Solution Architect - Devices / Endpoint Migration (Tenant-to-Tenant)

Kyndryl; Dadri; On-site; INR 4,000,000 - 7,000,000; Full time

Job summary

Kyndryl is seeking a Devices discipline Solution Architect to lead end-to-end device migrations in a large Microsoft 365 tenant-to-tenant consolidation program. You will define the migration factory patterns, guardrails, runbooks and validation gates for high-volume waves, ensuring minimal end-user disruption.

You will own the target state endpoint architecture, guide Autopilot and Intune posture, and collaborate with regional leadership to scale and secure the migration across shifts in a 24x7

Qualifications

• Proven enterprise-scale tenant-to-tenant device migrations (Intune + Windows).
• Hands-on expertise in Intune, device management, policy design, and app deployment.
• Strong understanding of Entra ID device identity and Conditional Access controls.
• Experience designing industrialised migration with runbooks, gates and telemetry.
• PowerShell/Graph troubleshooting mindset with bulk checks and remediation scripts.
• Experience managing complex device estates across regions and personas.
• Calm under pressure during cutover windows and war-room leadership.

Responsibilities

• Own the target state endpoint architecture for the consolidated tenant.
• Define the tenant-to-tenant device migration approach and sequencing.
• Establish factory-ready runbooks and quality gates for major migrations.
• Specify and operationalise migration tooling usage including telemetry and dashboards.
• Define device cohort segmentation and tailored migration patterns.
• Lead architecture decisions for Autopilot strategy and device provisioning.
• Define security/compliance impact model and CA dependencies.
• Create and govern the exception framework with evidence and approvals.
• Act as escalation point for migration failures and drive root-cause fixes.
• Ensure audit-grade evidence capture for each wave.

Skills

Tenant-to-tenant migration

Microsoft Intune

Windows endpoint mgmt

Policy design

PowerShell/Graph

Migration factory model

Runbooks & gates

Migration tooling

Tools

PowerSyncPro

Job description

Job Summary

You will be the Devices discipline Solution Architect for a large-scale, global Microsoft 365 tenant-to-tenant consolidation programme, operating in an industrialised migration factory model (24x7 delivery across shifts). Your job is in providing technical leadership for the end-to-end device migration execution, ensuring it is delivered consistently across high volume waves with minimal disruption to end users.

This role is for a genuine migration specialist: someone who has delivered multiple endpoint migrations (not just run Intune). You will set the migration patterns, guardrails, runbooks, validation gates, exception handling and escalation paths for the factory execution teams. You will work closely with regional Scale technical leadership and Governance to ensure devices can be migrated repeatably, safely and at pace.

Key Responsibilities

• Own the target state endpoint architecture for the consolidated tenant (join model, identity/device trust, Intune/Autopilot posture, compliance strategy, app delivery strategy).
• Define the tenant-to-tenant device migration approach including sequencing of: identity readiness device readiness policy/app alignment cutover stabilisation.
• Establish factory-ready runbooks and quality gates for every major device migration activity (pre-checks, enrolment, policy assignment, app deployment, validation, rollback).
• Specify and operationalise use of migration tooling (e.g., PowerSyncPro or equivalent), including configuration patterns, telemetry, dashboards and failure triage.
• Define device cohort segmentation strategies (VIPs, executives, kiosks, shared devices, remote-only, high-risk apps, high-privilege users) and tailored migration patterns for each.
• Lead architecture decisions for Autopilot strategy, device provisioning, re-enrolment paths, device compliance re-baselining and post-move support.
• Define the security/compliance impact model (Conditional Access dependencies, compliance policies, device certificates, Defender integration, privileged access constraints).
• Create and govern the exception framework (what exceptions are allowed, evidence required, approval process, technical debt management).
• Act as final escalation point for device migration failures and systemic issues; drive root-cause elimination into improved standards/runbooks.
• Ensure evidence capture is audit-grade for each wave: readiness evidence, validation packs, known-issue logs, acceptance sign-offs.

Who You Are

Must Have:

• Proven delivery of tenant-to-tenant endpoint migration at enterprise scale (Intune + Windows), must be demonstrated with outcomes, not theory.
• Deep hands-on expertise in Microsoft Intune, Windows endpoint management, policy design, configuration profiles, compliance, app deployment and troubleshooting.
• Strong understanding of Microsoft Entra ID device identity, device registration/join states, device trust and Conditional Access device-based controls.
• Experience designing and running industrialised migration: runbooks, gates, telemetry-driven execution, shift handovers and repeatable factory patterns.
• Strong PowerShell/Graph troubleshooting mindset (bulk checks, readiness reporting, remediation scripting).
• Experience managing complex device estates (multi-region, multiple personas, varied network conditions, legacy constraints, heavy endpoint security tooling).
• Comfortable operating under pressure during cutover windows; able to lead war rooms and make safe, fast decisions.

Good to Have:

• Experience with PowerSyncPro specifically (or comparable endpoint migration tooling) including operational constraints and troubleshooting patterns.
• Knowledge of Defender for Endpoint integration, certificate-based auth scenarios, device-based access restrictions and endpoint DLP considerations.
• Experience with Windows 11 transition alongside tenant consolidation.

Interpersonal & Consulting Skills

• Direction-setter behaviour: can set standards, defend them with evidence and get adoption across teams.
• Calm under pressure; can lead escalation without drama and keep teams focused on outcomes.
• Strong stakeholder translation: can explain device risk/impact in business language without hand-waving.
• High quality bar: refuses unsafe shortcuts, insists on evidence and repeatability.
• Coaches engineers and senior SMEs: builds capability, doesn't hoard knowledge.
• Operates as one-team across onshore/offshore and across identity/security/app stakeholders.

Shift / Working Pattern

• This role operates within a three shift 24x7 Factory model. The specific rota will be confirmed, but shift handovers are mandatory and performance is measured on shift outcomes. Peak cutover windows may require schedule flexibility.