Solution Architect – Devices / Endpoint Migration

Kyndryl; Bengaluru; Hybrid; INR 3,500,000 - 7,000,000; Full time

Job summary

Kyndryl in Bengaluru, India, is seeking a Senior Endpoint Migration Architect to own the target state for tenant-to-tenant migrations across Intune and Windows. You will define the end-to-end migration playbook, from identity readiness to post-move support, including runbooks, gates, telemetry, and dashboards.

You will lead architectural decisions for Autopilot, device provisioning, and compliance controls, while ensuring audit-grade evidence and robust exception handling across waves.

Qualifications

• 10+ years delivering tenant-to-tenant endpoint migrations at enterprise scale (Intune + Windows).
• Hands-on expertise in Microsoft Intune, Windows endpoint management, policy design, app deployment.
• Strong understanding of Microsoft Entra ID device identity and Conditional Access controls.
• Experience designing industrialized migration with runbooks, gates, telemetry, and repeatable patterns.
• Strong PowerShell/Graph troubleshooting mindset.
• Experience managing complex device estates across regions and personas.
• Calm under pressure during cutover windows and leading war rooms.
• Experience with PowerSyncPro or comparable endpoint migration tooling.
• Knowledge of Defender for Endpoint integration and certificate-based auth.
• Windows 11 transition and tenant consolidation experience.

Responsibilities

• Define the target state endpoint architecture for consolidated tenants across identity and device trust.
• Define migration approach through identity readiness, device readiness, policy alignment, cutover, and stabilization.
• Establish factory-ready runbooks and quality gates for device migration activities with telemetry and dashboards.
• Specify and operationalize migration tooling, telemetry, dashboards, and failure triage.
• Define device cohort segmentation strategies for VIPs, executives, kiosks, and remote users with tailored migrations.
• Lead architectural decisions for Autopilot, provisioning, re-enrollment, and post-move support.
• Define the security and compliance impact model including CA dependencies and Defender integration.
• Create and govern an exception framework and drive root-cause improvements.
• Capture audit-grade evidence across waves including readiness evidence and validation packs.

Skills

Tenant-to-tenant migration

Intune / Windows management

Entra ID device identity

Conditional Access controls

PowerShell / Graph

Migration runbooks and gates

Factory-like migration patterns

Defender integration

Windows 11 transition

Stakeholder translation

Tools

PowerSyncPro

Job description

Who We Are

At Kyndryl, we run and reimagine the mission-critical technology systems that drive advantage for the world’s leading businesses. We are at the heart of progress; with proven expertise and a continuous flow of AI-powered insight, enabling smarter decisions, faster innovation, and a lasting competitive edge. For our people—Kyndryls—that means doing purposeful work that powers human progress. Join us and experience a flexible, supportive environment where your well-being is prioritized and your potential can thrive.

The Role

As the owner of the target state endpoint architecture for the consolidated tenant—spanning the join model, identity/device trust, Intune/Autopilot posture, compliance strategy, and app delivery—you will define the tenant-to-tenant device migration approach through the structured sequencing of identity readiness, device readiness, policy/app alignment, cutover, and stabilization. You will establish factory-ready runbooks and quality gates for every major device migration activity (covering pre-checks, enrollment, policy assignment, app deployment, validation, and rollback) while specifying and operationalizing the use of migration tooling, such as PowerSyncPro or its equivalent, including configuration patterns, telemetry, dashboards, and failure triage. Additionally, you will define device cohort segmentation strategies for VIPs, executives, kiosks, shared devices, remote-only users, high-risk apps, and high-privilege users along with tailored migration patterns for each, while leading architectural decisions for the Autopilot strategy, device provisioning, re-enrollment paths, device compliance re-baselining, and post-move support. Finally, you will define the security and compliance impact model regarding Conditional Access dependencies, compliance policies, device certificates, Defender integration, and privileged access constraints, create and govern an exception framework for managing allowed exceptions, evidence, approvals, and technical debt, act as the final escalation point for systemic issues to drive root-cause elimination back into improved standards, and ensure the capture of audit-grade evidence for each wave, including readiness evidence, validation packs, known-issue logs, and acceptance sign-offs.

Who You Are

Your Future at Kyndryl

The career path ahead is full of exciting opportunities to grow and advance within the job family. With dedication and hard work, you can climb the ladder to higher bands, achieving coveted positions such as Principal Engineer or Vice President of Software. These roles not only offer the chance to inspire and innovate, but also bring with them a sense of pride and accomplishment for having reached the pinnacle of your career in the software industry.

You’re good at what you do and possess the required experience to prove it. However, equally as important – you have a growth mindset; keen to drive your own personal and professional development. You are customer-focused – someone who prioritizes customer success in your work. And finally, you’re open and borderless – naturally inclusive in how you work with others.

Required Technical and Professional Experience:

• 10+ years of experience in delivery of tenant-to-tenant endpoint migration at enterprise scale (Intune + Windows), demonstrated with outcomes, not theory.

• Deep hands-on expertise in Microsoft Intune, Windows endpoint management, policy design, configuration profiles, compliance, app deployment, and troubleshooting.

• Strong understanding of Microsoft Entra ID device identity, device registration/join states, device trust, and Conditional Access device-based controls.

• Experience designing and running industrialized migration: runbooks, gates, telemetry-driven execution, shift handovers, and repeatable “factory” patterns.

• Strong PowerShell/Graph troubleshooting mindset (bulk checks, readiness reporting, remediation scripting).

• Experience managing complex device estates (multi-region, multiple personas, varied network conditions, legacy constraints, heavy endpoint security tooling).

• Comfortable operating under pressure during cutover windows; able to lead war rooms and make safe, fast decisions.

Preferred Technical and Professional Experience:

• Experience with PowerSyncPro specifically (or comparable endpoint migration tooling) including operational constraints and troubleshooting patterns.

• Knowledge of Defender for Endpoint integration, certificate-based auth scenarios, device-based access restrictions, and endpoint DLP considerations.

• Experience with Windows 11 transition alongside tenant consolidation.

• “Direction-setter” behavior: can set standards, defend them with evidence, and get adoption across teams.

• Calm under pressure; can lead escalation without drama and keep teams focused on outcomes.

• Strong stakeholder translation: can explain device risk/impact in business language without hand-waving.

• High quality bar: refuses unsafe shortcuts, insists on evidence and repeatability.

• Coaches engineers and senior SMEs: builds capability, doesn’t hoard knowledge.

• Operates as one-team across onshore/offshore and across identity/security/app stakeholders.

Being You

The “Kyn” in Kyndryl means kinship, which represents the strong bonds we have with each other, our customers and our communities. We focus on ensuring all Kyndryls feel included and we welcome people of all cultures, backgrounds, and experiences. Even if you don’t meet every requirement, we encourage you to apply. We believe in growth, and we’re excited to see what you can bring. At Kyndryl, employee feedback has told us that our number one driver of employee engagement is belonging. That sense of belonging — being a valued, respected, trusted member of the team — is fundamental to our culture and fueling great experiences for our customers. This dedication to welcoming everyone into our company means that Kyndryl gives you the ability to thrive and contribute to our culture of empathy and shared success. That’s The Kyndryl Way.

What You Can Expect

Your career with us isn’t just a job—it’s an adventure with purpose. We offer a dynamic, hybrid-friendly culture that supports your well-being and empowers you to grow. Our Be Well programs are thoughtfully designed to support your financial, mental, physical, and social health—because we know that when you feel your best, you do your best.

From your very first day, you’ll dive into impactful work that powers the systems our customers rely on every day. You won’t just contribute—you’ll make a difference, tackling meaningful projects that sharpen your skills and fuel your growth.

We’re here to champion your journey. With powerful tools to chart your career path, personalized development goals aligned with your ambitions, and continuous feedback to keep you inspired and on track, you’ll have everything you need to thrive and evolve. You’ll develop in-demand skills to grow your career and achieve your ambitions with access to cutting‑edge learning opportunities—from certifications with Microsoft, Google, and Amazon to coaching and hands‑on experiences. And through it all, you’ll be part of a culture that values empathy, restless learning, and a devotion to shared success.

We want you to thrive here—and we’re committed to helping you do just that. Ready to make an impact? Join us and help shape what’s next.