The Role

As the owner of the target state endpoint architecture for the consolidated tenant spanning the join model, identity/device trust, Intune/Autopilot posture, compliance strategy, and app delivery you will define the tenant-to-tenant device migration approach through the structured sequencing of identity readiness, device readiness, policy/app alignment, cutover, and stabilization. You will establish factory-ready runbooks and quality gates for every major device migration activity (covering pre-checks, enrollment, policy assignment, app deployment, validation, and rollback) while specifying and operationalizing the use of migration tooling, such as PowerSyncPro or its equivalent, including configuration patterns, telemetry, dashboards, and failure triage. Additionally, you will define device cohort segmentation strategies for VIPs, executives, kiosks, shared devices, remote-only users, high-risk apps, and high-privilege users along with tailored migration patterns for each, while leading architectural decisions for the Autopilot strategy, device provisioning, re-enrollment paths, device compliance re-baselining, and post-move support. Finally, you will define the security and compliance impact model regarding Conditional Access dependencies, compliance policies, device certificates, Defender integration, and privileged access constraints, create and govern an exception framework for managing allowed exceptions, evidence, approvals, and technical debt, act as the final escalation point for systemic issues to drive root-cause elimination back into improved standards, and ensure the capture of audit-grade evidence for each wave, including readiness evidence, validation packs, known-issue logs, and acceptance sign-offs.

Required Technical and Professional Experience:

- 10+ years of experience in delivery of tenant-to-tenant endpoint migration at enterprise scale (Intune + Windows), demonstrated with outcomes, not theory.

- Deep hands-on expertise in Microsoft Intune, Windows endpoint management,



policy design, configuration profiles, compliance, app deployment, and troubleshooting.

- Strong understanding of Microsoft Entra ID device identity, device registration/join states, device trust, and Conditional Access device-based controls.

- Experience designing and running industrialized migration: runbooks, gates, telemetry-driven execution, shift handovers, and repeatable factory patterns.

- Strong PowerShell/Graph troubleshooting mindset (bulk checks, readiness reporting, remediation scripting).

- Experience managing complex device estates (multi-region, multiple personas, diverse network conditions, legacy constraints, heavy endpoint security tooling).

- Comfortable operating under pressure during cutover windows; able to lead war rooms and make safe, fast decisions.

Preferred Technical and Professional Experience:

- Experience with PowerSyncPro specifically (or comparable endpoint migration tooling) including operational constraints and troubleshooting patterns.

- Knowledge of Defender for Endpoint integration, certificate-based auth scenarios, device-based access restrictions, and endpoint DLP considerations.

- Experience with Windows 11 transition alongside tenant consolidation.

- Direction-setter behavior: can set standards, defend them with evidence, and get adoption across teams.

- Calm under pressure; can lead escalation without drama and keep teams focused on outcomes.

- Strong stakeholder translation: can explain device risk/impact in business language without hand-waving.

- High quality bar: refuses unsafe shortcuts, insists on evidence and repeatability.

- Coaches engineers and senior SMEs: builds capability, doesn't hoard knowledge.

- Operates as one-team across onshore/offshore and across identity/security/app stakeholders.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 Solution Architect Devices / Endpoint Migration (Mumbai)
🏢 Kyndryl
📍 Mumbai