Job Summary

As the Entra Apps Factory Shift Lead, you will lead on shift technical delivery for tenant to tenant transition of enterprise applications, app registrations and associated identity/access integrations that must be re established in the destination tenant. This discipline is core to successful workload migration because application authentication, authorisation, secrets/certificates and trust relationships must be recreated and validated to keep business services functioning through cutover waves. You will run a 24x7 factory model: managing backlogs, enforcing runbooks, coordinating with security/identity stakeholders and ensuring evidence capture for every app remediated.

Key Responsibilities

- Lead execution of Entra Apps migration/remediation runbooks during your shift, ensuring predictable throughput and quality gates.

- Own triage for application access failures post tenant transition (SSO misconfig, missing claims, certificate/secret issues, redirect URI mismatch, conditional access blocks).

- Coordinate recreation and validation of enterprise apps and app registrations in the target tenant, including keys/secrets/certs rotation and permissions re grant patterns where applicable.

- Manage cross tenant access considerations that support collaboration and transition states (where used), ensuring correct governance and safe configuration.

- Maintain shift backlog, prioritise by business criticality and cutover schedule and coordinate stakeholder validation where required.

- Drive evidence capture: configuration proof, test results, sign in validation, rollback notes and completion records suitable for audit/governance.

- Ensure operational handovers are crisp: open risks, high priority apps, dependencies and next actions clearly documented.





- Coordinate with Devices/Shared Data/Power Platform/Power BI teams to resolve identity and app dependencies impacting wave execution.

- Drive continuous improvement of runbooks, templates and test scripts to reduce time per app and minimise repeat defects.

- Escalate complex vendor application issues with complete diagnostic evidence and clear business impact.

Who You Are

Must Have (or equivalent experience)

- Delivered production tenant to tenant Entra Apps remediation (enterprise apps/app registrations) in your specialism, including cutover validation.

- Strong hands on expertise with Microsoft Entra ID application constructs: enterprise applications, app registrations, service principals, permissions/consent and token/claim concepts.

- Solid experience with secrets/certificates lifecycle, rotation planning and secure handling practices.

- Experience working with conditional access and cross tenant access settings where relevant and understanding how these can block or permit access during transition phases.

- Proven runbook discipline and evidence capture practice; comfortable operating in audited environments.

- Ability to lead delivery in a 24x7 three shift model, including formal handovers and accountable shift outcomes.

Good to Have

- SC 300 certification (or equivalent) and/or MS 102.

- Microsoft Graph/PowerShell automation experience to accelerate inventory,



recreation templates and validation checks.

- Experience with SSO standards and patterns (SAML/OIDC/OAuth) and federated integrations with third party SaaS vendors.

- Experience working with multi tenant organisations/collaboration constructs (B2B settings, controlled cross tenant relationships).

- Strong security mindset: least privilege, access reviews and configuration drift control.

Interpersonal Consulting Skills

- Structured, evidence driven leadership: avoids guesswork and enforces repeatability.

- Confident communicator with technical and non technical stakeholders; explains risk/impact clearly.

- Coaches engineers into consistent execution and strong operational habits (tickets, proof, testing).

- Calm under pressure during cutovers; leads triage with discipline and prioritisation.

- Strong dependency management behaviours; proactively removes blockers across disciplines.

- Treats application owners and business teams professionally; sets expectations and drives timely validation.

Typical Deliverables / KPIs

- Throughput: apps remediated/tested per shift vs plan.

- Defect rate: percentage of apps requiring rework after first validation.

- MTTR: time to restore access for critical apps during wave cutovers.

- Evidence capture: completeness of configuration proof and validation artefacts per app.

- SLA: cutover readiness achieved on time; escalations raised early with sufficient evidence.

Shift / Working Pattern Notes

- This role operates within a three shift 24x7 Factory model. The specific rota will be confirmed, but shift handovers are mandatory and performance is measured on shift outcomes. Peak cutover windows may require schedule flexibility.

📌 Senior Technical Consultant - Shift Lead(Entra Apps Tenant Migration) (Noida)
🏢 Kyndryl
📍 Noida