MAS - Operations & Security Integrated Solutions LLC - 47QTCA22D0043

GENERAL SERVICES ADMINISTRATION

Federal Supply Service

Authorized Federal Supply Schedule Price List

On-line access to contract ordering information, terms and conditions, up-to-date pricing, and the option to create an electronic delivery order are available through GSA Advantage!®, a menu-driven database system.

The INTERNET address GSA Advantage!® is: GSAAdvantage.gov.

Multiple Award Schedule

FSC Group: Information Technology Services FSC Class: D399

Contract Number: 47QTCA22D0043 Current Period: February 2, 2022 through February 1, 2027

Price list current as of Modification: PA-0003 effective 04/16/2024 Prices Shown Herein are Net (discount deducted)

Contractor: Operations and Security Integrated Solutions (O&SIS) 108 W. 4th Street, Panama City, FLA 32404

Telephone: 850-276-7892 Website: www.oandsis.com

Contract Administration: P. David Stewart E-mail: dstewart@oandsis.com

Business Size: Small business

For more information on ordering from Federal Supply Schedules go to the GSA Schedules page at GSA.gov.

http://www.oandsis.com/ mailto:dstewart@oandsis.com

CUSTOMER INFORMATION

1a. Table of Awarded Special Item Number:

SINs SIN Title 54151S Information Technology Professional Services

54151HACS Highly Adaptive Cybersecurity Services (HACS)

OLM Order-Level Materials (OLM’s)

1b. Lowest Priced Model Number and Price for Each SIN. See page 3

1c. Hourly Rates: See pages 3-10 for hourly rates and descriptions.

2. Maximum order:

SINs Maximum Order

54151S $500,000.00

54151HACS $500,000.00

3. Minimum order: $100.00

4. Geographic coverage (delivery area): Domestic

5. Points of production: Same as Contractor Address

6. Discount from list prices: Government Net Prices (discounts already deducted.)

7. Quantity discounts: None

8. Prompt payment terms: Net 30 days. Information for Ordering Offices: Prompt payment terms cannot be negotiated out of the contractual agreement in exchange for other concessions.

9. Foreign Items: None

10a. Time of Delivery: To Be Determined at the Task Order level

10b. Expedited Delivery: To Be Determined at the Task Order level

10c. Overnight and 2-day delivery: To Be Determined at the Task Order level

10d. Urgent Requirements: To Be Determined at the Task Order level

11. F.O.B. Points: Destination

12a. Ordering Address: 108 W. 4th Street, Panama City, FLA 32404

13. Payment address: 108 W. 4th Street, Panama City, FLA 32404

14. Warranty provision: Standard commercial warranty terms & conditions.

15. Export Packing Charges: Not Applicable

16. Terms and conditions of rental, maintenance, and repair: Not Applicable

17. Terms and conditions of installation: Not Applicable

18a. Terms and conditions of repair parts indicating date of parts price lists and any discounts from list prices: Not Applicable

18b. Terms and conditions for any other services: Not Applicable

19. List of service and distribution points: Not Applicable

20. List of participating dealers: Not Applicable

21. Preventive maintenance: Not Applicable

22a. Special Attributes such as environmental attributes, e.g., recycled content, energy efficiency, and/or reduced pollutants: Not Applicable

22b. Section 508 compliance information is available on Electronic and Information Technology

(EIT) supplies and services standards can be found at: www.Section508.gov/ (As Applicable)

23. Unique Entity Identifier (UEI) Number: WXN4JMV9JRS5

24. Notification Regarding Registration in System for Award Management (SAM) Database:

Contractor has an Active Registration in the SAM database.

http://www.section508.gov/

Labor Category Pricelist

SINs Labor Category Year 1

2/2/2022 – 2/1/2023

Year 2 2/2/2023 – 2/1/2024

Year 3 2/2/2024 – 2/1/2025

Year 4 2/2/2025 – 2/1/2026

Year 5 2/2/2026 – 2/1/2027

54151S Data Security Analyst - Journeyman

$60.45 $61.66 $62.89 $64.15 $65.43

54151S Systems Engineer $86.89 $88.63 $90.40 $92.21 $94.05

54151S Subject Matter Expert $90.68 $92.49 $94.34 $96.23 $98.16

54151S Information System Security Manager

$102.01 $104.05 $106.13 $108.26 $110.42

54151S Network Security Analyst $51.96 $53.00 $54.06 $55.14 $56.24

54151S Vulnerability Analyst $72.39 $73.83 $75.31 $76.82 $78.35

54151S Program Manager $102.01 $104.05 $106.13 $108.26 $110.42

54151S Information System Manager $94.54 $96.43 $98.36 $100.33 $102.33

54151S Computer Systems Analyst $86.89 $88.63 $90.40 $92.21 $94.05

54151S Computer Hardware Engineer $88.91 $90.68 $92.50 $94.35 $96.23

54151S Training and Development Manager

$90.68 $92.49 $94.34 $96.23 $98.16

54151S System Administrator $60.45 $61.66 $62.89 $64.15 $65.43

54151S Network Administrator $43.79 $44.67 $45.56 $46.47 $47.40

54151HACS HACS Data Security Analyst - Journeyman

$60.45 $61.66 $62.89 $64.15 $65.43

54151HACS HACS Systems Engineer $86.89 $88.63 $90.40 $92.21 $94.05

54151HACS HACS Subject Matter Expert $90.68 $92.49 $94.34 $96.23 $98.16

54151HACS HACS Information System Security Manager

$102.01 $104.05 $106.13 $108.26 $110.42

54151HACS HACS Network Security Analyst $51.96 $53.00 $54.06 $55.14 $56.24

54151HACS HACS Vulnerability Analyst $72.39 $73.83 $75.31 $76.82 $78.35

54151HACS HACS Program Manager $102.01 $104.05 $106.13 $108.26 $110.42

Labor Category Descriptions

SIN(s) Labor Category Minimum Education

Minimum Experience

Description

54151S

Data Security Analyst - Journeyman

Bachelor’s degree

5 years

Analyzes and defines security requirements for Multilevel Security (MLS) issues. Designs, develops, engineers, tests and implements solutions. Responsible for the implementation and development of the MLS networks and Cross Doman Solutions (CDS). Gathers and organizes technical information about an organization's mission goals and need to identify MLS data requirements.

Performs risk analyses including risk assessment. Works without supervision to coordinate and test CDS security implementations and ensure operational capability. Knowledgeable of Security/ Information Assurance (IA) products such as PKI, VPN, firewalls, and intrusion detection systems. Analyzes and reports resolution of security/IA problems based on knowledge of major IA products and services, an understanding of their limitations, and knowledge of the IA disciplines.

Systems Engineer

5 Years

Leads systems engineering efforts and supervises staff supporting the development, deployment, and sustainment of virtual systems. Technical lead performs a variety of systems engineering efforts applying methods, theories, and research techniques in the investigation and solution of advanced system requirements as applied to operational requirements. Participates in all phases of the SDLC including planning, analysis, evaluation, integration, testing, security assessments, and acceptance.

Ensures all security relevant controls and requirements are identified, analyzed, and applied during system development, deployment, and monitoring.

Education

Minimum

Subject Matter Expert

10 Years

In-depth knowledge on numerous security tools, processes, architecture and an expert in specific threats or attacks vector to high performance computing systems and applications. Performs very complex tasks.

Expert knowledge of specific processes or functions to meet organization’s best practice standards and meet mission needs. Expert developing scenarios for analyzing requirements, risks, cost impacts and solutions. Develops and implements organizational process changes to include new solutions and new technologies. May make strategic recommendation on organizational performance and technical standards.

Provides technical/management leadership for the project teams.

Information System Security Manager

Master's Degree

Industry leading expert in multiple cyber security tools, processes, architectures and demonstrates clear understanding of emerging threats to operations. Establishes goals and plans that meet Warfighter and system requirements. Expert knowledge of technical domain data requirements, system architecture, sensor/data sources, and overall industry. Expert in making recommendations on further project development and with specific systems enhancements. Ensures that the client and the organization is maximizing the impacts and potential of new systems.

Implement strategies on organizational performance and technical standards.

Provides technical/management leadership for the organization.

Education

Minimum

Network Security Analyst

2 Years

Examines malicious software, suspicious network activities, and non-authorized presence in the network to analyze the threat, and secure and monitor firewall configurations. Executes vulnerability management and monitoring applications to include auditing software and vulnerability scanning software (to include Solar Winds SEM and ACAS). Manages periodic reporting and provides RMF vulnerability reports to ISSOs, ISSMs, and data into eMASS.

Vulnerability

4 Years

Leads, plans, and executes system application and vulnerability management plan.

Responsible for system assessment and risk analysis as applied to cyber vulnerabilities and relevant IA policies and procedures.

Responsible for software and web applications. Leads periodic web application scanning, and code scanning. Responsible for performing scans, analyzing results, identifying false positives, identifying remediation plans, directing system developers on remediation plans, and managing remediation through closure.

Responsible for coordinating audit requests on behalf of a large-scale IT development team and coordinating all FISMA assessment activities. Identifies remediation plans for known system vulnerabilities, tracks, prioritizes, and monitors closure of vulnerabilities and POA&Ms. Facilitates responses to FISMA audit requests and other system assessment requests (e.g., OIG audits). Conducts pre-production assessments including vulnerability scans, web application scans, and code reviews for new releases. Proactively executes vulnerability scans, web application scans, and code reviews on a defined schedule to identify and remediate vulnerabilities a head of third-party assessments.

Education

Minimum

Program Manager

Bachelor's

Primary point of contact for project management activities to ensure successful execution of program cost schedule, performance goals, and perform risk management activities. Plan, direct, or coordinate project activities. Provides input to contract and government management to identify program costs, level of effort of labor, hardware/software, and other program costs prioritized to project risks. Manage program results, major milestones and reports to the government program objectives, status, milestone schedule. Has authority over personnel actions.

Information System Manager

Reports to government leads and program manager. Research and evaluation of IT to determine worth and risk to the organization.

Ensure technology efforts for system meet integration milestones and reports to Program Manager critical path and program risks. Reports physical, logical, and cyber disposition of technology devices through review of audit reports, vulnerability scans, and device germane system health reports.

Computer Systems

Analyzes science, engineering, business, and other data processing problems to develop and implement solutions to complex applications problems, system administration issues, or network concerns. Perform systems management and integration functions, improve existing computer systems, and review computer system capabilities, workflow, and schedule limitations.

Recommend commercially available software coordinating with vendor experts identifies functional application requirements for virtual system builds. Monitors systems performance to minimize disruptions to operations. Reviews application and network performance to make purchase and conjuration decisions to management.

Computer Hardware Engineer

Research, design, develop, test computer or computer-related equipment for commercial, industrial, military, or scientific use.

Supervises manufacturing and installation of computer or computer-related equipment and components. Analyze requirements, develop architecture, design networks, configure edge devices, and deploy hosts.

Updates network diagrams, host computing

Education

Minimum Experience

Description systems and data architectures to incorporate enhanced or advanced technologies. Identifies critical STIG requirements and impact on operational deployment of systems. Reviews application, operating system, and security kernel impact on system status and provides risk analysis.

Training and Development

6 Years

Plan, direct, and coordinate training and development activities. Research analysis of training requirements and system capabilities to provide documentation and briefings for technology impact on operations. Provides documentation and briefings as an integral part of the leadership team, making recommendations on strategy and approach to drive innovation in training techniques via integration of emergent technologies.

System Administrator

Under general direction, responsible for activities related to system administration.

Assigns personnel to various projects, directs their activities, and evaluates their work.

Ensures long-term requirements of systems operations and administration are included in the overall information systems planning of the organization. Responsible for the installation, maintenance, configuration, and integrity of computer software. Implements operating system enhancements that will improve the reliability and performance of the system. Manages encryption devices and encryption programs for accreditation boundary security and policy implementation for interconnections.

Network Administrator

Associates

Install, configure, and maintain local area network (LAN), wide area network (WAN), data communications network, operating systems, and physical and virtual servers.

Perform system monitoring and verify integrity and availability of hardware, network, and server resources and systems.

Review system and application logs and verify completion of scheduled jobs, including system backups. Analyze network and server resource consumption and control user access. Install and upgrade software and maintain software licenses. Assist in network modeling, analysis, planning, and coordination between network and data communications hardware and software.

Education

Experience Description

54151HACS

HACS Data Security Analyst - Journeyman

5 years

Analyzes and defines security requirements for Multilevel Security (MLS) issues. Designs, develops, engineers, tests and implements security related solutions. Responsible for the implementation and development of the MLS networks and Cross Doman Solutions (CDS). Gathers and organizes technical information about an organization's mission goals and need to identify MLS data requirements.

Performs risk analyses including risk assessment.

Works without supervision to coordinate and test CDS security implementations and ensure operational capability. Knowledgeable of Security/ Information Assurance (IA) products such as PKI, VPN, firewalls, and intrusion detection systems. Analyzes and reports resolution of security/IA problems based on knowledge of major IA products and services, an understanding of their limitations, and knowledge of the IA disciplines.

HACS Systems Engineer

Leads systems engineering efforts and supervises staff supporting the development, deployment, and sustainment of virtual systems and cybersecurity.

Technical lead performs a variety of systems engineering efforts applying methods, theories, and research techniques in the investigation and solution of advanced system requirements as applied to operational requirements and exploring cybersecurity threats. Participates in all phases of the SDLC including planning, analysis, evaluation, integration, testing, security assessments, and acceptance.

Ensures all security relevant controls and requirements are identified, analyzed, and applied during system development, deployment, and monitoring.

HACS Subject Matter Expert

Expert knowledge on security tools, processes, architecture and an expert in specific cybersecurity threats or attacks vector to high performance computing systems and applications. Performs very complex tasks related to security. Expert knowledge of specific processes or functions to meet organization’s best practice standards and meet mission needs to protect IT assets. Expert developing scenarios for analyzing requirements, risks, cost impacts and solutions. Develops and implements

Education

Minimum Experience

Description organizational process changes to include new solutions and new technologies as well as security protocols. May make strategic recommendation on organizational performance and technical standards.

Provides technical/management leadership for the project teams as related to security.

HACS Information System Security

Master's

Leading expert in multiple cyber security tools, processes, architectures. Demonstrates clear understanding of emerging threats to operations. Establishes goals and plans that meet Warfighter and system requirements.

Expert knowledge of technical domain data requirements, system architecture, sensor/data sources, and overall industry.

Expert in cybersecurity recommendations on further project development and with specific systems enhancements. Ensures the client and the organization is maximizing the impacts and potential of new systems and that systems are not vulnerable. Implement strategies on organizational security, performance and technical standards.

HACS Network Security Analyst

Examines malicious software, suspicious network activities, and non-authorized presence in the network to analyze the threat, and secure and monitor firewall configurations. Executes vulnerability management and monitoring applications to include auditing software and vulnerability scanning software (to include Solar Winds SEM and ACAS). Manages periodic reporting and provides RMF vulnerability reports to ISSOs, ISSMs, and data into eMASS. Reports on security/cybersecurity risks.

HACS Vulnerability

4 Years

Leads, plans, and executes vulnerability management plan. Responsible for system assessment and risk analysis as applied to cyber vulnerabilities and relevant IA policies and procedures. Responsible for vulnerability management related to software and web applications. Leads periodic vulnerability scanning, web application scanning, and code scanning. Responsible for performing scans, analyzing results, identifying false positives, identifying remediation plans, directing system developers on remediation plans, and managing remediation through closure.

Responsible for coordinating audit requests on behalf of a large-scale IT development

Education

Minimum Experience

Description team and coordinating all FISMA assessment activities. Identifies remediation plans for known system vulnerabilities, tracks, prioritizes, and monitors closure of vulnerabilities and POA&Ms. Facilitates responses to FISMA audit requests and other system assessment requests (e.g., OIG audits). Conducts pre-production assessments including vulnerability scans, web application scans, and code reviews for new releases. Proactively executes vulnerability scans, web application scans, and code reviews on a defined schedule to identify and remediate vulnerabilities a head of third-party assessments.

HACS Program

Primary point of contact for project management activities to ensure successful execution of program cost schedule, performance goals, and perform risk management activities for all cybersecurity projects. Plan, direct, or coordinate project activities. Provides input to contract and government management to identify program costs, level of effort of labor, hardware/software, security protocols, and other program costs prioritized to project risks. Manage program results, milestones and reports to the government program objectives, status, milestone schedule. Has authority over personnel actions.

Allowable Substitutions of Education & Experience

Educational Equivalency/Substitution for All Labor Categories

Four (4) years of relevant experience may be substituted for a bachelor’s degree Six (6) years of relevant experience may be substituted for a Master’s degree Eight (8) years of relevant experience may be substituted for a PhD

Service Contract Labor Standards: The Service Contract Labor Standards (SCLS), formerly known as the

Service Contract Act (SCA), is applicable to this contract as it applies to the entire Multiple Award

Schedule (MAS) and all services provided. While no specific labor categories have been identified as being subject to SCLS/SCA due to exemptions for professional employees (FAR 22.1101, 22.1102 and 29

CRF 541.300), this contract still maintains the provisions and protections for SCLS/SCA eligible labor categories. If and / or when the contractor adds SCLS/SCA labor categories to the contract through the modification process, the contractor must inform the Contracting Officer and establish a SCLS/SCA matrix identifying the GSA labor category titles, the occupational code, SCLS/SCA labor category titles and the applicable WD number. Failure to do so may result in cancellation of the contract.