Recruiter call was fairly straightforward, very high level stuff and perfectly pleasant. First technical interview was centred around general technical experience; what sort of technologies do you have experience with? What are you opinions on X, Y or Z technology? And so on. Second technical interview was a code test that would comfortably fit in the easy category on HackerRank, though there were problems with this; more below. HelloFresh has a bit of a wacky way of conducting their technical code tests, expecting the interviewee to take on all of the technical hurdles around sharing code, getting it running and so on. They do not use 3rd party tools like CoderPad, CodeInterview or Hacker Rank, so you're stuck sharing your code in your own IDE and getting it to run. While the first expectation was shared previously, the 2nd was not, which was unexpected and a surprise in the moment. Combining that with an interviewer who seemed somewhat un-engaged, code snippets that were shared through a Google Meet (and not the coding platform, since that wasn't possible), an open question as to whether or not the interview was open book and having the meeting start late. In light of that experience, I decided to withdraw my candidacy, but then the HelloFresh team wanted to chat on the phone and collect feedback and seemingly continue the process. I did hop on a call with them, provided my feedback and was told that they had wanted to continue in light of the feedback, but they could need to connect with the tech team to continue. Alas, a few days later, I was told it would not proceed due to "technical fit" which is a silly way of not addressing what was discussed at all. All in all, it all combined into a horrible experience I would not recommend one enter into unless you feel like you really want to work here and are prepared to cater to largely to their comfort through the process. Speaking of which; if you're interviewing from North America, prepare to have all of your calls fairly early in the morning, since most of their tech team appears to be in Europe.

How would you secure a system that multiple outside vendors need access to?