Foundation Solution Architect – Apple Devices & macOS (Tenant-to-Tenant Migration)

The Role

Design the migration-specific architecture that enables the programme to execute a tenant-to-tenant Apple/macOS migration. Translate discovery and pilot learnings into migration blueprints, integration designs, technical decision records, repeatable runbooks and validation gates that Scale and Factory teams can execute.

Key Responsibilities

• Design the Apple/macOS tenant-to-tenant migration architecture for the programme, ensuring it is practical for pilot, scale and factory execution.
• Define how IRU will be used within the migration lifecycle, including discovery inputs, migration sequencing, user/device state handling, exception treatment, reporting and operational handoff.
• Design the migration integration model across Apple Business Manager, ADE, IRU, Platform SSO, Microsoft Entra ID, Conditional Access, compliance controls and endpoint management tooling.
• Define migration-specific ADE patterns including device assignment flow, enrolment profile considerations, supervision assumptions, re-enrolment/re-provisioning paths and validation checkpoints.
• Develop Platform SSO migration patterns covering user onboarding, identity registration, local account behaviour, authentication resilience and user experience during tenant transition.
• Define migration considerations for Secure Token, Bootstrap Token, FileVault recovery key escrow/rotation, certificates, SCEP/PKI dependencies and device trust.
• Identify macOS configuration profile risks that may affect migration, including PPPC, System Extensions, Network Extensions, Login Items, certificates, security baselines and application controls.
• Define migration readiness, go/no-go, validation and rollback criteria for Apple/macOS cohorts, including VIP, developer, remote, shared and high-risk device personas.
• Produce migration architecture artefacts including HLDs, LLDs, migration integration designs, architecture decision records, runbooks, validation templates and known-issue patterns.
• Support pilots, migration rehearsals and cutover readiness reviews, incorporating lessons learned into updated migration patterns without assuming ownership of the long-term customer platform.
• Provide technical guidance to Scale and Factory teams where migration design, integration behaviour or Apple-specific constraints require architectural interpretation.
• Work with programme architecture, identity, security, endpoint, application and service transition teams to ensure Apple/macOS migration dependencies are understood, sequenced and evidenced.

Qualifications

Must-Have

• Production experience designing Apple/macOS migration architecture for Microsoft 365 tenant-to-tenant or directly comparable enterprise tenant transition programmes.
• Deep practical understanding of IRU or equivalent Apple/macOS migration tooling, including how tooling is integrated into discovery, migration execution, validation and operational reporting.
• Strong Apple Business Manager and ADE knowledge in migration contexts, including assignment flows, enrolment profile behaviour, supervision, device lifecycle constraints and re-provisioning implications.
• Strong Platform SSO knowledge, including Microsoft Entra integration, local account behaviour, authentication flows and user experience impacts during migration.
• Strong understanding of macOS security and identity dependencies relevant to migration: Secure Token, Bootstrap Token, FileVault, recovery key escrow, certificates, SCEP/PKI, Conditional Access and compliance evaluation.
• Experience identifying and designing around migration blockers created by configuration profiles, PPPC, System Extensions, Network Extensions, Login Items, security tools and application controls.
• Ability to design repeatable migration patterns for varied Mac personas such as executives, developers, remote workers, shared devices and high-risk application users.
• Proven ability to produce clear migration architecture artefacts: HLDs, LLDs, decision records, runbooks, readiness gates, validation criteria and exception patterns.
• Strong stakeholder engagement with architecture, security, identity, endpoint engineering, service transition and delivery teams in a complex migration programme.

Good‑to‑Have

• Jamf enterprise migration or coexistence experience where Jamf is part of the source, transition or legacy management landscape.
• Experience with Apple Silicon and Intel coexistence, Rosetta considerations, application packaging, notarisation and enterprise software deployment patterns.
• Experience with Declarative Device Management and modern macOS management models where relevant to migration readiness or target-state validation.
• Automation experience using Bash, Python, PowerShell, Microsoft Graph or MDM APIs for readiness checks, reporting, validation or remediation.
• Experience supporting large, multi-region enterprise migrations with strict governance, evidence capture, security controls and cutover discipline.
• Relevant Apple, Microsoft 365, identity/security or endpoint certifications, or equivalent proven delivery experience.

Interpersonal & Consulting Skills

• Credible Apple/macOS migration authority who can explain technical constraints clearly without overstating ownership or scope.
• Strong consulting mindset: frames options, trade-offs, assumptions, risks and recommended migration decisions.
• Evidence-led and practical: designs patterns that can actually be executed at scale, not theoretical architecture.
• Collaborative across customer, partner and internal teams; works through influence, clarity and strong documentation.
• Comfortable challenging unsafe migration assumptions using technical evidence and agreed programme governance.
• Able to translate Apple-specific migration complexity into language that identity, security, programme and service teams can act on.

Typical Deliverables / KPIs

• Apple/macOS migration architecture and integration design approved through programme governance.
• IRU migration approach documented with sequencing, validation, exception and rollback patterns.
• ADE, Platform SSO, Entra, compliance and security integration patterns documented for migration execution.
• Pilot migration outcomes translated into repeatable runbooks and quality gates for Scale and Factory teams.
• Reduction in migration defects caused by unclear Apple/macOS integration design or missed readiness dependencies.
• Evidence packs and validation criteria defined for Apple/macOS migration readiness, cutover and acceptance.
• Known-issue catalogue and remediation patterns maintained for recurring Apple/macOS migration blockers.

Working Pattern Notes

Primary UK business hours, with expected flexibility for architecture workshops, pilot events, readiness reviews, cutover planning and critical migration windows across regions. This role is not a 24/7 factory shift role, but migration events may require early/late calls or occasional weekend support.

#J-18808-Ljbffr…