Jira Platform & Identity Automation Engineer - (W2PE)

Trace3•Broomfield, CO

5d•Onsite

About The Position

The Jira Platform & Identity Automation Engineer is responsible for designing and implementing automation and structured data models across Jira Service Management and Jira Assets. This is a short-term project (6 months) contract with CU Boulder. The role focuses on automating Active Directory (AD) access workflows and building scalable, maintainable systems that translate business processes into reliable, auditable automation. The engineer will support both the development of a structured asset/data model and the automation of high-volume AD group membership changes based on approved service requests.

Requirements

Hands-on experience with Active Directory, including security groups and group membership management
Experience with PowerShell-based administration
Experience with Jira Service Management, including workflows, request types, and automation
Experience designing or working with structured data models (CMDB, asset systems, or similar)
Experience with scripting and automation
Experience integrating systems via APIs
Strong understanding of RBAC, least privilege, and separation of duties
Bachelors with 3+ or Master with 1+ Years of Experience

Responsibilities

Design and implement automation that converts approved Jira tickets into AD group membership changes
Integrate Jira workflows with execution platforms (e.g., PowerShell services or VMware Aria Orchestrator)
Develop and maintain automation using ScriptRunner for Jira or equivalent tools
Implement validation, idempotency, and error handling for automated actions
Ensure all changes are logged, auditable, and attributable
Design object schemas in Jira Assets for devices, infrastructure, applications, and services
Define relationships between assets (e.g., system → owner → access groups)
Establish data standards, governance, and lifecycle processes for Assets
Integrate Assets with Jira forms to enforce structured input and reduce errors
Define and implement separation between request intake (Jira), data/policy (Assets), and execution (automation/orchestration)
Build integrations between Jira, Assets, and external systems via REST APIs
Ensure scalability and maintainability of automation workflows
Support and improve AD group lifecycle and access request processes
Apply IAM principles including least privilege, role-based access, and separation of duties
Identify opportunities to reduce manual access provisioning and improve consistency