Attachment 53 - 004-PWS-ProgramAnalyst.docx

Attachment 53

Performance Work Statement for Navy Medicine Readiness & Training Command Yokosuka Computer Programming Support Services: Japan

1.0 SCOPE:

The contractor shall provide computer programming and computer help desk technical support to Navy Medicine Readiness & Training Command Information Management Branch.

1.1 APPLICABLE DIRECTIVES:

OPNAVINST 5100 and 5090.1 series, ISO 14001, Navy Occupational Safety and Health (NAVOSH) Program, Navy Medicine Readiness & Training Command Yokosuka safety and regulations. FLCY safety regulations.

2.0 REQUIREMENTS

2.1 SPECIFIC TASKS:

a. TASK 1. Networking Scanning, Reporting, and Administration of Information Assurance Security Systems Under the direction of the Contracting Officer Representative (COR) contractor is responsible for administering, maintaining, scanning and reporting on all devices for vulnerabilities using approved Department of Defence (DoD)/ Department of the Navy (DoN) guidance, tools, and procedures. Contractor will analyze results and make recommendations based on professional judgment, to correct security vulnerabilities. Contractor will support engineers with the implementation of security patches, validate the proper installation/configuration, and perform system audits to assess security related factors. Contractor will administer and maintain the Host Based Security System (HBSS) server; will monitor and report all security incidents; and will use professional judgment to recommend changes to strategies/policies to reduce/correct any security vulnerabilities. Contractor will ensure security tools and policies are current and updated, alerts and log files are reviewed and archived per promulgated DoD/DoN, policy Contractor is responsible for ensuring the network’s compliance with the latest STIGS published by DISAPerformance goals for TASK 1 are as follow:

Process an average of two (2) transactions per hour.

b. TASK 2. Information Assurance Support Contractor will be familiar with all Navy Cyber Defense Operations Command directives and support associated tasks and provide support for the development of IA related customer support policies, procedures, and standards. Contractor will use professional judgment to recommend mitigation strategies to reduce/correct any security vulnerabilities. Contractor will implement response actions in reaction to security incidents, assist in data collection for cyber security reports, draft reports for submission, and follow up on results and mitigations. Contractor will ensure that hardware, software, data and facility resources are archived, sanitized, or disposed of in a manner consistent with system security plans and requirements. Contractor will research, evaluate, and provide feedback on problematic IA trends and patterns in customer support requirements. Contractor will install, configure, and maintain perimeter defense systems including intrusion detection systems, firewalls, grid sensors, etc., and enhance rule sets to block sources of malicious traffic.

3.0 SKILLS AND KNOWLEDGE REQUIRED FOR THE POSITION:

Contractor personnel shall possess the necessary computer programming knowledge and skills necessary to carry out all assigned IAO duties as listed above, including knowledge of Microsoft Windows, Microsoft Office Suite, Microsoft Exchange Server Administrator, windows networking concepts, Active Directory and use of IAO specific tools including HBSS and ACAS scanning. Bachelor Degree with 2 years minimum computer support or equivalent work experience as displayed in resume. Minimum 2 years knowledge of Microsoft applications (WORD, EXCEL, POWERPOINT)

4.0 GUIDELINES

4.1 The contractor shall abide by Navy Medicine Readiness & Training Command Yokosuka cleanliness, safety and health standards consistent with the requirements of OPNAVINST 5100 series, Navy Occupational Safety and Health (NAVOSH) Program.

4.2 Federal, DOD, Navy, and local regulations, policies, standard, and precedents provide general guidance, but do not specify the approach to follow to accomplish the work. When guidelines are lacking, employee must generate new or improved methods to be tested, which may provide a basis for future guidelines. Considerable judgment is required in relating guidelines to the development of solutions to problems.

Quality Levels Methods of Surveillance

Networking Scanning, Reporting, and Administration of Information Assurance Security Systems

closed work log tickets

6.0 WORK HOURS:

Work shall normally take place during 1ST Shift, Monday through Friday 0700-1530

7.0 PLACE OF PERFORMANCE:

The normal place of performance is at Navy Medicine Readiness & Training Command Yokosuka, PSC 475 Box 6, FPO AP 96350-1600, Japan.

8.0 WORK ENVIRONMENT AND PHYSICAL DEMANDS:

Work is generally to be carried out in climate-controlled office spaces. Contractor personnel should be able to sit, stand and otherwise be physically able to carry out routine office work. . The Government activity will provide adequate work space and all necessary equipment (e.g. desk, chair, computer, printer access and copier access) for the duration of this contract.)

9.0 GENERAL SAFETY AND HOUSEKEEPING: Contractor personnel shall keep his/her work area in a clean, presentable, safe, and condition at all times. Adhere to Navy Medicine Readiness & Training Command Yokosuka policies and requirements.

10.0 CONTRACT SECURITY REQUIREMENT

The work under this order is considered as classified and the contractor personnel must meet DoD 8570-1M requirements for IAT Level 2 and must hold a current secret security clearance.

11.0 Contracting Officer Representative

The Contracting Officer hereby designates the following individual for this task order.

COR:

Voice Phone:

E-mail: