MAS - Winter Information Technology Services, LLC - 47QTCA22D006P

GENERAL SERVICES ADMINISTRATION

FEDERAL SUPPLY SERVICE

AUTHORIZED FEDERAL SUPPLY SCHEDULE CATALOG/PRICE LIST

On-line access to contract ordering information, terms and conditions, up-to-date pricing, and the option to create an electronic delivery order is available through GSA Advantage!, a menu-driven database system. The INTERNET address for GSA Advantage! is http://www.gsaadvantage.gov

For more information on ordering from Federal Supply Schedules click on the GSA Schedules link at www.gsa.gov Contractor:

Winter Information Technology Services, LLC 13700 Smallwood Court Chantilly, VA 20151 Phone Number: (936) 371-1406 http://www.witsconsult.com/ Contractor’s Administration Source:

Zachary Winter Business Size:

Small Business

CUSTOMER INFORMATION:

a. TABLE OF AWARDED SPECIAL ITEM NUMBERS (SINs)

SIN

DESCRIPTION

54151S Information Technology Professional Services

54151HACS

Highly Adaptive Cybersecurity Services (HACS)

b. LOWEST PRICED MODEL NUMBER AND PRICE FOR EACH SIN: N/A

c. HOURLY & SERVICE RATES:

2. MAXIMUM ORDER*: $500,000

*Ordering activities may request a price reduction at any time before placing an order, establishing a BPA, or in conjunction with the annual BPA review. However, the ordering activity shall seek a price reduction when the order or BPA exceeds the simplified acquisition threshold. Schedule contractors are not required to pass on to all schedule users a price reduction extended only to an individual ordering activity for a specific order or BPA.

3. MINIMUM ORDER: $100

4. GEOGRAPHIC COVERAGE: 48 contiguous states, Washington D.C.

5. POINT(S) OF PRODUCTION: N/A

6. DISCOUNT FROM LIST PRICES: 3.5%

7. QUANTITY DISCOUNT(S): 1% discount for orders over $100,000 - $149,000

8. PROMPT PAYMENT TERMS: 1% - 15 Days

9. FOREIGN ITEMS: N/A

a. TIME OF DELIVERY: To be determined between Contractor and Ordering Activity

b. EXPEDITED DELIVERY: To be determined between Contractor and Ordering Activity

c. OVERNIGHT AND 2-DAY DELIVERY: Contact contractor

d. URGENT REQUIRMENTS: Agencies can contact the Contractor’s representative to affect a faster delivery. Customers are encouraged to contact the contractor for the purpose of requesting accelerated delivery.

10. FOB POINT: Destination

a. ORDERING ADDRESS:

13700 Smallwood Court Chantilly, VA 20151

b. ORDERING PROCEDURES: For supplies and services, the ordering procedures, information on Blanket Purchase Agreements (BPA’s) are found in Federal Acquisition Regulation (FAR) 8.405-3

11. PAYMENT ADDRESS:

13700 Smallwood Court

Chantilly, VA 20151

12. WARRANTY PROVISION: None

13. EXPORT PACKING CHARGES: N/A

14. TERMS AND CONDITIONS OF RENTAL, MAINTENANCE, AND REPAIR (IF APPLICABLE): N/A

15. TERMS AND CONDITIONS OF INSTALLATION (IF APPLICABLE): N/A

a. TERMS AND CONDITIONS OF REPAIR PARTS INDICATING DATE OF PARTS PRICE LISTS AND ANY DISCOUNTS FROM LIST PRICES (IF AVAILABLE): N/A

b. TERMS AND CONDITIONS FOR ANY OTHER SERVICES (IF APPLICABLE): N/A

16. LIST OF SERVICE AND DISTRIBUTION POINTS (IF APPLICABLE): N/A

17. LIST OF PARTICIPATING DEALERS (IF APPLICABLE): N/A

18. PREVENTIVE MAINTENANCE (IF APPLICABLE): N/A

a. SPECIAL ATTRIBUTES SUCH AS ENVIRONMENTAL ATTRIBUTES (e.g. recycled content, energy efficiency, and/or reduced pollutants): N/A

b. Section 508 Compliance for EIT: N/A

19. Unique Entity Identifier (UEI) Number: 108367295

20. Contractor has an active registration in the SAM database.

Technical Support Analysts assist customers by performing analysis of various issues relating to LANs, WANs, desktop computers (Windows, Linux, and Mac), Internet connectivity, and the installation of hardware and software. They assist customers by improving processes related to system issues.

Technical Support Analysts review and maintain operating system error and network logs or ticketing systems in coordination with IT departments to maintain technical knowledge bases and databases of known technical solutions. This information will inform recommendations — based on various metrics — on how to improve the support process in its entirety and maintain maximum system availability and performance.

Microsoft Certifications (MCITP, MCSA, etc.) preferred

IT Systems Analysts perform thorough analysis of various issues relating to LANs, WANs, desktop computers (Windows, Linux, and Mac), Internet connectivity and the installation of hardware and software. They assist customers and Tier I support by consulting on solutions and implementing them.

IT Systems Analysts review and maintain operating system error and network logs or ticketing systems in coordination with IT departments to maintain technical knowledge bases and databases of known technical solutions. IT Systems Analysts provide in-depth insight and expertise for resolving technical problems.

Microsoft Certifications (MCITP, MCSA, etc.) preferred

Additional Requirements:

- Virtualization (VMware, KVM, or Xen) experience, especially as it relates to storage and backup

- Experience backing up large volumes of data

- Create / modify existing task sequence for OS deployments to desktop / server hardware

- Windows Server 2008, 2003, XP, 7, and 10 workstation technical support experiences with advanced knowledge of Windows registry, file and folder security, local/domain user security, and operating system troubleshooting.

- Strong working experience designing, configuring, managing, and troubleshooting enterprise-level backup systems, including software and hardware (tape libraries, disk-based backup systems, connectivity with FC SAN)

- Ability to continuously seek quality service and process improvements in order to support a mission and strategic vision

- Ability to communicate and interact with, as well as support effective partnerships with peers and subordinates

- Ability to prioritize ongoing and new projects, as well as conduct research and gather information

They play a key role in identify organization risks, prioritize those risks, and maintain a risk registry for escalating and presenting those risks to senior leadership. They are responsible for gathering the information necessary to maintain security and establishes functioning external barriers, including firewalls, and other security measures. ISSO's review systems to identify potential security weaknesses, recommend improvements to amend vulnerabilities, implement changes, and document upgrades. They also ensure that all regulatory compliance requirements are met to maintain authority to operate (ATO).

IT Systems Engineers perform diverse technical assistance (server, network, desktop, and mobile). They document findings and performs maintenance duties in support of a large unit that may encompass a variety of user support needs.

Additional duties can include:

- Maintains, updates and audits record keeping systems; documents projects, writes and maintains user instructions.

- Oversees, maintains, and inputs applicable records such as, but not limited to, network users, security, and tracking inventory levels of equipment and materials.

-Performs advanced (Tier III) technological systems support, maintenance, and testing for proper upkeep of systems; troubleshoots and resolves complex system hardware, software, virtualization, and network failures and conflicts.

-Participates in and/or leads the review, evaluation and recommendation of solutions relating to hardware and software acquisitions and/or network updates.

- Serves as a primary project member on technology projects with large scope and impact; may lead and integrate the work of other staff.

- Oversees and performs the installation, configuration and maintenance of computers, networks, workstations and/or other related equipment and devices.

- Maintains currency of knowledge with respect to technology, equipment, applicable laws, regulations, standards and/or systems.

IT Systems Development Engineers will provide technical guidance, direction and insights to the business/project managers and stakeholders regarding IT system solutions and improvements being deployed within the enterprise environment. They create IT Solution Proposals and participate in the development of documentation and tools to assist operational transition for the support of the various cloud architectures, designs, and services being standardized and deployed. These solutions include sustainable patterns for cloud computing and application hosting architectures in support of enterprise IT project delivery. They adapt for special projects or initiatives when required, and they work closely with technology vendors when necessary. They provide the necessary leadership to drive technology solutions by weighing advantages of technology standards, industry best practices, security, scalability, and risks and benefits of technology introduction into the customer's’s environment. They provides comprehensive consultation to business unit and IT management and staff at the highest technical level for assigned architectural domain.

- Exceptional ability to operate vulnerability scanners such as Nessus and Nexpose

- Strong technical proficiency in all major operating systems, especially Linux and Windows

- Able to hack into web applications that are vulnerable to attacks such as SQL injection and command execution

- Able to gain domain administrator on a Windows domain remotely if provided a working system level exploit on a test environment

- Able to perform chained attacks, privilege escalation, and lateral movement techniques

- Able to assess the security of communication and data storage used in mobile applications

- Ability to operate Metasploit, Burp Suite, crackmapexec, nmap, and many other hacking tools

- Proficiency reading and writing shell scripts

- Ability to extract user password hashes and operate hashcat in a proficient manner

- Proficiency in networking and routing concepts

- Expertise in creating phishing campaigns and performing physical social engineering to obtain system and building access as well as to gather critical documents and information

PAGE