Liang Cheng Email and Phone Number

Architect, innovator and cryptographer to lead many projects to ensure eBay's data security:- Initiated and led eBay’s new Data Security Strategy, including end-to-end personal data protection in regulatory compliance with PCI, CCPA, GDPR and Schrems II. - Led the security architecture review of eBay’s payment transitioning from marketplace model to managed payment 2.0 framework, including third-party payment processors, spend-now-pay-later vendors, internal risk service integration, and many other services.- Initiated and defined the roadmap plan for eBay’s HSM modernization to accommodate eBay’s global data protection needs in a hybrid cloud environment with compliance of multiple regional/country regulations.- Built from scratch a small but very effective team of security software engineers developing in-house security tools and services to protect eBay data, including data encryption validation and synthetic data generation.- Contributed in eBay cryptography security reviews including 3rd party data sharing.- Led M&A security due diligence and post-Close integration for companies including Knownorigin and myFitment.- Delivered multiple technical presentations at company wide with topics including Data security, cryptography fundamentals, TLS1.3, Schrems II, KMS and HSM, Blockchain and NFT.

Technical leadership in a blockchain-based distributed digital asset custody wallet service. Contributions include: - Designed and implemented a prototype of concept for an institutional-grade high-performance cold wallet system with “Air-Gap” to shield any malicious attacks from the Internet and insider operators. - Designed a hybrid cloud deployment plan to ensure the attack resilience, high availability, and scalability of the wallet service. - Led cryptography and HSM deployment - Led the Penetration Testing Analysis. - Worked with the external auditor to get the wallet system in compliance with SOC2.

- Led the BIGIP integration development of HSMs from different vendors, including nCipher, Thales/Gemalto Safenet, Gemalto DPoD, Equinix SmartKey(Fortanix based), AWS CloudHSM(Cavium Liquid Security), Azure Dedicated HSM, and ATOS.- Designed and implemented a PKCS#11 based vendor-agnostic HSM integration framework.- Initiated and drove two incubation projects: “AI Visibility of SSL” and “F5 HSM-As-A-Service” and moved them to the second stage in the pipeline.- Contributed to the MVP of F5 Cloud computing offloading infrastructure(a.k.a. ECM), using docker containers and other open-source technologies including Fig, Serf, jClouds, Vijava, HAproxy, Monit, Etcd, Redis, Gradle, Shiro, Thrift, Kafka. The system was deployed and orchestrated at both public cloud (AWS) and private cloud (VMware vSphere/vCenter).- Initiated and led a proxy-based video QoE hudfilter module supporting the central collection of user video experience. The QoE score can automatically trigger multiple networking policies to optimize the user video watching experience. The supported video formats include MP4, FLV and HLS.- Designed and implemented a Caching Score Logic (CSL) for the video traffic optimization project as part of the F5 early web acceleration initiative.- Lab manager in charge of two full racks of appliances for development and testing.

I architected and developed an e-commerce aggregation platform to seamlessly bridge sellers, buyers, and celebrity personal shoppers. The platform is built from the ground on top of Openshift with horizontal scalability, database, monitoring, and AWS S3 storage for video and image. The backend communicated to IOS/Android APPs via RESTful APIs and a secure https endpoint. Check out more from the media interview by OpenShift >>>

H264 video encoder architecture/algorithm design and reference C-model implementationRegression system optimizationVideo decoding on-the-fly DRM architecture design and reference C-model implementation