Jeff Rainey
Senior Systems Engineer
I keep Windows infrastructure secure, available and recoverable, mostly for regulated businesses in banking, mortgage, healthcare and utilities.
Lake Forest, CA · Open to remote, or hybrid/onsite in Orange County and South LA
I’ve spent my career on the infrastructure that regulated businesses can’t afford to have go down: directory services and identity, remote access, virtualization, and backup and recovery. Most of it has been in mortgage servicing, banking, healthcare and utilities, where the work has to hold up for users, InfoSec and the auditors (usually in that order of patience).
I’ve run the full lifecycle, from evaluating and sizing a platform, through deployment and patching, to proving it can actually be recovered (the part that tends to get skipped). I’ve also led teams twice, a seven-person infrastructure team at a bank and a Citrix team supporting multiple hospitals. Both times I stayed hands-on, mostly because I like it, and partly because someone has to read the logs.
What I work with
Windows & directory
Windows Server 2012 R2-2025, Active Directory (multi-site, trusts), Group Policy, DNS, DHCP, DFS, AD CS / PKI, PowerShell
Identity & access
Entra ID and Entra Connect, Okta SSO and MFA, ADFS, LDAPS
Microsoft 365
Exchange Online, SharePoint Online, Teams, licensing and user lifecycle
Citrix & VDI
Citrix Virtual Apps and Desktops, NetScaler / ADC, ADM, WEM, Profile Management, ControlUp; Citrix Certified Expert (CCE-V)
Virtualization & storage
VMware vSphere 7-8, Hyper-V, Cisco HyperFlex, NetApp, HPE Nimble, Qumulo
Backup, DR & security
Cohesity, Veeam (incl. Microsoft 365), DR exercises, hardening, patching, vulnerability remediation; SOX, FDIC, HIPAA
Selected work
Retiring ADFS: a phased move to Okta
Moving a mortgage servicer's federated applications from ADFS to Okta one at a time, so ADFS could be switched off without a big-bang cutover.
NetScaler under fire: CitrixBleed and a gateway DDoS
Being the only NetScaler admin when actively exploited vulnerabilities and a DDoS hit remote access, and how InfoSec and I worked through both.
Replacing NetBackup with ransomware-resilient backup
Moving a low-petabyte backup estate to Cohesity with immutable copies in AWS, and proving recovery through DR exercises.
From definition to delivery: a 4,000-desktop VDI platform
Helping define a utility's virtual desktop program on the enterprise architecture team, then joining the implementation partner to co-architect and deliver it.
Home lab
Where I keep learning: Linux, automation and the tools I haven't run in production yet.
A job-board watcher that pushes to my phone
A small Python service that checks 160 companies' job boards every 30 minutes and sends new matching roles to my phone, often before they reach LinkedIn.
Proxmox home lab with GPU passthrough
A two-node Proxmox cluster running Windows Server, protected two ways, with an NVIDIA GPU passed through to a Linux guest for local LLMs.
A hardened Ubuntu web server, managed from Git
The server this site runs on: key-only SSH, a firewall, Caddy with automatic HTTPS, and every setting kept in a Git repo.
Contact
I'm looking for my next role as a senior systems engineer, Citrix/VDI engineer, identity engineer or hands-on infrastructure lead. Full-time or contract.