> Markdown version of [/jobs/ext/3211352-senior-it-platform-engineer](https://www.wearedevelopers.com/jobs/ext/3211352-senior-it-platform-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior IT Platform Engineer - **Company:** Hack The Box - **Location:** UK (Remote available) - **Experience:** Expert - **Salary:** £93,364.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, Apple IOS, Apple Mac Systems, Systems Engineering, Confluence, JIRA, Audit Trail, Bash Shell, Software as a Service, Cloud Computing, Cyber Security, Domainkeys Identified Mail, Domain-Based Message Authentication Reporting and Conformance (DMARC), Github, Python (Programming Language), Key Management, Automation of Marketing, Routing, OAuth, OpenID, Azure Active Directory, Zero Trust Network Access, Runbook, Security Assertion Markup Language (SAML), Security Information and Event Management, Datadog, Scripting, Okta, Large Language Models, Grafana, Software Security, Zapier, Rate Limiting, Microsoft InTune, Usage Tracking, Atlassian Tools, Hashicorp, SAP MDG, Casper Suite, Gsuite, Api Design, Terraform, Splunk, SentinelOne Expertise, Pagerduty, Golang - **Published:** September 1, 2026 - **Apply:** https://www.adzuna.co.uk/jobs/details/5863022211 ## About the Role * 3-7 years of professional experience in IT engineering, internal platform engineering or infrastructure with a strong focus on enterprise SaaS and identity systems * Deep hands-on experience with Okta (or a comparable enterprise IdP: Azure AD/Entra ID, OneLogin) including SSO, SCIM provisioning and MFA policy management * Strong Google Workspace administration skills (domain management, email security, DLP, Vault, Admin SDK) * Experience managing macOS and/or Windows fleets at scale using MDM tools (Jamf, Intune, Kandji or similar) * Familiarity with at least one SIEM platform (Elastic, Splunk, Datadog Security) and one EDR solution (CrowdStrike, SentinelOne, Carbon Black) * Comfortable writing automation scripts (Python, Bash) and working with APIs to integrate SaaS tools * Solid understanding of network and application security fundamentals: OAuth 2.0 / OIDC, SAML, SCIM, DKIM/DMARC/SPF, TLS, zero-trust principles * Ability to translate security and compliance requirements (SOC 2, ISO 27001) into practical engineering controls * Strong written communication for documentation, runbooks and cross-team collaboration in a remote-first environment * Being cyber security-minded is a strong plus - at HTB, this isn't an afterthought, it's the business Bonus Points: * Experience deploying and operating a centralised LLM/AI gateway (LiteLLM, Portkey, Kong AI Gateway or equivalent) with cost and access controls * Hands-on experience with HashiCorp Vault, AWS Secrets Manager or similar secrets management platforms * Familiarity with compliance automation platforms (Vanta, Drata, Secureframe) * Experience with SOAR / workflow automation tools (Tines, Workato, Torq) * Understanding of Golang for building internal tooling * Okta Certified Professional or Administrator, Google Workspace Administrator certification, or equivalent * Experience scaling internal platforms through a period of rapid company growth (100 * 500+ employees) ## Description As an Internal Platform Engineer, you will own and evolve the internal tooling and enterprise platforms that keep a 300+ person, globally distributed company running securely and productively. This is not a helpdesk role - you'll be the engineering backbone behind identity & access management, corporate email and collaboration, device management, SaaS orchestration and our centralised AI/LLM gateway. You'll ensure that every team at HTB has the right tools, properly integrated, secured and automated. Engineer, integrate and operate HTB's internal platform stack - from identity (Okta) and email (Google Workspace) through endpoint management (Jamf/Intune) and security tooling (SIEM, EDR) to our centralised LLM gateway - so that the company scales securely without friction., Identity & Access: Okta (SSO, SCIM, Lifecycle Management, Okta Workflows), Google Workspace (Gmail, Drive, Admin Console) Endpoint & Device Management: Jamf Pro (macOS/iOS), Microsoft Intune (Windows), Kolide / osquery Security & Compliance: CrowdStrike Falcon (EDR), Elastic SIEM / Splunk, Vanta or Drata (compliance automation), HashiCorp Vault (secrets management) AI / LLM Gateway: LiteLLM or Portkey (centralised LLM routing, cost controls, audit logging), API key management Collaboration & Productivity: Slack, Atlassian (Jira, Confluence), Notion, GitHub (org-level administration) Automation & Integration: Okta Workflows, Tines / Workato (SOAR / workflow automation), Terraform, Python scripting Observability: Datadog or Grafana Cloud (SaaS monitoring), PagerDuty (on-call & incident management) The adventures that await you after becoming Senior IT Platform Engineer at Hack The Box: * Administer and engineer Okta as the central identity provider: SSO integrations, SCIM provisioning/de-provisioning, MFA policies, Okta Workflows for lifecycle automation (onboarding, offboarding, role changes) * Own Google Workspace administration: domain management, email routing and security policies (DKIM/DMARC/SPF), shared drives governance, DLP rules and Google Vault for eDiscovery/retention * Deploy and operate a centralised LLM gateway (e.g. LiteLLM, Portkey) to give teams governed access to AI models with usage tracking, cost controls, rate limiting and audit logging * Manage endpoint fleets via Jamf Pro (macOS/iOS) and Intune (Windows): OS patching, app deployment, compliance baselines, disk encryption enforcement * Integrate and maintain EDR (CrowdStrike Falcon or equivalent) and SIEM (Elastic/Splunk) for corporate endpoint and SaaS log visibility * Operate and improve compliance automation tooling (Vanta/Drata) to maintain continuous SOC 2, ISO 27001 and similar audit readiness * Manage secrets and credential distribution using HashiCorp Vault (or similar), ensuring zero-trust access patterns for service accounts and CI/CD pipelines * Administer SaaS platforms at the org level: Slack (Enterprise Grid), Atlassian suite, Notion, GitHub (org/team/repo policies, SAML, audit logs) * Build workflow automations (Tines, Workato or Okta Workflows) for repetitive IT and security operations: access requests, alert triage, onboarding checklists * Maintain documentation, runbooks and internal knowledge-base articles so that common procedures are self-service where possible * Participate in on-call rotation for identity, email and critical SaaS platform incidents, * You'll have the exhilarating opportunity to contribute to a product that is highly appreciated by users and the cybersecurity community at large. * You'll experience a highly supportive and caring environment, fostering growth, flexibility, and autonomy. * You'll embark on an exciting journey of continuous learning and problem-solving, levelling up as our organisation grows. * Most importantly, you'll have a blast at HTB because fun is an essential ingredient in our recipe for success! Just wait until you see our global meet-ups! ## Related Videos - [GitOps for the people](https://www.wearedevelopers.com/videos/461-gitops-for-the-people) - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Reducing Cognitive Overload Through Platform Engineering](https://www.wearedevelopers.com/videos/679-reducing-cognitive-overload-through-platform-engineering) - [Improving quality with Agentic AI with Rovo Dev and Xray](https://www.wearedevelopers.com/videos/2005-improving-quality-with-agentic-ai-with-rovo-dev-and-xray) - [Backstage in Practice: Offloading Developer Operational Work Through Platform Self-Service](https://www.wearedevelopers.com/videos/1922-backstage-in-practice-offloading-developer-operational-work-through-platform-self-service) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline)