IAM Support Engineer: Identity & Access Automation

HelloFresh; Poland; On-site; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Workspace in Warsaw Centre

Job summary

HelloFresh in Warsaw, within HelloTech, is seeking an L2 IAM Support Engineer to serve as the operational backbone of our automated identity platform spanning 17 countries. You will diagnose provisioning failures, onboard applications end-to-end, administer MFA and Privileged Identity Management, and help automate recurring tasks while collaborating with the Senior IAM Engineer.

This hands-on role values ownership, cross-functional collaboration, and the use of AI tools to accelerate

Qualifications

• Hands-on experience with Microsoft Entra ID: user/group management, enterprise app registration, access governance, and PIM.
• A proven ability to troubleshoot identity lifecycle issues in an automated provisioning environment.
• Hands-on experience with federation protocols: SAML, OAuth 2.0, and OpenID Connect, with practical SSO & SCIM integrations.
• Experience administering MFA and modern authentication methods: including Authenticator app, Passwordless, and hardware security keys.
• Ability to read Sign-in, Audit, and Provisioning Logs and identify root causes.
• Scripting ability in Python, Graph API, and PowerShell to automate tasks.

Responsibilities

• Resolve identity lifecycle issues: diagnosing provisioning failures, attribute sync errors, and access anomalies across the automated platform.
• Own end-to-end application onboarding: configuring SSO (SAML, OIDC), claim mapping, and automated user provisioning via SCIM into Microsoft Entra ID.
• Administer MFA and modern authentication: handling resets, Passwordless rollouts, and security key deployments per policy.
• Manage Privileged Identity Management (PIM): processing activation requests, running access reviews, ensuring least-privilege.
• Investigate sign-in anomalies and access failures: producing compliance reports and identity dashboards for audits.
• Identify recurring manual tasks: proposing automation and collaborating to implement lasting solutions.
• Act as the bridge between L1 and the Senior IAM Engineer: ensuring processes are well documented.

Skills

Microsoft Entra ID

SAML

OAuth 2.0

OpenID Connect

MFA

Privileged Identity Management

SCIM

Python

Graph API

PowerShell

Scripting

Documentation

Communication

AI tools

Tools

PowerShell

Python

Graph API

Job description

HelloFresh in Warsaw, within HelloTech, is seeking an L2 IAM Support Engineer to serve as the operational backbone of our automated identity platform spanning 17 countries. You will diagnose provisioning failures, onboard applications end-to-end, administer MFA and Privileged Identity Management, and help automate recurring tasks while collaborating with the Senior IAM Engineer.

This hands-on role values ownership, cross-functional collaboration, and the use of AI tools to accelerate