Senior Technical Consultant – Shift Lead (Entra Apps Tenant Migration)

Kyndryl; Bengaluru; On-site; INR 400,000 - 700,000; Full time

Job summary

Kyndryl is looking for an Entra Apps Factory Shift Lead to oversee on-shift delivery for tenant-to-tenant transitions of enterprise apps and registrations. The role involves managing runbooks, validating SSO/claims, and coordinating cross-tenant configurations to ensure seamless cutovers.

You will drive backlogs, supervise a 24x7 three-shift operation, and ensure evidence capture for audit and governance. The position demands hands-on Entra experience and a strong security mindset.

Qualifications

• Delivered production tenant-to-tenant Entra Apps remediation and cutover validation.
• Strong hands-on expertise with Microsoft Entra ID application constructs: enterprise apps, app registrations, service principals, permissions/consent and token/claim concepts.
• Strong experience with secrets/certificates lifecycle, rotation planning and secure handling practices.
• Experience with conditional access and cross-tenant access settings and how they affect transition phases.
• Proven runbook discipline and evidence capture practices; comfortable operating in audited environments.
• Ability to lead delivery in a 24x7 three-shift model with formal handovers and accountable shift outcomes.

Responsibilities

• Lead execution of Entra Apps migration/remediation runbooks during your shift, ensuring throughput and quality gates.
• Own triage for application access failures post-tenant transition (SSO misconfig, missing claims, certificate/secret issues).
• Coordinate recreation and validation of enterprise apps and registrations in the target tenant, including rotation of keys/secrets/certs and permission re-grant patterns.
• Manage cross-tenant access considerations to support collaboration and transition states with governance and safe config.
• Maintain shift backlog, prioritise by business criticality and cutover schedule; coordinate validation with stakeholders.
• Drive evidence capture: configuration proof, test results, sign‑in validation, rollback notes for audit.

Skills

Tenant-to-tenant remediation

Microsoft Entra ID

Secrets/certificates rotation

Conditional access

Runbook discipline

24x7 shift leadership

Tools

PowerShell

Microsoft Graph

Job description

Who We Are

At Kyndryl, we run and reimagine the mission‑critical technology systems that drive advantage for the world’s leading businesses. We are at the heart of progress; with proven expertise and a continuous flow of AI‑powered insight, enabling smarter decisions, faster innovation, and a lasting competitive edge. For our people—Kyndryls—that means doing purposeful work that powers human progress. Join us and experience a flexible, supportive environment where your well‑being is prioritized and your potential can thrive.

The Role

As the Entra Apps Factory Shift Lead, you will lead on‑shift technical delivery for tenant‑to‑tenant transition of enterprise applications, app registrations and associated identity/access integrations that must be re‑established in the destination tenant. This discipline is core to successful workload migration because application authentication, authorisation, secrets/certificates and trust relationships must be recreated and validated to keep business services functioning through cutover waves. You will run a 24x7 factory model: managing backlogs, enforcing runbooks, coordinating with security/identity stakeholders and ensuring evidence capture for every app remediated.

Key Responsibilities:

• Lead execution of Entra Apps migration/remediation runbooks during your shift, ensuring predictable throughput and quality gates.
• Own triage for application access failures post‑tenant transition (SSO misconfig, missing claims, certificate/secret issues, redirect URI mismatch, conditional access blocks).
• Coordinate recreation and validation of enterprise apps and app registrations in the target tenant, including keys/secrets/certs rotation and permissions re‑grant patterns where applicable.
• Manage cross‑tenant access considerations that support collaboration and transition states (where used), ensuring correct governance and safe configuration.
• Maintain shift backlog, prioritise by business criticality and cutover schedule and coordinate stakeholder validation where required.
• Drive evidence capture: configuration proof, test results, sign‑in validation, rollback notes and completion records suitable for audit/governance.
• Ensure operational handovers are crisp: open risks, high‑priority apps, dependencies and next actions clearly documented.
• Coordinate with Devices/Shared Data/Power Platform/Power BI teams to resolve identity and app dependencies impacting wave execution.
• Drive continuous improvement of runbooks, templates and test scripts to reduce time per app and minimise repeat defects.
• Escalate complex vendor application issues with complete diagnostic evidence and clear business impact.

Who You Are

Must‑Have (or equivalent experience):

• Delivered production tenant‑to‑tenant Entra Apps remediation (enterprise apps/app registrations) in your specialism, including cutover validation.
• Strong hands‑on expertise with Microsoft Entra ID application constructs: enterprise applications, app registrations, service principals, permissions/consent and token/claim concepts.
• Strong experience with secrets/certificates lifecycle, rotation planning and secure handling practices.
• Experience working with conditional access and cross‑tenant access settings where relevant and understanding how these can block or permit access during transition phases.
• Proven runbook discipline and evidence capture practice; comfortable operating in audited environments.
• Ability to lead delivery in a 24x7 three‑shift model , including formal handovers and accountable shift outcomes.

Good‑to‑Have:

• SC‑300 certification (or equivalent) and/or MS‑102.
• Microsoft Graph/PowerShell automation experience to accelerate inventory, recreation templates and validation checks.
• Experience with SSO standards and patterns (SAML/OIDC/OAuth) and federated integrations with third‑party SaaS vendors.
• Experience working with multi‑tenant organisations/collaboration constructs (B2B settings, controlled cross‑tenant relationships).
• Strong security mindset: least privilege, access reviews and configuration drift control.

Interpersonal & Consulting Skills:

• Structured, evidence‑driven leadership: avoids guesswork and enforces repeatability.
• Confident communicator with technical and non‑technical stakeholders; explains risk/impact clearly.
• Coaches engineers into consistent execution and strong operational habits (tickets, proof, testing).
• Calm under pressure during cutovers; leads triage with discipline and prioritisation.
• Strong dependency management behaviours; proactively removes blockers across disciplines.
• Treats application owners and business teams professionally; sets expectations and drives timely validation.

Typical Deliverables / KPIs:

• Throughput: apps remediated/tested per shift vs plan.
• Defect rate: percentage of apps requiring rework after first validation.
• MTTR: time to restore access for critical apps during wave cutovers.
• Evidence capture: completeness of configuration proof and validation artefacts per app.
• SLA: cutover readiness achieved on time; escalations raised early with sufficient evidence.

Shift / Working Pattern Notes:

• This role operates within a three‑shift 24x7 Factory model . The specific rota will be confirmed, but shift handovers are mandatory and performance is measured on shift outcomes. Peak cutover windows may require schedule flexibility.

Being You

The “Kyn” in Kyndryl means kinship, which represents the strong bonds we have with each other, our customers and our communities. We focus on ensuring all Kyndryls feel included and we welcome people of all cultures, backgrounds, and experiences. Even if you don’t meet every requirement, we encourage you to apply. We believe in growth, and we’re excited to see what you can bring. At Kyndryl, employee feedback has told us that our number one driver of employee engagement is belonging. That sense of belonging — being a valued, respected, trusted member of the team — is fundamental to our culture and fueling great experiences for our customers. This dedication to welcoming everyone into our company means that Kyndryl gives you the ability to thrive and contribute to our culture of empathy and shared success. That’s The Kyndryl Way.

What You Can Expect

Your career with us isn’t just a job—it’s an adventure with purpose. We offer a dynamic, hybrid‑friendly culture that supports your well‑being and empowers you to grow. Our Be Well programs are thoughtfully designed to support your financial, mental, physical, and social health—because we know that when you feel your best, you do your best.

From your very first day, you’ll dive into impactful work that powers the systems our customers rely on every day. You won’t just contribute—you’ll make a difference, tackling meaningful projects that sharpen your skills and fuel your growth.

We’re here to champion your journey. With powerful tools to chart your career path, personalized development goals aligned with your ambitions, and continuous feedback to keep you inspired and on track, you’ll have everything you need to thrive and evolve. You’ll develop in‑demand skills to grow your career and achieve your ambitions with access to cutting‑edge learning opportunities—from certifications with Microsoft, Google, and Amazon to coaching and hands‑on experiences. And through it all, you’ll be part of a culture that values empathy, restless learning, and a devotion to shared success.

Kyndryl is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, pregnancy, disability, age, veteran status, or other characteristics. Kyndryl is also committed to compliance with all fair employment practices regarding citizenship and immigration status.