Foundation Solution Architect - Apple Devices & macOS (Tenant-to-Tenant Migration)

About this role

Who We Are

At Kyndryl, we run and reimagine the mission-critical technology systems that drive advantage for the world's leading businesses. We are at the heart of progress; with proven expertise and a continuous flow of AI-powered insight, enabling smarter decisions, faster innovation, and a lasting competitive edge. For our people-Kyndryls-that means doing purposeful work that powers human progress. Join us and experience a flexible, supportive environment where your well-being is prioritized and your potential can thrive.

The Role

Your responsibility is to design the migration-specific architecture that enables the programme to execute: how IRU, JAMF, Mosyle, Apple Business Manager, Automated Device Enrolment (ADE), Platform Single Sign-On (PSSO), Microsoft Entra ID, device trust, compliance controls, certificates, application readiness and operational tooling work together during the migration lifecycle.

You will translate discovery and pilot learnings into migration blueprints, integration designs, technical decision records, repeatable runbooks and validation gates that Scale and Factory teams can execute. The role requires a practitioner-architect who understands real Apple enterprise migration constraints: ADE assignment behaviour, supervision state, local account/user state implications, Platform SSO onboarding, Secure Token and FileVault considerations, certificate trust chains, configuration profile impacts, application packaging, Apple Silicon/Intel differences and the operational realities of migrating large, distributed Mac populations.

This is not a generic macOS administration or MDM engineering role. Candidates must be able to evidence production Apple/macOS migration architecture experience, including how migration tooling, identity integration, security posture, user experience and cutover execution were designed and validated.

Key Responsibilities:

Design the Apple/macOS tenant-to-tenant migration architecture for the programme, ensuring it is practical for pilot, scale and factory execution. Define how IRU will be used within the migration lifecycle, including discovery inputs, migration sequencing, user/device state handling, exception treatment, reporting and operational handoff. Design the migration integration model across Apple Business Manager, ADE, IRU, Platform SSO, Microsoft Entra ID, Conditional Access, compliance controls and endpoint management tooling. Define migration-specific ADE patterns including device assignment flow, enrolment profile considerations, supervision assumptions, re-enrolment/re-provisioning paths and validation checkpoints. Develop Platform SSO migration patterns covering user onboarding, identity registration, local account behaviour, authentication resilience and user experience during tenant transition. Define migration considerations for Secure Token, Bootstrap Token, FileVault recovery key escrow/rotation, certificates, SCEP/PKI dependencies and device trust. Identify macOS configuration profile risks that may affect migration, including PPPC, System Extensions, Network Extensions, Login Items, certificates, security baselines and application controls. Define migration readiness, go/no-go, validation and rollback criteria for Apple/macOS cohorts, including VIP, developer, remote, shared and high-risk device personas. Produce migration architecture artefacts including HLDs, LLDs, migration integration designs, architecture decision records, runbooks, validation templates and known-issue patterns. Support pilots, migration rehearsals and cutover readiness reviews, incorporating lessons learned into updated migration patterns without assuming ownership of the long-term customer platform. Provide technical guidance to Scale and Factory teams where migration design, integration behaviour or Apple-specific constraints require architectural interpretation. Work with programme architecture, identity, security, endpoint, application and service transition teams to ensure Apple/macOS migration dependencies are understood, sequenced and evidenced.

Who You Are

You're good at what you do and can demonstrate the experience to prove it. You bring a growth mindset, you stay focused on customer outcomes and you collaborate in an open, inclusive, "one team" way across global delivery organisations....

Must-Have (or equivalent experience)

Production experience designing Apple/macOS migration architecture for Microsoft 365 tenant-to-tenant or directly comparable enterprise tenant transition programmes. Deep practical understanding of IRU or equivalent Apple/macOS migration tooling, including how tooling is integrated into discovery, migration execution, validation and operational reporting. Strong Apple Business Manager and ADE knowledge in migration contexts, including assignment flows, enrolment profile behaviour, supervision, device lifecycle constraints and re-provisioning implications. Strong Platform SSO knowledge, including Microsoft Entra integration, local account behaviour, authentication flows and user experience impacts during migration. Strong understanding of macOS security and identity dependencies relevant to migration: Secure Token, Bootstrap Token, FileVault, recovery key escrow, certificates, SCEP/PKI, Conditional Access and compliance evaluation. Experience identifying and designing around migration blockers created by configuration profiles, PPPC, System Extensions, Network Extensions, Login Items, security tools and application controls. Ability to design repeatable migration patterns for varied Mac personas such as executives, developers, remote workers, shared devices and high-risk application users. Proven ability to produce clear migration architecture artefacts: HLDs, LLDs, decision records, runbooks, readiness gates, validation criteria and exception patterns. Strong stakeholder engagement with architecture, security, identity, endpoint engineering, service transition and delivery teams in a complex migration…