The Role

To achieve this, the Lead will define the target-state Entra application architecture for the consolidated tenant, covering the app registration strategy, enterprise app patterns, service principal ownership, consent strategy, and access governance approach. They will define the migration approach for the app estate, including discovery, classification based on criticality, mapping, the remediation backlog, validation approach, and cutover readiness gating. Additionally, they will create runbooks for factory execution, focusing on app registration recreation or realignment patterns, certificate and secret management patterns, permission replication, admin consent workflows, redirect URI handling, and SSO configuration patterns.

The role involves defining validation gates that encompass authentication success, token issuance behaviour, SSO functional checks, app-specific smoke tests, user access verification, and break-glass contingencies. Coordination with Identity, Exchange, Devices, and Power Platform or Power BI disciplines will be required for auth dependencies and service-to-service flows. Furthermore, they will own exception management for complex apps, addressing legacy SAML/OIDC, custom claims, non-standard IdP flows, third-party SaaS constraints, and hard-coded tenant IDs. Finally, they will establish operational reporting such as app readiness heatmaps, defect categories, top blockers,



and continuous improvement while acting as an escalation point for production-impacting app access issues during cutovers or hypercare, leading complex-case remediation, and standardising known fixes.

Required Technical and Qualified Experience:

- Proven delivery of tenant-to-tenant Entra app migration / app access remediation in production with real enterprise outcomes.

- Deep Entra ID experience: enterprise apps, app registrations, service principals, consent, permissions, authentication flows (SAML/OIDC/OAuth2).

- Strong understanding of Conditional Access impacts on app access and device trust.

- Experience building factory-grade runbooks, validation templates and evidence packs for app readiness and acceptance.

- Strong troubleshooting capability: auth failures, claims issues, consent failures, token problems, SSO misconfigurations.

Preferred Technical and Professional Experience:

- Experience with identity governance concepts (access reviews, lifecycle controls) where relevant to controlling app access at scale.

- Microsoft identity/security certifications (or equivalent proven delivery).

- Experience working with complex third-party SaaS ecosystems and enterprise integration patterns.

- SC 300 alignment.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 Solution Architect Entra Apps Migration (Gurugram)
🏢 Kyndryl
📍 Gurugram