The Role

The Role: You are the Entra Apps discipline Solution Architect responsible for ensuring that application access survives and stabilises through tenant-to-tenant consolidation. This includes enterprise applications, app registrations, service principals, permissions/consent, SSO configurations, token issuance impacts, conditional access dependencies and integration patterns.

This is a critical role because app access is where migrations go to die: if you break auth, you break the business. You will define the architecture blueprint and factory execution standards that ensure applications are discovered, remediated, validated and accepted with evidence before waves proceed.

Key Responsibilities:

- Define the target-state Entra application architecture for the consolidated tenant: app registration strategy, enterprise app patterns, service principal ownership, consent strategy, access governance approach.
- Define migration approach for app estate: discovery, classification (criticality), mapping, remediation backlog, validation approach and cutover readiness gating.
- Create runbooks for factory execution: app registration recreation/realignment patterns, certificate/secret management patterns, permission replication, admin consent workflows, redirect URI handling, SSO configuration patterns.
- Define validation gates: authentication success, token issuance behaviour, SSO functional checks, app-specific smoke tests, user access verification, break-glass contingencies.
- Coordinate with Identity/Exchange/Devices and Power Platform/Power BI disciplines for auth dependencies and service-to-service flows.
- Own exception management for complex apps (legacy SAML/OIDC, custom claims, non-standard IdP flows, third-party SaaS constraints, hard-coded tenant IDs).
- Establish operational reporting: app readiness heatmaps, defect categories, top blockers and continuous improvement.




- Act as escalation point for production-impacting app access issues during cutovers/hypercare. Lead complex-case remediation and standardise known fixes.

Who You Are

Must Have:

- Proven delivery of tenant-to-tenant Entra app migration / app access remediation in production with real enterprise outcomes.
- Deep Entra ID experience: enterprise apps, app registrations, service principals, consent, permissions, authentication flows (SAML/OIDC/OAuth2).
- Solid understanding of Conditional Access impacts on app access and device trust.
- Experience building factory-grade runbooks, validation templates and evidence packs for app readiness and acceptance.
- Strong troubleshooting capability: auth failures, claims issues, consent failures, token problems, SSO misconfigurations.

Good to Have:

- Experience with identity governance concepts (access reviews, lifecycle controls) where relevant to controlling app access at scale.
- Microsoft identity/security certifications (or equivalent proven delivery).
- Experience working with complex third-party SaaS ecosystems and enterprise integration patterns.
- SC 300 alignment.

Interpersonal Consulting Skills:

- High-stakes communication skills: can handle exec pressure when an app blocks a wave.
- Calm, structured escalation leadership and rapid triage behaviour.
- Strong negotiation and influencing: drives app owner participation and enforces readiness standards.
- Clear written communication: produces documentation others can execute without interpretation.

Shift / Working Pattern Notes:

This role operates within a three shift 24x7 Factory model. The specific rota will be confirmed, but shift handovers are mandatory and performance is measured on shift outcomes. Peak cutover windows may require schedule flexibility.

Disclaimer : This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 Solution Architect Entra Apps Migration (Tenant-to-Tenant) (Noida)
🏢 Kyndryl
📍 Noida