Senior Technical Consultant - Shift Lead (Entra Apps Tenant Migration)

Who We Are At Kyndryl, we run and reimagine the mission-critical technology systems that drive advantage for the world's leading businesses. We are at the heart of progress; with proven expertise and a continuous flow of AI-powered insight, enabling smarter decisions, faster innovation, and a lasting competitive edge. For our people-Kyndryls-that means doing purposeful work that powers human progress. Join us and experience a flexible, supportive environment where your well-being is prioritized and your potential can thrive. The Role The Role: As the Entra Apps Factory Shift Lead, you will lead on‑shift technical delivery for tenant‑to‑tenant transition of enterprise applications, app registrations and associated identity/access integrations that must be re‑established in the destination tenant. This discipline is core to successful workload migration because application authentication, authorisation, secrets/certificates and trust relationships must be recreated and validated to keep business services functioning through cutover waves. You will run a 24x7 factory model: managing backlogs, enforcing runbooks, coordinating with security/identity stakeholders and ensuring evidence capture for every app remediated. Key Responsibilities: - Lead execution of Entra Apps migration/remediation runbooks during your shift, ensuring predictable throughput and quality gates. - Own triage for application access failures post‑tenant transition (SSO misconfig, missing claims, certificate/secret issues, redirect URI mismatch, conditional access blocks). - Coordinate recreation and validation of enterprise apps and app registrations in the target tenant, including keys/secrets/certs rotation and permissions re‑grant patterns where applicable. - Manage cross‑tenant access considerations that support collaboration and transition states (where used), ensuring correct governance and safe configuration. - Maintain shift backlog, prioritise by business criticality and cutover schedule and coordinate stakeholder validation where required. - Drive evidence capture: configuration proof, test results, sign‑in validation, rollback notes and completion records suitable for audit/governance. - Ensure operational handovers are crisp: open risks, high‑priority apps, dependencies and next actions clearly documented. - Coordinate with Devices/Shared Data/Power Platform/Power BI teams to resolve identity and app dependencies impacting wave execution. - Drive continuous improvement of runbooks, templates and test scripts to reduce time per app and minimise repeat defects. - Escalate complex vendor application issues with complete diagnostic evidence and clear business impact. Who You Are Must‑Have (or equivalent experience): - Delivered production tenant‑to‑tenant Entra Apps remediation (enterprise apps/app registrations) in your specialism, including cutover validation. - Strong hands‑on expertise with Microsoft Entra ID application constructs: enterprise applications, app registrations, service principals, permissions/consent and token/claim concepts. - Strong experience with secrets/certificates lifecycle, rotation planning and secure handling practices. - Experience working with conditional access and cross‑tenant access settings where relevant and understanding how these can block or permit access during transition phases. - Proven runbook discipline and evidence capture practice; comfortable operating in audited environments. - Ability to lead delivery in a 24x7 three‑shift model , including formal handovers and accountable shift outcomes. Good‑to‑Have: - SC‑300 certification (or equivalent) and/or MS‑102. - Microsoft Graph/PowerShell automation experience to accelerate inventory, recreation templates and validation checks. - Experience with SSO standards and patterns (SAML/OIDC/OAuth) and federated integrations with third‑party SaaS vendors. - Experience working with multi‑tenant organisations/collaboration constructs (B2B settings, controlled cross‑tenan