Daniel Ma Email & Phone Number

Seattle, Washington, United States

Focused on cloud development, first the Firebox Cloud Configuration Management, and then the brand new future product of WatchGuard, FireCloud, a SASE solution. Together with colleagues, we successfully bring this product into preview from concepts in 4 years. A series of services are developed and deployed to realize it. I worked on backend services:* Architect, design and implement Certificate Authority service for WG private PKI, including - proposed a process for company executives and IT to create/update/revoke root CA and issue intermediate CA - designed and implemented lambda services to update/revoke intermediate CA - designed and implemented lambda services to sign/revoke entity CA for proxy instances* Design and implement other backend services for FireCloud, like certificate authority, proxy, VPN concentrator, gateway antivirus, APT, WebBlocker, AppControl, egress, policy management, SNS/SQS, etc..* Participated conceptual discussions for to image use cases and define the product.* Participating in the creation of prototyping to verify the advantages of various technologies, like VPC, kubernetes, CNI, tunneling, VM, containers, lambda, micro-services, SQS, SNS, CNF, etc; and choose those most suitable for us.* Created services managing tunnels to direct traffic through pods.* Performed performance tests to see whether our prototyping meets our expectations.

Seattle, Washington, United States

After years of development works on various projects and maintenance, gradually grew as lead developer for FireWall and networking parts of FireWare, the OS running on WatchGuard's network security devices.* Led and developed a new feature NetFlow Exporting from scratch. This feature integrates WG’s product, Firebox, into an industry de-facto ecosystem that monitors and analyzes a network via NetFlow. With this feature Firebox collects metadata of traffic flows going through it and exports them to the specified remote collector.* Developed Subdomain Wildcard FQDN in our product. By enabling usage of wildcard domain names in firewall policies, our product could apply rules per domain names.* Arranging/coordinating development works of projects among product managers, developers, QA and support engineers.* Offering technical guidance to other firewall developers, review design and code regarding firewall area.Response to urgent customer issues. Maintain existing products: fixing bugs, improving performance.

Seattle, Washington, United States

* Led and developed a new feature Conditional DNS Forwarding, which improves usability of our product in the cloud era.* Offered technical guidance to other firewall developers, review design and code regarding firewall area. ( * Collaborated with product manager, UI engineers, QA engineers and support engineers. * Investigated new technology trends of network security architecture which leverages user space packet processing technology such as DPDK from Intel and FUSDPA from Freescale. Proposing new architecture which has better flexibility and better performance.* Maintained existing Fireware OS: fixing bugs, improving performance. Troubleshooting in customer’s environment.

Beijing, China

* Led and developed a renovated feature Traffic Management/QoS beginning from concept discussion to implementation. This feature enables customers to manage their network bandwidth best for their business by reserving bandwidth for critical traffic, limiting entertainment cyber stream, giving only certain bandwidth to certain applications.* Developed IPv6 firewall and its traffic management and flood protection.* Offered technical guidance to other firewall developers, review design and code regarding firewall area. * Collaborated with product manager, UI engineers, QA engineers and support engineers. * Analyzed the company’s existing security architecture to figure out its performance bottleneck. The following solution increased connection establishment rate by 45%.* Maintained existing Fireware OS: fixing bugs, improving performance. Troubleshooting in customer’s environment.

Beijing, China

* Led the development of IPv6 network management (Router Advertisement), IPv6 packet filtering.* Led the refactor of the architecture of the key firewall component which is the manager of packet filtering and the center distributing traffic for deeper detection, like virus scanning, application control.* Maintained existing Fireware OS: fixing bugs, improving performance. Troubleshooting in customer’s environment.

Beijing, China

* Enhanced Single-Sign-On for Terminal Service and Citrix presentation service users.* Implemented wireless functionality for appliances XTM2 and XTM3.* Enabled Firebox to transmit Broadcast & Multicast packets over IPsec VPN.* Developed Inbound and outbound traffic load balance.* Maintained existing Fireware OS: fixing bugs, improving performance. Troubleshooting and fixing issues in the customer's environment.

Beijing, China

* Designed and developed new features for the new release v6.3 of Wyse embedded Linux OS, like supporting dual-monitor, new PAM-based login framework, and new hardware platform, etc..* Maintained wyse embedded Linux OS (fixed bugs and implemented new functions requested by the customer).* Cooperated with the colleagues in a world-wide virtual-team.* Collected and analyzed the customer’s requirements and feedback.* Assisted to develop a new tool for Wyse thin OS, this tool checks whether the USB port can work normally or not at the end of manufacturing process.