MAS - Marcelle Consulting LLC - 47QTCA21D0057

Federal Supply Service

Authorized Federal Supply Schedule Price List

On-line access to contract ordering information, terms and conditions, up-to-date pricing, and the option to create an electronic delivery order are available through GSA

Advantage!®, a menu-driven database system. The INTERNET address GSA

Advantage!® is: GSAAdvantage.gov.

Multiple Award Schedule

FSC Group: Information Technology

Contract number: 47QTCA21D0057

For more information on ordering from Federal Supply Schedules click on the FSS

Schedules button at fss.gsa.gov.

Contract period: February 11, 2021 through February 10, 2026

Marcelle Consulting LLC

12800 Gristmill Lane

Bowie, MD 20721

412-874-8084 https://marcelleconsultants.com/

Contract administration source: Marcus Haines

Business size:

SMALL

Small Disadvantaged Business

Minority Owned Business

Price list current as of effective: 2/11/2021

CUSTOMER INFORMATION

1a. Table of awarded special item number(s) with appropriate cross-reference to item descriptions and awarded price(s).

SINs Recovery SIN Title

54151S 54151S Information Technology Services

54151HACS 54151HACS Highly Adaptive cybersecurity Services

1b. Identification of the lowest priced model number and lowest unit price for that model for each special item number awarded in the contract. This price is the Government price based on a unit of one, exclusive of any quantity/dollar volume, prompt payment, or any other concession affecting price. Those contracts that have unit prices based on the geographic location of the customer, should show the range of the lowest price, and cite the areas to which the prices apply. See price list below

1c. If the Contractor is proposing hourly rates, a description of all corresponding commercial job titles, experience, functional responsibility and education for those types of employees or subcontractors who will perform services shall be provided. If hourly rates are not applicable, indicate “Not applicable” for this item. See labor category descriptions below

2. Maximum order: 54151S: $500,000

54151HACS: $500,000

3. Minimum order: $100

4. Geographic coverage (delivery area). Domestic

5. Point(s) of production: Bowie, MD, US

6. Discount from list prices or statement of net price. Government Net Prices (discounts already deducted.)

7. Quantity discounts. 1% on orders over $250,000

8. Prompt payment terms. Information for Ordering Offices: Prompt payment terms cannot be negotiated out of the contractual agreement in exchange for other concessions. 1% 15 days /Net 30 days

9a. Notification that Government purchase cards are accepted at or below the micro-purchase threshold.

Yes

9b. Notification whether Government purchase cards are accepted or not accepted above the micro-purchase threshold. Will Accept

10. Foreign items (list items by country of origin). Not Applicable

11a. Time of delivery. (Contractor insert number of days.) Contact Contractor or To Be Determined at the Task Order level

11b. Expedited Delivery. Items available for expedited delivery are noted in this price list. Contact

Contractor or To Be Determined at the Task Order level

11c. Overnight and 2-day delivery. Contact Contractor or To Be Determined at the Task Order level

11d. Urgent Requirements. Contact Contractor or To Be Determined at the Task Order level

12. F.O.B. point(s). Destination

13a. Ordering address: 12800 Gristmill Lane, Bowie, MD 20721

13b. Ordering procedures: For supplies and services, the ordering procedures, information on Blanket

Purchase Agreements (BPA’s) are found in Federal Acquisition Regulation (FAR) 8.405-3.

14. Payment address: 12800 Gristmill Lane, Bowie, MD 20721

15. Warranty provision. Standard Commercial Warranty Terms & Conditions

16. Export packing charges, if applicable. Not Applicable

17. Terms and conditions of Government purchase card acceptance (any thresholds above the micro-purchase level). Contact Contractor

18. Terms and conditions of rental, maintenance, and repair (if applicable). Not Applicable

19. Terms and conditions of installation (if applicable). Not Applicable

20. Terms and conditions of repair parts indicating date of parts price lists and any discounts from list prices (if applicable). Not Applicable

20a. Terms and conditions for any other services (if applicable). Not Applicable

21. List of service and distribution points (if applicable). Not Applicable

22. List of participating dealers (if applicable). Not Applicable

23. Preventive maintenance (if applicable). Not Applicable

24a. Special attributes such as environmental attributes (e.g., recycled content, energy efficiency, and/or reduced pollutants). Not Applicable

24b. If applicable, indicate that Section 508 compliance information is available on Electronic and

Information Technology (EIT) supplies and services and show where full details can be found (e.g.

contractor’s website or other location.) The EIT standards can be found at: www.Section508.gov/.

Not Applicable

25. Data Universal Number System (DUNS) number. 078738321

26. Notification regarding registration in System for Award Management (SAM) database. Contractor registered and active in SAM

Labor Category Rates

SIN/SIN(s) Service Price Offered to GSA

54151HACS

54151S IT Subject Matter Specialist $118.01

54151S Project Manager $118.01

54151HACS Security Coordinator $101.56

54151HACS

54151S Technical Subject Matter Specialist $118.01

54151HACS Test Engineer $107.16

54151HACS

54151S Web Security Analyst $86.45

54151HACS Quality Assurance Specialist $87.05

54151HACS

54151S Data Security Analyst $91.89

54151HACS Information Assurance Engineer $108.33

54151HACS Information Assurance Network Specialist $91.89

54151HACS

54151S Information Assurance Developer Engineer $108.06 http://www.section508.gov/

Escalation (2.2%)

Year 1 Year 2 Year 3 Year 4 Year 5

SIN Labor Category GSA PRICE + IFF Current

GSA PRICE +

IFF

GSA

PRICE

+ IFF

GSA

PRICE

+ IFF

GSA

PRICE

+ IFF

54151HACS

54151S IT Subject Matter Specialist

$118.01 $120.96 $123.98 $127.08 $130.26

54151S Project Manager

$118.01 $120.96 $123.98 $127.08 $130.26

54151HACS Security Coordinator

$101.56 $104.10 $106.70 $109.37 $112.11

54151HACS

54151S Technical Subject Matter Specialist

$118.01 $120.96 $123.98 $127.08 $130.26

54151HACS Test Engineer

$107.16 $109.84 $112.59 $115.40 $118.29

54151HACS

54151S Web Security Analyst

$86.45 $88.61 $90.83 $93.10 $95.43

54151HACS Quality Assurance Specialist

$87.05 $89.23 $91.46 $93.75 $96.09

54151HACS

54151S Data Security Analyst

$91.89 $94.19 $96.54 $98.95 $101.43

54151HACS Information Assurance Engineer

$108.33 $111.04 $113.82 $116.66 $119.58

54151HACS

Information Assurance Network Specialist

$91.89 $94.19 $96.54 $98.95 $101.43

54151HACS

54151S

Information Assurance Developer Engineer

$108.06 $110.76 $113.53 $116.37 $119.28

Labor Category Descriptions

IT Subject Matter Specialist

Responsible for conducting Risk Assessments on FedRAMP vendors and providing senior consultation to clients. Assist in all phases of the Risk Management Framework (RMF), including documenting and assessing information systems according to NIST requirements. Responsible for providing oversight and approvals for access and changes to information systems. The specialist is responsible for performing audit log and account management reviews to identify suspicious activity. The specialist is responsible providing security support during the discovery and response during the incident response process. The specialist is responsible for performing asset management, configuration management, and vulnerability management for Critical Infrastructure, Mission Essential Systems, and High valued Assets. The specialist is responsible for assisting with Internal and External Audits. Responsible for providing senior level support on FISMA compliance requirements.

Minimum Education: Bachelor’s Degree

Minimum Years of Experience: 7

Project Manager

Responsible for the management of all Information Technology Professionals and ensuring the quality and completion of all aspects of the Statement of Work. The Project Manager effectively communicates with the clients on project progress and risk. The Project Manager will manage the schedule of all activities. The individual should be well versed in the Risk Management Framework and industry best practices for security.

Security Coordinator

Security coordinators develop and implement the physical protection of the people and property of a business or residence. They are generally behind the scenes and provide continuous monitoring of, and feedback to, the security guards that provide the visible protection. The Security Coordinator is responsible for the review of all and assessment of Physical controls. The Security Coordinator ensures the Physical environment meets the Physical controls outlined in NIST 800-53. The Security

Coordinator will ensure procedures related to the sanitization of data are implemented in a secure manner. The Security Coordinator should be well versed in all steps in the Risk Management

Framework. The coordinator should have the ability to schedule assessment & evaluation activities.

Minimum Years of Experience: 5

Technical Subject Matter Specialist

Responsible for providing Information System Security Officer (ISSO) support services. The Specialist should have a detailed understanding of specific operating systems, cloud environments, and various operating environments. The Specialist will provide the client with expert opinion on the use of new software services and technologies prior to implementation into a production environment. Responsible for conducting Risk Assessments on FedRAMP vendors and providing senior consultation to clients.

Assist in all phases of the Risk Management Framework (RMF), including documenting and assessing information systems according to NIST requirements. Responsible for providing oversight and approvals for access and changes to information systems. The specialist is responsible for performing audit log and account management reviews to identify suspicious activity. The specialist is responsible providing security support during the discovery and response during the incident response process. The specialist is responsible for performing asset management, configuration management, and vulnerability management for Critical Infrastructure, Mission Essential Systems, and High valued Assets. The specialist is responsible for assisting with Internal and External Audits

Test Engineer

The Test Engineer is responsible for conducting security control assessments using the NIST 800-53 security controls. The Assessment should include automated test on Web applications, Operating

Systems, and Databases. The assessor shall perform port scanning and network evaluations. The Test

Engineer shall evaluations of the clients Web Access Points, Spam Email Filters, VPN solution, firewall, routers, and switches. The Test Engineer is responsible for attempting to phish and conduct penetration test on the clients network.

Web Security Analyst

The Web Security Analyst is responsible for the risk posture of the Web applications. The Analyst is responsible for conducting penetration test on the clients Network from public domains. The Analyst is responsible for ensure the implementation of all security compliance activities for the web applications.

These activities include conducting vulnerability assessment scans to ensure the any open weaknesses are scheduled for remediation. The Analyst shall also use the scans to ensure the web application is configured to industry standards and that secure methods are used for transporting data. The analyst is responsible for performing adversary assessments and firewall evaluations.

Minimum Years of Experience: 3

Quality Assurance Specialist

Responsible for ensuring information systems are categorized in accordance with FISMA and NIST requirements. The specialist will ensure the appropriate security controls were selected for an information system and the controls are properly documented in a System Security Plan. The Specialist is responsible for the management of the development of Plans of Actions and Milestones (POA&M) for identified weaknesses. The Specialist ensure the plans are implemented in accordance with the identified timelines. The Specialist manages and ensures the quality of all aspects of the security program.

Data Security Analyst

Responsible for the protection of the organizations data from internal and external exploit. Prepare for and conduct compliance activities in compliance with Federal Guidelines (NIST 800-53, 800-53A, 800-

37, etc.) and client requirements. Create complete, reliable, and trustworthy information for organizational officials to support risk management decisions, reciprocity of assessment results, information sharing, and FISMA compliance. Analyze and interpret data to unearth vulnerabilities;

Formulate prioritized recommendations with attention to client limitations. Complete Security

Authorization packages, to include system security plans, security assessment reports, POAM summaries and a continuous monitoring plan/assessment schedule, and present executive briefing to the government client management.

Information Assurance Engineer

Responsible for securing the clients infrastructure. The engineer is responsible for installing and configuring security tools such as SIEM tools, anti-virus software, and other detection & monitoring tools. The engineer is responsible for ensuring infrastructure tools are secure, properly configured, implementing the correct encryption standards, and implementing the appropriate defense in-depth measures. The Engineer will assist in providing expertise on the security measures related to the design of the clients’ infrastructure. The Engineer will conduct assessments of new technologies to determine potential impacts.

Information Assurance Network Specialist

Responsible for securing the clients network. The Specialist is responsible for securing the firewalls, routers, switches, Intrusion Detection & prevention systems on the clients’ network. The Specialist is responsible for conducting assessments on the clients’ network to identify potential exploits. The

Specialist are responsible for ensuring the network is configured in accordance with NIST requirements.

Information Assurance Developer Engineer

Responsible for securing the clients infrastructure. The engineer is responsible for installing and configuring security tools such as SIEM tools, anti-virus software, and other detection & monitoring tools. The engineer is responsible for ensuring infrastructure tools are secure, properly configured, implementing the correct encryption standards, and implementing the appropriate defense in-depth measures. The Engineer will assist in providing expertise on the security measures related to the design of the client’s infrastructure. The Engineer will conduct assessments of new technologies to determine potential impacts.

Service Contract Labor Standards: The Service Contract Labor Standards (SCLS), formerly known as the Service Contract Act (SCA), is applicable to this contract as it applies to the entire Multiple

Award Schedule (MAS) and all services provided. While no specific labor categories have been identified as being subject to SCLS/SCA due to exemptions for professional employees (FAR 22.1101,

22.1102 and 29 CRF 541.300), this contract still maintains the provisions and protections for

SCLS/SCA eligible labor categories. If and / or when the contractor adds SCLS/SCA labor categories to the contract through the modification process, the contractor must inform the Contracting Officer and establish a SCLS/SCA matrix identifying the GSA labor category titles, the occupational code, SCLS/SCA labor category titles and the applicable WD number. Failure to do so may result in cancellation of the contract.