Welcome to Hack The Box! We're excited you're interested in joining our mission to raise cyber resilience. As a Senior IT Platform Engineer, you'll own and evolve the internal tooling and enterprise platforms that keep our 300+ person, globally distributed company running securely and productively. This is not a helpdesk role — you'll be the engineering backbone behind identity & access management, corporate email and collaboration, device management, SaaS orchestration and our centralised AI/LLM gateway.
🏢 About Hack The Box
Hack The Box is a company dedicated to raising cyber resilience so that every organization can stay ahead of tomorrow’s threats. We're a globally distributed company with a mission to make the world more secure.
🎯 The Role
As an Internal Platform Engineer, you will engineer, integrate and operate HTB's internal platform stack — from identity (Okta) and email (Google Workspace) through endpoint management (Jamf/Intune) and security tooling (SIEM, EDR) to our centralised LLM gateway — so that the company scales securely without friction.
✅ Key Responsibilities
Administer and engineer Okta as the central identity provider: SSO integrations, SCIM provisioning/de-provisioning, MFA policies, Okta Workflows for lifecycle automation (onboarding, offboarding, role changes)
Own Google Workspace administration: domain management, email routing and security policies (DKIM/DMARC/SPF), shared drives governance, DLP rules and Google Vault for eDiscovery/retention
Deploy and operate a centralised LLM gateway (e.g. LiteLLM, Portkey) to give teams governed access to AI models with usage tracking, cost controls, rate limiting and audit logging
Manage endpoint fleets via Jamf Pro (macOS/iOS) and Intune (Windows): OS patching, app deployment, compliance baselines, disk encryption enforcement
Integrate and maintain EDR (CrowdStrike Falcon or equivalent) and SIEM (Elastic/Splunk) for corporate endpoint and SaaS log visibility
Operate and improve compliance automation tooling (Vanta/Drata) to maintain continuous SOC 2, ISO 27001 and similar audit readiness
Manage secrets and credential distribution using HashiCorp Vault (or similar), ensuring zero-trust access patterns for service accounts and CI/CD pipelines
Administer SaaS platforms at the org level: Slack (Enterprise Grid), Atlassian suite, Notion, GitHub (org/team/repo policies, SAML, audit logs)
Build workflow automations (Tines, Workato or Okta Workflows) for repetitive IT and security operations: access requests, alert triage, onboarding checklists
Maintain documentation, runbooks and internal knowledge-base articles so that common procedures are self-service where possible
Participate in on-call rotation for identity, email and critical SaaS platform incidents
📌 Required Qualifications
3–7 years of professional experience in IT engineering, internal platform engineering or infrastructure with a strong focus on enterprise SaaS and identity systems
Deep hands-on experience with Okta (or a comparable enterprise IdP: Azure AD/Entra ID, OneLogin) including SSO, SCIM provisioning and MFA policy management
Experience managing macOS and/or Windows fleets at scale using MDM tools (Jamf, Intune, Kandji or similar)
Familiarity with at least one SIEM platform (Elastic, Splunk, Datadog Security) and one EDR solution (CrowdStrike, SentinelOne, Carbon Black)
Comfortable writing automation scripts (Python, Bash) and working with APIs to integrate SaaS tools
Solid understanding of network and application security fundamentals: OAuth 2.0 / OIDC, SAML, SCIM, DKIM/DMARC/SPF, TLS, zero-trust principles
Ability to translate security and compliance requirements (SOC 2, ISO 27001) into practical engineering controls
Strong written communication for documentation, runbooks and cross-team collaboration in a remote-first environment
⭐ Desirable Experience
Being cyber security-minded is a strong plus — at HTB, this isn't an afterthought
🎁 Benefits
Relocation support available, including a 10% relocation bonus on the annual salary and a 50% tax reduction on your income as part of the relocation. Support with accommodation during the first few weeks is also provided.
🛂 Visa & Eligibility
Relocation support is offered, including assistance with accommodation during the first few weeks.
