MAS - SDA Solutions LLC - 47QTCA20D001S

GENERAL SERVICES ADMINISTRATION

Federal Acquisition Service Authorized Federal Supply Schedule FSS Price List

Online access to contract ordering information, terms and conditions, pricing, and the option to create an electronic delivery order are available through GSA Advantage!®.The website for GSA Advantage!® is: https://www.GSAAdvantage.gov.

Multiple Award Schedule (MAS) Contract Information Technology's Special Item Number Special Item No. (SIN) 54151S Information Technology Professional Services Contract and 54151HACS Highly Adaptive Cybersecurity Services Contract Number: 47QTCA20D001S Period Covered by Contract: November 6, 2019 to November 5, 2029 Modification Number: PS-0017 Effective: September 3, 2025

For more information on ordering go to the following website:

https://www.gsa.gov/schedules.

SDA Solutions LLC. P: (540) 226-3005

3751 Stonewall Manor F: (866) 551-6418

Triangle, VA 22172 www.sdasolution.com https://www.gsa.gov/schedules http://www.sdasolution.com/

TABLE OF CONTENTS

CUSTOMER INFORMATION

PRICING

CUSTOMER INFORMATION

1a. Table of awarded special item number(s):

SIN 54151S Information Technology Professional Services

SIN 54151HACS Highly Adaptive Cybersecurity Services (HACS)

High Value Asset (HVA) Assessments

Risk and Vulnerability Assessment (RVA)

Cyber Hunt

Incident Response

Penetration Testing

Incident Handling and Event Management (IHEM)

1b. Identification of the lowest priced model number and lowest unit price for that model for each special item number awarded in the contract: Not applicable.

1c. Hourly rates and labor category descriptions: NA

2. Maximum order: $500,000.

3. Minimum order: $100.

4. Geographic coverage (delivery area): The forty-eight (48) contiguous states and the District of Columbia, including Alaska, Puerto Rico, and Hawaii, as well as overseas areas.

5. Point(s) of production (city, county, and State or foreign country). Please refer to company address below.

6. Prices shown herein are net, discount deducted.

7. Quantity discounts. None.

8. Prompt payment terms. Discount1: 01.000 % if Payment is made within 20 days

9. Foreign items (list items by country of origin). NA

10a. Time of delivery. Time of delivery shall be negotiated between the Agency and SDA

10b. Expedited Delivery. N/A

10c. Overnight and 2-day delivery. N/A

10d. Urgent Requirements. N/A

11. F.O.B. point(s). Destination

12a. Ordering address(es). Ordering address is provided below:

SDA Solutions,LLC 3751 Stonewall Manor Drive Triangle, VA 22172

12b. Ordering procedures: See Federal Acquisition Regulation (FAR) 8.405-3.

13. Payment address(es).

SDA Solutions,LLC 3751 Stonewall Manor Drive

Triangle, VA 22172

14. Warranty provision. - NA

15. Export packing charges, if applicable. NA

16. Terms and conditions of rental, maintenance, and repair (if applicable). NA

17. Terms and conditions of installation (if applicable). Outlined in contract

18a. Terms and conditions of repair parts indicating date of parts price lists and any discounts from list prices (if applicable). Not Applicable.

18b. Terms and conditions for any other services (if applicable) Outlined in contract.

19. List of service and distribution points (if applicable). NA

20. List of participating dealers (if applicable). No dealers

21. Preventive maintenance (if applicable).-NA

22a. Special attributes such as environmental attributes (e.g., recycled content, energy efficiency, and/or reduced pollutants). Not Applicable

22b. Section 508 compliance information is available for the information and communications technology (ICT) products and services offered and show where full details can be found (e.g., Contractor’s website or other location). ICT accessibility standards can be found at https://www.section508.gov/.

Not Applicable

23. Unique Entity Identifier (UEI) number. PHLJXJHDEQD3

24. Notification Regarding Registration In System For Award Management (SAM) Database:

Contractor has an Active Registration in the SAM database.

https://www.section508.gov/

PRICING

Special Item No. (SIN) 54151S Information Technology Professional Services Rates Descriptions.

Description of corresponding commercial job titles, experience, functional responsibility and education.

Labor Category: Technical Lead II

Minimum/General Experience: 12 years total experience in the technical field with a minimum of 2 years as a lead.

Functional Responsibility:

(a) Provides analysis related to the design, development, and integration of hardware, software, man-machine interfaces and all system level requirements to provide an integrated IT solution.

(b) Develops integrated system test requirement, strategies, devices and systems.

(c) Directs overall system level testing.

(d) Provides recommendations for strategic IT investments.

Labor Category Nov. 2024- Nov. 2025

Nov. 2025- Nov. 2026

Nov. 2026- Nov. 2027

Nov. 2027- Nov. 2028

Nov. 2028- Nov. 2029

Technical Lead II $91.62 $93.45 $95.32 $97.23 $99.17

System Administrator $117.44 $119.79 $122.19 $124.63 $127.12

Test Engineer III $85.49 $87.20 $88.95 $90.73 $92.54

Enterprise Architect I $112.17 $114.42 $116.71 $119.04 $121.42

Subject Matter Expert I $141.69 $144.52 $147.42 $150.37 $153.37

Information System Security Officer - Sr

$106.43 $108.55 $110.72 $112.94 $115.19

Information System Security Engineer-Sr

$112.34 $114.59 $116.88 $119.21 $121.60

Data Base Administrator

$102.48 $104.52 $106.61 $108.75 $110.92

Information System Security Engineer - Jr $63.43 $64.70 $65.98 $67.30 $68.65

Information System Security Officer-Jr

$60.95 $62.17 $63.41 $64.68 $65.96

Systems Administrator

$120.86 $123.27 $125.74 $128.26 $130.83

Information Systems Security Manager

$143.43 $146.30 $149.22 $152.20 $155.24

Project Manager $127.22 $129.77 $132.37 $135.02 $137.72

Chief Architect $210.65 $214.86 $219.16 $223.55 $228.02

Enterprise Architect $189.16 $192.94 $196.80 $200.74 $204.75

Cloud Engineer $158.36 $161.52 $164.76 $168.05 $171.42

Minimum Education: BS, MS, or CS - or equivalent experience

Labor Category: Systems Administrator

Minimum/General Experience: Minimum of 10 years total experience in IT systems.

Functional Responsibility:

(a) Provides implementation, troubleshooting and maintenance of IT systems support.

(b) Manages IT system infrastructure and any processes related to these systems.

(c) Provides support to IT systems including: day-to-day operations, patching, backup and recovery, monitoring and problem resolution for all of the client problems.

(d) Provides second level problem identification, diagnosis and resolution of problems.

(e) Provides support for the dispatch system and hardware problems and remain involved in the resolution process.

(f) Provides support for the escalation and communication of status to agency management and internal customers.

(g) Must possess experience in one or more operating systems and architectures and associated hardware:

mainframe, mini, mobile, or client/server based.

Minimum Education: BS, MS, or CS - or equivalent experience

Labor Category: Test Engineer III

Minimum/General Experience: Minimum of 4 years total experience in the test and evaluation field.

Functional Responsibility:

(a) Designs, implements, and conducts test and evaluation procedures to ensure system functional, interoperability, and security requirements are met.

(b) Develops, maintains, and upgrades automated test scripts and architectures for application products.

(c) Writes, implements, and reports status for system test cases for testing, and identifies necessary tools required to support testing.

(d) Executes test cases and documents all results.

(e) Analyzes test cases and provides regular progress reports.

(f) Develops recommendations for workarounds, mitigations, and corrective actions to resolve test findings.

(g) Directs and/or participates in all phases of risk management assessments and software/hardware development with emphasis on analysis of user requirements, test design and test tools selection.

Minimum Education: BS, MS, or CS - or equivalent experience

Labor Category: Enterprise Architect I

Minimum/General Experience: Minimum of 8 total years’ experience developing or working with enterprise architecture.

Functional Responsibility:

(a) Provides high-level architectural expertise to managers and technical staff.

(b) Develops architectural products and deliverables for the enterprise and operational business lines.

(c) Develops strategy of system and the design infrastructure necessary to support that strategy.

(d) Advises on selection of technological purchases with regards to processing, data storage, data access, and applications development.

(e) Sets standards for the client/server relational database structure for the organization (SQL, ORACLE, SYBASE, etc.).

(f) Develops recommendations for strategic IT investments based on the feasibility of potential future projects to management.

Minimum Education: BS, MS, or CS - or equivalent experience

Labor Category: Subject Matter Expert I

Minimum/General Experience: 15 years total experience within the identified field, with a minimum of 3 years as a lead/senior level.

Functional Responsibility:

(a) Develops requirements from a project's inception to its conclusion for a specific IT subject matter area (i.e., simple to complex systems).

(b) Assists other project members with analysis and evaluation and with the preparation of recommendations for system improvements, optimization, development, and/or maintenance efforts in the following specialties:

information systems architecture; networking; telecommunications; automation; communications protocols;

risk management/electronic analysis; software; life-cycle management; software development methodologies;

modeling and simulation; disaster recovery; and requirements management.

(c) Develops recommendations for strategic IT investments.

Minimum Education: BS Degree in Computer Science, Information Systems, Engineering, Business or other related discipline, or comparable experience in the field.

Labor Category: Information System Security Officer- Sr

Minimum/General Experience: 5 Years of experience within the field

Functional Responsibility:

Defines information security policies, plans, and standards for various organizations. Supports security teams in implementing the information security controls, detecting intrusions, conducting vulnerability assessments and finding solutions to fix potential weak spots for breaches

Minimum Education: bachelor’s degree

Labor Category: Information System Security Engineer-Sr

Minimum/General Experience: 7 Years of experience within the field

Functional Responsibility: Executes security frameworks, planning, developing, and implementing security policies across multiple platforms. Ensures successful implementation and maintenance of defined standards.

Ensures compliance with IT Security Policies. Provides support in security management and security architect standards and documentation. Supports networking and security services in LAN, WAN and Internet network infrastructure. Oversees and monitors security devices. Provides technical support and consultation for enhancement to security configuration and fault resolution and escalation. Maintains security documentation.

Takes steps to prevent hacker intrusion. Conducts active penetration tests/vulnerability scans; discovers vulnerabilities in information systems and provides reports on discoveries.

Minimum Education: bachelor’s degree

Labor Category: Data Base Administrator

Minimum/General Experience: 4 Years experience in the field

Functional Responsibility: Develop and maintain the production, development and test of databases and data models which support the organizations client/server applications. Collaborate with Business Analysts and Software Developers in the creation and development of new database schemes, enhancement of legacy database schemes, data modeling as necessary to suit changing business needs. Assist Business Analysts in troubleshooting data integrity issues, data anomalies, and apply corrective enhancements were possible, using database tools. Work with Software/Hardware/Platform and Systems Engineers and System Operations staff to guaranteed availability of all systems. Ensure reliability of system and database backups, recovery schemes, as well as guarantee regularity of all system support and maintenance activity. Assist with database related technical issues, in query design, data access tuning, and clarification of data organizational structures.

Minimum Education: bachelor’s degree

Labor Category: Information System Security Engineer –Jr

Minimum/General Experience: 2 Years experience in the field

Functional Responsibility: Analyzes user’s requirements, concept of operations documents, and high- level system architectures to develop system requirements specifications. Analyzes system requirements and leads design and development activities. Guides users in formulating requirements, advises alternative approaches, and conducts feasibility studies. Provides technical leadership for the integration of requirements, design, and technology. Incorporates new plans, designs and systems into ongoing operations. Develops technical documentation. Develops system Architecture and system design documentation. Guide’s system development and implementation planning through assessment or preparation of system engineering management plans and system integration and test plans. Interacts with the Government regarding Systems Engineering technical considerations and for associated problems, issues, or conflicts. Ultimate responsibility for the technical integrity of work performed and deliverables associated with the Systems Engineering area of responsibility.

Communicates with other program personnel, government overseers, and senior executives.

Minimum Education: bachelor’s degree; A bachelor’s degree can substitute for 2 years’ experience

Labor Category: Information System Security Officer-Jr

Minimum/General Experience: None

Functional Responsibility: Under direct supervision, assists the information security management function of an organization, including the development, documentation, implementation, operation, and maintenance of an information security program; and conducts ongoing activities to preserve the availability, integrity, and confidentiality of organization information resources in compliance with applicable security policies and standards. Maintains security protocols; and safeguards the organization's computers, networks, and data against threats, such as security breaches, computer viruses, or attacks by cyber-criminals, avoiding loss of confidential information, and fines from regulatory agencies for failing to protect data. Communicates regularly with other managers and brings the organization's information security risks under explicit management control. May establish, update, and oversee the cybersecurity program of an information system or network.

May manage COMSEC resources (CNSSI 4009) or key custodian for a crypto key management system (CKMS).

May perform or assist with reviewing, developing, and navigating the system, team, and customer through the Authority to Operate (ATO) accreditation/ certification documentation process. May perform network self-inspections. May create new and/or edit existing documentation that forms the ATO package to include the System Security Plan and IS contingency plan. May develop Plan of Action and Milestone (POAMS) from vulnerability data and enter into the system of record

Minimum Education: bachelor’s degree

Labor Category: Systems Administrator

Minimum/General Experience: 4 Years of Experience in the field

Functional Responsibility: System Administrator I may develop, run tests on, implement, or maintain operating system and related software. The System Administrator 1s establish and implement standards for computer operations for compatibility between hardware and software, according to specifications and parameters. This individual troubleshoots and/or resolves software, operating system, and networking problems. The System Administrator 1 schedules, performs, or monitors system backups or, when necessary, performs data recoveries. The Level 1 performs more routine aspects of the position and is supervised by higher levels.

Minimum Education: bachelor’s degree

Labor Category: Information Systems Security Manager

Minimum/General Experience: 10 Years of experience in the field

Functional Responsibility: Industry leading expert in multiple cyber security tools, processes, architectures and demonstrates clear understanding of emerging threats to operations. Establishes goals and plans that meet Warfighter and system requirements. Expert knowledge of technical domain data requirements, system architecture, sensor/data sources, and overall industry. Expert in making recommendations on further project development and with specific systems enhancements. Ensures that the client and the organization is maximizing the impacts and potential of new systems. Implement strategies on organizational performance and technical standards. Provides technical/management leadership for the organization.

Minimum Education: Master’s Degree

Labor Category: Project Manager

Minimum/General Experience: 10 Years experience in the field

Functional Responsibility: Experience in project management of large projects - performing day-to-day management of the project, identifies issues and risks and recommends possible issue and risk mitigation strategies associated with the project. Ensuring that work performed within scope, consistent with requirements, and delivered on time and on budget. Experience in identifying critical paths, tasks, dates, testing, and acceptance criteria. Ability to provides solutions to improve efficiency (e.g., reduce costs while maintaining or improving performance levels). Ability to monitor issues and provide resolutions for up-to-date status reports. Experience in PMBOK planning and approach to project implementations. Experience with

Project Management of Large Enterprise level projects with proven implementation success. Ability to develop, communicate, and present project Documentation and reports. Expert with Microsoft Project, Excel, Visio and MS Word.

Minimum Education: bachelor’s degree

Labor Category: Chief Architect

Minimum/General Experience: 15 Years of experience in the field

Functional Responsibility: The primary focus of the Chief Architect is to lead the development and execution of a client’s technical strategy for mainframe migration projects. This individual will be an advocate for new, tested technology and inspire and engage both client and internal delivery team to adopt them in modernization projects. Key efforts include: • Develop and execute the migration roadmap for client projects. • Collaborate with other delivery teams to map client business and technical strategic needs into the project strategies. • Collaborate with client IT and Development teams to define technical strategies and approaches. • Engage in technical programs (including mentoring, pipelines, employee engagements) to serve as a technology advocate. The Chief Architect is the customer’s trusted advisor on an account and provides architectural leadership for Architectural Solutions that deliver measurable business value for the customer.

Minimum Education: bachelor’s degree

Labor Category: Enterprise Architect

Minimum/General Experience: 1 year in the field

Functional Responsibility: Establishes a technology strategy and roadmap that enables a portfolio or enterprise to support current and future business capabilities. The Enterprise Architect is responsible for designing and implementing the organization's infrastructure. They work with stakeholders to identify the organization's IT needs and develop a strategy to meet those needs. They also ensure that the organization's IT systems are secure, reliable, and scalable, and are aligned with the organization's overall goals and objectives.

Minimum Education: bachelor’s degree

Labor Category: Cloud Engineer

Minimum/General Experience: 2 Years in the field

Functional Responsibility: The Cloud Engineer I participates in the development, test, and management PaaS/SaaS/IaaS cloud platforms. Responsible for supporting CI/CD of solutioning in accordance with governance and business objectives. Supports planning, designing, and developing infrastructure in support of cloud-based applications. Follows security guidelines for all cloud environments.

Special Item No. (SIN) 54151HACS Highly Adaptive Cybersecurity Services (HACS) Services Rates Descriptions.

Subcategories.

High Value Asset (HVA) Assessments

Risk and Vulnerability Assessment (RVA)

Cyber Hunt

Incident Response

Penetration Testing

Incident Handling and Event Management (IHEM)

Labor Category Nov. 2024- Nov. 2025

Nov. 2025- Nov. 2026

Nov. 2026- Nov. 2027

Nov. 2027- Nov. 2028

Nov. 2028- Nov. 2029

Senior Cybersecurity Specialist $148.91 $151.89 $154.93 $158.04 $161.20

Cybersecurity Engineer $136.74 $139.47 $142.26 $145.10 $148.00

Information Assurance Specialist II $87.85 $89.60 $91.40 $93.22 $95.08

Security Assessor $130.35 $132.96 $135.62 $138.33 $141.10

Senior Information Security Specialist $121.56 $123.99 $126.47 $129.00 $131.58

Master Information Security Specialist $140.05 $142.85 $145.71 $148.62 $151.60

Cyber Security Engineer II $139.05 $141.83 $144.68 $147.57 $150.52

Cybersecurity Subject Matter Expertise

(SME)

$171.42 $174.84 $178.34 $181.90 $185.54

Cybersecurity Engineer $146.32 $149.24 $152.22 $155.26 $158.37

Cybersecurity Analyst $135.15 $137.85 $140.61 $143.43 $146.30

Labor Category: Senior Cybersecurity Specialist

Minimum/General Experience: 10+ years or PhD and 2-4 years, or master’s degree and 4-7 years, or BA/BS Degree and 5-9 years. Specialized operating system and/or meet either IAM level III or IAT Level III minimum certification standards.

Functional Responsibility:

a) Provides technical/management leadership on major tasks or technology assignments.

b) Establishes strategic goals and plans that meet project objectives.

c) Has domain and Subject Matter Expert (SME) technical knowledge.

d) Directs and controls activities for a client, having overall responsibility to ensure that technical requirements are met.

e) Provides specialized planning, design, development, implementation, integration, operations, maintenance, testing, or other support to one or more areas of cybersecurity.

f) Communicates through oral presentations, electronic communication, and reports the status and progress of cybersecurity issues.

g) Helps shape organization governance, risk, and compliance (GRC) through recommendations based on industry trends, current threats, and emergent needs.

https://www.gsaelibrary.gsa.gov/ElibMain/sinDetails.do?scheduleNumber=MAS&specialItemNumber=54151HACS&executeQuery=YES

Minimum Education: PHD, Master’s Degree, BA/BS - or equivalent experience

Labor Category: Cybersecurity Engineer

Minimum/General Experience: 1 Years of experience with bachelor’s degree or + 4 years’ experience in lieu of degree

Functional Responsibility:

a) Applies a set of disciplines for the planning, analysis, design, and construction of information systems within a cybersecurity environment.

b) Applies reverse engineering and reengineering disciplines to develop migration strategic and planning documents.

c) Performs business strategic systems planning, information planning and analysis. Performs process and data modeling in support of the planning and analysis efforts using both manual

d) Provides technical guidance in software engineering techniques and automated support tools.

Labor Category: Information Assurance Specialist II

Minimum/General Experience: 4 Years of experience with bachelor’s degree or + 4 years’ experience in lieu of

Functional Responsibility:

a) Tasks include meeting security requirements by the use of designing, developing, engineering, and implementation solutions.

b) Analyzes and defines security requirement for computer systems which include network layer hardware, workstations and servers

c) Responsible for integration and implementation of the computer system security solution.

d) During all phases of the system’s development life cycle, a performance of risk analysis of computer systems and applications is demonstrated.

e) Gathers and organizes technical information about an organization's mission goals and needs, existing security products, and ongoing programs in computer security.

f) Must demonstrate a complete understanding of and the ability to implement business security practices; current security tools; hardware/software firewalls and their implementation; different communications protocols; encryption techniques/tools and current internet technology.

g) Must demonstrate a complete understanding of Microsoft server operating systems, Active Directory (AD), and Group Policy Objects (GPOs).

Labor Category: Security Assessor

Minimum/General Experience: 10 Years of experience with bachelor’s degree or + 4 years’ experience in lieu of degree

Functional Responsibility:

a) Knowledge of information system administration and information network software/hardware including firewalls and intrusion detection systems.

b) Basic familiarity with information security procedures.

c) Safeguards network against unauthorized infiltration, modification, destruction, or disclosure.

d) May research, evaluate, test, recommends communicate and implement new security software or devices. Implements, enforces, communicates, and develops security policies or plans for data, software applications, hardware, and telecommunications.

e) Provides information to management regarding the negative impact caused by theft, destruction, alteration, or denial of access to information.

Labor Category: Senior Information Security Specialist

Minimum/General Experience: 7 Years of experience with bachelor’s degree or + 4 years’ experience in lieu of

Functional Responsibility:

a) The security assessor conducts comprehensive assessments of the management, operational, and technical security controls and control enhancements employed within or inherited by an information technology (IT) system to determine the overall effectiveness of the controls.

Labor Category: Master Information Security Specialist

Minimum/General Experience: 15 Years of experience with bachelor’s degree or + 4 years’ experience in lieu

Functional Responsibility:

(a) Determines enterprise information assurance and security standards.

(b) Develops and implements information assurance/security standards and procedures.

(c) Coordinates, develops, and evaluates security programs for an organization. Recommends information assurance/security solutions to support customers’ requirements.

(d) Identifies, reports, and resolves security violations.

(e) Establishes and satisfies information assurance and security requirements based upon the analysis of user, policy, regulatory, and resource demands.

(f) Supports customers at the highest levels in the development and implementation of doctrine and policies.

(g) Applies know-how to government and commercial common user systems, as well as to dedicated special purpose systems requiring specialized security features and procedures.

(h) Performs analysis, design, and development of security features for system architectures. (i) Analyzes and defines security requirements for computer systems which may include mainframes, workstations, and personal computers.

(j) Designs, develops, engineers, and implements solutions that meet security requirements.

(k) Provides integration and implementation of the computer system security solution.

(l) Analyzes general information assurance-related technical problems and provides basic engineering and technical support in solving these problems.

(m) Performs vulnerability/risk analyses of computer systems and applications during all phases of the system development life cycle.

(n) Ensures that all information systems are functional and secure.

Labor Category: Cyber Security Engineer II

Minimum/General Experience: 12 Years of experience with bachelor’s degree or + 4 years’ experience in lieu

Functional Responsibility:

b) Set-up, configuration and support of internal and external networks.

c) Identifying and analyzing systems requirements.

d) Developing and maintaining system applications and security.

e) Developing and maintaining network configurations.

f) Troubleshooting network performances issues.

g) Providing user support and guidance.

h) Recommending and implementing upgrades, patches, new applications and new equipment.

i) Developing and maintaining disaster recovery place.

j) Ensuring proper documentation, coordination and maintenance of multiple systems.

Labor Category: Cybersecurity Subject Matter Expertise (SME)

Minimum/General Experience: 12 Years of experience with bachelor’s degree or + 4 years’ experience in lieu

Functional Responsibility:

a) Incorporates threat intelligence into countermeasures to detect and prevent intrusions and malware infestation. Identifies threat actor tactics, techniques and procedures and based on indicators develops custom signatures and blocks.

Labor Category: Cybersecurity Engineer Minimum/General Experience: 2 Years experience in the field

Functional Responsibility: Plans, designs, implements, manages, monitors and upgrades security measures for the protection of the organizations data, systems and networks.

Minimum Education: bachelor’s degree

Labor Category: Cybersecurity Analyst

Minimum/General Experience: 2 Years experience in the field

Functional Responsibility: Deploys, tests, and operates firewalls, intrusion detection systems, enterprise anti-virus systems and vulnerability management tools. Safeguards the network against unauthorized infiltration, modification, destruction, or disclosure. May research, evaluate, test, recommend and implement new security software or devices. Implements, enforces, communicates, and develops security policies or plans for data, software applications, hardware, and telecommunications. Provides information to management regarding the negative impact caused by theft, destruction, alteration, or denial of access to information. Provides recommendations on information assurance engineering standards, implementation dependencies, and changing information assurance related technologies.