As an Entra Apps Migration Engineer, you will execute runbooks to recreate and validate application identity configurations in the destination tenant, supporting enterprise apps/app registrations, secrets/certificates rotation, permissions/consent tasks and structured testing. You will handle repeatable tasks at pace, maintain strong evidence capture and support incident triage during cutovers. You will work within a 24x7 shift model and contribute to predictable throughput and low defect rates across application waves.
Responsibilities
- Execute application remediation runbooks: recreate app configurations in the target tenant, apply required settings and perform validation testing.
- Support secrets/certificates activities: generate/rotate secrets/certs, update configurations and validate authentication flows.
- Run structured tests for SSO and app access; document outcomes and attach evidence.
- Triage and resolve standard issues using playbooks; escalate complex failures with complete diagnostics.
- Maintain excellent ticket hygiene: actions taken, timestamps, configuration proof and closure notes.
- Contribute to shift handovers with clear notes on open items, risks and next steps.
- Support inventory and reporting tasks (app lists, status tracking, defect categories) as required.
- Provide hypercare support during and after cutover waves, resolving access issues rapidly.
Who You Are
Must-Have (or equivalent experience):
- Delivered tenant-to-tenant Entra Apps remediation work in production (hands-on) within the Entra Apps specialism.
- Strong working knowledge of Microsoft Entra application constructs (enterprise apps, app registrations, permissions/consent basics).
- Comfortable with secrets/certificates handling and secure operational practices.
- Strong runbook discipline and evidence capture habits suitable for audited environments.
- Able to work in shifts with formal handovers and SLA-driven queues.
- Transparent technical documentation capability for tickets, escalation templates and handovers.
Good-to-Have:
- SC-300 (or equivalent) and/or Microsoft Graph/PowerShell automation skills.
- Familiarity with SAML/OIDC/OAuth and common SSO troubleshooting patterns.
- Exposure to cross-tenant access settings and B2B collaboration constructs in multi-tenant operating models.
- Strong security mindset (least privilege, configuration control, change discipline).
Interpersonal Consulting Skills
- Reliable execution and attention to detail; avoids undocumented tweaks.
- Proactive escalation behaviour: flags risks early with evidence and suggested options.
- Clear communicator in handovers; leaves work in a clean, actionable state.
- Collaborative with peers across shifts; supports team learning by sharing patterns.
- Comfortable working to time-bounded cutover windows whilst maintaining standards.
- Professional client behaviour: respectful, security-aware and outcome-focused.
Typical Deliverables / KPIs
- Throughput: apps completed/tested per shift vs target.
- Defect rate: rework volume and preventable errors.
- MTTR: time to resolve standard access failures.
- Evidence capture: completeness of configuration proof and test results.
- SLA: adherence to cutover schedule and ticket ageing targets.
Shift / Working Pattern Notes
This role operates within a three-shift 24x7 Factory model. The specific rota will be confirmed, but shift handovers are mandatory and performance is measured on shift outcomes. Peak cutover windows may require schedule flexibility.
Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.