Senior IT Platform Engineer
Hack The Box
A complete application in a minute
Tailored resume and cover letter, ready to send.
Benefits offered by this job
Job summary
Hack The Box is seeking a Senior IT Platform Engineer to own and evolve the internal platform stack, focusing on identity, email, device management and AI gateway integration. You will ensure secure, scalable tooling across a global workforce.
You’ll work with Okta, Google Workspace, Jamf/Intune, and security tooling, playing a core role in automation, security posture, and cross-team collaboration in a remote-first environment.
Qualifications
- 3–7 years of professional experience in IT engineering or internal platform engineering.
- Deep hands-on experience with Okta including SSO, SCIM provisioning and MFA management.
- Strong Google Workspace administration and enterprise SaaS experience.
Responsibilities
- Administer and engineer Okta as the central identity provider with SSO, SCIM provisioning and MFA policies.
- Manage Google Workspace domain governance, email routing, DLP and Vault integration.
- Deploy and operate a centralised LLM gateway for governed AI access and auditing.
- Manage endpoint fleets with Jamf Pro and Intune including patching and compliance baselines.
- Integrate and maintain EDR and SIEM for visibility across endpoints and SaaS.
- Implement SOC 2 / ISO 27001 alignment via compliance automation tools.
Skills
Education
Tools
Job description
Ready to embark on the quest of joining Hack The Box?
Welcome! Super excited you dropped by
At the end of this journey, you’ll become a proud member of Hack The Box, with the ultimate mission to raise cyber resilience, so that every organization can stay ahead of tomorrow’s threats.
As an Internal Platform Engineer, you will own and evolve the internal tooling and enterprise platforms that keep a 300+ person, globally distributed company running securely and productively. This is not a helpdesk role — you’ll be the engineering backbone behind identity & access management, corporate email and collaboration, device management, SaaS orchestration and our centralised AI/LLM gateway. You’ll ensure that every team at HTB has the right tools, properly integrated, secured and automated.
Engineer, integrate and operate HTB’s internal platform stack — from identity (Okta) and email (Google Workspace) through endpoint management (Jamf/Intune) and security tooling (SIEM, EDR) to our centralised LLM gateway — so that the company scales securely without friction.
- Europe/Greece
- Choose between fully remote work across Europe or relocating to our Athens Tech Hub with relocation support.
Fully Remote / Hybrid (2 days in the office, 3 days remote, plus one month of work from anywhere) - If only in Greece: When hiring in Greece, we’re open to candidates from all locations. Those based within 55 km of our Athens office will follow a hybrid work model. For candidates located beyond that radius, a fully remote arrangement is available.
- We offer a 10% relocation bonus on the annual salary to support your move.
- In addition, you would benefit from a 50% tax reduction on your income as part of the relocation.
- We’ll support you with accommodation during the first few weeks
Identity & Access: Okta (SSO, SCIM, Lifecycle Management, Okta Workflows), Google Workspace (Gmail, Drive, Admin Console)
Endpoint & Device Management: Jamf Pro (macOS/iOS), Microsoft Intune (Windows), Kolide / osquery
Security & Compliance: CrowdStrike Falcon (EDR), Elastic SIEM / Splunk, Vanta or Drata (compliance automation), HashiCorp Vault (secrets management)
AI / LLM Gateway: LiteLLM or Portkey (centralised LLM routing, cost controls, audit logging), API key management
Collaboration & Productivity: Slack, Atlassian (Jira, Confluence), Notion, GitHub (org-level administration)
Automation & Integration: Okta Workflows, Tines / Workato (SOAR / workflow automation), Terraform, Python scripting
Observability: Datadog or Grafana Cloud (SaaS monitoring), PagerDuty (on-call & incident management)
- Administer and engineer Okta as the central identity provider: SSO integrations, SCIM provisioning/de-provisioning, MFA policies, Okta Workflows for lifecycle automation (onboarding, offboarding, role changes)
- Own Google Workspace administration: domain management, email routing and security policies (DKIM/DMARC/SPF), shared drives governance, DLP rules and Google Vault for eDiscovery/retention
- Deploy and operate a centralised LLM gateway (e.g. LiteLLM, Portkey) to give teams governed access to AI models with usage tracking, cost controls, rate limiting and audit logging
- Manage endpoint fleets via Jamf Pro (macOS/iOS) and Intune (Windows): OS patching, app deployment, compliance baselines, disk encryption enforcement
- Integrate and maintain EDR (CrowdStrike Falcon or equivalent) and SIEM (Elastic/Splunk) for corporate endpoint and SaaS log visibility
- Operate and improve compliance automation tooling (Vanta/Drata) to maintain continuous SOC 2, ISO 27001 and similar audit readiness
- Manage secrets and credential distribution using HashiCorp Vault (or similar), ensuring zero-trust access patterns for service accounts and CI/CD pipelines
- Administer SaaS platforms at the org level: Slack (Enterprise Grid), Atlassian suite, Notion, GitHub (org/team/repo policies, SAML, audit logs)
- Build workflow automations (Tines, Workato or Okta Workflows) for repetitive IT and security operations: access requests, alert triage, onboarding checklists
- Maintain documentation, runbooks and internal knowledge-base articles so that common procedures are self-service where possible
- Participate in on‑call rotation for identity, email and critical SaaS platform incidents
- 3–7 years of professional experience in IT engineering, internal platform engineering or infrastructure with a strong focus on enterprise SaaS and identity systems
- Deep hands‑on experience with Okta (or a comparable enterprise IdP: Azure AD/Entra ID, OneLogin) including SSO, SCIM provisioning and MFA policy management
- Strong Google Workspace administration skills (domain management, email security, DLP, Vault, Admin SDK)
- Experience managing macOS and/or Windows fleets at scale using MDM tools (Jamf, Intune, Kandji or similar)
- Familiarity with at least one SIEM platform (Elastic, Splunk, Datadog Security) and one EDR solution (CrowdStrike, SentinelOne, Carbon Black)
- Comfortable writing automation scripts (Python, Bash) and working with APIs to integrate SaaS tools
- Solid understanding of network and application security fundamentals: OAuth 2.0 / OIDC, SAML, SCIM, DKIM/DMARC/SPF, TLS, zero‑trust principles
- Ability to translate security and compliance requirements (SOC 2, ISO 27001) into practical engineering controls
- Strong written communication for documentation, runbooks and cross‑team collaboration in a remote‑first environment
- Being cyber security‑minded is a strong plus — at HTB, this isn’t an afterthought, it’s the business Bonus Points:
- Experience deploying and operating a centralised LLM/AI gateway (LiteLLM, Portkey, Kong AI Gateway or equivalent) with cost and access controls
- Hands‑on experience with HashiCorp Vault, AWS Secrets Manager or similar secrets management platforms
- Familiarity with compliance automation platforms (Vanta, Drata, Secureframe)
- Experience with SOAR / workflow automation tools (Tines, Workato, Torq)
- Understanding of Golang for building internal tooling
- Okta Certified Professional or Administrator, Google Workspace Administrator certification, or equivalent
- Experience scaling internal platforms through a period of rapid company growth (100 → 500+ employees)
- You’ll have the exhilarating opportunity to contribute to a product that is highly appreciated by users and the cybersecurity community at large.
- You’ll experience a highly supportive and caring environment, fostering growth, flexibility, and autonomy.
- You’ll embark on an exciting journey of continuous learning and problem‑solving, levelling up as our organisation grows.
- Most importantly, you’ll have a blast at HTB because fun is an essential ingredient in our recipe for success! Just wait until you see our global meet‑ups!
- 25 annual leave days
- Paid parental leave
- Home Office Allowance
- Dedicated budget for training and professional development, participation in conferences
- State‑of‑the‑art equipment
- Full access to the Hack The Box lab offerings; so you can learn how to hack
- Flexibility in working hours
Our benefits package is designed to provide strong support to our team, but it may vary depending on location and type of employment (e.g., UK, US, Greece, Australia, or engagement through an Employer of Record or contract).
- Level 1: To complete level one’s objective, submit your application.
- Level 2: Meet the Talent Acquisition team. Level’s objective: highlight your past achievements, ambitions, and values.
- Level 3: Meet the hiring team. Level’s objective: have a technical conversation that aligns with day‑to‑day job‑related tasks and responsibilities.
- Level 4: Level’s objective: connect with the hiring team and share with them your achievements.
- Level 5: Congratulations! Not many reach this level. Level’s objective: have a constructive, final conversation with senior leadership to explore the role and your future at HTB.
- Level 6: You’ve officially received an offer from HTB! To complete the last level and the Quest, all you need to do is accept the offer.
- Quest complete. Congratulations, you’re officially one of us.
Hack Your Career, Today. Join us in this epic adventure of cybersecurity at Hack The Box!
At Hack The Box, we are on a quest to find the most exceptional and enthusiastic talent to join our team. Whether or not you consider yourself a gamer, we value what makes you unique and want to know more about you. This job post provides just a glimpse of the incredible gamified experience our business and consumer customers enjoy through our platforms. So, if you’re ready to embark on a journey of growth and adventure, we can’t wait to meet you!
Hack The Box is the leading cyber readiness platform for the agentic era, battle‑testing and upskilling both humans and AI agents to enhance organizational cyber resilience. Trusted by the Fortune 500, government agencies, and MSSPs, the platform delivers threat‑informed learning paths consisting of real‑world scenarios in gamified labs and live‑fire simulations that build and validate offensive and defensive cyber capabilities. With a loyal community of more than 4 million members and 800+ enterprise customers, Hack The Box empowers teams and intelligent systems alike to strengthen cyber defenses and reduce breach risk effectively.
Rapidly growing its international footprint and reach, Hack The Box is headquartered in the UK, with additional offices in the US, Australia, and Greece.
- We’re incredibly proud to share that our headquarters in the UK, along with our entities in Greece and the US, have been certified as a Great Place to Work for 4 consecutive years (2023 - 2026).
- In addition, our Greek entity has been recognized among the Best Workplaces in Greece (4th, 2nd, 3rd, 1st) and Europe (7th, 10th, 73rd) during this period — a testament to our strong culture and commitment to creating an exceptional employee experience!
Take a sneak peek at how it is to be part of HTB. Get more insights about our HTB culture and employee experience by visiting the “about us” section of our site, our career site and Glassdoor.
At Hack The Box, we are committed to fostering a diverse, inclusive, and equitable workplace. We believe that diversity enriches our performance, services, and the communities we serve. As such, we ensure that all job applications are considered solely based on merit, skills, and qualifications. We do not discriminate on grounds of race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
