Solution Architect – Entra Apps Migration (Tenant-to-Tenant) at Kyndryl Canada Limited

Hyderabad, Telangana, India -

Full Time

Start Date

Immediate

Expiry Date

12 Oct, 26

Salary

0.0

Posted On

14 Jul, 26

Experience

10 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Entra ID, Tenant-to-Tenant Migration, SAML, OIDC, OAuth2, Conditional Access, Service Principals, App Registrations, SSO Configuration, Identity Governance, Architecture Blueprinting, Runbook Creation, Troubleshooting, Stakeholder Management, Technical Documentation, SC-300

Industry

IT Services and IT Consulting

Description

Who We Are At Kyndryl, we run and reimagine the mission-critical technology systems that drive advantage for the world’s leading businesses. We are at the heart of progress; with proven expertise and a continuous flow of AI-powered insight, enabling smarter decisions, faster innovation, and a lasting competitive edge. For our people—Kyndryls—that means doing purposeful work that powers human progress. Join us and experience a flexible, supportive environment where your well-being is prioritized and your potential can thrive. The Role The Role: You are the Entra Apps discipline Solution Architect responsible for ensuring that application access survives and stabilises through tenant-to-tenant consolidation. This includes enterprise applications, app registrations, service principals, permissions/consent, SSO configurations, token issuance impacts, conditional access dependencies and integration patterns. This is a critical role because app access is where migrations go to die: if you break auth, you break the business. You will define the architecture blueprint and factory execution standards that ensure applications are discovered, remediated, validated and accepted with evidence before waves proceed. Key Responsibilities: - Define the target-state Entra application architecture for the consolidated tenant: app registration strategy, enterprise app patterns, service principal ownership, consent strategy, access governance approach. - Define migration approach for app estate: discovery, classification (criticality), mapping, remediation backlog, validation approach and cutover readiness gating. - Create runbooks for factory execution: app registration recreation/realignment patterns, certificate/secret management patterns, permission replication, admin consent workflows, redirect URI handling, SSO configuration patterns. - Define validation gates: authentication success, token issuance behaviour, SSO functional checks, app-specific smoke tests, user access verification, break-glass contingencies. - Coordinate with Identity/Exchange/Devices and Power Platform/Power BI disciplines for auth dependencies and service-to-service flows. - Own exception management for complex apps (legacy SAML/OIDC, custom claims, non-standard IdP flows, third-party SaaS constraints, hard-coded tenant IDs). - Establish operational reporting: app readiness heatmaps, defect categories, top blockers and continuous improvement. - Act as escalation point for production-impacting app access issues during cutovers/hypercare. - Lead complex-case remediation and standardise “known fixes”. Who You Are Must‑Have: - Proven delivery of tenant-to-tenant Entra app migration / app access remediation in production with real enterprise outcomes. - Deep Entra ID experience: enterprise apps, app registrations, service principals, consent, permissions, authentication flows (SAML/OIDC/OAuth2). - Strong understanding of Conditional Access impacts on app access and device trust. - Experience building factory-grade runbooks, validation templates and evidence packs for app readiness and acceptance. - Strong troubleshooting capability: auth failures, claims issues, consent failures, token problems, SSO misconfigurations. Good‑to‑Have: - Experience with identity governance concepts (access reviews, lifecycle controls) where relevant to controlling app access at scale. - Microsoft identity/security certifications (or equivalent proven delivery). - Experience working with complex third-party SaaS ecosystems and enterprise integration patterns. - SC‑300 alignment. Interpersonal & Consulting Skills: - High-stakes communication skills: can handle exec pressure when an app blocks a wave. - Calm, structured escalation leadership and rapid triage behaviour. - Strong negotiation and influencing: drives app owner participation and enforces readiness standards. - Clear written communication: produces documentation others can execute without interpretation. Shift / Working Pattern Notes: - This role operates within a three‑shift 24x7 Factory model. The specific rota will be confirmed, but shift handovers are mandatory and performance is measured on shift outcomes. Peak cutover windows may require schedule flexibility. Being You The “Kyn” in Kyndryl means kinship, which represents the strong bonds we have with each other, our customers and our communities. We focus on ensuring all Kyndryls feel included and we welcome people of all cultures, backgrounds, and experiences. Even if you don’t meet every requirement, we encourage you to apply. We believe in growth, and we’re excited to see what you can bring. At Kyndryl, employee feedback has told us that our number one driver of employee engagement is belonging. That sense of belonging — being a valued, respected, trusted member of the team — is fundamental to our culture and fueling great experiences for our customers. This dedication to welcoming everyone into our company means that Kyndryl gives you the ability to thrive and contribute to our culture of empathy and shared success. That’s The Kyndryl Way. What You Can Expect Your career with us isn’t just a job—it’s an adventure with purpose. We offer a dynamic, hybrid-friendly culture that supports your well-being and empowers you to grow. Our Be Well programs are thoughtfully designed to support your financial, mental, physical, and social health—because we know that when you feel your best, you do your best. From your very first day, you’ll dive into impactful work that powers the systems our customers rely on every day. You won’t just contribute—you’ll make a difference, tackling meaningful projects that sharpen your skills and fuel your growth. We’re here to champion your journey. With powerful tools to chart your career path, personalized development goals aligned with your ambitions, and continuous feedback to keep you inspired and on track, you’ll have everything you need to thrive and evolve. You’ll develop in-demand skills to grow your career and achieve your ambitions with access to cutting-edge learning opportunities—from certifications with Microsoft, Google, and Amazon to coaching and hands-on experiences. And through it all, you’ll be part of a culture that values empathy, restless learning, and a devotion to shared success. We want you to thrive here—and we’re committed to helping you do just that. Ready to make an impact? Join us and help shape what’s next. Get Referred! If you know someone that works at Kyndryl, when asked ‘How Did You Hear About Us’ during the application process, select ‘Employee Referral’ and enter your contact's Kyndryl email address. We’re glad you’re here. Take a look around at the many exciting career opportunities we have available and apply today! Can’t find a suitable job opening? Drop off your CV/Resume Drop off your CV/Resume and a Recruiter will reach out with related career information that match your experience and expertise. Sign up for Job Alerts Create your account and then sign up for job alerts. When new jobs become available that meet your criteria, you’ll be alerted right away! At Kyndryl, we achieve progress the world depends on, with purpose. Beginning with the purpose that matters to you. Because here, you will be part of a culture designed with purpose. One that is restless, empathetic and devoted. Where we are committed to sustainable progress for our customers and supporting the communities where we work and live. All of you is what we want. And what we need. Join us, and together, we can advance the vital systems that power human progress.

Responsibilities

The Solution Architect is responsible for designing and executing the architecture blueprint for Entra application migrations during tenant-to-tenant consolidations. This includes defining target-state patterns, creating factory execution runbooks, and managing complex authentication remediation.