IAM Support Engineer, IT Management

Work with HelloFresh in Warsaw and its HelloTech organisation, HelloFresh’s global technology backbone with more than 1,000 people, building digital products that power the end-to-end food experience. HelloTech creates platforms that bring tailored food solutions to millions of customers every month, spanning meal kits, ready-to-eat meals, pet food, and premium meat and seafood.

The subscription-based, direct-to-consumer model relies on technology at every step, from customer-facing apps and personalisation logic to pricing, forecasting, supply-chain optimisation, and food-waste reduction initiatives. Brands operate independently to serve distinct customer needs, united by shared platforms, data, and operational excellence built by HelloTech.

HelloTech works in autonomous, cross-functional alliances, each owning a specific product or domain end to end. Working with the Warsaw office, you will help shape scalable, data-driven products used across markets, with a modern technology stack and international teams.

Quick Facts

• Identity and Access Management (IAM) team
• L2 IAM Support Engineer role
• Automated employee identity lifecycle platform spanning 16 countries

Description

The IAM team has completed a transformation of the employee identity lifecycle, replacing manual processes with a fully automated platform. As an L2 IAM Support Engineer, you will be the operational backbone of this platform.

You will resolve identity lifecycle issues, own application onboarding end to end, administer MFA and Privileged Identity Management, and support identity and access initiatives across the organisation. Working closely with the Senior IAM Engineer, you will identify request-queue patterns, propose automation for recurring manual work, and contribute to audit and compliance reporting.

This is a hands-on role for someone who takes ownership, thinks beyond the ticket, and looks for ways to improve the systems they operate. The role is aligned to a specific Alliance; strong candidates may also be considered for opportunities across different teams or projects.

Responsibilities

• Resolve identity lifecycle issues, including provisioning failures, attribute-sync errors, and access anomalies across the automated Joiner/Mover/Leaver platform.
• Own end-to-end application onboarding, including SSO configuration using SAML and OIDC, claim mapping, and automated user provisioning through SCIM into Microsoft Entra ID.
• Administer MFA and modern authentication, including resets, Passwordless rollouts, and security-key deployments in line with security policy.
• Manage Privileged Identity Management (PIM), including role-activation requests, access reviews, and least-privilege controls.
• Investigate sign-in anomalies and access failures; produce compliance reports and identity dashboards for audit and governance cycles.
• Identify recurring manual tasks, surface automation opportunities, and work with the Senior IAM Engineer to deliver lasting solutions.
• Act as the technical bridge between L1 and the Senior IAM Engineer, improving process documentation.

Requirements

• Hands-on experience with Microsoft Entra ID, including user and group management, enterprise application registration, access governance, and Privileged Identity Management (PIM).
• Ability to troubleshoot identity lifecycle issues in an automated provisioning environment, including sync failures and access anomalies.
• Hands-on experience with SAML, OAuth 2.0, and OpenID Connect, including SSO and SCIM integration configuration.
• Experience administering MFA and modern authentication methods, including Authenticator app, Passwordless, and hardware security keys.
• Ability to read sign-in, audit, and provisioning logs to identify root causes and patterns in provisioning and authentication workflows.
• Scripting ability in Python, Graph API, and PowerShell to automate operational tasks; on-the-job development support is available.
• Clear, adaptable communication when explaining complex IAM concepts to different audiences.
• Willingness to use AI tools for troubleshooting, script generation, and documentation.

Benefits

• Global collaboration with experienced engineers and product partners across international HelloTech teams in a knowledge-sharing culture.
• Opportunity to build and operate modern systems at global scale, supporting more than 6 million customers and complex supply-chain operations.
• Technical, product, and design leadership opportunities to influence architecture, design, quality, and ways of working in an autonomous, product-led setup.
• End-to-end development and delivery, from problem definition to production, improving systems and enabling long-term scalability.
• Access to a workspace at Warsaw Centre, Prosta 20 Street, with showers, breakout zones, outdoor space, cycle parking, and refreshments including coffee, soft drinks, and fruit.