Senior IT Platform Engineer

As an Internal Platform Engineer, you will own and evolve the internal tooling and enterprise platforms that keep a 300+ person, globally distributed company running securely and productively. This is not a helpdesk role - you’ll be the engineering backbone behind identity & access management, corporate email and collaboration, device management, SaaS orchestration and our centralised AI/LLM gateway. You’ll ensure that every team at HTB has the right tools, properly integrated, secured and automated.

Engineer, integrate and operate HTB’s internal platform stack - from identity (Okta) and email (Google Workspace) through endpoint management (Jamf/Intune) and security tooling (SIEM, EDR) to our centralised LLM gateway - so that the company scales securely without friction., Identity & Access: Okta (SSO, SCIM, Lifecycle Management, Okta Workflows), Google Workspace (Gmail, Drive, Admin Console)

Endpoint & Device Management: Jamf Pro (macOS/iOS), Microsoft Intune (Windows), Kolide / osquery

Security & Compliance: CrowdStrike Falcon (EDR), Elastic SIEM / Splunk, Vanta or Drata (compliance automation), HashiCorp Vault (secrets management)

AI / LLM Gateway: LiteLLM or Portkey (centralised LLM routing, cost controls, audit logging), API key management

Collaboration & Productivity: Slack, Atlassian (Jira, Confluence), Notion, GitHub (org-level administration)

Automation & Integration: Okta Workflows, Tines / Workato (SOAR / workflow automation), Terraform, Python scripting

Observability: Datadog or Grafana Cloud (SaaS monitoring), PagerDuty (on-call & incident management)

The adventures that await you after becoming Senior IT Platform Engineer at Hack The Box:

• Administer and engineer Okta as the central identity provider: SSO integrations, SCIM provisioning/de-provisioning, MFA policies, Okta Workflows for lifecycle automation (onboarding, offboarding, role changes)
• Own Google Workspace administration: domain management, email routing and security policies (DKIM/DMARC/SPF), shared drives governance, DLP rules and Google Vault for eDiscovery/retention
• Deploy and operate a centralised LLM gateway (e.g. LiteLLM, Portkey) to give teams governed access to AI models with usage tracking, cost controls, rate limiting and audit logging
• Manage endpoint fleets via Jamf Pro (macOS/iOS) and Intune (Windows): OS patching, app deployment, compliance baselines, disk encryption enforcement
• Integrate and maintain EDR (CrowdStrike Falcon or equivalent) and SIEM (Elastic/Splunk) for corporate endpoint and SaaS log visibility
• Operate and improve compliance automation tooling (Vanta/Drata) to maintain continuous SOC 2, ISO 27001 and similar audit readiness
• Manage secrets and credential distribution using HashiCorp Vault (or similar), ensuring zero-trust access patterns for service accounts and CI/CD pipelines
• Administer SaaS platforms at the org level: Slack (Enterprise Grid), Atlassian suite, Notion, GitHub (org/team/repo policies, SAML, audit logs)
• Build workflow automations (Tines, Workato or Okta Workflows) for repetitive IT and security operations: access requests, alert triage, onboarding checklists
• Maintain documentation, runbooks and internal knowledge-base articles so that common procedures are self-service where possible
• Participate in on-call rotation for identity, email and critical SaaS platform incidents, * You’ll have the exhilarating opportunity to contribute to a product that is highly appreciated by users and the cybersecurity community at large.
• You’ll experience a highly supportive and caring environment, fostering growth, flexibility, and autonomy.
• You’ll embark on an exciting journey of continuous learning and problem-solving, levelling up as our organisation grows.
• Most importantly, you’ll have a blast at HTB because fun is an essential ingredient in our recipe for success! Just wait until you see our global meet-ups!

• 3-7 years of professional experience in IT engineering, internal platform engineering or infrastructure with a strong focus on enterprise SaaS and identity systems
• Deep hands-on experience with Okta (or a comparable enterprise IdP: Azure AD/Entra ID, OneLogin) including SSO, SCIM provisioning and MFA policy management
• Strong Google Workspace administration skills (domain management, email security, DLP, Vault, Admin SDK)
• Experience managing macOS and/or Windows fleets at scale using MDM tools (Jamf, Intune, Kandji or similar)
• Familiarity with at least one SIEM platform (Elastic, Splunk, Datadog Security) and one EDR solution (CrowdStrike, SentinelOne, Carbon Black)
• Comfortable writing automation scripts (Python, Bash) and working with APIs to integrate SaaS tools
• Solid understanding of network and application security fundamentals: OAuth 2.0 / OIDC, SAML, SCIM, DKIM/DMARC/SPF, TLS, zero-trust principles
• Ability to translate security and compliance requirements (SOC 2, ISO 27001) into practical engineering controls
• Strong written communication for documentation, runbooks and cross-team collaboration in a remote-first environment
• Being cyber security-minded is a strong plus - at HTB, this isn’t an afterthought, it’s the business

Bonus Points:

• Experience deploying and operating a centralised LLM/AI gateway (LiteLLM, Portkey, Kong AI Gateway or equivalent) with cost and access controls
• Hands-on experience with HashiCorp Vault, AWS Secrets Manager or similar secrets management platforms
• Familiarity with compliance automation platforms (Vanta, Drata, Secureframe)
• Experience with SOAR / workflow automation tools (Tines, Workato, Torq)
• Understanding of Golang for building internal tooling
• Okta Certified Professional or Administrator, Google Workspace Administrator certification, or equivalent
• Experience scaling internal platforms through a period of rapid company growth (100 * 500+ employees)

• 25 annual leave days
• Paid parental leave
• Home Office Allowance
• Dedicated budget for training and professional development, participation in conferences
• State-of-the-art equipment
• Full access to the Hack The Box lab offerings; so you can learn how to hack
• Flexibility in working hours

Our benefits package is designed to provide strong support to our team, but it may vary depending on location and type of employment (e.g., UK, US, Greece, Australia, or engagement through an Employer of Record or contract).

️ The Quest of Becoming Hack The Box’s Senior IT Platform Engineer:

• Level 1: To complete level one’s objective, submit your application.
• Level 2: Meet the Talent Acquisition team. Level’s objective: highlight your past achievements, ambitions, and values.
• Level 3: Meet the hiring team. Level’s objective: have a technical conversation that aligns with day-to-day job-related tasks and responsibilities.
• Level 4: Level’s objective: connect with the hiring team and share with them your achievements.
• Level 5: Congratulations! Not many reach this level . Level’s objective: have a constructive, final conversation with senior leadership to explore the role and your future at HTB.
• Level 6: You’ve officially received an offer from HTB! To complete the last level and the Quest, all you need to do is accept the offer.
• Quest complete. Congratulations, you’re officially one of us Your next quest: complete the onboarding.

Hack Your Career, Today. Join us in this epic adventure of cybersecurity at Hack The Box!

At Hack The Box, we are on a quest to find the most exceptional and enthusiastic talent to join our team. Whether or not you consider yourself a gamer, we value what makes you unique and want to know more about you. This job post provides just a glimpse of the incredible gamified experience our business and consumer customers enjoy through our platforms. So, if you’re ready to embark on a journey of growth and adventure, we can’t wait to meet you!

Hack The Box is the leading cyber readiness platform for the agentic era, battle-testing and upskilling both humans and AI agents to enhance organizational cyber resilience. Trusted by the Fortune 500, government agencies, and MSSPs, the platform delivers threat-informed learning paths consisting of real-world scenarios in gamified labs and live-fire simulations that build and validate offensive and defensive cyber capabilities. With a loyal community of more than 4 million members and 800+ enterprise customers, Hack The Box empowers teams and intelligent systems alike to strengthen cyber defenses and reduce breach risk effectively.

Rapidly growing its international footprint and reach, Hack The Box is headquartered in the UK, with additional offices in the US, Australia, and Greece.

News & Resources:

• We’re incredibly proud to share that our headquarters in the UK, along with our entities in Greece and the US, have been certified as a Great Place to Work for 4 consecutive years (2023 - 2026).
• In addition, our Greek entity has been recognized among the Best Workplaces in Greece (4th, 2nd, 3rd, 1st) and Europe (7th, 10th, 73rd) during this period - a testament to our strong culture and commitment to creating an exceptional employee experience!

Take a sneak peek at how it is to be part of HTB. Get more insights about our HTB culture and employee experience by visiting the “about us” section of our site, our career site, and Glassdoor.

At Hack The Box, we are committed to fostering a diverse, inclusive, and equitable workplace. We believe that diversity enriches our performance, services, and the communities we serve. As such, we ensure that all job applications are considered solely based on merit, skills, and qualifications. We do not discriminate on grounds of race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. We are dedicated to providing a fair and respectful work environment that reflects our values.