Jira Platform & Identity Automation Engineer W2PE

Jira Platform & Identity Automation Engineer - (W2PE)

Trace3 is a leading transformative IT authority, providing technology solutions and consulting services to help clients achieve a competitive advantage through integration, automation, and innovation.

Trace3 is headquartered in Irvine, California, and employs more than 1,200 people across the United States, including major field offices in Denver, Indianapolis, Grand Rapids, Lexington, Los Angeles, Louisville, Texas, and San Francisco.

The Jira Platform & Identity Automation Engineer is responsible for designing and implementing automation and structured data models across Jira Service Management and Jira Assets. This short‑term (6‑month) contract with CU Boulder focuses on automating Active Directory access workflows and building scalable, maintainable systems that translate business processes into reliable, auditable automation.

• Design and implement automation that converts approved Jira tickets into AD group membership changes
• Integrate Jira workflows with execution platforms (e.g., Power Shell services or VMware Aria Orchestrator)
• Develop and maintain automation using Script Runner for Jira or equivalent tools
• Implement validation, idempotency, and error handling for automated actions
• Ensure all changes are logged, auditable, and attributable

• Design object schemas in Jira Assets for devices, infrastructure, applications, and services
• Define relationships between assets (e.g., system → owner → access groups)
• Establish data standards, governance, and lifecycle processes for Assets
• Integrate Assets with Jira forms to enforce structured input and reduce errors
• Define and implement separation between request intake (Jira), data/policy (Assets), and execution (automation/orchestration)
• Build integrations between Jira, Assets, and external systems via REST APIs
• Ensure scalability and maintainability of automation workflows

• Support and improve AD group lifecycle and access request processes
• Apply IAM principles including least privilege, role‑based access, and separation of duties
• Identify opportunities to reduce manual access provisioning and improve consistency

• Hands‑on experience with Active Directory, including security groups and group membership management
• Experience with Power Shell‑based administration
• Experience with Jira Service Management, including workflows, request types, and automation
• Experience designing or working with structured data models (CMDB, asset systems, or similar)
• Experience with scripting and automation
• Experience integrating systems via APIs
• Strong understanding of RBAC, least privilege, and separation of duties

Bachelors with 3+ years of experience or Master with 1+ year of experience

6 months

Full Time / On‑Site in Broomfield, CO

$55 to $75 per hour

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this position. Reasonable accommodations may be made to enable individuals with disabilities to perform these functions.

While performing the duties of this job, the employee is regularly required to:

• Remain in a stationary position for extended periods of time.
• Operate a computer, keyboard, and other office equipment using hands and fingers.
• Communicate effectively in person, over the phone, and through electronic means.
• Occasionally move about the office to access files, office equipment, and meeting spaces.
• Lift and/or move up to 15 pounds as needed.
• Maintain specific vision abilities, including close vision and the ability to adjust focus.

This position is performed within a secure, classified workspace. Employees must comply with all applicable security protocols and access control procedures, including restrictions on personal electronic devices and the handling of sensitive information.

At the core of Trace3’s DNA is our people. We are a diverse group of talented individuals who…