Solution Architect – Entra Apps Migration
Who We Are
At Kyndryl, we run and reimagine the mission-critical technology systems that drive advantage for the world’s leading businesses. We are at the heart of progress; with proven expertise and a continuous flow of AI-powered insight, enabling smarter decisions, faster innovation, and a lasting competitive edge. For our people-Kyndryls-that means doing purposeful work that powers human progress. Join us and experience a flexible, supportive environment where your well-being is prioritized and your potential can thrive.
The Role
To achieve this, the Lead will define the target-state Entra application architecture for the consolidated tenant, covering the app registration strategy, enterprise app patterns, service principal ownership, consent strategy, and access governance approach. They will define the migration approach for the app estate, including discovery, classification based on criticality, mapping, the remediation backlog, validation approach, and cutover readiness gating. Additionally, they will create runbooks for factory execution, focusing on app registration recreation or realignment patterns, certificate and secret management patterns, permission replication, admin consent workflows, redirect URI handling, and SSO configuration patterns.
The role involves defining validation gates that encompass authentication success, token issuance behaviour, SSO functional checks, app-specific smoke tests, user access verification, and break-glass contingencies. Coordination with Identity, Exchange, Devices, and Power Platform or Power BI disciplines will be required for auth dependencies and service-to-service flows. Furthermore, they will own exception management for complex apps, addressing legacy SAML/OIDC, custom claims, non-standard IdP flows, third-party SaaS constraints, and hard-coded tenant IDs. Finally, they will establish operational reporting-such as app readiness heatmaps, defect categories, top blockers, and continuous improvement-while acting as an escalation point for production-impacting app access issues during cutovers or hypercare, leading complex-case remediation, and standardising “known fixes”.
Who You Are
Your Future at Kyndryl
The career path ahead is full of exciting opportunities to grow and advance within the job family. With dedication and hard work, you can climb the ladder to higher bands, achieving coveted positions such as Principal Engineer or Vice President of Software. These roles not only offer the chance to inspire and innovate, but also bring with them a sense of pride and accomplishment for having reached the pinnacle of your career in the software industry.
You’re good at what you do and possess the required experience to prove it. However, equally as important - you have a growth mindset; keen to drive your own personal and professional development. You are customer-focused - someone who prioritizes customer success in their work. And finally, you’re open and borderless - naturally inclusive in how you work with others.
Required Technical and Professional Experience:
Proven delivery of tenant-to-tenant Entra app migration / app access remediation in production with real enterprise outcomes.
Deep Entra ID experience: enterprise apps, app registrations, service principals, consent, permissions, authentication flows (SAML/OIDC/OAuth2).
Strong understanding of Conditional Access impacts on app access and device trust.
Experience building factory-grade runbooks, validation templates and evidence packs for app readiness and acceptance.
Strong troubleshooting capability: auth failures, claims issues, consent failures, token problems, SSO misconfigurations.
Preferred Technical and Professional Experience:
Experience with identity governance concepts (access reviews, lifecycle controls) where relevant to controlling app access at scale.
Microsoft identity/security certifications (or equivalent proven delivery).
Experience working with complex third-party SaaS ecosystems and enterprise integration patterns.
SC-300 alignment.
Being You
The “Kyn” in Kyndryl means kinship, which represents the strong bonds we have with each other, our customers and our communities. We focus on ensuring all Kyndryls feel included and we welcome people of all cultures, backgrounds, and experiences. Even if you don’t meet every requirement, we encourage you to apply. We believe in growth, and we’re excited to see what you can bring. At Kyndryl, employee feedback has told us that our number one driver of employee engagement is belonging. That sense of belonging - being a valued, respected, trusted member of the team - is fundamental to our culture and fueling great experiences for our customers. This dedication to welcoming everyone into our company means that Kyndryl gives you the ability to thrive and contribute to our culture of empathy and shared success. That’s The Kyndryl Way.
What You Can Expect
Your career with us isn’t just a job-it’s an adventure with purpose. We offer a dynamic, hybrid-friendly culture that supports your well-being and empowers you to grow. Our Be Well programs are thoughtfully designed to support your financial, mental, physical, and social health-because we know that when you feel your best, you do your best.
From your very first day, you’ll dive into impactful work that powers the systems our customers rely on every day. You won’t just contribute-you’ll make a difference, tackling meaningful projects that sharpen your skills and fuel your growth.
We’re here to champion your journey. With powerful tools to chart your career path, personalized development goals aligned with your ambitions, and continuous feedback to keep you inspired and on track, you’ll have everything you need to thrive and evolve. You’ll develop in-demand skills to grow your career and achieve your ambitions with access to cutting-edge learning opportunities-from certifications with Microsoft, Google, and Amazon to coaching and hands-on experiences. And through it all, you’ll be part of a culture that values empathy, restless learning, and a devotion to shared success.
We want you to thrive here-and we’re committed to helping you do just that. Ready to make an impact? Join us and help shape what’s next.
Get Referred!
If you know someone that works at Kyndryl, when asked ‘How Did You Hear About Us’ during the application process, select ‘Employee Referral’ and enter your contact's Kyndryl email address.