About the role
Who We Are
At Kyndryl, we run and reimagine the mission-critical technology systems that drive advantage for the world's leading businesses. We are at the heart of progress; with proven expertise and a continuous flow of AI-powered insight, enabling smarter decisions, faster innovation, and a lasting competitive edge. For our people-Kyndryls-that means doing purposeful work that powers human progress. Join us and experience a flexible, supportive environment where your well-being is prioritized and your potential can thrive.
The Role
The Role
As the Entra Apps Factory Shift Lead, you will lead on‑shift technical delivery for tenant‑to‑tenant transition of enterprise applications, app registrations and associated identity/access integrations that must be re‑established in the destination tenant. This discipline is core to successful workload migration because application authentication, authorisation, secrets/certificates and trust relationships must be recreated and validated to keep business services functioning through cutover waves. You will run a 24x7 factory model: managing backlogs, enforcing runbooks, coordinating with security/identity stakeholders and ensuring evidence capture for every app remediated.
Key Responsibilities
- Lead execution of Entra Apps migration/remediation runbooks during your shift, ensuring predictable throughput and quality gates.
- Own triage for application access failures post‑tenant transition (SSO misconfig, missing claims, certificate/secret issues, redirect URI mismatch, conditional access blocks).
- Coordinate recreation and validation of enterprise apps and app registrations in the target tenant, including keys/secrets/certs rotation and permissions re‑grant patterns where applicable.
- Manage cross‑tenant access considerations that support collaboration and transition states (where used), ensuring correct governance and safe configuration.
- Maintain shift backlog, prioritise by business criticality and cutover schedule and coordinate stakeholder validation where required.
- Drive evidence capture: configuration proof, test results, sign‑in validation, rollback notes and completion records suitable for audit/governance.
- Ensure operational handovers are crisp: open risks, high‑priority apps, dependencies and next actions clearly documented.
- Coordinate with Devices/Shared Data/Power Platform/Power BI teams to resolve identity and app dependencies impacting wave execution.
- Drive continuous improvement of runbooks, templates and test scripts to reduce time per app and minimise repeat defects.
- Escalate complex vendor application issues with complete diagnostic evidence and clear business impact.
Who You Are
Must‑Have (or equivalent experience)
- Delivered production tenant‑to‑tenant Entra Apps remediation (enterprise apps/app registrations) in your specialism, including cutover validation.
- Strong hands‑on expertise with Microsoft Entra ID application constructs: enterprise applications, app registrations, service principals, permissions/consent and token/claim concepts.
- Strong experience with secrets/certificates lifecycle, rotation planning and secure handling practices.
- Experience working with conditional access and cross‑tenant access settings where relevant and understanding how these can block or permit access during transition phases.
- Proven runbook discipline and evidence capture practice; comfortable operating in audited environments.
- Ability to lead delivery in a 24x7 three‑shift model, including formal handovers and accountable shift outcomes.
Good‑to‑Have
- SC‑300 certification (or equivalent) and/or MS‑102.
- Microsoft Graph/PowerShell automation experience to accelerate inventory, recreation templates and validation checks.
- Experience with SSO standards and patterns (SAML/OIDC/OAuth) and federated integrations with third‑party SaaS vendors.
- Experience working with multi‑tenant organisations/collaboration constructs (B2B settings, controlled cross‑tenant relationships).
- Strong security mindset: least privilege, access reviews and configuration drift control.
Interpersonal & Consulting Skills
- Structured, evidence‑driven leadership: avoids guesswork and enforces repeatability.
- Confident communicator with technical and non‑technical stakeholders; explains risk/impact clearly.
- Coaches engineers into consistent execution and strong operational habits (tickets, proof, testing).
- Calm under pressure during cutovers; leads triage with discipline and prioritisation.
- Strong dependency management behaviours; proactively removes blockers across disciplines.
- Treats application owners and business teams professionally; sets expectations and drives timely validation.
Typical Deliverables / KPIs
- Throughput: apps remediated/tested per shift vs plan.
- Defect rate: percentage of apps requiring rework after first validation.
- MTTR: time to restore access for critical apps during wave cutovers.
- Evidence capture: completeness of configuration proof and validation artefacts per app.
- SLA: cutover readiness achieved on time; escalations raised early with sufficient evidence.
Shift / Working Pattern Notes
- This role operates within a three‑shift 24x7 Factory model. The specific rota will be confirmed, but shift handovers are mandatory and performance is measured on shift outcomes. Peak cutover windows may require schedule flexibility.
Being You
The "Kyn" in Kyndryl means kinship, which represents the strong bonds we have with each other, our customers and our communities. We focus on ensuring all Kyndryls feel included and we welcome people of all cultures, backgrounds, and experiences. Even if you don't meet every requirement, we encourage you to apply. We believe in growth, and we're excited to see what you can bring. At Kyndryl, employee feedback has told us that our number one driver of employee engagement is belonging. That sense of belonging - being a valued, respected, trusted member of the team - is fundamental to our culture and fueling great experiences for our customers. This dedication to welcoming everyone into our company means that Kyndryl gives you the ability to thrive and contribute to our culture of empathy and shared success. That's The Kyndryl Way.
What You Can Expect
Your career with us isn't just a job-it's an adventure with purpose. We offer a dynamic, hybrid-friendly culture that supports your well-being and empowers you to grow. Our Be Well programs are thoughtfully designed to support your financial, mental, physical, and social health-because we know that when you feel your best, you do your best.
From your very first day, you'll dive into impactful work that powers the systems our customers rely on every day. You won't just contribute-you'll make a difference, tackling meaningful projects that sharpen your skills and fuel your growth.
We're here to champion your journey. With powerful tools to chart your career path, personalized development goals aligned with your ambitions, and continuous feedback to keep you inspired and on track, you'll have everything you need to thrive and evolve. You'll develop in-demand skills to grow your career and achieve your ambitions with access to cutting-edge learning opportunities-from certifications with Microsoft, Google, and Amazon to coaching and hands-on experiences. And through it all, you'll be part of a culture that values empathy, restless learning, and a devotion to shared success.
We want you to thrive here-and we're committed to helping you do just that. Ready to make an impact? Join us and help shape what's next.
Get Referred!
If you know someone that works at Kyndryl, when asked 'How Did You Hear About Us' during the application process, select 'Employee Referral' and enter your contact's Kyndryl email address.