Jonathan Ma Email & Phone Number

Kirkland, Washington, United States

Palo Alto, California, Us

Create Financial models to analyze Organizational strategies on Cloud platforms, 5 years budget forecast.Work with BizOps on P&L and product pricing strategy. Lead Organizational observability architecturedesign.● Achieved over 40%, $10M annual COGS saving by developing and leveraging detailed financialmodels to optimize Colo and Cloud infrastructure strategies.● Delivered 30%, $1.5M annual saving in Public Cloud cost by designing and implementinginnovative cloud resource models, ensuring alignment with public cloud strategy and operationalgoals.● Reduced 70%, $850k annual Observability tooling expenses by conducting a thorough analysisand implementing an optimized observability architecture tailored to organizational needs.● Cut 10%, $600k in annual cloud expenses by identifying and eliminating resource wastagethrough advanced cloud tagging strategies and efficiency-driven optimization techniques.● Developed highly accurate 5-year financial forecast models (<1% delta in FY24 accuracy) usingadvanced financial modeling and statistical techniques.● Led and executed cross-division logging and monitoring tooling migration, enhancing dataconsistency and operational efficiency across teams.● Defined and aligned the infrastructure, Observability, and Financial model AOP, ensuringconsistency with long-term business objectives.● Served as Division FinOps champion, leading initiatives to monitor and control COGSexpenditures, achieving sustainable cost management outcomes.● Championed GenAI adoption by promoting Google Gemini use cases, facilitating innovation andoperational efficiency within the business unit.

Palo Alto, Ca, Us

● Partnered with BizOps to create financial models that supported P&L insights and shapedcompetitive product pricing strategies, driving business alignment and profitability.● Defined organizational SLA/SLO/SLI standards for cloud infrastructure, enhancing businessservice visibility and ensuring alignment with operational excellence goals.

Palo Alto, Ca, Us

Designed and automated virtualization solution for SASE PoP platform.● Designed a multi-tenant workload solution with vCloud Director.● Designed monitoring solution for SASE platform on vROps Cloud.● Designed new platform infrastructure for SASE PoP with vSphere, vSAN, and NSX-T at scale.● Led team to automated end to end deployment for virtualization infrastructure with Ansible andTerraform.

Palo Alto, Ca, Us

Designed and deployed VMware SASE PoP virtualized platform on vSphere and NSX-T in 2 months. Automated SASE PoP build process and deployed 20 world wide PoPs in 2 months.

Pleasanton, California, Us

Pleasanton, California, Us

Pleasanton, California, Us

Designed network architecture between VMWare VXLAN overlay network and underlay physical network from ground up. Designed 50 hosts clusters to support full redundancy and high performance. Developed Python automation scripts for ESXi pre-installation and post-installation. Developed Python automation scripts for Purestorage. Developing Python automation scripts for VMWare NSX. Supported service teams onboarding VMWare platform. Designed and deployed NSX DFW change process to meet Security requirements.

Pleasanton, California, Us

Supported and managed Workday SaaS cloud architecture and infrastructure design across 12 Global datacenters. Participated in daily SCRUM meetings with 3 weeks sprint to deliver new company applications and features. Met with internal clients for project requirements (Chef, Dev, Env and BigData group) and proposed optimal network design solutions.

Milwaukee, Wisconsin, Us

Designed and deployed optimal networking and connectivity solution to meet client and business unit requirement. Responsible for corporate, core, production and client (branch) network stability. Provided tier 3 escalation and support. Provided network knowledge training and mentoring to junior engineers.• Designed and deployed layer 3 network connection and route filtering for client network.• Worked with provisioning team, project managers and clients to design optimal network solutions which also meet client expectations.• Scripted acls, NATs, route summarization and filtering for EIGRP network.• Provided Tier 3 support for corporate MPLS network. • Provided Tier 3 support and design for VPN (IPSec over GRE, DMVPN, mGRE and GETVPN) connections between DCs and client networks.• Provided Tier 3 routing support and design for traffic between production and client network. • Provided Tier 3 support and implementation for corporate firewalls, internet firewalls and mobile network firewalls which include ACL, NAT, routing and packet capture.• Analyzed traffic between mainframe (Tandem) and production network.• Analyzed data capture by using Observer or Wireshark sniffer to resolve network issues.• Managed and monitored OC48, OC12 and OC3 circuits at multiple DCs.• Managed Citrix Netscaler VIPs for load balancing.

Cincinnati, Oh, Us

Responsible for production data centers and corporate offices network and security design. In charged of network planning, engineering, implementation, testing, performance management, monitoring. Worked closely with multiple teams such as development, Techops and system engineers to provide Tier 3 support.• Designed and implemented network plan for production, DR and testing environments virtualization.• Implemented centralized Linux Syslog server for all network devices and RedHat Servers to fulfill security compliances SSAE16/SAS70• Managed and maintained all SSL certificates (Verisign/Thawte/Entrust) on F5 BIG-IP LTM and Linux Apache servers.• Implemented RADIUS server and authentication for all network devices and RedHat servers.• Implemented client VPN with multi-factor authentication (SecureAuth) using digital certificates and LDAP integration to ensure compliance with the financial industry’s security standards (SAS70/SSAE16).• Upgraded and maintained F5 BIG-IP LTM version across all environments.• Migrated Cisco ASA firewalls from corporate office to Data Center and tuned up OSPF routing.• Implemented Cisco ASA 5520 with Security contexts across all environments to provide truly HA network environment.• Managed both production and corporate OSPF networks.• Implemented Cisco Unified Communication system (v8.6) for the HQ and DR (with Vendor support).• Managed and maintained Cisco Unified Communication system (with Vendor support).• Managed and maintained corporate/production DNS via Linux servers and UltraDNS.• Redesigned corporate Domain Controller, DHCP, Subnets, DNS and GPO to improve network redundancy, reliability, performance and security.

Portland, Oregon, Us

Provided customer phone and field support in a large enterprise (over 12,000 employees).• Troubleshoot customer’s OS issues for Windows XP, Windows 7 and Mac OS X; resolved Network connectivity issues.• Troubleshoot customer’s EPIC and printer issues on UNIX servers and Citrix issues.• Maintained user’s account in Active Directory.• Coordinated projects with the customers to roll out computer devices to meet the SLA.

Beaverton, Or, Us

Responsible for system and network performance, stability and configuration. Provided 24/7 on-call for helpdesk and network support.• Managed Active Directory and GPO for user accounts and domain security.• Managed AS400 user accounts, performance and file backups for DR.• Replaced Nortel phone system to Shoretel phone system in companywide scope.• Managed server backups, storage and disaster recovery plan.• Monitored system and network performance and tuned up.• Responsible for hardware/software inventory and provisioning for IT department.• Implemented dual home ISP redundancy between Comcast and Verizon.• Implemented SonicWall firewall with HA system and configured site-to-site and client VPN.• Deployed Microsoft SCCM servers and utilized it for software delivery.