Solution Architect – Entra Apps Migration (Tenant-to-Tenant)

Who We Are

At Kyndryl, we run and reimagine the mission-critical technology systems that drive advantage for the world’s leading businesses.  We are at the heart of progress; with proven expertise and a continuous flow of AI-powered insight, enabling smarter decisions, faster innovation, and a lasting competitive edge. For our people—Kyndryls—that means doing purposeful work that powers human progress. Join us and experience a flexible, supportive environment where your well-being is prioritized and your potential can thrive.

The Role

The Role:
You are the Entra Apps discipline Solution Architect responsible for ensuring that application access survives and stabilises through tenant-to-tenant consolidation. This includes enterprise applications, app registrations, service principals, permissions/consent, SSO configurations, token issuance impacts, conditional access dependencies and integration patterns.

This is a critical role because app access is where migrations go to die: if you break auth, you break the business. You will define the architecture blueprint and factory execution standards that ensure applications are discovered, remediated, validated and accepted with evidence before waves proceed.

Key Responsibilities:
- Define the target-state Entra application architecture for the consolidated tenant: app registration strategy, enterprise app patterns, service principal ownership, consent strategy, access governance approach.

- Define migration approach for app estate: discovery, classification (criticality), mapping, remediation backlog, validation approach and cutover readiness gating.

- Create runbooks for factory execution: app registration recreation/realignment patterns, certificate/secret management patterns, permission replication, admin consent workflows, redirect URI handling, SSO configuration patterns.

- Define validation gates: authentication success, token issuance behaviour, SSO functional checks, app-specific smoke tests, user access verification, break-glass contingencies.

- Coordinate with Identity/Exchange/Devices and Power Platform/Power BI disciplines for auth dependencies and service-to-service flows.

- Own exception management for complex apps (legacy SAML/OIDC, custom claims, non-standard IdP flows, third-party SaaS constraints, hard-coded tenant IDs).

- Establish operational reporting: app readiness heatmaps, defect categories, top blockers and continuous improvement.

- Act as escalation point for production-impacting app access issues during cutovers/hypercare.
- Lead complex-case remediation and standardise “known fixes”.

Who You Are

Must‑Have:
- Proven delivery of tenant-to-tenant Entra app migration / app access remediation in production with real enterprise outcomes.

- Deep Entra ID experience: enterprise apps, app registrations, service principals, consent, permissions, authentication flows (SAML/OIDC/OAuth2).

- Strong understanding of Conditional Access impacts on app access and device trust.

- Experience building factory-grade runbooks, validation templates and evidence packs for app readiness and acceptance.

- Strong troubleshooting capability: auth failures, claims issues, consent failures, token problems, SSO misconfigurations.

Good‑to‑Have:
- Experience with identity governance concepts (access reviews, lifecycle controls) where relevant to controlling app access at scale.

- Microsoft identity/security certifications (or equivalent proven delivery).

- Experience working with complex third-party SaaS ecosystems and enterprise integration patterns.

- SC‑300 alignment.

Interpersonal & Consulting Skills:
- High-stakes communication skills: can handle exec pressure when an app blocks a wave.

- Calm, structured escalation leadership and rapid triage behaviour.

- Strong negotiation and influencing: drives app owner participation and enforces readiness standards.

- Clear written communication: produces documentation others can execute without interpretation.
 

Shift / Working Pattern Notes:
- This role operates within a three‑shift 24x7 Factory model. The specific rota will be confirmed, but shift handovers are mandatory and performance is measured on shift outcomes. Peak cutover windows may require schedule flexibility.

Being You

The “Kyn” in Kyndryl means kinship, which represents the strong bonds we have with each other, our customers and our communities. We focus on ensuring all Kyndryls feel included and we welcome people of all cultures, backgrounds, and experiences. Even if you don’t meet every requirement, we encourage you to apply. We believe in growth, and we’re excited to see what you can bring. At Kyndryl, employee feedback has told us that our number one driver of employee engagement is belonging. That sense of belonging — being a valued, respected, trusted member of the team — is fundamental to our culture and fueling great experiences for our customers. This dedication to welcoming everyone into our company means that Kyndryl gives you the ability to thrive and contribute to our culture of empathy and shared success. That’s The Kyndryl Way.

What You Can Expect

Your career with us isn’t just a job—it’s an adventure with purpose.  We offer a dynamic, hybrid-friendly culture that supports your well-being and empowers you to grow. Our Be Well programs are thoughtfully designed to support your financial, mental, physical, and social health—because we know that when you feel your best, you do your best.

From your very first day, you’ll dive into impactful work that powers the systems our customers rely on every day. You won’t just contribute—you’ll make a difference, tackling meaningful projects that sharpen your skills and fuel your growth.

We’re here to champion your journey. With powerful tools to chart your career path, personalized development goals aligned with your ambitions, and continuous feedback to keep you inspired and on track, you’ll have everything you need to thrive and evolve. You’ll develop in-demand skills to grow your career and achieve your ambitions with access to cutting-edge learning opportunities—from certifications with Microsoft, Google, and Amazon to coaching and hands-on experiences. And through it all, you’ll be part of a culture that values empathy, restless learning, and a devotion to shared success.

We want you to thrive here—and we’re committed to helping you do just that. Ready to make an impact? Join us and help shape what’s next.

Get Referred!

If you know someone that works at Kyndryl, when asked ‘How Did You Hear About Us’ during the application process, select ‘Employee Referral’ and enter your contact's Kyndryl email address.