Attachment_A_-_Labor_Categories_A0001_Clean.docx

ATTACHMENT A – LABOR CATEGORIES

B.4(b) Position Descriptions

B4.1 Software Development Manager

Functional

· Under the general direction of the Program Manager, the Software Development Manager is responsible for the analysis, design, and development and integration of new software modules and enhancements. Manages development project from initial design through testing.

· The Software Development Manager is responsible for the development of software systems using a knowledge of techniques, procedures, and processes such as operating system theory, data structures, computer system architecture, Software engineering, and computer communications.

· Develop and maintain systems or applications involving a wide variety of programming and languages, including prototypes that are meeting the functional and security requirements.

· Build or configure windows, screens, and reporting solutions.

· Modify, repair, or expand existing programs to correct errors, increase efficiency, upgrade interfaces, or improve performance.

· Researches product development options and provides analysis for product direction.

· Perform trial runs for testing and analysis on software and systems to identify problems.

· Contribute to training manuals or instructions for end users.

· Evaluate the effectiveness of implemented software.

· Research and remain informed of new technology and development tools.

· Manages a software development team consisting of software application programmers, database engineers and administrators, architects and documentation specialists. Provides leadership and work guidance to less experienced personnel.

· Responsible for the development of integrated computer systems using a knowledge of computer software concepts such as data representation, data structures, file systems, operating systems, computer languages, software development methodologies, and network protocols.

· Responsible for the development of problem-oriented and nonprocedural languages and their translating/operating systems, construction of input-output buffering schemes, and design of automatic scheduling and monitoring methods to increase scope and effectiveness of computer applications.

· Test and debug applications, resolving performance issues and making revisions when necessary.

Clearance

· To Be Determined at Task Order Level

Education and Related Experience

· Bachelor's degree in computer science Information Systems, or Business; or the equivalent combination of education, technical training, or work experience. Master’s degree in Computer Science preferred

· Minimum of (5) years of progressive management experience

· Ability to prepare management, business, technical, and personnel reports, reviews, and documents for internal and external use.

· Requires ten (10) years of progressively responsible systems integration related experience that demonstrates a high level of understanding of the standard tools, workflow processes, and/or procedures and concepts used

· Requires extensive experience in software design and development, a working knowledge of various platforms and languages, and experience leading projects and teams.

· Must have strong technical and analytical skills, with expert knowledge of computer software languages, platforms, and current methodologies.

· Must have strong budgeting, leadership, and managerial abilities, including the ability to hire, train, and evaluate staff through performance reviews.

· Excellent written and verbal communication skills are essential for collaborating with various levels of management, determining software requirements, and delivering effective solutions.

· Advanced verbal and written communication skills

· Strong critical thinking and analytical skills Strong problem solving skills

· Demonstrated leadership skills and team focus Must be able to work under pressure, following a plan and balancing competing requests by priority

· Strong customer service and team focus is required

B.4.2 Information Systems Security Manager Functional

· Under the general direction of the Program Manager, formulates the approach for the design, test, and implementation of secure operating systems, networks, security monitoring, tuning and management of IT security systems and applications, incident response, digital forensics, and loss prevention actions.

· Manages a security team consisting of engineers, architects and documentation specialists. Provides leadership and work guidance to less experienced personnel.

· Identifies security risks, threats and vulnerabilities of networks, systems, applications and new technology initiatives. Develops, tests and operates firewalls, intrusion detection systems, enterprise anti-virus systems and software deployment tools.

· Provides security validation of complex engineering analysis and support for firewalls, routers, networks and operating systems. Performs and evaluates vulnerability scans within a multi-platform, large enterprise environment.

· Reacts to and initiates corrective action regarding security violations, attempts to gain unauthorized access, virus infections that may affect the network or other event affecting security.

· Oversees user access process to ensure operational integrity of the system. Enforces the information security configuration and maintains system for issuing, protecting, changing and revoking passwords.

· Develops technical and programmatic assessments, evaluates engineering and integration initiatives and provides technical support to assess security policies, standards and guidelines.

· Develops, implements, enforces and communicates security policies and/or plans for data, software applications, hardware and telecommunications.

· Performs complex product evaluations, recommends and implements products/services for network security. Validates and tests complex security architecture and design solutions to produce detailed engineering specifications with recommended vendor technologies.

· Reviews, recommends and oversees the installation, modification or replacement of hardware or software components and any configuration change(s) that affects security.

· Provides complex technical oversight and enforcement of security directives, orders, standards, plans and procedures at server sites.

· Assesses the impact on the business unit/customer caused by theft, destruction, alteration or denial of access to information and reports to senior management.

· Conducts risk and vulnerability assessment at the network, system and application level.

· Develops and implements security controls and formulates operational risk mitigations along with assisting in security awareness programs.

· Involved in a wide range of security issues including architectures, firewalls, electronic data traffic, and network access.

· Research, evaluate and recommend new security tools, techniques, and technologies and introduce them to the enterprise in alignment with IT security strategy.

· Develop the system security plan to include security controls, contingency plan for the EHR system and other related security documents required for A&A.

· Review and develop a plan for remediation of DOS IRM/IA A&A audits and assessments

· Perform reviews of existing and future technologies and standards, and advise the Senior Management of the implications that such technologies and standard may have on Customer IT security.

· Serve as a AISSO for MED and liaison between the MED and DOS IRM/IA

· Collaborate with Change, Problem, and Release Management for security impacts to the environment

· Review new security solutions designs and specifications to validate they are ready for existing security operations environment.

· Review the design, installation, management and implementation of requested changes to the following components of the IT security infrastructure in accordance with DOS, FISMA and NIST guidelines:

· Firewalls

· Host Intrusion Detection/Prevention Systems

· Network Intrusion Detection/Prevention System

· VPN Concentrators

· Web Content Filtering

· Malware (Anti-virus/Anti-spyware)

· Anti-Spam

· Remain current with trends in security technologies, processes, and methods that can improve the Customer IT infrastructure security posture, the efficiency and effectiveness of security operations, and the quality of security services provided and, shall advise Customer accordingly.

· Provide recommendations to the PM and COR

· Present recommendations to CISO as needed

· Identify applications and operating systems machine data and logs for SIEM analysis.

Clearance

· To Be Determined at Task Order Level

Education and Related Experience

· BS degree in Computer Science, or other IT related fields, Cyber, or Information Assurance or 10+ years of experience as an ISSO in lieu of a Bachelor’s degree

· CISSP, Security+ or equivalent certification

· Minimum of (5) years of progressive management experience

· At least ten years of hands on experience in work similar to that being supervised

· Ability to prepare management, business, technical, and personnel reports, reviews, and documents for internal and external use.

· 5years of experience in network, host, data and/or application security in multiple operating system environments

· Broad range of knowledge and experience with Security and System Architecture

· Understanding of, and experience applying industry security policies, regulations and guidelines such as NIST, FISMA, and SANs top 20 controls, etc.

· Knowledge of change control and change management process, project management, Enterprise Architecture frameworks, SDLC, Security Policy.

· Knowledge of ports, protocols, and the OSI Model

· Knowledge of key security capabilities such as e-forensics, logging/SIEM, risk management, PKI, IPsec, vulnerability management, A&A, continuous monitoring, disaster recovery, network and endpoint security.

· Experience conducting analysis and providing recommendations on new or existing security capabilities.

· Experience with the Federal government preferably with DOS or DHS

· Good communication and presentation skills at all organization levels.

· Experience working with IP networking, networking protocols and understanding of security related technologies including encryption, IPsec, PKI, VPNs, firewalls, proxy services, DNS, electronic mail and access-lists

· Experience working with internet, web, application and network security techniques

· Experience working with relevant operating system security (Windows, Solaris, Linux, etc.)

· Experience working with leading firewall, network scanning and intrusion detection

· Strong analytical and problem solving skills to troubleshoot and resolve security issues

· Ability to perform and interpret vulnerability assessments

· Ability to administer the operations of a security infrastructure

· Ability to balance and prioritize work and work in a team environment

B.4.3 Senior Systems Interface Engineer Functional

· Under the general direction of the Program Manager, the Senior Systems Interface Engineer is responsible for the design and implementation of system interface solutions within the Government’s existing and evolving IT systems environment.

· Responsible for integration of project installations and implementations, as assigned.

· Responsible for organizational integration technologies and platforms, interface configuration in a multi-system integration environment with packaged application customization, and custom integration development, with integration programming, analysis, coding, design, development, configuration, implementation, testing, documentation, application programming and solution analysis, support, maintenance and troubleshooting.

· Responsible in providing integration solutions, that comply with DoS security requirements, to include but not limited to;

· Exchanging data with other database and application systems

· Integration of medical and other system software and hardware to application systems

· Printing and messaging solutions

· Remote access and portable solutions

· Multi-Factor Authentication

· Responsible for developing ICDs and IDDs for interface systems

· Research, design, develop, and/or modify enterprise-wide systems and/or applications software.

· Responsible for meeting software compliance standards.

· Document testing and maintenance of system corrections.

· Develop, document, and analyze user requirements to define the problem at hand.

· Communicate openly with requirements, design, development and test team members.

· Demonstrate solid problem solving and debugging skills to determine the root cause of a software defect.

· Prior experience managing or supporting customers within the USG intelligence community (IC) agency is highly preferred.

Clearance

· To Be Determined at Task Order Level

Education and Related Experience

· Master’s degree in Computer Science, Information Systems, or Business; or the equivalent combination of education, technical training, or work experience.

· Ability to prepare technical documents for internal and external use and present technical concepts

· Requires ten (10) years of progressively responsible systems integration related experience that demonstrates a high level of understanding of the standard tools, workflow processes, and/or procedures and concepts used in the deployment and development of system integration solutions necessary to run PHIMS systems

· Significant experience in integration technologies and platforms within the USG, preferable within the DOS, interface configuration in a multi system, integration environment with packaged application customization, and custom integration development, with integration programming, analysis, coding, design, development, configuration, implementation, testing, documentation, application programming and solution analysis, support, maintenance, and troubleshooting

· Must be able to work under pressure, following a plan and balancing competing requests by priority

· Strong customer service and team focus is required

· Significant experience in applicable and various development technologies and platforms, and diverse experience level in data communication technologies in a multi system-environment

· Knowledge of process/workflow engineering. Integration experience with previous integrated business case management applications/systems

· Experience operating within the AWS cloud environment, with a strong preference toward experience in migrating medical informatics platforms to cloud-based IaaS and SaaS environments.

· The candidate shall possess high competency and technical skills in the development and operationalizing of application integration models in a multi-layer enterprise application environment

· Must demonstrate an in-depth working knowledge of system integration design principles

· Must be able to demonstrate problem solving skills, including defining severity and demonstrating appropriate escalation

· Knowledge of data analysis, business analysis, protocols, specifications, scripting, data architecture, programming, database administration, and standards compliance is required

· Must be able to create solutions to resolve complex operational problems, collaborating with vendors and users as required, and identify trends that warrant immediate attention

· Advanced verbal and written communication skills

· Strong critical thinking and analytical skills Strong problem solving skills

· Demonstrated leadership skills and team focus

· Must be able to maintain accountability for the timely resolution of specific issues and problems within a particular area, application, database, technology or system

B.4.4 Electronic Health Record Subject Matter Expert Functional

· Under the general direction of the Program Manager, the Electronic Health Record Subject Matter Expert is responsible for advising and guiding the design and implementation of clinical provider interfaces and modules to facilitate end-state utility, efficiency, and effectiveness.

· Responsible for obtaining, refining, and integrating clinical provider inputs to the final design as an integral member of the design team.

· Provides critical insight to plans for testing, collection and analysis of user feedback, and deployment of the final technical solution. Responsible for developing ICDs and IDDs for interface systems

· Develops, documents, and analyzes user requirements to define the problem at hand.

· Communicates openly with requirements, design, development and test team members.

· Demonstrates solid problem solving and debugging skills to determine the root cause of a software defect.

· Prior experience managing the development, refinement, and deployment of an enterprise-level Electronic Health Record within a large and geographically decentralized health system.

Clearance To Be Determined at Task Order Level Education and Related Experience

· Master’s degree in Computer Science, Information Systems, or Business; or the equivalent combination of education, technical training, or work experience.

· Medical Doctorate degree from an accredited School of Medicine in the United States.

· Minimum of (5) years of progressive management experience

· Ability to prepare management, business, technical, and personnel reports, reviews, and documents for internal and external use

· Requires five (5) years of progressively responsible health IT systems integration related experience that demonstrates a high level of understanding of the standard tools, workflow processes, and/or procedures and concepts used in the deployment and development of system integration solutions necessary to run PHIMS systems

· Must be able to work under pressure, following a plan and balancing competing requests by priority

· Strong customer service and team focus is required

· Knowledge of process/workflow engineering. Integration experience with previous integrated business case management applications/systems

· Must be able to demonstrate problem solving skills, including defining severity and demonstrating appropriate escalation

· Advanced verbal and written communication skills

B.4.5 Project Manager

Functional

· Serves as the single management focal point and is responsible for the execution of all services and projects under Task Order 2.

· Builds and maintains a strategic enterprise partner relationship with the Director of Quality Management.

· Apprises the COR of all significant issues in a timely manner.

· Provides strategic guidance, vision, and direction to the project team.

· Ensures program integration across task areas, work groups, and functional/technical teams and delegates administrative, financial, and coordination duties as necessary.

· Ensures use of innovative processes to plan, organize, and control all contract services and activities, manage risks and to monitor performance.

· Ensures all Task Order activities meet cost, schedule, quality, and performance requirements.

· Drives effective teamwork, communication, collaboration and commitment across multiple disparate groups with competing priorities

· Analyzes significant deviations from plan, takes corrective actions, and forecasts any impact on PHIMS Task Order deliverables.

· Oversees definition of and adherence to PHIMS standard processes.

Clearance To Be Determined at Task Order Level Educational and Related Experience

· MBA or MS/MA degree Management, Administration, Information Technology, Computer Science, Cyber Security or related Technical Discipline.

· Project Management Professional certification

· Excellent client facing and internal communications skills

· Solid organizational skills including attention to details and multi-tasking skills

B.4.6 Help Desk Specialist

Qualifications:

· Associate’s degree in an information technology area; or

· 3 years’ direct experience supporting computer systems and users within a federal Government IT work environment; and

· Technically fluent in Windows 10 desktop operating systems; and

· Technically fluent in Microsoft Office 2016 (or above) and Office 365 products

Clearance

· To Be Determined at Task Order Level

Skill requirements:

Knowledge Required by the Position – (Equivalent to OPM Level 1-7): This position serves as first line troubleshooter for software, hardware, mobile device, and system accounts problems, the resolution of which is critical to keeping MED employees productive. The position requires expert knowledge of the enterprise help desk system (Remedy) and a high degree of organizational ability. Able to effectively communicate via phone, email, and instant messenger.

Able to produce written technical documentation in a professional and technically correct format

Supervisory Controls – (Equivalent to OPM Level 2-4): As needed, this individual and the supervisor collaboratively discuss upcoming projects and problem areas and define objectives, plans, priorities, and deadlines. While most assignments have clear precedents requiring successive steps in planning and execution, the person in this position often collaborates with the team to plan for new requirements. The person in this position manages all MED IT inventory and property accountability.

Guidelines – (Equivalent to OPM Level 3-3): In this position, while a wealth of reference materials and standard operating procedures exists, the employee must use good, independent, judgement in analyzing root problem causes or knowledge gaps and applying appropriate methods.

Complexity – (Equivalent to OPM Level 4-3): The individual in this position will have the knowledge of office systems and MED systems sufficient to independently handle all types of requests, well beyond entry-level capability. Individual will triage all calls, resolving them when possible and referring to specialists as needed. The individual will provide support to customers with varying levels of computing skills, and support a wide range of applications.

Scope and Effect – (Equivalent to Level 5-4): Work involves resolving the complete range of problems within the scope of the help desk and referring problems requiring highly specialized expertise to the appropriate IT specialty office. The work also involves conducting trend analyses to identify areas where additional customer training and assistance is needed and initiating appropriate action, such as defining new training requirements. The effect of this work is to enable employees throughout MED to effectively use IT resources to meet their job requirements.

Personal Contact and Purpose of Contacts – (Equivalent to Level 2-B): The employee will meet Level 2 for Personal Contacts (employees and agencies inside and outside related units) with contact to employees and managers from various levels in the agency. For Purpose of Contacts, the position meets the criteria for Level B: To plan, coordinate, or advise on work efforts, or to resolve issues or operating problems by influencing or persuading people who are working toward mutual goals and have basically cooperative attitudes. Contacts typically involve identifying options for resolving problems.

B.4.7 Network Administrator

· Bachelor's degree in information technology science; or

· Bachelor’s degree in a non-IT related field with 2 years direct experience supporting computer systems and users within a federal Government IT work environment; or

· 6 years’ direct experience supporting computer systems and users within a federal Government IT work environment; and

· 2 years of substantive experience with Windows Server 2008 (and above) software installation, configuration, and patching procedures; and

· 2 years of substantive experience in managing access controls and maintenance procedures within a Windows Server 2008 (and above) environment; and

· 1 year of substantive experience in managing backup and recovery functions using Avamar or a similar systems- and virtual machine level data recovery product;

· Requires an active security clearance at the SECRET level

Skill requirements:

Knowledge Required by the Position – (Equivalent to OPM Level 1-6): The individual in this position will perform routine and recurring tasks of administering MED’s information systems, such as monitoring and troubleshooting system availability; identifying and resolving issues and problems; preparing documentation; applying appropriate security measures; establishing and monitoring scheduled and ad hoc backups; and assisting customers. This individual will assist in the management of MED’s development environment, which will include ~20 virtual servers. Individual will manage peripherals and devices such as video teleconferencing equipment, printers, laptops, Dedicated Internet Network (DIN) workstations, Blackberries, iPhones, scanners, and backup off-site storage.

Supervisory Controls – (Equivalent to Level 2-4): The supervisor outlines overall objectives and available resources. The employee and supervisor, in consultation, discuss timeframes, scope of the assignment including possible stages, and possible approaches. The employee uses initiative and sound judgement in planning and performing assignments and resolving issues as they arise. Supervisor is kept informed of status of assignments, and will review results periodically.

Guidelines – (Equivalent to Level 3-4): In this position, while a wealth of reference materials and standard operating procedures (SOP) exists, the employee must use good, independent, judgement in analyzing root problem causes or knowledge gaps and applying appropriate methods.

Complexity – (Equivalent to Level 4-4): The individual in this position will have the knowledge of office systems and MED systems sufficient to independently evaluate unusual circumstances, interpret data, and employ a variety of techniques and methods best suited to the situation.

Scope and Effect – (Equivalent to Level 5-4): Work involves ensuring the high availability of all MED’s critical system servers running MS Windows 2008 and above. The individual will employ a range of tools and techniques to support the health of MED’s systems. The effect of this work is to enable employees throughout MED to effectively use IT resources to meet their job requirements.

Personal Contact and Purpose of Contacts – (Equivalent to Level 2-B): The employee will meet Level 2 for Personal Contacts (employees and agencies inside and outside related units) with contact to employees and managers from various levels in the agency. For Purpose of Contacts, the position meets the criteria for Level B: To plan, coordinate, or advise on work efforts, or to resolve issues or operating problems by influencing or persuading people who are working toward mutual goals and have basically cooperative attitudes. Contacts typically involve identifying options for resolving problems.

B.4.8 Program Manager

· MBA or MS/MA degree Management, Administration, Information Technology, Computer Science, Cyber Security or related Technical Discipline.

· Project Management Professional Certification

· Minimum of 15 years of experience with at least five years of experience as a Program Manager for large, complex major systems development, acquisitions, and/or systems engineering and integration efforts. Solid technical background, with understanding or hands-on experience in systems design, cyber security, software development and web technologies

· Excellent client facing and internal communications skills

· Solid organizational skills including attention to details and multi-tasking skills Clearance

· To Be Determined at Task Order Level

Skill requirements:

Knowledge Required by the Position – (Equivalent to OPM Level 1-8): The Program Manager (PM) is the senior Contractor representative supporting the PHIMS contract. The individual in this position exercises autonomy on behalf of the Contractor in projecting work requirements within the context of existing Task Orders, directs Contractor resources within the limitations of contract provisions, and implements current industry best practices for Program and Project Management.

Supervisory Controls – (Equivalent to Level 2-5): The incumbent supervises and directs the efforts of Contractor employees supporting the PHIMS contract in a manner that drives success and synchronizes efforts of parallel initiatives. The PM ensures program integration across task areas, work groups, and functional/technical teams and delegates administrative, financial, and coordination duties as necessary. Ensures use of innovative processes to plan, organize, and control all contract services and activities, manage risks and to monitor performance. Ensures all PHIMS task areas meet cost, schedule, quality, and performance requirements. Drives effective teamwork, communication, collaboration and commitment across multiple disparate groups with competing priorities

Guidelines – (Equivalent to Level 3-5): In this position, while a wealth of reference materials and standard operating procedures (SOP) exists, the PM exercises broad discretion in meeting contract objectives and deliverables, using independent judgement in analyzing root problem causes or knowledge gaps and applying appropriate methods.

Complexity – (Equivalent to Level 4-6): Analyzes significant deviations from plan, takes corrective actions, and forecasts any impact on PHIMS contract deliverables. Oversees definition of and adherence to PHIMS standard processes within an evolving IT regulatory and technological environment.

Scope and Effect – (Equivalent to Level 5-6): The PM is the focal point for all communications regarding current and future requirements, performance, and ultimate programmatic success or failure.

Personal Contact and Purpose of Contacts – (Equivalent to Level 2-C) The PM builds and maintains a strategic enterprise partner relationship with the DOS Director of Medical Informatics and the Director of Quality Management, apprises the COR of all significant issues in a timely manner, and may brief at the Assistant Secretary, Undersecretary, and Chief Information Officer level within the DOS.