Attmt 0004_DRAFT Level of Effort and Labor Descriptions 20220505.xlsx
XLSX spreadsheet 64 KB Posted
- Attached to
- PM IS&A Cybersecurity Support Services - DRAFT Solicitation Federal contract opportunity
- Solicitation number
- CybersecurityServices_DRAFT_RFP_09May2022
View the file
Other files for this federal contract opportunity
| File | Type | Posted |
|---|---|---|
| DRAFT Cybersecurity Solicitation_05092022.pdf | ||
| Attmt 0001_DRAFT Cybersecurity Support Services PWS_05052022.pdf | ||
| Attmt 0002_Solicitation Tables_05092022.pdf | ||
| Exhibit B_DRAFT CDRLs.pdf | ||
| Exhibit A_DRAFT CDRLs.pdf | ||
| Exhibit D_DRAFT CDRLs.pdf |
On GovTribe
Work with this file on GovTribe
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Level of Effort
| Component Name: | PM IS&A | |||||||||||
| Project Title: | Cybersecurity Support Services | |||||||||||
| Project Manager: | ||||||||||||
| Date: | 4/25/22 | |||||||||||
| Escalation | 4.00% | Escalation | 4.00% | Escalation | 4.00% | |||||||
| Base Period | Option Period 1 | Option Period 2 | Option Period 3 | |||||||||
| Period Dates | 10/31/22 | 10/30/23 | Period Dates | 10/31/23 | 10/30/24 | Period Dates | 10/31/24 | 10/30/25 | Period Dates | 10/31/25 | 10/30/26 | |
| Direct Labor Category | Hours | Rate | Total | Hours | Rate | Total | Hours | Rate | Total | Hours | Rate | Total |
| Project Management | 960 | $0.00 | 1,920 | $ - 0 | $0.00 | 1,920 | $0.00 | $0.00 | 1,920 | $0.00 | $0.00 | |
| CDSS - Information Systems Security Engineer - SME (DoD 8570: IASAE III) | 960 | $0.00 | 1,920 | $0.00 | $0.00 | 1,920 | $0.00 | $0.00 | 1,920 | $0.00 | $0.00 | |
| CDSS - Information Systems Security Engineer - Sr (DoD 8570: IASAE II) | 3,840 | $0.00 | 7,680 | $0.00 | $0.00 | 7,680 | $0.00 | $0.00 | 5,760 | $0.00 | $0.00 | |
| CDSS FSE - Information Systems Security Engineer - (DoD 8570: IAT II) | 9,600 | $0.00 | 19,200 | $0.00 | $0.00 | 19,200 | $0.00 | $0.00 | 11,520 | $0.00 | $0.00 | |
| Information Systems Security Engineer - SME (DoD 8570: IAT III) | 960 | $0.00 | 1,920 | $0.00 | $0.00 | 1,920 | $0.00 | $0.00 | 1,920 | $0.00 | $0.00 | |
| Information Systems Security Engineer - Senior (DoD 8570: IAT II) | 960 | $0.00 | 1,920 | $0.00 | $0.00 | 1,920 | $0.00 | $0.00 | 1,920 | $0.00 | $0.00 | |
| Information Systems Security Officer - (DoD 8570: IAM II) - Senior | 3,840 | $0.00 | 7,680 | $0.00 | $0.00 | 7,680 | $0.00 | $0.00 | 7,680 | $0.00 | $0.00 | |
| Information Systems Security Officer - (DoD 8570: IAM II) - Med | 4,800 | $0.00 | 9,600 | $0.00 | $0.00 | 9,600 | $0.00 | $0.00 | 9,600 | $0.00 | $0.00 | |
| Information Systems Security Officer - (DoD 8570: IAT II) | 4,800 | $0.00 | 9,600 | $0.00 | $0.00 | 9,600 | $0.00 | $0.00 | 5,760 | $0.00 | $0.00 | |
| Senior Cloud ISSE (DoD 8570: IASAE II) | 2,880 | $0.00 | 7,680 | $0.00 | $0.00 | 7,680 | $0.00 | $0.00 | 7,680 | $0.00 | $0.00 | |
| Direct Labor Subtotal | 33,600 | $0.00 | 69,120 | $0.00 | 69,120 | $0.00 | 55,680 | $0.00 | ||||
| FTE | 18 | 36 | 36 | 29 | ||||||||
| Fringe Benefits % | $0.00 | 25.00% | $0.00 | 25.00% | $0.00 | 25.00% | $0.00 |
Overhead % $0.00 35.00% $0.00 35.00% $0.00 35.00% $0.00
Direct Labor Total 33,600 $0.00 69,120 $0.00 69,120 $0.00 55,680 $0.00
| Other Direct Costs | |||||||
| Materials (See Materials tab) | $0.00 | $0.00 | $0.00 | $0.00 | |||
| Material Handling (or G&A) | $0.00 | 1.50% | $0.00 | 1.50% | $0.00 | 1.50% | $0.00 |
| Travel (See Travel tab) | $400,000.00 | $425,000.00 | $425,000.00 | $350,000.00 | ||||
| Travel Handling (or G&A) | 2.50% | $10,000.00 | 2.50% | $10,625.00 | 2.50% | $10,625.00 | 2.50% | $8,750.00 |
All Other Direct Costs (See ODC tab) $0.00 $0.00 $0.00 $0.00
Subtotal ODCs $410,000.00 $435,625.00 $435,625.00 $358,750.00
Subtotal (Total Cost Input) $410,000.00 $435,625.00 $435,625.00 $358,750.00
G&A % ("Direct Labor Total" and "All Other Direct Costs") $0.00 6.25% $0.00 6.25% $0.00 6.25% $0.00
| Labor Fee % | $0.00 | 8.00% | $0.00 | 8.00% | $0.00 | 8.00% | $0.00 |
| Other Direct Costs Fee % | $0.00 | 0.00% | $0.00 | 0.00% | $0.00 | 0.00% | $0.00 |
IGCE Grand Total 33,600 $410,000.00 69,120 $435,625.00 69,120 $435,625.00 55,680 $358,750.00
| TOTAL: | $1,640,000.00 |
| Labor Categories. Enter all proposed labor categories for the project and the estimated hours for each related task. |
| Materials. Itemize all items needed to perform the contract (See Materials tab) |
| Material Handling - Enter known Material Handling rate or G&A rate |
| Travel. Use an overall estimated cost for travel, combining such elements as air fare, per diem, and local travel multiplied by the number of trips. |
| Travel Handling - Enter known Travel Handling rate or G&A rate |
All Other Direct Costs. Itemize any additional Direct Costs, if applicable. These items may include special test equipment, packaging and packing, telephone charges, etc.
Labor Fee. The amount of fully burdened labor plus labor G&A times the Fee rate
ODC Fee. Typically 0% for competitive efforts, however, sometimes included on Sole Source efforts. ODC Fee equals The amount of ALL ODCs (Mat'l/Mat'l Handling/Travel/Travel Handling/All Other Direct Costs) plus "All Other Direct Costs' G&A" times the Fee rate
Escalation factor. For option years, include escalation factor for DIRECT LABOR based on a reputable source, such as Global Insights, for each option year, if applicable.
Reference Material: Attach supporting documentation for support preparation, historical data, etc.
Prepared by:
| Preparer's Name, Organization, Position, Title and Telephone number |
| Reviewed by: |
| I certify that this IGCE was developed independently by the Government prior to seeking any formal proposals from contractors |
Reviewer's Name, Organization, Title Rank or Grade and Telephone Number
WAG
| Fiscal Year | FY22 | FY23 | FY24 | FY25 | |||||
| Fiscal Year Dates | 10/1/20221- 9/30/2022 | 10/1/2022 - 9/30/2023 | 10/1/2023 - 9/30/2024 | 10/1/2024 - 9/30/2025 | |||||
| Current Cyber Staffing | New Cyber Contract POP | ||||||||
| Projects | BAH (POP End: 9/2023) | Chenega (POP End: 7/30/2022) | QED (POP End: 9/2022) | Comments | 10/31/2022 - 10/30/2023 | ||||
| Base Year | 10/31/2023 - 10/30/2024 | ||||||||
| Option Year 1 | 10/31/2024 - 10/31/2025 | ||||||||
| Option Year 2 | 10/31/2025 - 10/30/2026 |
Option Year 3
| JTT WCDMA | Currently in sustainment; modernization effort needs support | ISSE (.50) | ||
| ISSO (.25) | ISSE (.25) | |||
| ISSO (.50) | ISSO (.25) | ISSO (.25) |
TGS Tech Refresh Tech Refresh FY24/25; modernization effort needs support
Notes from VB: hardware refresh only: servers, routers/switches, storage, KVM). Based on this data, limited ISSE support required and ISSO need to provide updated artifacts to SEC. ISSE (.25) ISSO (.25) ISSO (.25)
| Intel Apps | New Effort | Cloud ISSE (1) | Cloud ISSE (1) | Cloud ISSE (1) | Cloud ISSE (1) | |
| GWS Next Gen | FY22/23 purchase exisiting GWS; FY24 Next GEN | ISSE (.25) | ISSE (1) | |||
| ISSO (.50) | ISSE (1) |
ISSO (1)
NSANet (Dev Environment) ISSO (1) SA (.10) Current SA support ends 7/2022 (Chenega Contract) *ISSO support end 9/2023 (BAH Contract)
Will need development space for Titan and CDSS ISSE (.50)
ISSO (.50)*
FSE (.50) ISSE (.25)
ISSO (.50)
| FSE (.50) | ISSO (.50) |
| FSE (.50) | ISSO (.50) |
FSE (.50)
OGS ISSO (2) *Current support ends 9/2023 (BAH Contract); Expected to be out of the field by ?? ISSO (2)* ISSO (2) ISSO (2) ISSO (2)
DFS ISSO (2) Transition to SEC sustainment 10/2023; *Current support ends 9/2023 (BAH Contract) ISSO (2)* ISSO (.50)
GSIF Lab ISSO (2) This effort is maintaining (SA) and IA related matters with the equipment in the lab for development efforts under Tactical CDSS, Titan, etc.; Working with engs to develop RMF BOE, etc.
*Current support ends 9/2023 (BAH Contract) ISSO (1)* ISSO (1) ISSO (.50) ISSO (.50)
| CD2 | ||||||||
| On Prem | ISSO (.25) | ISSO (.75) | Down sized to 1 phyiscal fixed site location | ISSO (.5) | ISSO (.5) | ISSO (.50) | ISSO (.50) | |
| Cloud | ISSO (1) | 3 Cloud efforts (U-DEV, SIPR, and JWICS) | Cloud ISSE (2) | |||||
| ISSO (1) | Cloud ISSE (2) | |||||||
| ISSO (1) | Cloud ISSE (1) | |||||||
| ISSO (.50) | Cloud ISSE (1) |
ISSO (.50)
Titan FY 22/23 MTA manage competive prototypes from 2 vendors;
FY 24 SWAP annual SW release
| On Prem | ISSE (1.75) | ISSO (.25) | ISSO (.25) | ISSE (1) | ISSE (1) | ISSE (1) | ISSE (1) |
| NIPR | ISSO (.25) | ISSO (.50) | ISSO (.50) | ISSO (1) | |||
| SIPR | ISSO (.50) | ISSO (.50) | ISSO (.50) | ISSO (.50) | |||
| MPE | ISSO (1) | ISSO (1) | ISSO (1) | ISSO (.50) | |||
| JWICS | ISSO (.50) | ISSO (.50) | ISSO (.50) | ISSO (.50) | |||
| NSANet | ISSO (.50) | ISSO (.50) | ISSO (.50) | ISSO (.50) |
Cloud Cloud ISSE (2) Cloud ISSE (1) Cloud ISSE (2) Cloud ISSE (2)
| CDSS | ||||||||
| Tactical | ||||||||
| FSE | Installers (1.90) | FSE (9.5) | FSE (9.5) | FSE (7.5) | FSE (5.5) | |||
| ISSO Services | ISSO (.75) | ISSO (1) | ISSO (1) | ISSO (1) | ISSO (1) | |||
| CDSS ISSE | Cyber Eng (1) | Cyber Eng (1) | CDSS ISSE (3) | CDSS ISSE (3) | CDSS ISSE (3) | CDSS ISSE (3) | ||
| Val/Ver Services | ISSO (Val/Ver) (2) | ISSO (Val/Ver) (5) | ISSO (Val/Ver) (5) | ISSO (Val/Ver) (4) | ISSO (Val/Ver) (3) | |||
| Enterprise (CD2) | ISSO (2) | |||||||
| Eng (1) - not cleared to SCI | CDSS ISSE (1) | |||||||
| ISSO (2) | CDSS ISSE (1) | |||||||
| ISSO (.50) | CDSS ISSE (.50) | |||||||
| ISSO (.50) | CDSS ISSE (.25) |
ISSO (.50)
| Titan | CDSS ISSE (.50) | |
| ISSO (1) | CDSS ISSE (.50) | |
| ISSO (1) | CDSS ISSE (1) | |
| ISSO (1) | CDSS ISSE (.50) |
ISSO (1)
| CENATUR | CDSS ISSE (.50) | |
| ISSO (1) | CDSS ISSE (.50) | |
| ISSO (.50) | CDSS ISSE (.50) | |
| ISSO (.50) | CDSS ISSE (.25) |
ISSO (.50)
| Emerging Efforts (SABI??) | CDSS ISSE (.50) | |
| ISSO (.25) | CDSS ISSE (.50) | |
| ISSO (.50) | CDSS ISSE (.50) | |
| ISSO (.50) | CDSS ISSE (.50) |
ISSO (.50)
| Total FTEs | 15 FTEs | 6 FTEs | 1 FTE | 35 FTEs | 36 FTEs | 36 FTEs | 29 FTEs |
| ISSE - 2 | ISSE - 2 | ISSE - 2 | ISSE - 2 | ||||
| 1 | ID (NSANet/SI) | Lost LW / JG (FMLA) | JM (CD2 On Prem) | CDSS ISSE - 5 | CDSS ISSE - 5 | CDSS ISSE - 5 | CDSS ISSE - 4 |
| 2 | AM (CD2/SI) | Cloud ISSE - 3 | Cloud ISSE - 4 | Cloud ISSE - 4 | Cloud ISSE - 4 | ||
| 3 | JH (Titan) | ISSO (General) - 9 | ISSO (General) - 9 | ISSO (General) - 9 | ISSO (General) - 9 | ||
| 4 | BB (GSIF) | ISSO (Val/Ver) IAT II - 5 | ISSO (Val/Ver) IAT II - 5 | ISSO (Val/Ver) IAT II - 5 | ISSO (Val/Ver) IAT II - 3 | ||
| 5 | TW (CD2 Enterprise CDSS) | FSE - 10 | FSE - 10 | FSE - 10 | FSE - 6 | ||
| 6 | SM (CD2 Enterprise CDSS) | PM - 1 | PM - 1 | PM - 1 | PM - 1 | ||
| 7 | MG (CD Enterprise CDSS) | ||||||
| 8 | WR (DFS) | ||||||
| 9 | TW (DFS) | ||||||
| 10 | JB (OGS) | ||||||
| 11 | LC (OGS) | ||||||
| 12 | SO (CD2 On Prem) | ||||||
| 13 | BW (Tactical CDSS) | ||||||
| 14 | JR (Rainmaker/ArcaneFire/Army3.x(Palantir) | ||||||
| 15 | PJ (ArcaneFire) | ||||||
| 16 | MK transitioning to Josh Burkhart (D-Lite) |
Materials Materials Estimate - add lines as necessary.
| Project Title: | Cybersecurity Support Services | |||||||||||
| Project Manager: | ||||||||||||
| Date: | 4/25/22 | |||||||||||
| Base Period | Option Period 1 | Option Period 2 | Option Period 3 | |||||||||
| Item | Unit Cost | Quantity | Total Cost | Unit Cost | Quantity | Total Cost | Unit Cost | Quantity | Total Cost | Unit Cost | Quantity | Total Cost |
| $0.00 | $0.00 | $0.00 | $0.00 | |
| $0.00 | $0.00 | $0.00 | $0.00 | |
| $0.00 | $0.00 | $0.00 | $0.00 | |
| $0.00 | $0.00 | $0.00 | $0.00 | |
| $0.00 | $0.00 | $0.00 | $0.00 | |
| $0.00 | $0.00 | $0.00 | $0.00 | |
| $0.00 | $0.00 | $0.00 | $0.00 | |
| $0.00 | $0.00 | $0.00 | $0.00 | |
| $0.00 | $0.00 | $0.00 | $0.00 | |
| $0.00 | $0.00 | $0.00 | $0.00 | |
| $0.00 | $0.00 | $0.00 | $0.00 | |
| $0.00 | $0.00 | $0.00 | $0.00 | |
| $0.00 | $0.00 | $0.00 | $0.00 | |
| $0.00 | $0.00 | $0.00 | $0.00 | |
| $0.00 | $0.00 | $0.00 | $0.00 | |
| $0.00 | $0.00 | $0.00 | $0.00 | |
| $0.00 | $0.00 | $0.00 | $0.00 | |
| $0.00 | $0.00 | $0.00 | $0.00 | |
| $0.00 | $0.00 | $0.00 | $0.00 | |
| $0.00 | $0.00 | $0.00 | $0.00 | |
| $0.00 | $0.00 | $0.00 | $0.00 | |
| $0.00 | $0.00 | $0.00 | $0.00 | |
| $0.00 | $0.00 | $0.00 | $0.00 | |
| $0.00 | $0.00 | $0.00 | $0.00 | |
| $0.00 | $0.00 | $0.00 | $0.00 | |
| $0.00 | $0.00 | $0.00 | $0.00 | |
| $0.00 | $0.00 | $0.00 | $0.00 | |
| $0.00 | $0.00 | $0.00 | $0.00 | |
| $0.00 | $0.00 | $0.00 | $0.00 | |
| $0.00 | $0.00 | $0.00 | $0.00 | |
| $0.00 | $0.00 | $0.00 | $0.00 | |
| $0.00 | $0.00 | $0.00 | $0.00 | |
| $0.00 | $0.00 | $0.00 | $0.00 | |
| $0.00 | $0.00 | $0.00 | $0.00 | |
| $0.00 | $0.00 | $0.00 | $0.00 | |
| Materials total | $0.00 | $0.00 | $0.00 | $0.00 |
Travel Travel Estimate - add lines as necessary.
| Project Title: | CybersecuritySupport Services |
| Project Manager: | |
| Date: | 4/25/22 |
| Base Period | |||||||||
| To Location: | From Location: | # of Trips | # of Days | # of Travellers | Airfare (Round Trip per Person) | Lodging (per Night per Person) | M&I | ||
| (per Day per Person) | Rental Car | ||||||||
| (per Day) | Total | ||||||||
| $400,000.00 |
| TOTAL | 0 | $400,000.00 | |||||||
| Option Period 1 | |||||||||
| To Location: | From Location: | # of Trips | # of Days | # of Travellers | Airfare (Round Trip per Person) | Lodging (per Night per Person) | M&I | ||
| (per Day per Person) | Rental Car | ||||||||
| (per Day) | Total | ||||||||
| $425,000.00 |
| TOTAL | 0 | $425,000.00 | |||||||
| Option Period 2 | |||||||||
| To Location: | From Location: | # of Trips | # of Days | # of Travellers | Airfare (Round Trip per Person) | Lodging (per Night per Person) | M&I | ||
| (per Day per Person) | Rental Car | ||||||||
| (per Day) | Total | ||||||||
| $425,000.00 |
| TOTAL | 0 | $425,000.00 | |||||||
| Option Period 3 | |||||||||
| To Location: | From Location: | # of Trips | # of Days | # of Travellers | Airfare (Round Trip per Person) | Lodging (per Night per Person) | M&I | ||
| (per Day per Person) | Rental Car | ||||||||
| (per Day) | Total | ||||||||
| $350,000.00 |
TOTAL 0 $350,000.00
ODC
Other Direct Costs Estimate - add lines as necessary.
| Project Title: | Cybersecurity Support Services | |||
| Project Manager: | ||||
| Date: | ||||
| Base Period | Option Period 1 | Option Period 2 | Option Period 3 | |
| Other Direct Cost Item | Cost | Cost | Cost | Cost |
Other Direct Cost Total $0.00 $0.00 $0.00 $0.00
Labor Desc CDSS ISSE-IASAE III
| Other | IASAE LEVEL III | DCWF Security Architect (652) |
| Top Secret-SCI w/ Counter Intelligence Polygraph Required. | IASAE Level III positions are responsible for the design, development, implementation, and/or integration of a DoD IA architecture, system, or system component for use within CE, NE, and enclave environments. They ensure that the architecture and design of DoD IS are functional and secure. This may include designs for program of record systems and special purpose environments with platform IT interconnectivity. Incumbents may also be responsible for system or network designs that encompass multiple CE and/or NE to include those with differing data protection/classification requirements. | Designs enterprise and systems security throughout the development lifecycle; translates technology and environmental conditions (e.g., law and regulation) into security designs and processes. |
| IA Baseline Certification: CISSP-ISSAP or CISSP-ISSEP | ||
| IASAE III: At least 10 years of IASAE experience. |
| Position Requirements | Tasks |
| IASAE-III.1. Identify information protection needs for the enclave environment. | Define and document how the implementation of a new system or new interfaces between systems impacts the security posture of the current environment. |
| IASAE-III.2. Define enclave security requirements in accordance with applicable IA policies (e.g., References (c) and (u) and organizational security policies). | Develop a system security context, a preliminary system security CONOPS, and define baseline system security requirements in accordance with applicable cybersecurity requirements. |
| IASAE-III.3. Provide input on IA security requirements to be included in statements of work and other appropriate procurement documents. | Develop/integrate cybersecurity designs for systems and networks with multilevel security requirements or requirements for the processing of multiple classification levels of data primarily applicable to government organizations (e.g., UNCLASSIFIED, SECRET, and TOP SECRET). |
| IASAE-III.4. Support Program Managers responsible for the acquisition of DoD IS to ensure IA architecture and systems engineering requirements are properly addressed throughout the acquisition life-cycle. | Document and address organization's information security, cybersecurity architecture, and systems security engineering requirements throughout the acquisition lifecycle. |
| IASAE-III.5. Design security architectures for use within the enclave environment. | Document the protection needs (i.e., security controls) for the information system(s) and network(s) and document appropriately. |
| IASAE-III.6. Design and develop IA or IA-enabled products for use within the enclave. | Employ secure configuration management processes. |
| IASAE-III.7. Design and develop CDS for use within CE, NE, or enclave environments. | Ensure acquired or developed system(s) and architecture(s) are consistent with organization's cybersecurity architecture guidelines. |
| IASAE-III.8. Develop and implement security designs for new or existing enclave system(s). Ensure that the design of hardware, operating systems, and software applications adequately address IA security requirements for the enclave. | Evaluate security architectures and designs to determine the adequacy of security design and architecture proposed or provided in response to requirements contained in acquisition documents. |
| IASAE-III.9. Design, develop, and implement security measures that provide confidentiality, integrity, availability, authentication, and non-repudiation for the enclave environment. | Identify and prioritize critical business functions in collaboration with organizational stakeholders. |
| IASAE-III.10. Design, develop, and implement specific IA countermeasures for the enclave. | Perform security reviews, identify gaps in security architecture, and develop a security risk management plan. |
| IASAE-III.11. Develop interface specifications for use within the enclave environment. | Analyze candidate architectures, allocate security services, and select security mechanisms. |
| IASAE-III.12. Develop approaches to mitigate enclave vulnerabilities and recommend changes to system or system components as needed. | Analyze user needs and requirements to plan architecture. |
| IASAE-III.13. Ensure that enclave system(s) and network(s) designs support the incorporation of DoD-directed IA vulnerability solutions, e.g., IAVAs. | Assess and design security management functions as related to cyberspace. |
| IASAE-III.14. Develop IA architectures and designs for DoD IS with high integrity and availability requirements, to include MAC I systems as defined in Reference (c), systems with a high Level-of-Concern for availability or integrity in accordance with Reference (u), and other DAA designated systems. | Define and prioritize essential system capabilities or business functions required for partial or full system restoration after a catastrophic failure event. |
| IASAE-III.15. Develop IA architectures and designs for systems and networks with multilevel security requirements or requirements for the processing of multiple classification levels of data (e.g., UNCLASSIFIED, SECRET, and TOP SECRET). | Define appropriate levels of system availability based on critical system functions and ensure system requirements identify appropriate disaster recovery and continuity of operations requirements to include any appropriate fail-over/alternate site requirements, backup requirements, and material supportability requirements for system recover/restoration. |
| IASAE-III.16. Develop IA architectures and designs for systems processing SCI that will operate at Protection Level 3, 4, or 5 as defined in Reference (u). | Develop enterprise architecture or system components required to meet user needs. |
| IASAE-III.17. Develop IA architectures and designs for DoD IS to include automated IS applications, enclaves (which include networks), and special purpose environments with platform IT interconnectivity, e.g., weapons systems, sensors, medical technologies, or distribution systems. | Document and update as necessary all definition and architecture activities. |
| IASAE-III.18. Ensure that acquired or developed system(s) and network(s) employ Information Systems Security Engineering and are consistent with DoD Component level IA architecture. | Provide advice on project costs, design concepts, or design changes. |
| IASAE-III.19. Assess threats to and vulnerabilities of the enclave. | Provide input on security requirements to be included in statements of work and other appropriate procurement documents. |
| IASAE-III.20. Identify, assess, and recommend IA or IA-enabled products for use within an enclave and ensure recommended products are in compliance with the DoD evaluation and validation requirements of Reference (c). | Provide input to the Risk Management Framework process activities and related documentation (e.g., system life-cycle support plans, concept of operations, operational procedures, and maintenance training materials). |
| IASAE-III.21. Ensure that the implementation of security designs properly mitigate identified threats. | Translate proposed capabilities into technical requirements. |
| IASAE-III.22. Assess the effectiveness of information protection measures utilized by the enclave. | Write detailed functional specifications that document the architecture development process. |
| IASAE-III.23. Evaluate security architectures and designs and provide input as to the adequacy of security designs and architectures proposed or provided in response to requirements contained in acquisition documents. | Knowledge, Skills, and Abilities |
| IASAE-III.24. Ensure security deficiencies identified during security/certification testing have been mitigated, corrected, or a risk acceptance has been obtained by the appropriate DAA or authorized representative. | * Knowledge of computer networking concepts and protocols, and network security methodologies. |
| IASAE-III.25. Provide input to IA C&A process activities and related documentation (e.g., system life-cycle support plans, concept of operations, operational procedures, and maintenance training materials). | * Knowledge of cyber threats and vulnerabilities. |
| IASAE-III.26. Participate in an IS risk assessment during the C&A process and design security countermeasures to mitigate identified risks. | * Knowledge of cybersecurity principles. |
| IASAE-III.27. Provide engineering support to security/certification test and evaluation activities. | * Knowledge of national and international laws, regulations, policies, and ethics as they relate to cybersecurity. |
| IASAE-III.28. Document system security design features and provide input to implementation plans and standard operating procedures. | * Knowledge of risk management processes (e.g., methods for assessing and mitigating risk). |
| IASAE-III.29. Recognize a possible security violation and take appropriate action to report the incident. | * Knowledge of specific operational impacts of cybersecurity lapses. |
| IASAE-III.30. Implement and/or integrate security measures for use in the enclave and ensure that enclave designs incorporate security configuration guidelines. | Ability to apply an organization's goals and objectives to develop and maintain architecture. |
| IASAE-III.31. Ensure the implementation of enclave IA policies into system architectures. | Ability to apply network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth). |
| IASAE-III.32. Ensure the implementation of subordinate CE and NE IA policies are integrated into the enclave system architecture. | Ability to design architectures and frameworks. |
| IASAE-III.33. Oversee and provide technical guidance to IASAE Level I and II personnel. | Knowledge of cybersecurity principles and organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation). |
| IASAE-III.34. Obtain and maintain IA baseline certification appropriate to position. | Knowledge of cybersecurity-enabled software products. |
| Knowledge of integrating the organization’s goals and objectives into the architecture. | |
| Knowledge of organization's enterprise information security architecture system. | |
| Skill in applying cybersecurity methods, such as firewalls, demilitarized zones, and encryption. | |
| Skill in determining how a security system should work (including its resilience and dependability capabilities) and how changes in conditions, operations, or the environment will affect these outcomes. | |
| Skill in translating operational requirements into protection needs (i.e., security controls). | |
| Ability to apply secure system design tools, methods and techniques. | |
| Ability to apply system design tools, methods, and techniques, including automated systems analysis and design tools. | |
| Ability to apply the methods, standards, and approaches for describing, analyzing, and documenting an organization's enterprise information technology (IT) architecture (e.g., Open Group Architecture Framework [TOGAF], Department of Defense Architecture Framework [DoDAF], Federal Enterprise Architecture Framework [FEAF]). | |
| Ability to conduct vulnerability scans and recognize vulnerabilities in security systems. | |
| Ability to optimize systems to meet enterprise performance requirements. | |
| Knowledge of an organization's information classification program and procedures for information compromise. | |
| Knowledge of authentication, authorization, and access control methods. | |
| Knowledge of circuit analysis. | |
| Knowledge of computer algorithms. | |
| Knowledge of confidentiality, integrity, and availability requirements. | |
| Knowledge of configuration management techniques. | |
| Knowledge of cryptography and cryptographic key management concepts. | |
| Knowledge of database systems. | |
| Knowledge of electrical engineering as applied to computer architecture, including circuit boards, processors, chips, and associated computer hardware. | |
| Knowledge of embedded systems. | |
| Knowledge of encryption algorithms (e.g., Internet Protocol Security [IPSEC], Advanced Encryption Standard [AES], Generic Routing Encapsulation [GRE], Internet Key Exchange [IKE], Message Digest Algorithm [MD5], Secure Hash Algorithm [SHA], Triple Data Encryption Standard [3DES]). | |
| Knowledge of how system components are installed, integrated, and optimized. | |
| Knowledge of how traffic flows across the network (e.g., Transmission Control Protocol [TCP] and Internet Protocol [IP], Open System Interconnection Model [OSI], Information Technology Infrastructure Library, current version [ITIL]). | |
| Knowledge of human-computer interaction principles. | |
| Knowledge of industry-standard and organizationally accepted analysis principles and methods. | |
| Knowledge of Information Theory (e.g., source coding, channel coding, algorithm complexity theory, and data compression). | |
| Knowledge of key concepts in security management (e.g., Release Management, Patch Management). | |
| Knowledge of key telecommunications concepts (e.g., Routing Algorithms, Fiber Optics Systems Link Budgeting, Add/Drop Multiplexers). | |
| Knowledge of local specialized system requirements (e.g., critical infrastructure systems that may not use standard information technology [IT]) for safety, performance, and reliability. | |
| Knowledge of mathematics, including logarithms, trigonometry, linear algebra, calculus, and statistics. | |
| Knowledge of microprocessors. | |
| Knowledge of multi-level/security cross domain solutions. | |
| Knowledge of network access, identity, and access management (e.g., public key infrastructure [PKI]). | |
| Knowledge of network design processes, to include understanding of security objectives, operational objectives, and tradeoffs. | |
| Knowledge of network protocols such as TCP/IP, Dynamic Host Configuration, Domain Name System (DNS), and directory services. | |
| Knowledge of network systems management principles, models, methods (e.g., end-to-end systems performance monitoring), and tools. | |
| Knowledge of N-tiered typologies including server and client operating systems. | |
| Knowledge of operating systems. | |
| Knowledge of organizational process improvement concepts and process maturity models (e.g., Capability Maturity Model Integration (CMMI) for Development, CMMI for Services, and CMMI for Acquisitions). | |
| Knowledge of organization's evaluation and validation criteria. | |
| Knowledge of parallel and distributed computing concepts. | |
| Knowledge of Payment Card Industry (PCI) data security standards. | |
| Knowledge of Personal Health Information (PHI) data security standards. | |
| Knowledge of Personally Identifiable Information (PII) data security standards. | |
| Knowledge of program protection planning to include information technology (IT) supply chain security/risk management policies, anti-tampering techniques, and requirements. | |
| Knowledge of service management concepts for networks and related standards (e.g., Information Technology Infrastructure Library, current version [ITIL]). | |
| Knowledge of software engineering. | |
| Knowledge of system fault tolerance methodologies. | |
| Knowledge of systems testing and evaluation methods. | |
| Knowledge of technology integration processes. | |
| Knowledge of the enterprise information technology (IT) architectural concepts and patterns to include baseline and target architectures. | |
| Knowledge of the Risk Management Framework Assessment Methodology. | |
| Knowledge of the Security Assessment and Authorization process. | |
| Knowledge of the systems engineering process. | |
| Knowledge of various types of computer architectures. | |
| Skill in applying and incorporating information technologies into proposed solutions. | |
| Skill in applying security models (e.g., Bell-LaPadula model, Biba integrity model, Clark-Wilson integrity model). | |
| Skill in design modeling and building use cases (e.g., unified modeling language). | |
| Skill in designing multi-level security/cross domain solutions. | |
| Skill in designing the integration of hardware and software solutions. | |
| Skill in the use of design methods. | |
| Skill in writing code in a currently supported programming language (e.g., Java, C++). |
Labor Desc CDSS ISSE-IASAE II
| Other | IASAE LEVEL II | DCWF Security Architect (652) |
| Top Secret-SCI w/ Counter Intelligence Polygraph Required. | IASAE Level II positions are responsible for the design, development, implementation, and/or integration of a DoD IA architecture, system, or system component for use within the NE. Incumbents ensure that IA related IS will be functional and secure within the NE. | Designs enterprise and systems security throughout the development lifecycle; translates technology and environmental conditions (e.g., law and regulation) into security designs and processes. |
| IA Baseline Certification: CASP+ CE, CISSP (or Associate), or CSSLP | IA Baseline Certification: CASP+ CE, CISSP (or Associate), or CSSLP | |
| IASAE II: At least 5 years of IASAE experience. |
| Position Requirements | Tasks |
| IASAE-II.1. Identify information protection needs for the NE. | Define and document how the implementation of a new system or new interfaces between systems impacts the security posture of the current environment. |
| IASAE-II.2. Define NE security requirements in accordance with applicable IA requirements (e.g., References (c) and (t) and organizational security policies). | Develop a system security context, a preliminary system security CONOPS, and define baseline system security requirements in accordance with applicable cybersecurity requirements. |
| IASAE-II.3. Provide system related input on IA security requirements to be included in statements of work and other appropriate procurement documents. | Develop/integrate cybersecurity designs for systems and networks with multilevel security requirements or requirements for the processing of multiple classification levels of data primarily applicable to government organizations (e.g., UNCLASSIFIED, SECRET, and TOP SECRET). |
| IASAE-II.4. Design security architectures for use within the NE. | Document and address organization's information security, cybersecurity architecture, and systems security engineering requirements throughout the acquisition lifecycle. |
| IASAE-II.5. Design and develop IA or IA-enabled products for use within a NE. | Document the protection needs (i.e., security controls) for the information system(s) and network(s) and document appropriately. |
| IASAE-II.6. Integrate and/or implement CDS for use within a CE or NE. | Employ secure configuration management processes. |
| IASAE-II.7. Develop and implement security designs for new or existing network system(s). Ensure that the design of hardware, operating systems, and software applications adequately address IA security requirements for the NE. | Ensure acquired or developed system(s) and architecture(s) are consistent with organization's cybersecurity architecture guidelines. |
| IASAE-II.8. Design, develop, and implement network security measures that provide confidentiality, integrity, availability, authentication, and non-repudiation. | Evaluate security architectures and designs to determine the adequacy of security design and architecture proposed or provided in response to requirements contained in acquisition documents. |
| IASAE-II.9. Design, develop, and implement specific IA countermeasures for the NE. | Identify and prioritize critical business functions in collaboration with organizational stakeholders. |
| IASAE-II.10. Develop interface specifications for the NE. | Perform security reviews, identify gaps in security architecture, and develop a security risk management plan. |
| IASAE-II.11. Develop approaches to mitigate NE vulnerabilities and recommend changes to network or network system components as needed. | Analyze candidate architectures, allocate security services, and select security mechanisms. |
| IASAE-II.12. Ensure that network system(s) designs support the incorporation of DoD-directed IA vulnerability solutions, e.g., IAVAs. | Analyze user needs and requirements to plan architecture. |
| IASAE-II.13. Develop IA architectures and designs for DoD IS with medium integrity and availability requirements, to include MAC II systems as defined in Reference (c), systems with a medium Level-of-Concern for availability or integrity in accordance with Reference (u), and other DAA designated systems. | Assess and design security management functions as related to cyberspace. |
| IASAE-II.14. Develop IA architectures and designs for systems processing SCI that will operate at Protection Level 1 or 2 as defined in Reference (u). | Define and prioritize essential system capabilities or business functions required for partial or full system restoration after a catastrophic failure event. |
| IASAE-II.15. Assess threats to and vulnerabilities of the NE. | Define appropriate levels of system availability based on critical system functions and ensure system requirements identify appropriate disaster recovery and continuity of operations requirements to include any appropriate fail-over/alternate site requirements, backup requirements, and material supportability requirements for system recover/restoration. |
| IASAE-II.16. Identify, assess, and recommend IA or IA-enabled products for use within an NE; ensure recommended products are in compliance with the DoD evaluation and validation requirements of Reference (c). | Develop enterprise architecture or system components required to meet user needs. |
| IASAE-II.17. Ensure that the implementation of security designs properly mitigate identified threats. | Document and update as necessary all definition and architecture activities. |
| IASAE-II.18. Assess the effectiveness of information protection measures used by the NE. | Provide advice on project costs, design concepts, or design changes. |
| IASAE-II.19. Evaluate security architectures and designs and provide input as to the adequacy of security designs and architectures proposed or provided in response to requirements contained in acquisition documents. | Provide input on security requirements to be included in statements of work and other appropriate procurement documents. |
| IASAE-II.20. Ensure security deficiencies identified during security/certification testing have been mitigated, corrected, or a risk acceptance has been obtained by the appropriate DAA or authorized representative. | Provide input to the Risk Management Framework process activities and related documentation (e.g., system life-cycle support plans, concept of operations, operational procedures, and maintenance training materials). |
| IASAE-II.21. Provide input to IA C&A process activities and related documentation (e.g., system life-cycle support plans, concept of operations, operational procedures, and maintenance training materials). | Translate proposed capabilities into technical requirements. |
| IASAE-II.22. Participate in an IS risk assessment during the C&A process and design security countermeasures to mitigate identified risks. | Write detailed functional specifications that document the architecture development process. |
| IASAE-II.23. Provide engineering support to security/certification test and evaluation activities. | Knowledge, Skills, and Abilities |
| IASAE-II.24. Document system security design features and provide input to implementation plans and standard operating procedures. | * Knowledge of computer networking concepts and protocols, and network security methodologies. |
| IASAE-II.25. Recognize a possible security violation and take appropriate action to report the incident. | * Knowledge of cyber threats and vulnerabilities. |
| IASAE-II.26. Implement and/or integrate security measures for use in network system(s) and ensure that system designs incorporate security configuration guidelines. | * Knowledge of cybersecurity principles. |
| IASAE-II.27. Ensure the implementation of NE IA policies into system architectures. | * Knowledge of national and international laws, regulations, policies, and ethics as they relate to cybersecurity. |
| IASAE-II.28. Ensure the implementation of subordinate CE IA policies is integrated into the NE system architecture. | * Knowledge of risk management processes (e.g., methods for assessing and mitigating risk). |
| IASAE-II.29. Obtain and maintain IA baseline certification appropriate to position. | * Knowledge of specific operational impacts of cybersecurity lapses. |
| Ability to apply an organization's goals and objectives to develop and maintain architecture. | |
| Ability to apply network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth). | |
| Ability to design architectures and frameworks. | |
| Knowledge of cybersecurity principles and organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation). | |
| Knowledge of cybersecurity-enabled software products. | |
| Knowledge of integrating the organization’s goals and objectives into the architecture. | |
| Knowledge of organization's enterprise information security architecture system. | |
| Skill in applying cybersecurity methods, such as firewalls, demilitarized zones, and encryption. | |
| Skill in determining how a security system should work (including its resilience and dependability capabilities) and how changes in conditions, operations, or the environment will affect these outcomes. | |
| Skill in translating operational requirements into protection needs (i.e., security controls). | |
| Ability to apply secure system design tools, methods and techniques. | |
| Ability to apply system design tools, methods, and techniques, including automated systems analysis and design tools. | |
| Ability to apply the methods, standards, and approaches for describing, analyzing, and documenting an organization's enterprise information technology (IT) architecture (e.g., Open Group Architecture Framework [TOGAF], Department of Defense Architecture Framework [DoDAF], Federal Enterprise Architecture Framework [FEAF]). | |
| Ability to conduct vulnerability scans and recognize vulnerabilities in security systems. | |
| Ability to optimize systems to meet enterprise performance requirements. | |
| Knowledge of an organization's information classification program and procedures for information compromise. | |
| Knowledge of authentication, authorization, and access control methods. | |
| Knowledge of circuit analysis. | |
| Knowledge of computer algorithms. | |
| Knowledge of confidentiality, integrity, and availability requirements. | |
| Knowledge of configuration management techniques. | |
| Knowledge of cryptography and cryptographic key management concepts. | |
| Knowledge of database systems. | |
| Knowledge of electrical engineering as applied to computer architecture, including circuit boards, processors, chips, and associated computer hardware. | |
| Knowledge of embedded systems. | |
| Knowledge of encryption algorithms (e.g., Internet Protocol Security [IPSEC], Advanced Encryption Standard [AES], Generic Routing Encapsulation [GRE], Internet Key Exchange [IKE], Message Digest Algorithm [MD5], Secure Hash Algorithm [SHA], Triple Data Encryption Standard [3DES]). | |
| Knowledge of how system components are installed, integrated, and optimized. | |
| Knowledge of how traffic flows across the network (e.g., Transmission Control Protocol [TCP] and Internet Protocol [IP], Open System Interconnection Model [OSI], Information Technology Infrastructure Library, current version [ITIL]). | |
| Knowledge of human-computer interaction principles. | |
| Knowledge of industry-standard and organizationally accepted analysis principles and methods. | |
| Knowledge of Information Theory (e.g., source coding, channel coding, algorithm complexity theory, and data compression). | |
| Knowledge of key concepts in security management (e.g., Release Management, Patch Management). | |
| Knowledge of key telecommunications concepts (e.g., Routing Algorithms, Fiber Optics Systems Link Budgeting, Add/Drop Multiplexers). | |
| Knowledge of local specialized system requirements (e.g., critical infrastructure systems that may not use standard information technology [IT]) for safety, performance, and reliability. | |
| Knowledge of mathematics, including logarithms, trigonometry, linear algebra, calculus, and statistics. | |
| Knowledge of microprocessors. | |
| Knowledge of multi-level/security cross domain solutions. | |
| Knowledge of network access, identity, and access management (e.g., public key infrastructure [PKI]). | |
| Knowledge of network design processes, to include understanding of security objectives, operational objectives, and tradeoffs. | |
| Knowledge of network protocols such as TCP/IP, Dynamic Host Configuration, Domain Name System (DNS), and directory services. | |
| Knowledge of network systems management principles, models, methods (e.g., end-to-end systems performance monitoring), and tools. | |
| Knowledge of N-tiered typologies including server and client operating systems. | |
| Knowledge of operating systems. | |
| Knowledge of organizational process improvement concepts and process maturity models (e.g., Capability Maturity Model Integration (CMMI) for Development, CMMI for Services, and CMMI for Acquisitions). | |
| Knowledge of organization's evaluation and validation criteria. | |
| Knowledge of parallel and distributed computing concepts. | |
| Knowledge of Payment Card Industry (PCI) data security standards. | |
| Knowledge of Personal Health Information (PHI) data security standards. | |
| Knowledge of Personally Identifiable Information (PII) data security standards. | |
| Knowledge of program protection planning to include information technology (IT) supply chain security/risk management policies, anti-tampering techniques, and requirements. | |
| Knowledge of service management concepts for networks and related standards (e.g., Information Technology Infrastructure Library, current version [ITIL]). | |
| Knowledge of software engineering. | |
| Knowledge of system fault tolerance methodologies. | |
| Knowledge of systems testing and evaluation methods. | |
| Knowledge of technology integration processes. | |
| Knowledge of the enterprise information technology (IT) architectural concepts and patterns to include baseline and target architectures. | |
| Knowledge of the Risk Management Framework Assessment Methodology. | |
| Knowledge of the Security Assessment and Authorization process. | |
| Knowledge of the systems engineering process. | |
| Knowledge of various types of computer architectures. | |
| Skill in applying and incorporating information technologies into proposed solutions. | |
| Skill in applying security models (e.g., Bell-LaPadula model, Biba integrity model, Clark-Wilson integrity model). | |
| Skill in design modeling and building use cases (e.g., unified modeling language). | |
| Skill in designing multi-level security/cross domain solutions. | |
| Skill in designing the integration of hardware and software solutions. | |
| Skill in the use of design methods. | |
| Skill in writing code in a currently supported programming language (e.g., Java, C++). |
Top Secret-SCI w/ Counter Intelligence Polygraph Required.
Labor Desc CDSS FSE-IAT III
| Other | |
| Top Secret-SCI w/ Counter Intelligence Polygraph Required. | Tasks |
| IA Baseline Certification & CE/OS Certificate required | Comply with organization systems administration standard operating procedures. |
| IA Baseline Certification: |
CCNA Security CySA+ **
GICSP
GSEC
Security+ CE
CND
| SSCP | Conduct functional and connectivity testing to ensure continuing operability. | |
| Develop and document systems administration standard operating procedures. | ||
| Implement and enforce local network usage policies and procedures. | ||
| Install, update, and troubleshoot systems/servers. | ||
| Maintain baseline system security according to organizational policies. | ||
| Manage accounts, network rights, and access to systems and equipment. | ||
| Manage system/server resources including performance, capacity, availability, serviceability, and recoverability. | ||
| Monitor and maintain system/server configuration. | ||
| Perform repairs on faulty system/server hardware. | ||
| Plan, execute, and verify data redundancy and system recovery procedures. | ||
| Troubleshoot hardware/software interface and interoperability problems. | ||
| Check system hardware availability, functionality, integrity, and efficiency. | ||
| Conduct periodic system maintenance including cleaning (both physically and electronically), disk checks, routine reboots, data dumps, and testing. | ||
| Design group policies and access control lists to ensure compatibility with organizational standards, business rules, and needs. | ||
| Diagnose faulty system/server hardware. | ||
| Oversee installation, implementation, configuration, and support of system components. | ||
| Provide ongoing optimization and problem solving support. | ||
| Knowledge, Skills, and Abilities | ||
| * Knowledge of computer networking concepts and protocols, and network security methodologies. | ||
| * Knowledge of cyber threats and vulnerabilities. | ||
| * Knowledge of cybersecurity principles. | ||
| * Knowledge of national and international laws, regulations, policies, and ethics as they relate to cybersecurity. | ||
| * Knowledge of risk management processes (e.g., methods for assessing and mitigating risk). | ||
| * Knowledge of specific operational impacts of cybersecurity lapses. | ||
| Knowledge of basic system administration, network, and operating system hardening techniques. | ||
| Knowledge of measures or indicators of system performance and availability. | ||
| Knowledge of organizational information technology (IT) user security policies (e.g., account creation, password rules, access control). | ||
| Knowledge of performance tuning tools and techniques. | ||
| Knowledge of principles and methods for integrating system components. | ||
| Knowledge of systems administration concepts. | ||
| Knowledge of virtualization technologies and virtual machine development and maintenance. | ||
| Skill in correcting physical and technical problems that impact system/server performance. | ||
| Skill in monitoring and optimizing system/server performance. | ||
| Skill in operating system administration. | ||
| Skill in recovering failed systems/servers. | ||
| Knowledge of file system implementations (e.g., New Technology File System [NTFS], File Allocation Table [FAT], File Extension [EXT]). | ||
| Knowledge of information technology (IT) security principles and methods (e.g., firewalls, demilitarized zones, encryption). | ||
| Knowledge of local area and wide area networking principles and concepts including bandwidth management. | ||
| Knowledge of network protocols such as TCP/IP, Dynamic Host Configuration, Domain Name System (DNS), and directory services. | ||
| Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth). | ||
| Knowledge of operating system command line/prompt. | ||
| Knowledge of Payment Card Industry (PCI) data security standards. | ||
| Knowledge of Personal Health Information (PHI) data security standards. | ||
| Knowledge of Personally Identifiable Information (PII) data security standards. | ||
| Knowledge of server and client operating systems. | ||
| Knowledge of system/server diagnostic tools and fault identification techniques. | ||
| Knowledge of systems engineering theories, concepts, and methods. | ||
| Knowledge of the enterprise information technology (IT) architecture. | ||
| Knowledge of the type and frequency of routine maintenance needed to keep equipment functioning properly. | ||
| Knowledge of transmission records (e.g., Bluetooth, Radio Frequency Identification (RFID), Infrared Networking (IR), Wireless Fidelity (Wi-Fi). paging, cellular, satellite dishes, Voice over Internet Protocol (VoIP)), and jamming techniques that enable transmission of undesirable information, or prevent installed systems from operating correctly. | ||
| Knowledge of Virtual Private Network (VPN) security. | ||
| Skill in conducting system/server planning, management, and maintenance. | ||
| Skill in configuring and optimizing software. | ||
| Skill in configuring and utilizing software-based computer protection tools (e.g., software firewalls, anti-virus software, anti-spyware). | ||
| Skill in diagnosing connectivity problems. | ||
| Skill in identifying and anticipating system/server performance, availability, capacity, or configuration problems. | ||
| Skill in installing system and component upgrades. | ||
| Skill in interfacing with customers. | ||
| Skill in maintaining directory services. | ||
| Skill in troubleshooting failed system components (i.e., servers) | ||
| Skill in using virtual machines. |
Labor Desc ISSE-IAT III
Labor Desc ISSO-IAM III
| Other |
| Top Secret-SCI w/ Counter Intelligence Polygraph Required. |
| IA Baseline Certification: |
CAP
CASP+ CE
CISM
CISSP (or Associate)
GSLC
CCISO
Sheet6
| Other | |
| Top Secret-SCI w/ Counter Intelligence Polygraph Required. | |
| IA Baseline Certification: CASP+ CE, CISSP (or Associate), or CSSLP | Tasks |
| Develop and implement technical efforts to design, build, and deploy AWS applications at the direction of lead architects, including large-scale data processing, computationally intensive statistical modeling, and advanced analytic | |
| Participate in all aspects of the software development life cycle for AWS solutions, including planning, requirements, development, testing, and quality assurance | |
| Troubleshoot incidents, identify root cause, fix and document problems, and implement preventive measures | |
| Educate teams on the implementation of new cloud-based initiatives, providing associated training as required | |
| Employ exceptional problem-solving skills, with the ability to see and solve issues before they affect business productivity |
| Prefered Qualifications |
| Bachelor’s degree in computer science, information technology, or mathematics |
| 3+ years of experience architecting, designing, developing, and implementing cloud solutions on AWS platforms |
| Understanding of and experience with the five pillars of a well-architected frameworks |
| Experience in several of the following areas: database architecture, ETL, business intelligence, big data, machine learning, advanced analytics |
| Proven ability to collaborative with multi-disciplinary teams of business analysts, developers, data scientists, and subject matter experts |
File details come from the government source that posted it. Updated .