IAM Support Engineer, IT Management

HelloFresh is a global technology company with the HelloTech team of over 1000 people based in Warsaw, building digital products that power food experiences and supply chain for millions of customers across multiple markets.

• Hands-on experience with Microsoft Entra ID including user/group management, enterprise application registration, access governance, and PIM.
• Proven ability to troubleshoot identity lifecycle issues in an automated provisioning environment.
• Practical experience with federation protocols: SAML, OAuth 2.0, OpenID Connect, including SSO and SCIM configuration.
• Experience administering MFA and modern authentication methods.
• Ability to read and analyze Sign-in, Audit, and Provisioning Logs to identify root causes.
• Scripting skills in Python, Graph API, and PowerShell; willingness to develop these further on the job.
• Clear and adaptable communication skills for conveying complex IAM concepts.
• Willingness to use AI tools to enhance troubleshooting, scripting, and documentation processes.

• Resolve identity lifecycle issues including provisioning failures and access anomalies in the automated Joiner/Mover/Leaver platform.
• Own end-to-end application onboarding, configuring SSO protocols (SAML, OIDC), claim mapping, and automated user provisioning via SCIM into Microsoft Entra ID.
• Administer MFA and modern authentication methods such as Authenticator app, Passwordless, and hardware security keys.
• Manage Privileged Identity Management (PIM) tasks including role activation requests and access reviews.
• Investigate sign-in anomalies and access failures, producing compliance reports and identity dashboards.
• Identify recurring manual tasks and propose automation improvements in collaboration with the Senior IAM Engineer.
• Act as a technical bridge between L1 support and Senior IAM Engineer, ensuring thorough process documentation.

Please be informed that the data controller is HelloFresh SE, Prinzenstrasse 89, 10969 Berlin, Germany. Data will be processed for recruitment purposes with rights of data access, correction, and deletion. Provision of mandatory data is required by law. Consent can be withdrawn anytime. Recipients include Just Join IT and other entities involved in recruitment processing.