ATTACHMENT 7- PWS.pdf

PERFORMANCE WORK STATEMENT (PWS)

For

United States Army Cyber School

Advanced Cyber Operations-Procedures (ACO-P)

For

United States Army Cyber School

U.S. Army Cyber Center of Excellence (CCoE) Fort Gordon, Georgia 30905-5000

Part 1

General Information:

1. General: This is a non-personal services contract to provide Instructional Support for the U.S Army Cyber School (USACyS), Cyber Center of Excellence (CCoE), Fort Gordon, Georgia. This effort will support the Cyber School in conducting training for the Army’s Advanced Cyber Operations – Procedures (ACO-P) functional course. The Government will not exercise any supervision or control over the contract service providers performing the services herein. Such contract service providers shall be accountable solely to the Contractor who, in turn, is responsible to the Government.

1.1 Description of Services/Introduction: The contractor shall provide instructional training and range development services for the U.S. Army Cyber School’s Advanced Cyber Operations – Procedures (ACO-P) functional course.

1.2 Background: The Cyber School was established to provide trained 17 (Cyber career field) series personnel (17A, 17C, and 170A). The cyber career field is designed to provide cyberspace and electronic warfare operations expertise in support of the full range of military operations by enabling actions and generating outcome based cyber effects across all domains. The career field is tasked to ensure freedom of maneuver within the cyberspace domain and the electromagnetic spectrum while denying the same to adversaries. The Cyber Schools graduates support the Army’s Cyberspace Operations across USCYBERCOM, ARCYBER, and Cyber Protection Brigade missions. As such, USCYBERCOM requires the Cyber School to conduct the curriculum developed by USCYBERCOM for Cyberspace Operators at the Senior certification level.

The ACO-P course was developed in response to the evolving cyber threat landscape and the need for the Army to enhance its cyber capabilities to counter increasingly sophisticated adversaries. ACO-P is a functional course and is the USCYBERCOM-directed training requirement for Senior skill-level qualification of Title 10 Cyber Mission Force (CMF) Operator work-role personnel. The course educates personnel on USCYBERCOM policies, tools, infrastructure, tradecraft, and tactics, techniques, and procedures (TTPs) approved for use during offensive cyber operations (OCO). Attendees must have passed the Computer Network Assessment Battery (CNAB); be graduates of Computer Network Operations Qualification Course (CNOQC); and be graduates of the Title 10 Basic Operator Course (T10 BOC); as well as be certified Basic skill-level CMF Operators. Students must have a Top Secret (TS) w/ Sensitive Compartmented Information (SCI) security clearance.

1.3 Objectives: This effort shall provide technical instructor/writer and range development support for the USACyS Advanced Cyber Operations – Procedures (ACO-P) course. Instructorwriter support shall include ACO-P course adult learning instruction and facilitation through modern training techniques and methodologies and assist in developing Government-owned Cyberspace Operations (CO) curriculum. Range developer support shall include configuration, management, and network and host system implementation within a virtual cyber range environment. Support will be conducted at a clearance up to TOP SECRET//Sensitive Compartmented Information (SCI)// Releasable to the United States (REL TO USA), Five Eyes (FVEY).

1.4 Scope: This is a service requirement to provide technical instructional and range development support to the ACO-P to include fostering self-development, platform instruction, assessing student performance, maintaining training resources, developing training schedules, managing exams, managing range network accounts, providing content and course updates to USCYBERCOM, administering virtual cyber ranges on the Persistent Cyber Training Environment (PCTE) network, updating range components, administering exercises, conducting student assessments, and assisting students with developing, preparing, and practicing presentations.

Contractor personnel shall always demonstrate model behavior and professionalism. The Contractor shall hire and maintain the proper mix of certified instructors and range developers IAW with this PWS

1.5 Period of Performance: The period of performance shall be for one (1) Base Year of 12 months, and 2 (two) 12- month option years. The Period of Performance reads as follows:

Base Year 06 July 2026 – 05 July 2027 Option Year I 06 July 2027 – 05 July 2028 Option Year II 06 July 2028 – 05 July 2029

1.6 General Information:

1.6.1 Quality Control: Quality Control is the responsibility of the contractor (see FAR 52.246-1, Contractor Inspection Requirements). The Contractor shall develop, implement, and maintain an effective Quality Control System which includes a written Quality Control Plan (QCP). The QCP shall implement standardized procedure/methodology for monitoring and documenting task order performance to ensure all task order requirements are met. The Contractors' QCP shall contain a systematic approach to monitor operations to ensure acceptable services/products are provided to the Government. The QCP, at a minimum, shall address continuous process improvement; procedures for scheduling, conducting and documentation of inspection;

discrepancy identification and correction; corrective action procedures to include procedures for addressing Government discovered non-conformances; procedures for root cause analysis to identify the root cause and root cause corrective action to prevent re-occurrence of discrepancies; procedures for trend analysis; procedures for collecting and addressing customer feedback/complaints.

The initial QCP shall be delivered with the contractor’s proposal. After award, the final QCP shall be delivered within 30 days of start date and within 5 working days when changes are made thereafter. After acceptance of the quality control plan the contractor shall receive the contracting officer’s acceptance in writing of any proposed change to the QCP.

1.6.2 Quality Assurance: The Government will evaluate the contractor’s performance under this contract in accordance with the Quality Assurance Surveillance Plan. This plan is primarily focused on what the Government shall do to ensure that the contractor has performed in accordance with the performance standards. It defines how the performance standards will be applied, the frequency of surveillance, and the maximum acceptable defect rate(s).

1.6.3 Recognized Holidays: The contractor is not expected to perform services on the following federal holidays:

New Year’s Day Labor Day Martin Luther King Jr.’s Birthday Columbus Day President’s Day Veterans Day Memorial Day Thanksgiving Day Juneteenth National Independence Day Christmas Day Independence Day

1.6.4 Hours of Operation: The contractor is responsible for conducting business between the hours of 0800 to 1700 Eastern Standard Time Monday thru Friday except Federal holidays or when the Government facility is closed due to local or national emergencies, administrative closings, or similar Government directed facility closings. The Contractor must at all times maintain an adequate workforce for the uninterrupted performance of all tasks defined within this PWS when the Government facility is not closed for the above reasons. When hiring personnel, the Contractor shall keep in mind that the stability and continuity of the workforce are essential. Working on weekends and shift work may be required. If shift work is required, the anticipated shift schedule is as follows:

Day Shift 0800-1700 Swing Shift 1530-0030 Midnight Shift 2300-0800

1.6.5 Place of Performance: Contractors are authorized to work from an Alternate duty/remote location during emergency situations within the Fort Gordon area of operations with the approval of the Contracting Officer Representative and Contracting Officer.

Contractor shall continue to meet tasks, deliverables, and current level of support in accordance with contract. Government reserves the right to approve, disapprove, or cancel contract personnel working from an alternate duty/remote location. Working from a remote location will be at no additional expense to the government. The Government does not authorize the use of off-site rates to accomplish alternate duty/remote location work and will not be responsible for any associated costs. Personal or company issued equipment may not be used to access the government network infrastructure unless pre-approved; examples include using VPN or a corporate network.

However, inability to access the government network infrastructure using authorized devices does not necessarily prohibit the contractor from performing off-site, whenever the work could be performed without such access. All contract instructors may be required to travel to facilitate Mobile Training Team (MTT) training at CONUS locations

1.6.6 Type of Contract: The government will award a Firm Fixed Price (FFP) contract.

1.6.7 Security Requirements: Contractor employees performing on this task order shall be U.S. citizens. At work performance start, all positions must be able to obtain Top Secret (TS) with eligibility for Top Secret with Sensitive Compartmented Information (TS/SCI) clearance to be maintained throughout the life of the contract. Vendor will state plan and timeframe for Top Secret Clearance to become adjudicated and take full responsibility to finalize all security requirements IAW the PWS. All contractor employees shall maintain the required security clearance throughout the life of the task order. Failure, inability, or delay in obtaining the appropriate clearance shall not relieve the contractor from performance under the terms of this task order. Additionally, all contractor personnel are required to in-process the CCoE G2 within 10 business days.

The contractor is responsible for acquiring the clearances. The contractor shall ensure that all assigned personnel understand applicable security policies and directives found in DOD 5220.22-M, National Industry Security Program Operating Manual (NISPOM); AR 380-5, Information Security Program, and all other applicable policies and regulations.

The contractor shall ensure that classified data is controlled, protected, and safeguarded in accordance with current Army and DOD policy. Classified information shall be accessed and stored in government spaces only. The contractor shall agree that any data furnished by the government to the contractor shall be used only for performance under this PWS, and all copies of such data shall be returned to the government upon completion of this effort.

The contractor Facility Security Officer (FSO) shall ensure there is a procedure for all terminated employees to out process the CCoE G2. Compliance with DD Form 254, Department of Defense Contract Security Classification Specification, is required.

The contractor shall comply with FAR 52.204-2, Security Requirements. This clause involves access to information classified "Confidential," "Secret," or "Top Secret" and requires contractors to comply with (1) the Security Agreement (DD Form 441), including the National Industrial Security Program Operating Manual (DoD 5220.22-M), and (2) any revisions to DoD 5220.22-M. Any adverse action preventing a contractor from retaining access to classified material must be brought to the attention of the COR and contractor Facility Security Officer (FSO) immediately.

1.6.7.1 Handling/Access to Classified Information: The contractor shall comply with FAR 52.204-2, Security Requirements. This clause involves access to information classified "Confidential," "Secret," or "Top Secret" and requires contractors to comply with (1) the Security Agreement (DD Form 441), including the National Industrial Security Program Operating Manual (DoD 5220.22-M), and (2) any revisions to DoD 5220.22-M.

Any adverse action preventing a contractor from retaining access to classified material shall be brought to the attention of the COR, Security Office, and contractor Facility Security Officer (FSO) immediately.

1.6.7.2 Cybersecurity: All contractor employees shall complete the DoD Cyber Awareness Challenge Training (https://cs.signal.army.mil) before issuance of network access and annually thereafter. Certificates of successful completion, for both initial awareness training and annual refresher training shall be provided to the COR via the Army Training and Certification Tracking System (ATCTS). All contractor employees will successfully complete all required IA training as specified in AR 25-2 and as directed by the Government. At work performance start date all contractor employees working Cyber Security functions must comply with DoD and Army training requirements in DoDD 8570.01, DoD 8570.01-M, DoDD 8140.01, and AR 25-2.

1.6.7.3 Information Assurance (IA)/Information Technology (IT) Certification: Per DoD 8570.01-M, DFARS 252.239.7001, and AR 25-2, the contractor employees’ supporting IA/IT functions shall be appropriately certified upon contract award. The baseline certification as stipulated in DoD 8570.01-M shall be completed upon contract award.

1.6.7.4 Information Security Program Training: All contractor employees assigned to this task order shall complete the online Information Security Program Training located on the Army Learning Management System (ALMS) site. Log into AKO, “Self Service”, “My Training”, “ALMS”, “Go To Mandatory Training”. Training must be completed within 30 days of reporting for duty and annually thereafter. The contractor shall submit certificate of completion for each affected contractor employee to the COR and unit/activity security manager. (Ref ALARACT 207/2013, DTG 291848Z Aug 13, Subj: Army Wide Rollout and Requirement for Standardized Computer Web-Based Security Training on the Army Learning Management System (ALMS)).

1.6.7.5 Physical Security: The contractor shall be responsible for safeguarding all government equipment, information, and property provided for contractor use. At the close of each work period, government facilities, equipment, and materials shall be secured.

1.6.7.6 Key Control: The Contractor shall establish and implement methods of making sure all keys/key cards issued to the Contractor by the Government are not lost or misplaced and are not used by unauthorized persons. NOTE: All references to keys include key cards. No keys issued to the Contractor by the Government shall be duplicated. The Contractor shall develop procedures covering key control that shall be included in the Quality Control Plan. Such procedures shall include turn-in of any issued keys by personnel who no longer require access to locked areas. The Contractor shall immediately report any occurrences of lost or duplicate keys/key cards to the Contracting Officer.

In the event keys, other than master keys, are lost or duplicated, the Contractor shall, upon direction of the Contracting Officer, re-key or replace the affected lock or locks; however, the Government, at its option, may replace the affected lock or locks or perform re-keying. When the replacement of locks or re-keying is performed by the Government, the total cost of re-keying or the replacement of the lock or locks shall be deducted from the monthly payment due the Contractor. In the event a master key is lost or duplicated, all locks and keys for that system shall be replaced by the Government and the total cost deducted from the monthly payment due the Contractor.

The Contractor shall prohibit the use of Government issued keys/key cards by any persons other than the Contractor’s employees.

The Contractor shall prohibit the opening of locked areas by Contractor employees to permit entrance of persons other than Contractor employees engaged in the performance of assigned work in those areas, or personnel authorized entrance by the Contracting Officer.

1.6.7.7 Lock Combinations: The Contractor shall establish and implement methods of ensuring that all lock combinations are not revealed to unauthorized persons. The Contractor shall ensure that lock combinations are changed when personnel having access to the combinations no longer have a need to know such combinations. These procedures shall be included in the Contractor’s Quality Control Plan.

1.6.7.8 Antiterrorism (AT) Level I Training: All contractor employees assigned to this task order shall receive an initial Antiterrorism Level I Brief by a certified ATO Level II Officer within 30 days of reporting for duty (monthly briefings are offered by the Garrison Antiterrorism Officer). Annual refresher Antiterrorism Level I Training shall be completed on-line at https://jkodirect.jten.mil/Atlas2/faces/page/login/Login.seam or they may attend the monthly training offered by the Garrison ATO. The contractor shall submit certificates of completion for each affected contractor employee to the COR and unit/activity security manager (Ref. Department of the Army, US Army Contracting Agency, SFCA-CO, 05 Sep 07, subject: Incorporation of Measures into the Contracting Process and AR 525-13, Antiterrorism). Note: Contractor personnel shall receive an AOR briefing when traveling OCONUS on TDY. Briefing must be provided by a certified ATO Level II Officer within 7 working days prior to TDY departure outside the 50 United States, its territories, and possessions. This is separate from the normal annual AT Level I training requirement (Ref AR 525-13).

1.6.7.9 iWATCH: All Contractor employees, including subcontractors, assigned to this contract shall receive a brief on the local iWATCH program (provided in conjunction with the AT Level I Training). This training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the COR. This training shall be completed within thirty (30) days of reporting to duty and annual refresher training with the results reported to the COR.

1.6.7.10 Operation Security (OPSEC) Training: All contractor employees assigned to this task order shall complete Level I OPSEC training within 30 days of reporting for duty and then annually thereafter. Initial Level 1 OPSEC training will be conducted monthly by the Garrison OPSEC Officer or a Level II certified OPSEC Officer. Annual refresher training shall be completed on-line at https://securityawareness.usalearning.gov/opsec/index.htm. The contractor shall submit certificates of completion for each affected contractor employee to the COR and unit/activity security manager. OPSEC training guidelines are contained in AR 530-1, Operations Security. The contractor shall adhere to local OPSEC policies and procedures of the government requiring activity. When in a TDY status in support of this work effort, the contractor shall also adhere to any OPSEC policies and procedures in effect at TDY locations.

1.6.7.11 Threat Awareness and Reporting Program (TARP) Training: All contractor employees, including subcontractors, assigned to this contract shall complete TARP training within thirty (30) days of reporting for duty and then annually thereafter.

TARP training will be conducted monthly by the 902nd MI Group. The COR will ensure contractors are notified of available training.

Completion of training shall be reported to the COR and the unit/activity security manager (Ref AR 381-12).

1.6.7.12 Installation Access: All contractor employees shall comply with applicable installation and facility access security policies and procedures at all work and TDY locations. All contractors shall be issued a Common Access Card (CAC), or an Installation Pass issued through the Automated Installation Entry (AIE) Security System to access the installation. The Fort Gordon military installation is a limited access post. Unscheduled gate closures by the military police may occur at any time. In accordance with Army Regulation 525- 13, paragraph 5-19, all prospective contractors will undergo a verification process by the installation Provost Marshal Office, Director of Emergency Services to determine their trustworthiness and suitability prior to being granted access to federal property. This will be accomplished using the National Crime Information Center (NCIC) Interstate Identification Index (III). This is the minimum baseline background check for entrance onto Army Installations for non-CAC holders to include entrance of visitors (Ref. AR 190-13, paragraph 8-2). All personnel entering or exiting the installation may experience a delay due to vehicle inspections, registration checks, verification of seat belt use, etc. All vehicles and personnel are subject to search and seizure. The search and seizure provisions shall apply to contractor personnel while within Fort Gordon's area of jurisdiction. Contractor personnel shall comply with all entry control requirements and security policies/procedures in effect. Security procedures may change without notice.

1.6.7.13 Identification of Contractor Employees: In accordance with FAR 37.114, contractor employees shall identify themselves as a contractor at all times while on the job (e.g., in the workplace, when attending meetings, in email, when answering government telephones, when making phone calls, etc.).

1.6.7.14 ID Badges: The contractor shall provide each contractor employee an identification (ID) badge on task order start date or on employment start date. The ID badge shall be made of nonmetallic material, be easily readable, and shall contain the following minimum information: Employee's Name, Contract Company Name and Employee's Photograph. Contractor employees shall wear proper identification at Government workplaces at all times.

1.6.7.15 Display of ID Badges: Contractor employees shall wear the ID badge at all times when performing work under this task order to include attending government meetings and conferences. Unless otherwise specified in the task order, each contractor employee shall wear the ID badge in a conspicuous place on the front of exterior clothing and above the waist except when safety or health reasons prohibit such placement.

1.6.7.16 Answering Telephones: Contractor employees shall identify themselves as a contractor employee when answering and making calls on government telephones.

1.6.6.17 Eligibility Verification for Employment: E-Verify is an Internet-based system that compares information from an employee's Form I-9, Employment Eligibility Verification, to data from U.S. Department of Homeland Security and Social Security Administration records to confirm employment eligibility. The U.S. Department of Homeland Security is working to stop unauthorized employment. By using E-Verify to determine the employment eligibility of their employees, companies become part of the solution in addressing this problem. All U.S. employers must complete and retain a Form I-9 for each individual they hire for employment in the United States. This includes citizens and noncitizens. On the form, the employer must examine the employment eligibility and identity document(s) an employee presents to determine whether the document(s) reasonably appear to be genuine and relate to the individual and record the document information on the Form I-9. The list of acceptable documents can be found on the last page of the form. E-Verify is mandatory for employers with federal contracts or subcontracts that contain the Federal Acquisition Regulation E-Verify clause.

1.6.6.18 Common Access Card (CAC):

When contractor performance is required on Government installation(s)/location(s), contractors shall ensure Common Access Cards (CACs) are obtained by all contractor employees who meet one or both of the following criteria:

a) Require long-term logical access to Department of Defense computer networks and systems in either:

the unclassified environment; or the classified environment when authorized by governing security directives.

b) Perform work on a long-term basis, which requires the use of a CAC for installation entry control or physical access to facilities and buildings.

During the performance period of the task order, the contractor or contractor employee as appropriate, shall:

a) Within 7 working days of any changes to the listing of the contractor personnel authorized a CAC, provide an updated listing to the contracting officer who will provide the updated listing to the TA (who will create new CAC applications or revoke those for employees no longer performing on the task order as appropriate);

b) Contractors must return the government credential to the issuing agency as soon as one of the following occurs, unless otherwise determined by the service or agency:

When credential is no longer needed for task order performance Upon completion of employment Upon task order completion or termination

c) Report lost or stolen CACs immediately to the TA.

NOTE: The government issued CAC is the property of the U.S. Government. Unauthorized possession of the CAC can be prosecuted criminally under section 701, title 18, United States Code. The contracting officer may delay final payment under the task order if the Applicant (Contractor) fails to comply with these requirements.

1.6.6.18.1 Common Access Card (CAC) Issuance:

Prior to the Applicant contacting a Trusted Agent (TA) to request a government credential, the employee must be vetted through the employer using the DoD-approved process outlined in the following documents:

Federal Information Processing Standards Publication 201-1, “Personal Identity Verification (PIV) of Federal Employees and Contractors”

DoD Regulation 5200.2-R, “Personnel Security Program” Department of Defense Manual (DoDM) 1000.13, Volume 1—"DoD Identification (ID) Cards: ID Card Life-Cycle"

Contractors shall provide a listing of their employees that will require a CAC to the contracting officer. The listing will contain the following information for a CAC application to be created in the Trusted Associate Sponsorship System (TASS):

Last, middle, and first names Social Security Number Date of birth Email address Contract number Contract end date.

The contracting officer will provide a copy of the list to the TA who will then create a CAC application in the TASS.

Once the application is created, a temporary login/password will be generated in TASS. The TA will securely distribute the login/password to that contractor employee. Contractor employee shall then enter the TASS web site using the temporary login/password and complete the CAC application. After the Applicant has logged in for the first time, he or she has 30 days to complete the application process. Once the TA approves the application, the Applicant then has 90 days to obtain a government credential from a RAPIDS Issuing Facility.

To locate a RAPIDS Issuing Facility, Applicants can use the RAPIDS Site Locator (RSL) at http://www.dmdc.osd.mil/rsl/. The Find Sites details page on the RSL website includes information on making appointments. Some RAPIDS Issuing Facilities use an electronic appointment scheduler. In those cases, the Scheduling URL is listed on RSL Find Sites details page. At the RAPIDS Issuing Facility, an operator verifies and updates the DEERS data with the Applicant data and status of the card.

Failure, inability, or delay in obtaining the CAC does not relieve the contractor from performing under the terms of the task order.

1.6.8 Staffing and Personnel: The Contractor shall be responsible to propose and deploy the correct labor types, mix, number and hours required to satisfactorily and professionally meet all PWS requirements. The vendor shall ensure qualified personnel are hired and responsible for only the modules they are qualified to instruct. The Government anticipates the requirements within this PWS will require the following labor categories: Instructor/Writer, and Range Developer. The Government’s historical staffing data is provided under Technical Exhibit 3.

1.6.8.1 Retain Qualified Staff: The Contractor shall maintain 100% staffing throughout the life of the contract on all positions.

The Contractor shall “back-fill” vacant position(s) as soon as possible, but no later than 10 business days after position becomes vacant. If the Contractor fails to back-fill the vacant position(s) with a qualified replacement within 10 business days, the Government may issue Non-Conformance Reports (NCRs). Excessive or consistent failure to maintain required staffing may result in termination as authorized by FAR 52.212-4(m), Termination for Cause. The contractor shall provide an employee listing to the COR within 15 days of award, monthly thereafter, or two business (2) days of any personnel change. See Employ Listing CDRL A003.

1.6.8.2 All Contract Personnel shall possess:

A Single Scope Background Investigation (SSBI) for appropriate level security clearance (TS/SCI) A Top-Secret Security Clearance with SCI eligibility and maintain the required security clearance throughout the life of the contract.

a valid driver’s license.

all required training as stated throughout this PWS.

Skills and knowledge of performing office automation work that includes word processing, electronic mail, spreadsheets, presentations, and other personal computer applications; typing a variety of materials from rough draft into final form including narrative and tabular material, e.g., correspondence, reports, and forms; maintaining records, historical records, survey results, reference library of training catalogs, regulations and other miscellaneous publications; establishing and maintaining office functional files and reference files; knowledge management applications e.g., SharePoint and moblackboard.

1.6.8.3 Instructor/Writer shall possess:

Three (3) years or more experience conducting cyberspace operations as a member of USCYBERCOM or a member of the Intelligence Community

Course completion or certification documentation in one or more of the following courses: NSA Windermere, NSA RIOT, NSA FORGE, Advanced Cyber Operations Course – Procedures (AOC-P), Offensive Security Certified Professional (OSCP), GIAC Expert Penetration Tester (GXPN), or Zero Point Security Certified Red Tram Operator (CRTO)

Experience operating in an agile development environment Experience with Kubernetes or Docker container technologies Experience in a fast-paced environment and working with flexible customer requirements Knowledge of penetration testing or red team operations Bachelor's degree or in Computer Science, Computer Engineering, Electrical Engineering, Cybersecurity, or Information

Systems.

OR

The degree requirement may be substituted with a minimum of two (2) additional years of distinguished operational experience as a cyberspace operator within USCYBERCOM or the Intelligence Community. This experience must be in addition to all other requirements listed and include documented evidence of skills progression.

Course completion documentation for IS-CTC (NLT 30-days after assuming duties per T2COM(TRADOC) 350-6) and CFD-IC within 90 days of onboarding. Current courses are IS-CTC, and CFD-IC (for instructors).

One (1) year or more experience as an instructor or instructor/writer. Supervising or administering a training program;

development or review of training or course materials, aids, devices, etc., and evaluation of training results.

Formatted: Not Highlight

Formatted: Not Highlight

Formatted: Not Highlight

1.6.8.4 Range Developer shall possess:

Two (2) or more years of experience with infrastructure as code or VMware One (1) or more years of experience with Bash, PowerShell, Batch, or Python scripting languages One (1) or more years of experience with networking and virtualization Experience with Terraform, Ansible, or STEP Experience with cybersecurity tools, network configurations, and operational tools Knowledge of operating systems, including Windows and Linux, application behaviors, and network traffic analysis Experience operating in an agile development environment Experience with Kubernetes or Docker container technologies Experience in a fast-paced environment and working with flexible customer requirements Knowledge of penetration testing or red team operations Bachelor's degree or in Computer Science, Computer Engineering, Electrical Engineering, Cybersecurity, or Information

Systems.

OR

The degree requirement may be substituted with a minimum of four (4) additional years of progressive, hands-on experience in architecting, designing, and implementing enterprise-scale virtualized and cloud infrastructure. This experience must be in addition to the baseline requirements listed above and must demonstrate a capacity for applying theoretical concepts to solve complex technical challenges.

1.6.9 Post Award Conference/Periodic Progress Meetings: The Contractor agrees to attend any post award conference convened by the contracting activity or contract administration office in accordance with Federal Acquisition Regulation Subpart 42.5. The contracting officer, COR, and other Government personnel, as appropriate, may meet periodically with the contractor to review the contractor's performance. At these meetings the contracting officer will apprise the contractor of how the government views the contractor's performance and the contractor shall apprise the Government of problems, if any, being experienced. Appropriate action shall be taken to resolve outstanding issues. These meetings shall be at no additional cost to the government

1.6.10 Contracting Officer Representative: The COR shall be identified by separate letter. The COR monitors all technical aspects of the contract and assists in contract administration. The COR is authorized to perform the following functions: assure that the Contractor performs the technical requirements of the contract; perform inspections necessary in connection with contract performance; maintain written and oral communications with the Contractor concerning technical aspects of the contract; issue written interpretations of technical requirements, including Government drawings, designs, and specifications; monitor Contractor's performance and notifies both the Contracting Officer and Contractor of any deficiencies; coordinate availability of government furnished property; and, provide site entry of Contractor personnel. A letter of designation issued to the COR, a copy of which is sent to the Contractor, states the responsibilities and limitations of the COR, especially with regard to changes in cost or price, estimates or changes in delivery dates. The COR is not authorized to change any of the terms and conditions of the resulting order.

1.6.11 Key Personnel:. The contractor shall provide a point of contract responsible for the performance of the work. The point of contact shall have full authority to act for the contractor on all contract matters relating to daily operation of this contract. The point of contract or alternate shall be available between 8:00 a.m. to 5:00 p.m., Monday thru Friday, except Federal holidays or when the government facility is closed for administrative reasons.

1.6.12 Identification of Contractor Employees: All contract personnel attending meetings, answering Government telephones, and working in other situations where their contractor status is not obvious to third parties are required to identify themselves as such to avoid creating an impression in the minds of members of the public that they are Government officials. They shall also ensure that all documents or reports produced by contractors are suitably marked as contractor products or that contractor participation is appropriately disclosed.

1.6.13 Supervision of Contractors Employees: The Government will not exercise any supervision or control over Contractor or subcontractor employees while performing work under the contract. Such employees shall be accountable solely to the Contractor, not the Government. The Contractor, in turn, shall be accountable to the Government for Contractor or subcontractor employees.

1.6.14 Contractor Travel: Not Applicable.

1.6.15 Other Direct Costs: Not Applicable.

1.6.16 Data Rights: The Government has unlimited rights to all documents/material produced under this contract. All documents and materials produced under this contract shall be Government owned and are the property of the Government with all rights and privileges of ownership/copyright belonging exclusively to the Government. These documents and materials may not be used or sold by the contractor without written permission from the Contracting Officer. All materials supplied to the Government will be the sole property of the Government and may not be used for any other purpose. This right does not abrogate any other Government rights.

1.6.17 Organizational Conflict of Interest: Contractor and subcontractor personnel performing work under this contract may receive, have access to or participate in the development of proprietary or source selection information (e.g., cost or pricing information, budget information or analyses, specifications or work statements, etc.) or perform evaluation services which may create a current or subsequent Organizational Conflict of Interests (OCI) as defined in FAR Subpart 9.5. The Contractor shall notify the Contracting Officer immediately whenever it becomes aware that such access or participation may result in any actual or potential OCI and shall promptly submit a plan to the Contracting Officer to avoid or mitigate any such OCI. The Contractor’s mitigation plan will be determined to be acceptable solely at the discretion of the Contracting Officer and in the event the Contracting Officer unilaterally determines that any such OCI cannot be satisfactorily avoided or mitigated, the Contracting Officer may affect other remedies as he or she deems necessary, including prohibiting the Contractor from participation in subsequent contracted requirements which may be affected by the OCI.

1.6.18. PHASE IN /PHASE OUT PERIOD: Not Applicable.

PART 2

DEFINITIONS & ACRONYMS

2. DEFINITIONS AND ACRONYMS:

2.1 DEFINITIONS:

2.1.1. CONTRACTOR: A supplier or vendor awarded a contract to provide specific supplies or service to the government. The term used in this contract refers to the prime.

2.1.2. CONTRACTING OFFICER: A person with authority to enter into, administer, and or terminate contracts, and make related determinations and findings on behalf of the government. Note: The only individual who can legally bind the government.

2.1.3. CONTRACTING OFFICER'S REPRESENTATIVE: An employee of the U.S. Government appointed by the contracting officer to administer the contract. Such appointment shall be in writing and shall state the scope of authority and limitations. This individual has authority to provide technical direction to the Contractor as long as that direction is within the scope of the contract, does not constitute a change, and has no funding implications. This individual does NOT have authority to change the terms and conditions of the contract.

2.1.4. DELIVERABLE: Anything that can be physically delivered but may include non-manufactured things such as meeting minutes or reports.

2.1.5. KEY PERSONNEL: Contractor personnel that are evaluated in a source selection process and that may be required to be used in the performance of a contract by the Key Personnel listed in the PWS. When key personnel are used as an evaluation factor in best value procurement, an offer can be rejected if it does not have a firm commitment from the persons that are listed in the proposal.

2.1.6. PHYSICAL SECURITY: Actions that prevent the loss or damage of Government property.

2.1.7. QUALITY ASSURANCE: The government procedures to verify that services being performed by the Contractor are performed according to acceptable standards.

2.1.8. QUALITY ASSURANCE SURVEILLANCE PLAN (QASP): An organized written document specifying the surveillance methodology to be used for surveillance of contractor performance.

2.1.9. QUALITY CONTROL: All necessary measures taken by the Contractor to assure that the quality of an end product or service shall meet contract requirements.

2.1.10. SUBCONTRACTOR: One that enters into a contract with a prime contractor. The Government does not have privity of contract with the subcontractor.

2.1.11. WORK DAY: The number of hours per day the Contractor provides services in accordance with the contract.

2.1.12. WORK WEEK: Monday through Friday, unless specified otherwise.

2.2 ACRONYMS:

ACOR Alternate Contracting Officer's Representative AFARS Army Federal Acquisition Regulation Supplement AR Army Regulation CCE Contracting Center of Excellence CFR Code of Federal Regulations CONUS Continental United States (excludes Alaska and Hawaii) COR Contracting Officer Representative COTR Contracting Officer's Technical Representative COTS Commercial-Off-the-Shelf DA Department of the Army

DD FORM 250 Department of Defense Form 250 (Receiving Report) DD FORM 254 Department of Defense Contract Security Requirement List DFARS Defense Federal Acquisition Regulation Supplement DMDC Defense Manpower Data Center DOD Department of Defense FAR Federal Acquisition Regulation KO Contracting Officer OCI Organizational Conflict of Interest OCONUS Outside Continental United States (includes Alaska and Hawaii) ODC Other Direct Costs PIPO Phase In/Phase Out POC Point of Contact PRS Performance Requirements Summary PWS Performance Work Statement QA Quality Assurance QAP Quality Assurance Program QASP Quality Assurance Surveillance Plan QC Quality Control QCP Quality Control Program TE Technical Exhibit TPOC Technical Point of Contact

PART 3

GOVERNMENT FURNISHED PROPERTY, EQUIPMENT, AND SERVICES

3. GOVERNMENT FURNISHED ITEMS AND SERVICES:

3.1 Government-Furnished Resources: All Government-furnished property will be provided in accordance with FAR 52.245-1, and FAR 52.245-9, and may include: office/workspace, office supplies, telephone service, computer access, and storage space. Government property shall be used ONLY in performance of this contract and its deliverables. The contractor shall account for all property provided by the Government and shall be responsible for the security and condition of said property. Serialized items shall be annotated at the time of issue, with a signature of acknowledgement by the individual contractors. All GFP is the property of the US Government and shall not be transferred to any individual, or agency, public or private without the express written approval of the Contracting Officer.

3.2 Facilities: The Government will provide the necessary workspace for the contractor staff to provide the support outlined in the PWS to include desk space, telephones, computers, and other items necessary to maintain an office environment.

3.3 Utilities: The Government will provide electricity, water, phone service, and network services (NIPRNET, SIPRNET, JWICS, and DSN). The Contractor shall instruct employees in utilities conservation practices. The contractor shall be responsible for operating under conditions that preclude the waste of utilities, which include turning off the water faucets or valves after using the required amount to accomplish cleaning vehicles and equipment.

3.4 Equipment: The Government will provide contractor personnel computer equipment, other data collection equipment/software, telephones, and monitors. The contractor shall have access to printers, plotters, copy machines, scanners and fax machines as needed.

The contractor shall be responsible for any loss or destruction of or damage to items of Government property that are removed from the installation premises by the contractor – with or without Government approval.

3.5 Materials: Not applicable

PART 4

CONTRACTOR FURNISHED ITEMS AND SERVICES

4 . CONTRACTOR FURNISHED ITEMS AND RESPONSIBILITIES:

4.1 General: The Contractor shall furnish all supplies, equipment, facilities and services required to perform work under this contract that are not listed under Section 3 of this PWS.

4.2 Top Secret/Sensitive Compartmented Information (TS/SCI) Facility Clearance: The contractor shall possess and maintain a Top Secret Clearance from the Defense Security Service. Contractor employees performing on this contract shall be U.S. citizens.

Contractor employees, to include subcontractors, shall possess and maintain a Top Secret Security Clearance w/ SCI eligibility. The DD 254 is provided.

4.3 Materials. The Contractor shall provide–except for property and services specified as government furnished– all personnel, equipment, supplies, facilities, transportation, tools, materials, supervision, other items and non- personal services essential to production environment support necessary to meet the requirements under this PWS.

4.4 Training / Certification: The contractor shall provide, within the specified timeframe, proof of required employee training and/or certifications described under Part 1.

4.5 Contract Management: The contractor shall provide all management, administration, security, quality control, and all else required to ensure successful completion of all deliverables.

4.6 Personnel: The contractor shall furnish adequate supervision, and the labor necessary to perform all services in an orderly, timely, and efficient manner. The contractor shall utilize qualified and experienced employees capable of achieving the goals established in the contract. All personnel shall maintain current qualifications and clearances and obtain any and all training required to meet mission requirements. Contractor personnel are employees of the contractor and under its administrative control and supervision. The contractor through its personnel shall perform tasks herein. Contractor shall select, supervise, and exercise control and direction over the employees under this contract. The Government will not exercise any supervision or control over the contractor employees in its performance of contractual services under this contract. The contractor shall ensure that no prohibited personal services are performed under this contract.

4.7 Service Contract Information: Non-Personal Services. The Government and the Contractor understand and agree that the work described in this contract is a "Non-personal Services Contract" as defined in FAR Part 37.101. Therefore, it is further understood and agreed that the Contractor and/or the Contractor's employees: Shall perform the services described herein as independent contractors, not as employees of the Government. Shall NOT be placed in a position where they are under the supervision, direction or evaluation of a federal employee, military or civilian, but shall, pursuant to the Government's right to inspect, accept or reject work, comply with such general direction of the Contracting Officer or the duly appointed representative of the Contracting Officer as is necessary to ensure completion of the contract objectives. Shall NOT be placed in a position of command, supervision administration or control over DA military civilian personnel or personnel of other contractors or become part of the Government organization. Further as this contract does not create an employer-employee relationship, the entitlements and benefits applicable to such relationships do NOT apply. Such include, but are not limited to, federal income tax withholding, Federal Insurance Contributions Act (FICA), unemployment compensation and workman's compensation benefits by virtue of this contract. Work Force: The successful bidder shall not hire persons not legally residing in the United States of America.

PART 5

SPECIFIC TASKS

5. Specific Tasks:

5.1. Basic Services: The contractor shall provide contractor staff management, instruction, and subject matter expertise, in accordance with (IAW) this PWS.

5.2. Management Services: The contractor shall provide complete program management and administrative tasks to ensure the requirements of the contract are met and to ensure the contractor adequately controls and supervises its personnel who provide the deliverables described within this PWS. The contractor shall provide all necessary personnel, administrative, financial, and managerial resources required to support this contract.

5.3. Classroom Instruction / Course Writing Services: Instructor/writers shall develop government owned training, provide classroom support, participate in operational tests, training material validation, and provide training IAW established programs of instruction (POI), the Master Training Plan (MTP), Army Learning Concept (ALC) 2015, USCYBERCOM J7, National Cryptologic Training System National Security Agency (NSA) standards per DoDI 3305.09, DoD Cybersecurity Workforce Framework (i.e. DoD 8140) training standards, and the requirements and deliverables of this PWS. Instructor/writers shall provide a learner-centric learning environment as per TRADOC Pam 525-8-2 paragraph 3-5,20 January 2011, curate course material in a manner that encourages students to think creatively to solve complex problems which the students have never seen before and use dynamic techniques that engage students and encourage them to challenge common definitions of cyber and its potential battlespace effects. All course content that would normally be served as word documents, PowerPoint slides, PDFs, or similar content types shall be stored using the ADOC markup language as flat text files. Binary files (beyond those required for student exercises, e.g. precompiled programs) are not to be used. Specific requirements may change over the life of this PWS, and instructors may need to adjust to incorporate in-scope changes.

The contractor shall:

Collaborate with government personnel to establish acceptable training practices and student evaluation criteria.

Review classroom training materials such as student handouts, lesson plans, slides, and practical exercises for accuracy and that the material is current every 60 days from the start of the Period of Performance and…