IAM Support Engineer: Automation & Access Steward

HelloFresh; Warszawa; On-site; PLN 120,000 - 180,000; Full time

Benefits offered by this job

Global collaboration

Modern scale systems

Leadership opportunities

End-to-end development

Workspace in Warsaw

Job summary

HelloFresh’s HelloTech team in Warsaw is seeking an L2 IAM Support Engineer to own the identity lifecycle platform. You’ll resolve provisioning issues, configure SSO, manage MFA, and harden Privileged Identity Management across 17 countries while collaborating with a Senior IAM Engineer.

You’ll read and interpret sign-in and provisioning logs, automate recurring tasks with Python/PowerShell, and help document processes for audit and governance. Join a cross‑functional, AI‑driven IAM team.

Qualifications

• Hands-on experience with Microsoft Entra ID and lifecycle management.
• Ability to troubleshoot identity lifecycle issues in automated provisioning environments.
• Experience with SSO protocols (SAML, OAuth 2.0, OpenID Connect).
• Experience administering MFA and Passwordless authentication methods.
• Familiarity with Privileged Identity Management (PIM) and access reviews.
• Scripting ability in Python, Graph API, and PowerShell for automation.
• Clear communication and willingness to adopt AI-assisted tooling.

Responsibilities

• Resolve identity lifecycle issues: provisioning failures, attribute sync errors, access anomalies.
• Own end-to-end application onboarding: configure SSO and SCIM provisioning into Entra ID.
• Administer MFA, Passwordless, and security key deployments per policy.
• Manage Privileged Identity Management (PIM) processes and access reviews.
• Investigate sign-in anomalies and produce compliance reports for audits.
• Identify recurring manual tasks and drive automation with Senior IAM Engineer.
• Document processes and act as technical bridge between L1 and Senior IAM Engineer.

Skills

Microsoft Entra ID

Identity provisioning

SSO (SAML/OIDC)

MFA & Passwordless

PIM & access reviews

Graph API / PowerShell / Python

Troubleshooting logs

Tools

Graph API

PowerShell

Python

Job description

HelloFresh’s HelloTech team in Warsaw is seeking an L2 IAM Support Engineer to own the identity lifecycle platform. You’ll resolve provisioning issues, configure SSO, manage MFA, and harden Privileged Identity Management across 17 countries while collaborating with a Senior IAM Engineer.

You’ll read and interpret sign-in and provisioning logs, automate recurring tasks with Python/PowerShell, and help document processes for audit and governance. Join a cross‑functional, AI‑driven IAM team.