IAM Support Engineer, IT Management

HelloFresh; Poland; On-site; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Workspace in Warsaw Centre

Job summary

HelloFresh in Warsaw, within HelloTech, is seeking an L2 IAM Support Engineer to serve as the operational backbone of our automated identity platform spanning 17 countries. You will diagnose provisioning failures, onboard applications end-to-end, administer MFA and Privileged Identity Management, and help automate recurring tasks while collaborating with the Senior IAM Engineer.

This hands-on role values ownership, cross-functional collaboration, and the use of AI tools to accelerate

Qualifications

• Hands-on experience with Microsoft Entra ID: user/group management, enterprise app registration, access governance, and PIM.
• A proven ability to troubleshoot identity lifecycle issues in an automated provisioning environment.
• Hands-on experience with federation protocols: SAML, OAuth 2.0, and OpenID Connect, with practical SSO & SCIM integrations.
• Experience administering MFA and modern authentication methods: including Authenticator app, Passwordless, and hardware security keys.
• Ability to read Sign-in, Audit, and Provisioning Logs and identify root causes.
• Scripting ability in Python, Graph API, and PowerShell to automate tasks.

Responsibilities

• Resolve identity lifecycle issues: diagnosing provisioning failures, attribute sync errors, and access anomalies across the automated platform.
• Own end-to-end application onboarding: configuring SSO (SAML, OIDC), claim mapping, and automated user provisioning via SCIM into Microsoft Entra ID.
• Administer MFA and modern authentication: handling resets, Passwordless rollouts, and security key deployments per policy.
• Manage Privileged Identity Management (PIM): processing activation requests, running access reviews, ensuring least-privilege.
• Investigate sign-in anomalies and access failures: producing compliance reports and identity dashboards for audits.
• Identify recurring manual tasks: proposing automation and collaborating to implement lasting solutions.
• Act as the bridge between L1 and the Senior IAM Engineer: ensuring processes are well documented.

Skills

Microsoft Entra ID

SAML

OAuth 2.0

OpenID Connect

MFA

Privileged Identity Management

SCIM

Python

Graph API

PowerShell

Scripting

Documentation

Communication

AI tools

Tools

PowerShell

Python

Graph API

Job description

Work with HelloFresh in Warsaw and its HelloTech organisation, HelloFresh's global technology backbone with more than 1000 people, building the digital products that power our end-to-end food experience. From meal kits and ready-to-eat meals to specialty offerings like pet food and premium meat & seafood, HelloTech creates the platforms that bring tailored food solutions to millions of customers every month.

Our subscription-based, direct-to-consumer model relies on technology at every step, from customer-facing apps and personalization logic to pricing, forecasting, supply chain optimization, and initiatives that help reduce food waste. While our brands operate independently to serve distinct customer needs, they are united by shared platforms, data, and operational excellence built by HelloTech.

HelloTech works in autonomous, cross-functional alliances, each owning a specific product or domain end to end. By working with our Warsaw office, you will help shape scalable, data-driven products used across our markets, working with a modern tech stack and international teams to continuously improve how people discover, order, and enjoy HelloFresh's products, today and in the future.

About the role: What's in the Box

Our Identity and Access Management (IAM) team has completed a full transformation of the employee identity lifecycle - replacing manual processes with a fully automated platform spanning 17 countries. As our L2 IAM Support Engineer, you will be the operational backbone of this platform.

You will resolve identity lifecycle issues, own application onboarding end-to-end, administer MFA and Privileged Identity Management, and support identity and access initiatives across the organisation. Working closely with our Senior IAM Engineer, you will also identify patterns in the request queue, propose automation where manual effort is recurring, and contribute to audit and compliance reporting.

This is a hands-on role for someone who takes ownership, thinks beyond the ticket, and consistently looks for ways to improve the systems they operate.

At HelloTech, flexibility and cross-functional collaboration are core to how we work. While this role is aligned to a specific Alliance, strong candidates may also be considered for opportunities across different teams or projects.

What you'll do: The Recipe

• Resolve identity lifecycle issues: diagnosing provisioning failures, attribute sync errors, and access anomalies across our automated Joiner/Mover/Leaver platform.
• Own end-to-end application onboarding: configuring SSO (SAML, OIDC), claim mapping, and automated user provisioning via SCIM into Microsoft Entra ID.
• Administer MFA and modern authentication: handling resets, Passwordless rollouts, and security key deployments in line with security policy.
• Manage Privileged Identity Management (PIM): processing role activation requests, running access reviews, and ensuring least-privilege is maintained.
• Investigate sign-in anomalies and access failures: producing compliance reports and identity dashboards to support audit and governance cycles.
• Identify recurring manual tasks: surfacing opportunities for automation and working with the Senior IAM Engineer to drive lasting solutions.
• Act as the technical bridge between L1 and the Senior IAM Engineer: leaving every process better documented than you found it.

What you'll bring: The Ingredients

• Hands-on experience with Microsoft Entra ID: including user and group management, enterprise application registration, access governance, and Privileged Identity Management (PIM).
• A proven ability to troubleshoot identity lifecycle issues: in an automated provisioning environment, including diagnosing sync failures and access anomalies.
• Hands-on experience with federation protocols: SAML, OAuth 2.0, and OpenID Connect, with practical experience configuring SSO & SCIM integrations.
• Experience administering MFA and modern authentication methods: including Authenticator app, Passwordless, and hardware security keys.
• Ability to read Sign-in, Audit, and Provisioning Logs: identifying root causes and surfacing patterns across provisioning and authentication workflows.
• Scripting ability in Python, Graph API, and PowerShell: to help automate operational tasks; we will support you in developing this on the job if you are not there yet.
• Clear and adaptable communication: adjusting how you convey complex IAM concepts depending on your audience; this is a skill we actively help our engineers grow into.
• A willingness to use AI tools: to accelerate troubleshooting, script generation, and documentation. We are actively building a culture of AI-augmented IAM operations, and we're looking for someone curious enough to develop in that.

What we offer: The Toppings

• Global collaboration at scale: Collaborate with experienced engineers and product partners across HelloTech's international teams, in a culture of active knowledge sharing.
• Technology with real-world impact: Build and operate modern systems at global scale, supporting 6+ millions of customers and complex supply chain operations.
• Technical/Product/Design leadership: Drive best practices and influence architecture/design, quality, and ways of working in an autonomous, product-led setup.
• End-to-end development/delivery: Drive decisions from problem definition to production, improving systems and enabling long-term scalability.
• Access to workspace at Warsaw Centre (Prosta 20 Street). The hub offers modern facilities including showers, breakout zones, outdoor space, cycle parking, and refreshments (coffee, soft drinks, and fruit).

Above all, we are looking for individuals who will make HelloFresh better. We believe there are many different ways of developing skills and we love diverse experiences! So even if you don't 'tick all the boxes' but think you'd thrive in this role, we would really like to learn more about you.