About the Role
Design the migration-specific architecture that enables the programme to execute, translating discovery and pilot learnings into migration blueprints, integration designs, and repeatable runbooks. This role requires a practitioner-architect with deep understanding of Apple enterprise migration constraints and production experience in designing Apple/macOS migration architecture.
Responsibilities
- Design the Apple/macOS tenant-to-tenant migration architecture for the programme, ensuring it is practical for pilot, scale and factory execution.
- Define how IRU will be used within the migration lifecycle, including discovery inputs, migration sequencing, user/device state handling, exception treatment, reporting and operational handoff.
- Design the migration integration model across Apple Business Manager, ADE, IRU, Platform SSO, Microsoft Entra ID, Conditional Access, compliance controls and endpoint management tooling.
- Define migration-specific ADE patterns including device assignment flow, enrolment profile considerations, supervision assumptions, re-enrolment/re-provisioning paths and validation checkpoints.
- Develop Platform SSO migration patterns covering user onboarding, identity registration, local account behaviour, authentication resilience and user experience during tenant transition.
- Define migration considerations for Secure Token, Bootstrap Token, FileVault recovery key escrow/rotation, certificates, SCEP/PKI dependencies and device trust.
- Identify macOS configuration profile risks that may affect migration, including PPPC, System Extensions, Network Extensions, Login Items, certificates, security baselines and application controls.
- Define migration readiness, go/no-go, validation and rollback criteria for Apple/macOS cohorts, including VIP, developer, remote, shared and high-risk device personas.
- Produce migration architecture artefacts including HLDs, LLDs, migration integration designs, architecture decision records, runbooks, validation templates and known-issue patterns.
- Support pilots, migration rehearsals and cutover readiness reviews, incorporating lessons learned into updated migration patterns without assuming ownership of the long-term customer platform.
- Provide technical guidance to Scale and Factory teams where migration design, integration behaviour or Apple-specific constraints require architectural interpretation.
- Work with programme architecture, identity, security, endpoint, application and service transition teams to ensure Apple/macOS migration dependencies are understood, sequenced and evidenced.
Requirements
- Production experience designing Apple/macOS migration architecture for Microsoft 365 tenant-to-tenant or directly comparable enterprise tenant transition programmes.
- Deep practical understanding of IRU or equivalent Apple/macOS migration tooling, including how tooling is integrated into discovery, migration execution, validation and operational reporting.
- Strong Apple Business Manager and ADE knowledge in migration contexts, including assignment flows, enrolment profile behaviour, supervision, device lifecycle constraints and re-provisioning implications.
- Strong Platform SSO knowledge, including Microsoft Entra integration, local account behaviour, authentication flows and user experience impacts during migration.
- Strong understanding of macOS security and identity dependencies relevant to migration: Secure Token, Bootstrap Token, FileVault, recovery key escrow, certificates, SCEP/PKI, Conditional Access and compliance evaluation.
- Experience identifying and designing around migration blockers created by configuration profiles, PPPC, System Extensions, Network Extensions, Login Items, security tools and application controls.
- Ability to design repeatable migration patterns for varied Mac personas such as executives, developers, remote workers, shared devices and high-risk application users.
- Proven ability to produce clear migration architecture artefacts: HLDs, LLDs, decision records, runbooks, readiness gates, validation criteria and exception patterns.
- Strong stakeholder engagement with architecture, security, identity, endpoint engineering, service transition and delivery teams in a complex migration programme.
Skills
- Apple enterprise migration
- IRU
- JAMF
- Mosyle
- Apple Business Manager
- Automated Device Enrolment (ADE)
- Platform Single Sign-On (PSSO)
- Microsoft Entra ID
- Device trust
- Compliance controls
- Certificates
- Application readiness
- Operational tooling
- Migration blueprints
- Integration designs
- Technical decision records
- Repeatable runbooks
- Validation gates
- Scale and Factory teams
- macOS administration
- MDM engineering
- Microsoft 365 tenant-to-tenant migration
- Enterprise tenant transition
- Discovery
- Migration execution
- Validation
- Operational reporting
- Enrolment profile behaviour
- Supervision
- Device lifecycle constraints
- Re-provisioning
- Authentication flows
- User experience
- macOS security
- Identity dependencies
- Secure Token
- Bootstrap Token
- FileVault
- Recovery key escrow
- SCEP/PKI
- Conditional Access
- Compliance evaluation
- Configuration profiles
- PPPC
- System Extensions
- Network Extensions
- Login Items
- Security tools
- Application controls
- Mac personas
- HLDs
- LLDs
- Architecture decision records
- Readiness gates
- Validation criteria
- Exception patterns
- Stakeholder engagement
- Jamf enterprise migration
- Jamf coexistence
- Apple Silicon
- Intel coexistence
- Rosetta
- Application packaging
- Notarisation
- Enterprise software deployment
- Declarative Device Management
- Modern macOS management
- Bash
- Python
- PowerShell
- Microsoft Graph
- MDM APIs
- Readiness checks
- Reporting
- Remediation
- Multi-region enterprise migrations
- Governance
- Evidence capture
- Security controls
- Cutover discipline
- Apple certifications
- Microsoft 365 certifications
- Identity/security certifications
- Endpoint certifications
- Consulting
- Stakeholder management
- Technical writing
- Collaboration
- Influence
- Clarity
- Documentation
- Risk assessment
- Problem-solving
Location
- UK
Work Type
- Hybrid
- Full-time
Experience Level
- Practitioner-architect
- Production experience
Benefits
- Flexible, supportive environment
- Well-being is prioritized
- Potential can thrive
- Be Well programs (financial, mental, physical, social health)
- Impactful work
- Career path tools
- Personalized development goals
- Continuous feedback
- In-demand skills development
- Cutting-edge learning opportunities
- Certifications (Microsoft, Google, Amazon)
- Coaching
- Hands-on experiences
About the Company
- Kyndryl runs and reimagines mission-critical technology systems that drive advantage for leading businesses.
- Kyndryl is at the heart of progress with proven expertise and AI-powered insight, enabling smarter decisions, faster innovation, and a lasting competitive edge.
- Kyndryl focuses on ensuring all Kyndryls feel included and welcomes people of all cultures, backgrounds, and experiences.
- Kyndryl believes in growth and is excited to see what candidates can bring.
- Kyndryl's culture of empathy and shared success is fueled by a sense of belonging.
- Kyndryl offers a dynamic, hybrid-friendly culture that supports well-being and empowers growth.
- Kyndryl champions careers through powerful tools, personalized development goals, and continuous feedback.
- Kyndryl is committed to helping employees thrive and evolve.
- Kyndryl values empathy, restless learning, and a devotion to shared success.
- Kyndryl achieves progress the world depends on, with purpose.
- Kyndryl is committed to sustainable progress for customers and supporting communities.
Equal Opportunity
- We focus on ensuring all Kyndryls feel included and we welcome people of all cultures, backgrounds, and experiences.
- Even if you don’t meet every requirement, we encourage you to apply.
- We believe in growth, and we’re excited to see what you can bring.
- That sense of belonging — being a valued, respected, trusted member of the team — is fundamental to our culture and fueling great experiences for our customers.
- This dedication to welcoming everyone into our company means that Kyndryl gives you the ability to thrive and contribute to our culture of empathy and shared success.
- All of you is what we want. And what we need.
