IAM Support Engineer, IT ManagementActive
The opportunity
Work with HelloFresh in Warsaw and its HelloTech organisation, HelloFresh’s global technology backbone with more than 1000 people, building the digital products that power our end-to-end food experience. From meal kits and ready-to-eat meals to specialty offerings like pet food…
What you'll do
Resolve identity lifecycle issues: diagnosing provisioning failures, attribute sync errors, and access anomalies across our automated Joiner/Mover/Leaver platform.
Own end-to-end application onboarding: configuring SSO (SAML, OIDC), claim mapping, and automated user provisioning via SCIM into Microsoft Entra ID.
Administer MFA and modern authentication: handling resets, Passwordless rollouts, and security key deployments in line with security policy.
Manage Privileged Identity Management (PIM): processing role activation requests, running access reviews, and ensuring least-privilege is maintained.
Investigate sign-in anomalies and access failures: producing compliance reports and identity dashboards to support audit and governance cycles.
Identify recurring manual tasks: surfacing opportunities for automation and working with the Senior IAM Engineer to drive lasting solutions.
What they're looking for
- Act as the technical bridge between L1 and the Senior IAM Engineer: leaving every process better documented than you found it.
- Hands-on experience with Microsoft Entra ID: including user and group management, enterprise application registration, access governance, and Privileged Identity Management (PIM).
- A proven ability to troubleshoot identity lifecycle issues: in an automated provisioning environment, including diagnosing sync failures and access anomalies.
- Hands-on experience with federation protocols: SAML, OAuth 2.0, and OpenID Connect, with practical experience configuring SSO & SCIM integrations.
