporated in June 2026 and run alongside my full-time role. I own discovery, scoping and pricing, product and UI/UX design, architecture, full-stack build, deployment and ongoing support. - Lead developer of a clinic operations platform now serving four branches; at the three-branch stage (May 2026) it supported 36 staff, around 2,638 bookings and 3,100 WhatsApp notifications a month. - Cut medication intake from about 10 minutes to about 1 minute with OCR, human review and unit / weight checks, offloading scans to an SQS-triggered AWS Lambda. - Reverse-engineered a legacy PowerBuilder / MySQL system and migrated about 5 years of history into a redesigned PostgreSQL schema, with two months of one-way sync between old and new systems. - Traced a production slowdown through CloudWatch to overlapping client requests and a redundant refresh loop, then shipped single-flight requests, debouncing and background-tab pausing. - Built a multi-company factory platform covering purchase orders, revisions, production, delivery, invoicing and forecasting with OCR document extraction and review, now in use on a pilot basis. - Building a mobile receipt and expense app with async OCR on S3 / Lambda, bill splitting, multi-currency records and exports. ### Senior Software Engineer, One2Cloud (Jan 2023 – Nov 2024) Led and worked with a small engineering team on LookCard, a white-label fintech and Web3 card platform, owning architecture, technical trade-offs and delivery of payment, identity and cloud integrations; also contributed to a multi-cloud billing automation platform. - Designed and deployed AWS wallet and transaction workflows with Step Functions, API Gateway, Lambda and RDS. - Integrated Sumsub eKYC with one-to-one applicant mapping, token-verified callbacks, status sync and a support-assisted recovery path. - Implemented DID-based OIDC login, RBAC, a separated admin portal, server-side secrets and audit logging. - Built a reusable Pulumi and Docker framework to standardise new API setup. - Contributed to cloud account, billing and operations automation with AWS CDK, Fargate, SQS / SNS and Puppeteer. ### Student Software Engineer, Sik Sik Yuen (Jul 2021 – Apr 2022) Modernised services, kiosks and payment flows for a large charitable organisation. - Designed microservices on Docker and Kubernetes and built a Go API gateway with role-based access control. - Integrated Mastercard Payment Gateway Services (MPGS) 3-D Secure for kiosk / POS payments, including challenge handling and server-side verification. - Revamped and maintained a visitor-guidance kiosk and app with Electron and React Native. ### Programmer → Senior Programmer, Sengital Limited (Oct 2020 – Mar 2023) Programmer (full-time, Oct 2020 – Jun 2021) and Senior Programmer (part-time, Oct 2022 – Mar 2023), after a Unity game-development internship in 2019. - Built Puppeteer automation that places e-commerce orders for a logistics company. - Built an activity registration and lottery web application for a government department. - Ran a security assessment and fixed the findings, and sped up data fetching and formatting for reports. ## Case studies ### Multi-branch clinic operations platform — Pulse Nova · client project (In production) One system for bookings, walk-ins, doctor queues, patient records, prescriptions, payments, inventory, attendance and WhatsApp messaging across a group of clinics. - Now serving 4 branches - At 3 branches (May 2026): 36 users, ~2,638 bookings and ~3,100 WhatsApp notifications a month - Medication intake cut from ~10 minutes to ~1 minute - Legacy PowerBuilder / MySQL system reverse-engineered; ~5 years of history migrated with two months of one-way sync - Stored value, cross-branch transactions, daily closing and expense approvals - Diagnosed a production slowdown from CloudWatch request logs and shipped fixes for overlapping requests, a redundant refresh loop and background polling ### LLM-driven IT service request platform — Gammon Construction (Built · preparing for rollout) Replacing a legacy ServiceNow-based eForm and revamping IT service management (ITSM), so staff can ask for IT services and access in plain language while the existing approval processes, user experience and enterprise compliance stay in place. - Natural-language requests turned into structured, approved service tickets - Mandatory user confirmation before submission - Reusable flow engine with a VS Code visual editor — no third-party workflow service - Designed and built; preparing for production rollout ### Microfrontend enterprise workspace — Gammon Construction (Delivered) A shared workspace where finance, forecasting and settings teams ship their own tools independently without breaking each other. - 5 business modules + 1 shell, released independently - Deployment downtime ~2 min → ~1 min (~50%) - Specific module view: load-to-full-render ~30 s → ~100 ms - Forecast module with Redis caching, Vitest and Playwright E2E tests ### AI-assisted invoice matching — Gammon Construction (Delivered) Finance teams were keying invoice fields by hand and matching them to purchase orders one by one. - Designed for ~200 invoices a day - ~30% less time spent on manual field entry - Three-step review keeps humans accountable ### Cross-domain password reset service — Gammon Construction (Built · preparing for rollout) Staff with accounts in several Active Directory domains needed one self-service reset, started from the IT service request platform. - One request resets accounts across multiple AD domains - Per-agent keys, encrypted commands and replay protection - Designed and built; preparing for production rollout ### Multi-tenant factory management platform — Pulse Nova · pilot project (In use · pilot) A watch-case manufacturer running orders, shipments and invoices on paper and repeated data entry. - Customers, batches, purchase orders and revisions in one flow - Production, delivery orders, shipment, invoicing and forecasting - Order-fulfilment and operational-risk views - Multi-company isolation built into every API ### Payments & digital identity — One2Cloud · LookCard (Delivered) Secure onboarding, sign-in and wallet flows for a white-label fintech and Web3 card product. - eKYC status sync with a support-assisted recovery path - DID login over OIDC - Reusable Pulumi / Docker framework for new APIs ### Receipt & expense mobile app — Pulse Nova · own product (In development) Scan receipts, split bills with friends and understand spending across currencies. - Receipt scan, upload, review and history - Social bill splitting and multi-currency records - Async OCR pipeline with retries and callbacks ### ERP browser automation — Gammon Construction (Moving to implementation) Removing repeated re-keying across a whole procurement flow — purchase records, goods receipt and payment — into a web-based ERP. - Tool evaluation: UiPath vs Puppeteer vs Playwright - Working prototype against real ERP iframes - POC moving into implementation ## Freelance services (Pulse Nova) - Operations platforms: Replace spreadsheets, paper and WhatsApp threads with one system for bookings, orders, inventory, staff and reporting. - Document AI & OCR: Turn invoices, receipts and delivery notes into structured data, with human review built in so nothing posts unchecked. - Automation & integrations: Connect WhatsApp, payment, identity and ERP systems, or automate repetitive browser work with maintainable code. - Cloud, performance & rescue: Deploy, monitor and speed up existing apps. Find the duplicate requests, slow renders and fragile releases. ## Skills - Frontend & mobile: React, Next.js, TypeScript, Angular, Microfrontends, React Native / Expo, Zustand, WebSockets - Backend & data: NestJS, Express, Node.js, C# / .NET, Go, Java / Spring Boot, PostgreSQL, SQL Server, TypeORM, Redis, REST APIs, Webhooks - Cloud & delivery: AWS, Azure / AKS, Docker, Kubernetes (CKA / CKAD), Kustomize, Terraform, AWS CDK, Pulumi, Cloudflare, GitHub Actions, Azure DevOps - Security & identity: Microsoft Entra ID, Active Directory / LDAPS, RBAC, JWT, OIDC / DID, AES-256-GCM, Sumsub eKYC, MPGS 3-D Secure, Audit logging - AI & automation: Azure OpenAI, Intent routing & slot filling, LLM OCR, Structured extraction, Human-in-the-loop review, Workflow engines, Playwright, Puppeteer, VS Code extensions - Quality & operations: Vitest, Playwright E2E, Sentry, Dynatrace, CloudWatch, Performance tuning ## Education - Bachelor of Science in Computer Science, City University of Hong Kong (2020-2023) - Higher Diploma in Game Software Development, Hong Kong Institute of Vocational Education (IVE) (2018-2020) ## Awards - Champion — Web Technologies, WorldSkills Competition 2022 Special Edition 2022 - Champion & Most Popular Solution, Cathay Hackathon 2022 - Third Place, IEEE Blockchain Hackathon 2022 - Shortlisted, representing Hong Kong, Atos IT Challenge 2020 ## FAQ ### Who is John Wong? John Wong (Wong Ka Hing) is a full-stack software engineer based in Hong Kong. He is an Analyst Programmer at Gammon Construction and the founder of Pulse Nova Inno Tech Limited, and was previously a Senior Software Engineer at One2Cloud, working on the LookCard fintech and Web3 card platform. He won the WorldSkills Competition 2022 Special Edition in Web Technologies. ### What kind of software does John build? Operations software: an LLM-driven IT service request platform, cross-domain identity automation, enterprise microfrontend platforms, multi-branch clinic systems, factory order-to-invoice workflows, fintech identity and payment integrations, and AI-assisted document processing with human review. ### Is John available for freelance projects? Yes. Through Pulse Nova, John takes on freelance projects end to end — discovery, UI/UX, architecture, full-stack development, deployment and ongoing support. Email iam@johnkhw.work with a short description of the workflow you want to improve. ### Is John open to full-time roles? Yes. John is open to full-stack, backend, cloud and automation engineering roles in Hong Kong. His CV can be downloaded from this site. ### What is John’s main tech stack? React, Next.js and TypeScript on the front end; NestJS, Node.js, C#/.NET, Go, PostgreSQL and SQL Server on the back end; AWS, Azure, Docker, Kubernetes (CKA, CKAD) and Terraform for delivery; Azure OpenAI, Playwright, Puppeteer and LLM-based OCR for automation. ### What results has John delivered? Examples include cutting a clinic’s medication intake from about 10 minutes to about 1 minute, halving deployment downtime on an enterprise microfrontend platform (about 2 minutes to 1 minute), taking one data-heavy module view from about 30 seconds to about 100 ms to render, and reducing manual invoice field entry by about 30%.