HelloFresh

1 week ago

[TECH] IAM Support Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 5 hours agoStatus: Live

Job Summary

Operate and support HelloTech’s Identity and Access Management platform, handling identity lifecycle issues across the Joiner/Mover/Leaver automation. Own end-to-end application onboarding, configure SSO (SAML/OIDC) and automate provisioning to Microsoft Entra ID via SCIM, and administer MFA and Privileged Identity Management. Troubleshoot access and sign-in anomalies using Entra sign-in, audit, and provisioning logs, identify recurring manual work, and improve processes through automation and collaboration with Senior IAM Engineering.

Location: Warsaw

Workplace: Onsite

Employment Type: Full time

Job Function: Product Management

Seniority: Mid level

Key Responsibilities

•Resolve identity lifecycle issues by diagnosing provisioning failures, attribute sync errors, and access anomalies.
•Own end-to-end application onboarding, including configuring SSO (SAML/OIDC), claim mapping, and automated provisioning via SCIM into Microsoft Entra ID.
•Administer MFA and modern authentication by managing resets, Passwordless rollouts, and security key deployments in line with security policy.
•Manage Privileged Identity Management by processing role activation requests, running access reviews, and maintaining least-privilege.
•Investigate sign-in anomalies and access failures by producing compliance reports and identity dashboards, and identify recurring manual tasks to drive automation.

Key Requirements

•Hands-on experience with Microsoft Entra ID, including user and group management, enterprise application registration, access governance, and Privileged Identity Management (PIM).
•Troubleshoot identity lifecycle issues in an automated provisioning environment, including diagnosing sync failures and access anomalies.
•Hands-on experience configuring SSO and federation integrations, including SAML, OAuth 2.0, OpenID Connect, and SCIM.
•Administer MFA and modern authentication methods, including Authenticator app, Passwordless, and hardware security keys.
•Read Sign-in, Audit, and Provisioning logs to identify root causes and patterns across provisioning and authentication workflows.

Skills:CommunicationProblem-solvingOwnershipProcess improvement

Languages:English

Tech Stack:Microsoft Entra IDPIMMFASSOSAMLOAuth 2.0OpenID ConnectSCIMPasswordlessGraph APIPowerShellPythonAuthenticator appHardware security keysJoiner/Mover/Leaver

Company Brief

HelloFresh

HelloFresh is a meal-kit and food subscription company that delivers fresh ingredients and recipes to consumers, offering convenient home-cooked meals through weekly subscription boxes across multiple international markets.

Industry: FoodTech

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: Berlin, Germany

Founded: 2011

Glassdoor: 3.6

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

HelloFresh

1 week ago

[TECH] IAM Support Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 5 hours agoStatus: Live

Job Summary

Location: Warsaw

Workplace: Onsite

Employment Type: Full time

Job Function: Product Management

Seniority: Mid level

Key Responsibilities

•Resolve identity lifecycle issues by diagnosing provisioning failures, attribute sync errors, and access anomalies.
•Own end-to-end application onboarding, including configuring SSO (SAML/OIDC), claim mapping, and automated provisioning via SCIM into Microsoft Entra ID.
•Administer MFA and modern authentication by managing resets, Passwordless rollouts, and security key deployments in line with security policy.
•Manage Privileged Identity Management by processing role activation requests, running access reviews, and maintaining least-privilege.
•Investigate sign-in anomalies and access failures by producing compliance reports and identity dashboards, and identify recurring manual tasks to drive automation.

Key Requirements

•Hands-on experience with Microsoft Entra ID, including user and group management, enterprise application registration, access governance, and Privileged Identity Management (PIM).
•Troubleshoot identity lifecycle issues in an automated provisioning environment, including diagnosing sync failures and access anomalies.
•Hands-on experience configuring SSO and federation integrations, including SAML, OAuth 2.0, OpenID Connect, and SCIM.
•Administer MFA and modern authentication methods, including Authenticator app, Passwordless, and hardware security keys.
•Read Sign-in, Audit, and Provisioning logs to identify root causes and patterns across provisioning and authentication workflows.

Skills:CommunicationProblem-solvingOwnershipProcess improvement

Languages:English

Tech Stack:Microsoft Entra IDPIMMFASSOSAMLOAuth 2.0OpenID ConnectSCIMPasswordlessGraph APIPowerShellPythonAuthenticator appHardware security keysJoiner/Mover/Leaver

Company Brief

HelloFresh

Industry: FoodTech

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: Berlin, Germany

Founded: 2011

Glassdoor: 3.6

Website LinkedIn