Senior IT Platform Engineer

Ready to embark on the quest of joining Hack The Box?

Welcome! Super excited you dropped by

At the end of this journey, you’ll become a proud member of Hack The Box, with the ultimate mission to raise cyber resilience, so that every organization can stay ahead of tomorrow’s threats.

As an Internal Platform Engineer, you will own and evolve the internal tooling and enterprise platforms that keep a 300+ person, globally distributed company running securely and productively. This is not a helpdesk role — you’ll be the engineering backbone behind identity & access management, corporate email and collaboration, device management, SaaS orchestration and our centralised AI/LLM gateway. You’ll ensure that every team at HTB has the right tools, properly integrated, secured and automated.

Engineer, integrate and operate HTB’s internal platform stack — from identity (Okta) and email (Google Workspace) through endpoint management (Jamf/Intune) and security tooling (SIEM, EDR) to our centralised LLM gateway — so that the company scales securely without friction.

• Europe/Greece
• Choose between fully remote work across Europe or relocating to our Athens Tech Hub with relocation support.

Fully Remote / Hybrid (2 days in the office, 3 days remote, plus one month of work from anywhere) - If only in Greece:
When hiring in Greece, we’re open to candidates from all locations. Those based within 55 km of our Athens office will follow a hybrid work model. For candidates located beyond that radius, a fully remote arrangement is available.

• We offer a 10% relocation bonus on the annual salary to support your move.
• In addition, you would benefit from a 50% tax reduction on your income as part of the relocation.
• We’ll support you with accommodation during the first few weeks

Identity & Access:
Okta (SSO, SCIM, Lifecycle Management, Okta Workflows), Google Workspace (Gmail, Drive, Admin Console)

Endpoint & Device Management:
Jamf Pro (macOS/iOS), Microsoft Intune (Windows), Kolide / osquery

Security & Compliance:
Crowd Strike Falcon (EDR), Elastic SIEM / Splunk, Vanta or Drata (compliance automation), Hashi Corp Vault (secrets management)

AI / LLM Gateway:
LiteLLM or Portkey (centralised LLM routing, cost controls, audit logging), API key management

Collaboration & Productivity:
Slack, Atlassian (Jira, Confluence), Notion, Git Hub (org-level administration)

Automation & Integration:
Okta Workflows, Tines / Workato (SOAR / workflow automation), Terraform, Python scripting

Observability:
Datadog or Grafana Cloud (SaaS monitoring), Pager Duty (on-call & incident management)

• Administer and engineer Okta as the central identity provider: SSO integrations, SCIM provisioning/de-provisioning, MFA policies, Okta Workflows for lifecycle automation (onboarding, offboarding, role changes)
• Own Google Workspace administration: domain management, email routing and security policies (DKIM/DMARC/SPF), shared drives governance, DLP rules and Google Vault for eDiscovery/retention
• Deploy and operate a centralised LLM gateway (e.g. LiteLLM, Portkey) to give teams governed access to AI models with usage tracking, cost controls, rate limiting and audit logging
• Manage endpoint fleets via Jamf Pro (macOS/iOS) and Intune (Windows): OS patching, app deployment, compliance baselines, disk encryption enforcement
• Integrate and maintain EDR (Crowd Strike Falcon or equivalent) and SIEM (Elastic/Splunk) for corporate endpoint and SaaS log visibility
• Operate and improve compliance automation tooling (Vanta/Drata) to maintain continuous SOC 2, ISO 27001 and similar…