Responsibilities
- Define the target-state Entra application architecture for a consolidated tenant, covering app registrations, enterprise app patterns, service principal ownership, consent, and access governance.
- Create and manage the application migration approach, including discovery, criticality classification, mapping, remediation backlogs, validation, and cutover readiness.
- Develop factory execution runbooks for app registration recreation or realignment, certificate and secret management, permission replication, admin consent, redirect URIs, and SSO configuration.
- Define validation gates for authentication, token issuance, SSO, app smoke tests, user access, and break-glass contingencies.
- Coordinate with Identity, Exchange, Devices, Power Platform, and Power BI disciplines on authentication dependencies and service-to-service flows.
- Manage exceptions involving legacy SAML/OIDC, custom claims, non-standard identity-provider flows, third-party SaaS constraints, and hard-coded tenant IDs.
- Establish readiness heatmaps, defect reporting, blocker tracking, and continuous-improvement processes.
- Act as an escalation point for production-impacting app-access issues during cutovers and hypercare, leading complex remediation and standardizing known fixes.
Requirements
- Proven production delivery of tenant-to-tenant Entra application migrations or app-access remediation with enterprise outcomes.
- Deep experience with Entra ID enterprise apps, app registrations, service principals, consent, permissions, and SAML/OIDC/OAuth2 authentication flows.
- Strong understanding of Conditional Access impacts on application access and device trust.
- Experience building factory-grade runbooks, validation templates, and evidence packs for app readiness and acceptance.
- Strong troubleshooting capability across authentication failures, claims issues, consent failures, token problems, and SSO misconfigurations.
- Experience with identity governance concepts such as access reviews and lifecycle controls.
- Microsoft identity/security certifications or equivalent proven delivery experience.
- Experience with complex third-party SaaS ecosystems and enterprise integration patterns.
- SC-300 alignment is preferred.
Benefits
- Hybrid-friendly work culture.
- Be Well programs supporting financial, mental, physical, and social health.
- Career-path tools, personalized development goals, continuous feedback, coaching, and hands-on learning.
- Access to certification and learning opportunities involving Microsoft, Google, and Amazon.
- Inclusive culture focused on belonging, empathy, continuous learning, and shared success.
Categories
About Kyndryl
We have the world’s best talent that design, run, and manage the most advanced and reliable technology infrastructure each day. Together, we think holistically about the health of these vital technology ecosystems. We are a focused, independent company that builds on our foundation of excellence by creating systems in new ways. Bringing in the right partners, investing in our business, and working side-by-side with our customers to unlock potential. We're raising the bar. Our experience speaks for itself: We have tens of thousands of highly skilled employees around the world serving most of the Fortune 100 companies. But our purpose is what drives us: Advancing the vital systems that power human progress. Because when a digital ecosystem is healthy, it can more readily adapt and support continuous growth and that opens up a world of possibility for everyone. Together, we are the heart of progress.