Foundation Solution Architect - Apple Devices & macOS (Tenant-to-Tenant Migration)

Who We Are

At Kyndryl, we run and reimagine the mission-critical technology systems that drive advantage for the world’s leading businesses.  We are at the heart of progress; with proven expertise and a continuous flow of AI-powered insight, enabling smarter decisions, faster innovation, and a lasting competitive edge. For our people—Kyndryls—that means doing purposeful work that powers human progress. Join us and experience a flexible, supportive environment where your well-being is prioritized and your potential can thrive.

The Role

Your responsibility is to design the migration-specific architecture that enables the programme to execute: how IRU, JAMF, Mosyle, Apple Business Manager, Automated Device Enrolment (ADE), Platform Single Sign-On (PSSO), Microsoft Entra ID, device trust, compliance controls, certificates, application readiness and operational tooling work together during the migration lifecycle.

You will translate discovery and pilot learnings into migration blueprints, integration designs, technical decision records, repeatable runbooks and validation gates that Scale and Factory teams can execute. The role requires a practitioner-architect who understands real Apple enterprise migration constraints: ADE assignment behaviour, supervision state, local account/user state implications, Platform SSO onboarding, Secure Token and FileVault considerations, certificate trust chains, configuration profile impacts, application packaging, Apple Silicon/Intel differences and the operational realities of migrating large, distributed Mac populations.

This is not a generic macOS administration or MDM engineering role. Candidates must be able to evidence production Apple/macOS migration architecture experience, including how migration tooling, identity integration, security posture, user experience and cutover execution were designed and validated.

Key Responsibilities:

• Design the Apple/macOS tenant-to-tenant migration architecture for the programme, ensuring it is practical for pilot, scale and factory execution.
• Define how IRU will be used within the migration lifecycle, including discovery inputs, migration sequencing, user/device state handling, exception treatment, reporting and operational handoff.
• Design the migration integration model across Apple Business Manager, ADE, IRU, Platform SSO, Microsoft Entra ID, Conditional Access, compliance controls and endpoint management tooling.
• Define migration-specific ADE patterns including device assignment flow, enrolment profile considerations, supervision assumptions, re-enrolment/re-provisioning paths and validation checkpoints.
• Develop Platform SSO migration patterns covering user onboarding, identity registration, local account behaviour, authentication resilience and user experience during tenant transition.
• Define migration considerations for Secure Token, Bootstrap Token, FileVault recovery key escrow/rotation, certificates, SCEP/PKI dependencies and device trust.
• Identify macOS configuration profile risks that may affect migration, including PPPC, System Extensions, Network Extensions, Login Items, certificates, security baselines and application controls.
• Define migration readiness, go/no-go, validation and rollback criteria for Apple/macOS cohorts, including VIP, developer, remote, shared and high-risk device personas.
• Produce migration architecture artefacts including HLDs, LLDs, migration integration designs, architecture decision records, runbooks, validation templates and known-issue patterns.
• Support pilots, migration rehearsals and cutover readiness reviews, incorporating lessons learned into updated migration patterns without assuming ownership of the long-term customer platform.
• Provide technical guidance to Scale and Factory teams where migration design, integration behaviour or Apple-specific constraints require architectural interpretation.
• Work with programme architecture, identity, security, endpoint, application and service transition teams to ensure Apple/macOS migration dependencies are understood, sequenced and evidenced.

Who You Are

You’re good at what you do and can demonstrate the experience to prove it. You bring a growth mindset, you stay focused on customer outcomes and you collaborate in an open, inclusive, “one team” way across global delivery organisations….

Must-Have (or equivalent experience)

• Production experience designing Apple/macOS migration architecture for Microsoft 365 tenant-to-tenant or directly comparable enterprise tenant transition programmes.
• Deep practical understanding of IRU or equivalent Apple/macOS migration tooling, including how tooling is integrated into discovery, migration execution, validation and operational reporting.
• Strong Apple Business Manager and ADE knowledge in migration contexts, including assignment flows, enrolment profile behaviour, supervision, device lifecycle constraints and re-provisioning implications.
• Strong Platform SSO knowledge, including Microsoft Entra integration, local account behaviour, authentication flows and user experience impacts during migration.
• Strong understanding of macOS security and identity dependencies relevant to migration: Secure Token, Bootstrap Token, FileVault, recovery key escrow, certificates, SCEP/PKI, Conditional Access and compliance evaluation.
• Experience identifying and designing around migration blockers created by configuration profiles, PPPC, System Extensions, Network Extensions, Login Items, security tools and application controls.
• Ability to design repeatable migration patterns for varied Mac personas such as executives, developers, remote workers, shared devices and high-risk application users.
• Proven ability to produce clear migration architecture artefacts: HLDs, LLDs, decision records, runbooks, readiness gates, validation criteria and exception patterns.
• Strong stakeholder engagement with architecture, security, identity, endpoint engineering, service transition and delivery teams in a complex migration programme.

Good-to-Have

• Jamf enterprise migration or coexistence experience where Jamf is part of the source, transition or legacy management landscape.
• Experience with Apple Silicon and Intel coexistence, Rosetta considerations, application packaging, notarisation and enterprise software deployment patterns.
• Experience with Declarative Device Management and modern macOS management models where relevant to migration readiness or target-state validation.
• Automation experience using Bash, Python, PowerShell, Microsoft Graph or MDM APIs for readiness checks, reporting, validation or remediation.
• Experience supporting large, multi-region enterprise migrations with strict governance, evidence capture, security controls and cutover discipline.
• Relevant Apple, Microsoft 365, identity/security or endpoint certifications, or equivalent proven delivery experience.

Interpersonal & Consulting Skills

• Credible Apple/macOS migration authority who can explain technical constraints clearly without overstating ownership or scope.
• Strong consulting mindset: frames options, trade-offs, assumptions, risks and recommended migration decisions.
• Evidence-led and practical: designs patterns that can actually be executed at scale, not theoretical architecture.
• Collaborative across customer, partner and internal teams; works through influence, clarity and strong documentation.
• Comfortable challenging unsafe migration assumptions using technical evidence and agreed programme governance.
• Able to translate Apple-specific migration complexity into language that identity, security, programme and service teams can act on.

Typical Deliverables / KPIs

• Apple/macOS migration architecture and integration design approved through programme governance.
• IRU migration approach documented with sequencing, validation, exception and rollback patterns.
• ADE, Platform SSO, Entra, compliance and security integration patterns documented for migration execution.
• Pilot migration outcomes translated into repeatable runbooks and quality gates for Scale and Factory teams.
• Reduction in migration defects caused by unclear Apple/macOS integration design or missed readiness dependencies.
• Evidence packs and validation criteria defined for Apple/macOS migration readiness, cutover and acceptance.
• Known-issue catalogue and remediation patterns maintained for recurring Apple/macOS migration blockers.

Working Pattern Notes

Primary UK business hours, with expected flexibility for architecture workshops, pilot events, readiness reviews, cutover planning and critical migration windows across regions.

This role is not a 24x7 factory shift role, but migration events may require early/late calls or occasional weekend support.

Being You

The “Kyn” in Kyndryl means kinship, which represents the strong bonds we have with each other, our customers and our communities. We focus on ensuring all Kyndryls feel included and we welcome people of all cultures, backgrounds, and experiences. Even if you don’t meet every requirement, we encourage you to apply. We believe in growth, and we’re excited to see what you can bring. At Kyndryl, employee feedback has told us that our number one driver of employee engagement is belonging. That sense of belonging — being a valued, respected, trusted member of the team — is fundamental to our culture and fueling great experiences for our customers. This dedication to welcoming everyone into our company means that Kyndryl gives you the ability to thrive and contribute to our culture of empathy and shared success. That’s The Kyndryl Way.

What You Can Expect

Your career with us isn’t just a job—it’s an adventure with purpose.  We offer a dynamic, hybrid-friendly culture that supports your well-being and empowers you to grow. Our Be Well programs are thoughtfully designed to support your financial, mental, physical, and social health—because we know that when you feel your best, you do your best.

From your very first day, you’ll dive into impactful work that powers the systems our customers rely on every day. You won’t just contribute—you’ll make a difference, tackling meaningful projects that sharpen your skills and fuel your growth.

We’re here to champion your journey. With powerful tools to chart your career path, personalized development goals aligned with your ambitions, and continuous feedback to keep you inspired and on track, you’ll have everything you need to thrive and evolve. You’ll develop in-demand skills to grow your career and achieve your ambitions with access to cutting-edge learning opportunities—from certifications with Microsoft, Google, and Amazon to coaching and hands-on experiences. And through it all, you’ll be part of a culture that values empathy, restless learning, and a devotion to shared success.

We want you to thrive here—and we’re committed to helping you do just that. Ready to make an impact? Join us and help shape what’s next.

Get Referred!

If you know someone that works at Kyndryl, when asked ‘How Did You Hear About Us’ during the application process, select ‘Employee Referral’ and enter your contact's Kyndryl email address.