Senior IT Platform Engineer

Hack The Box is the leading cyber readiness platform focused on enhancing organizational cyber resilience by battle-testing and upskilling humans and AI agents. It serves Fortune 500 companies, governments, and MSSPs, providing gamified labs and live-fire simulations to improve offensive and defensive cyber capabilities. The company has over 4 million community members and 800+ enterprise customers and operates internationally with headquarters in the UK and offices in the US, Australia, and Greece.

• 3–7 years of professional experience in IT engineering or internal platform engineering with focus on enterprise SaaS and identity systems.
• Deep hands-on experience with Okta or comparable IdP (Azure AD/Entra ID, OneLogin) covering SSO, SCIM provisioning, and MFA management.
• Strong Google Workspace administration skills including domain management, email security, DLP, Vault, Admin SDK.
• Experience managing macOS and/or Windows fleets at scale with MDM tools like Jamf and Intune.
• Familiarity with SIEM platforms (Elastic, Splunk, Datadog Security) and EDR solutions (CrowdStrike, SentinelOne, Carbon Black).
• Comfortable scripting with Python and Bash and integrating SaaS tools via APIs.
• Solid understanding of network and application security fundamentals including OAuth 2.0/OIDC, SAML, SCIM, DKIM/DMARC/SPF, TLS, zero-trust principles.
• Ability to translate security and compliance requirements into practical engineering controls.
• Strong written communication skills for documentation and collaboration in remote environments.

Nice to have:

• Experience with centralized LLM/AI gateways (LiteLLM, Portkey, Kong AI Gateway).
• Hands-on with HashiCorp Vault, AWS Secrets Manager, or similar.
• Familiarity with compliance automation platforms like Vanta, Drata, Secureframe.
• Experience with SOAR/workflow automation tools such as Tines, Workato, Torq.
• Knowledge of Golang for internal tooling development.
• Okta Certified Professional/Administrator or Google Workspace Administrator certifications.
• Experience scaling internal platforms during rapid growth (100 to 500+ employees).

• Administer and engineer Okta as the central identity provider, including SSO integrations, SCIM provisioning/de-provisioning, MFA policies, and Okta Workflows.
• Own Google Workspace administration: domain management, email routing and security policies, shared drives governance, DLP rules, and Google Vault for eDiscovery and retention.
• Deploy and operate a centralized LLM gateway (e.g., LiteLLM, Portkey) with usage tracking, cost controls, rate limiting, and audit logging.
• Manage endpoint fleets using Jamf Pro (macOS/iOS) and Microsoft Intune (Windows): OS patching, app deployment, compliance baselines, disk encryption enforcement.
• Integrate and maintain EDR (CrowdStrike Falcon or equivalent) and SIEM (Elastic/Splunk) for endpoint and SaaS log visibility.
• Operate and improve compliance automation tooling (Vanta/Drata) to maintain audit readiness (SOC 2, ISO 27001).
• Manage secrets and credential distribution with HashiCorp Vault or similar, ensuring zero-trust access for service accounts and CI/CD pipelines.
• Administer SaaS platforms at the organization level: Slack (Enterprise Grid), Atlassian suite, Notion, GitHub (org/team/repo policies, SAML, audit logs).
• Build workflow automations using Tines, Workato, or Okta Workflows for repetitive IT and security operations.
• Maintain documentation, runbooks, and internal knowledge-base articles.
• Participate in on-call rotation for identity, email, and critical SaaS platform incidents.

Position is open to candidates willing to work fully remote across Europe or relocate to the Athens Tech Hub with relocation support. Hybrid work model applies for candidates within 55 km of Athens office; fully remote is available for candidates beyond that radius. This role is not a helpdesk position and requires participation in an on-call rotation.