Jira Platform & Identity Automation Engineer - (W2PE)

Jira Platform & Identity Automation EngineerBroomfield, Colorado, United StatesThe Jira Platform & Identity Automation Engineer is responsible for designing and implementing automation and structured data models across Jira Service Management and Jira Assets. This is a short-term project (6 months) contract with British Aerospace Engineering.

The role focuses on automating Active Directory (AD) access workflows and building scalable, maintainable systems that translate business processes into reliable, auditable automation. The engineer will support both the development of a structured asset/data model and the automation of high-volume AD group membership changes based on approved service requests.Summary of Essential Job Functions:AD Automation & Workflow ExecutionDesign and implement automation that converts approved Jira tickets into AD group membership changesIntegrate Jira workflows with execution platforms (e.g., PowerShell services or VMware Aria Orchestrator)Develop and maintain automation using ScriptRunner for Jira or equivalent toolsImplement validation, idempotency, and error handling for automated actionsEnsure all changes are logged, auditable, and attributableJira Assets (CMDB) Design & ImplementationDesign object schemas in Jira Assets for devices, infrastructure, applications, and servicesDefine relationships between assets (e.g., system ? owner ? access groups)Establish data standards, governance, and lifecycle processes for AssetsIntegrate Assets with Jira forms to enforce structured input and reduce errorsPlatform Integration & ArchitectureDefine and implement separation between request intake (Jira), data/policy (Assets), and execution (automation/orchestration)Build integrations between Jira, Assets, and external systems via REST APIsEnsure scalability and maintainability of automation workflowsIdentity & Access Management AlignmentSupport and improve AD group lifecycle and access request processesApply IAM principles including least privilege, role-based access, and separation of dutiesIdentify opportunities to reduce manual access provisioning and improve consistencyRequired Skills and Experience:Hands-on experience with Active Directory, including security groups and group membership managementExperience with PowerShell-based administrationExperience with Jira Service Management, including workflows, request types, and automationExperience designing or working with structured data models (CMDB, asset systems, or similar)Experience with scripting and automationExperience integrating systems via APIsStrong understanding of RBAC, least privilege, and separation of dutiesEducation: Bachelors with 3+ or Master with 1+ Years of ExperienceLength: 6 monthsLocation: Full Time/ On-Site in Broomfield, COClearance Requirement: SecretDOD 8570 Requirement: IAT - Level IISalary Range: $100 to $120 per hourPhysical Demands:The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this position. Reasonable accommodations may be made to enable individuals with disabilities to perform these functions.While performing the duties of this job, the employee is regularly required to:Remain in a stationary position for extended periods of time.Operate a computer, keyboard, and other office equipment using hands and fingers.Communicate effectively in person, over the phone, and through electronic means.Occasionally move about the office to access files, office equipment, and meeting spaces.Lift and/or move up to 15 pounds as needed.Maintain specific vision abilities, including close vision and the ability to adjust focus.Work Environment:This position is performed within a secure, classified workspace. Employees must comply with all applicable security protocols and access control procedures, including restrictions on personal electronic devices and the handling of sensitive information.Actual salary will be based on a variety of factors, including location, experience, skill set, performance, licensure and certification, and business needs. The range for this position in other geographic locations may differ. Certain positions may also be eligible for variable incentive compensation, such as bonuses or commissions, that is not included in the base salary.Estimated Pay Range$100 - $120 USDThe PerksComprehensive medical, dental and vision plans for you and your dependents401(k) Retirement Plan with Employer Match, 529 College Savings Plan, Health Savings Account, Life Insurance, and Long-Term DisabilityCompetitive CompensationTraining and development programsMajor offices stocked with snacks and beveragesCollaborative and cool cultureWork-life balance and generous paid time offOur CommitmentAt the core of Trace3's DNA is our people. We are a diverse group of talented individuals who understand the importance of teamwork and demonstrating leadership, character, and passion in all that we do.We're committed to fostering an inclusive workplace where everyone feels respected, valued, and empowered to grow. We recognize that embracing diversity drives innovation, improves outcomes, fosters collaboration, boosts teammate satisfaction, and builds a more inclusive culture.As an equal opportunity employer, Trace3 bases all employment decisions based on individual qualifications, merit, and business requirements. We do not engage in discrimination on the basis of race, color, religion, sex (including gender identity, sexual orientation, and pregnancy), national origin, age (40 or older), disability, genetic information, or any other characteristic protected by federal, state, or local law.Any demographic information provided is strictly voluntary, kept confidential in accordance with Equal Employment Opportunity (EEO) regulations, and will not be used in employment decisions, including hiring, promotions, or mentorship programs. We are committed to providing equal employment opportunities for all.If you require a reasonable accommodation to complete the application process or participate in an interview, please email ***To all recruitment agencies: Trace3 does not accept unsolicited agency resumes/CVs. Please do not forward resumes/CVs to our careers email addresses, Trace3 employees or any other company location. Trace3 is not responsible for any fees related to unsolicited resumes/CVs.