IAM Support Engineer, IT Management

HelloFresh
Warsaw
Workplace: OnsiteFull timeFunction: Product ManagementSkills: ["Communication","Problem-solving","Ownership","Process improvement"]

Operate and support HelloTech’s Identity and Access Management platform, handling identity lifecycle issues across the Joiner/Mover/Leaver automation. Own end-to-end application onboarding, configure SSO (SAML/OIDC) and automate provisioning to Microsoft Entra ID via SCIM, and administer MFA and Privileged Identity Management. Troubleshoot access and sign-in anomalies using Entra sign-in, audit, and provisioning logs, identify recurring manual work, and improve processes through automation and collaboration with Senior IAM Engineering.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
HelloFresh
HelloFresh
1 month ago

IAM Support Engineer, IT Management

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 11 hours agoStatus: Live

Job Summary

Operate and support HelloTech’s Identity and Access Management platform, handling identity lifecycle issues across the Joiner/Mover/Leaver automation. Own end-to-end application onboarding, configure SSO (SAML/OIDC) and automate provisioning to Microsoft Entra ID via SCIM, and administer MFA and Privileged Identity Management. Troubleshoot access and sign-in anomalies using Entra sign-in, audit, and provisioning logs, identify recurring manual work, and improve processes through automation and collaboration with Senior IAM Engineering.
Location: Warsaw
Workplace: Onsite
Employment Type: Full time
Job Function: Product Management
Seniority: Mid level

Key Responsibilities

  • •Resolve identity lifecycle issues by diagnosing provisioning failures, attribute sync errors, and access anomalies.
  • •Own end-to-end application onboarding, including configuring SSO (SAML/OIDC), claim mapping, and automated provisioning via SCIM into Microsoft Entra ID.
  • •Administer MFA and modern authentication by managing resets, Passwordless rollouts, and security key deployments in line with security policy.
  • •Manage Privileged Identity Management by processing role activation requests, running access reviews, and maintaining least-privilege.
  • •Investigate sign-in anomalies and access failures by producing compliance reports and identity dashboards, and identify recurring manual tasks to drive automation.

Key Requirements

  • •Hands-on experience with Microsoft Entra ID, including user and group management, enterprise application registration, access governance, and Privileged Identity Management (PIM).
  • •Troubleshoot identity lifecycle issues in an automated provisioning environment, including diagnosing sync failures and access anomalies.
  • •Hands-on experience configuring SSO and federation integrations, including SAML, OAuth 2.0, OpenID Connect, and SCIM.
  • •Administer MFA and modern authentication methods, including Authenticator app, Passwordless, and hardware security keys.
  • •Read Sign-in, Audit, and Provisioning logs to identify root causes and patterns across provisioning and authentication workflows.
Skills:CommunicationProblem-solvingOwnershipProcess improvement
Languages:English
Tech Stack:Microsoft Entra IDPIMMFASSOSAMLOAuth 2.0OpenID ConnectSCIMPasswordlessGraph APIPowerShellPythonAuthenticator appHardware security keysJoiner/Mover/Leaver

Company Brief

HelloFresh
HelloFresh is a meal-kit and food subscription company that delivers fresh ingredients and recipes to consumers, offering convenient home-cooked meals through weekly subscription boxes across multiple international markets.
Industry: FoodTech
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: Berlin, Germany
Founded: 2011
Glassdoor
Glassdoor: 3.6
WebsiteLinkedIn