IAM Support Engineer, IT Management

HelloFresh's HelloTech organisation is a global technology backbone with more than 1000 people that builds the digital products supporting HelloFresh's end-to-end food experience, including meal kits, ready-to-eat meals, pet food, and premium meat & seafood. HelloTech operates autonomous, cross-functional alliances owning specific products or domains, working with modern tech stacks and international teams to improve customer food ordering experiences across multiple markets.

• Hands-on experience with Microsoft Entra ID, including user/group management, enterprise application registration, access governance, and PIM.
• Proven ability to troubleshoot identity lifecycle issues in automated provisioning environments.
• Hands-on experience with federation protocols: SAML, OAuth 2.0, and OpenID Connect, including configuring SSO and SCIM integrations.
• Experience administering MFA and modern authentication methods including Authenticator app, Passwordless, and hardware security keys.
• Ability to read Sign-in, Audit, and Provisioning Logs to identify root causes and patterns.
• Scripting ability in Python, Graph API, and PowerShell to automate operational tasks (support for learning provided).
• Clear and adaptable communication skills for explaining complex IAM concepts.
• Willingness to use AI tools to enhance troubleshooting, scripting, and documentation.

• Resolve identity lifecycle issues including diagnosing provisioning failures, attribute sync errors, and access anomalies.
• Own end-to-end application onboarding, including configuring SSO (SAML, OIDC), claim mapping, and automated user provisioning via SCIM into Microsoft Entra ID.
• Administer MFA and modern authentication methods such as resets, Passwordless rollouts, and security key deployments.
• Manage Privileged Identity Management (PIM), including processing role activation requests and conducting access reviews.
• Investigate sign-in anomalies and access failures and produce compliance reports and identity dashboards.
• Identify recurring manual tasks and propose automation solutions.
• Act as a technical bridge between L1 support and Senior IAM Engineer, improving process documentation.