Attmt 0004 - Level of Effort and Labor Descriptions 20220608.xlsx

LaborCat-Description Labor Category Requirements Note 1: Computer Science or a related field (e.g., General Engineering, Computer Engineering, Electrical Engineering, Systems Engineering, Cyber Security, Information Technology, Information Security, and Information Systems) degree required

OR

BS (see note 2, note 3) plus 15 years directly related experience. - Progressive experience with 10 years of security engineering, 5 years management and supervision of substantive military hardware/software development, and 5 years assessment and authorization of IC and DoD systems.

- Leads, coordinates, communicates, integrates and is accountable for the overall success of the contract ensuring alignment with critical PM priorities.

- Demonstrated ability to provide guidance and direction in multiple tasks across several functional areas and the use of different technologies.

- Direct experience organizing, directing, and coordinating, planning and implementation of all contract support activities. Interfaces with government personnel.

- Formulates and reviews project feasibility studies, determines costs, and ensures conformance to work standards. Interprets policies, purposes, and goals of the organizations for subordinates.

- Operates independently, managing substantial program/technical support operations involving multiple projects/task orders and personnel at diverse locations.

- Organizes, directs, and coordinates planning and execution of all program/technical support activities.

- Proven experience in the management and control of funds and resources, demonstrated capability in managing complex multi-task contracts.

- Identify and address cyber workforce planning and management issues (e.g. recruitment, retention, and training).

- Skill in identifying measures or indicators of contract performance and the actions needed to improve or correct performance, relative to the goals of the PM.

- Prior DoD project management with demonstrated experience in conducting technical project requirements analysis, resource allocation, project costing, deliverable tracking, schedule and financial data monitoring, and reporting.

OR

BS (see note 1) plus 15 or more years of directly related experience. - Serves as the on-site lead for the cybersecurity engineers. Responsible for team tasking, deliverables, and managing project artifacts.

- Strong demonstrated collaboration skills and ability to work across multiple organizations to realize a common mission-focused objective.

- Knowledge of current and new cyber/IT systems architectures, life-cycle processes, integration and interoperability, design operations and configuration, facilities, practices and methodology across the Government, private industry, and academia. Ability to advise other IT experts throughout the agency or in other agencies on a variety of situations and issues that involve applying or adapting new theories, concepts, principles, standards, methods, or practices.

- Designs enterprise and systems security throughout the development lifecycle; translates technology and environmental conditions (e.g., Federal Law, Intelligence Community (IC), DoD regulations and policies.) into security designs and processes.

- Design, develop and implement enclave security requirements in accordance with applicable Intelligence Community, DoD and Army cybersecurity and Information Assurance (IA) regulations, policies and organizational security policies) in Information Systems (ISs). ISs includes Cross Domain Solution Suites (CDSS), Tactical, Cloud, On-Prem, etc., within the program’s portfolio.

- Provides subject matter expertise and analysis to bridge the gap between high level security requirements and policies and ensures their integration into information technology component products and information systems through purposeful security design or configuration.

- Provide security consultation/guidance and engineering to PM product owners, customers, system owners and developers, and maintain security process coordination within the Department's lifecycle management and governance process

- Develop/integrate cybersecurity designs for systems and networks with multilevel security requirements or requirements for the processing of multiple classification levels of data primarily applicable to government organizations (e.g., UNCLASSIFIED, SECRET, and TOP SECRET).

- Employ secure configuration management processes. Drafts, develops, and updates CM process and procedures.

- Ensure acquired or developed system(s) and architecture(s) are consistent with organization's cybersecurity architecture guidelines.

- Perform security reviews, identify gaps in security architecture, and develop a security risk management plan. Ensure acquired or developed system(s) and architecture(s) are consistent with organization's cybersecurity architecture guidelines.

- Develops and maintains applicable artifacts to support ISs A&A RMF requirements. Works with the Assessment and Authorization (A&A) team to maintain RMF BOE to support the Authority to Operate (ATO) and meets all FISMA obligations.

- Must be willing to travel, as needed, up to 25%.

OR

BS (see note 1) plus 10 or more years of directlty experience. - Participates in the research, analysis, design, testing and implementation of complex computer network security/protection technologies for company information and network systems/applications.

- Assists customers in identifying security solutions for the company's networks and virtual private networks, application systems, key public infrastructures, authentication and directory services to ensure the security of the network and confidential data. Performs periodic vulnerability scans of networks to identify security vulnerabilities and provides remediation alternatives and conducts security risk assessments to ensure compliance with corporate security policies and adherence to best practice.

- Designs enterprise and systems security throughout the development lifecycle; translates technology and environmental conditions (e.g., law and regulation) into security designs and processes.

- Provides subject matter expertise and analysis to bridge the gap between high level security requirements and policies and ensures their integration into information technology component products and information systems through purposeful security design or configuration.

- Provide security consultation/guidance and engineering to PM product owners, customers, system owners and developers, and maintain security process coordination within the Department's lifecycle management and governance process.

- Hands-on experience designing of secured systems architecture deployed to DoD on-premise and Cloud secured architectures, hands-on securing Development/Test/Deployment environments, hands-on System Security Engineering, and assisting Information Systems Security Manager/Officer (ISSM/ISSO) Services throughout the system Assessment and Authorization processes.

- Develop/integrate cybersecurity designs for systems and networks with multilevel security requirements or requirements for the processing of multiple classification levels of data primarily applicable to government organizations (e.g., UNCLASSIFIED, SECRET, and TOP SECRET).

- Perform operational support and development for system environments and provide product recommendations for security technologies.

OR

BS (see note 1) plus 15 or more years of directly related experience. - SME implementing NCDSMO (National Cross Domain Strategy & Management Office), TSABI (Top Secret SCI and Below Interoperability) and SABI (Secret and Below Interoperability) information assurance/cybersecurity requirements to meet Raise-the-Bar.

- Experience with the design, update, and manage a Cross Domain Solution (CDS) to support multiple Commercial Solutions for Classified (CSfC) connections and classification to support mission efforts and goals.

- Designs enterprise and systems security throughout the development lifecycle; translates technology and environmental conditions (e.g., law and regulation) into security designs and processes.

- SME across all aspects of CDS design to include: Data Owner Guides, rule sets, dataflows and filter development.

- Provide Subject Matter Expertise for cross domain policy analysis, design, and implementation support to configure and validate CDS access and transfer capabilities integrated within the PM Family of Systems (FoS).

- Demonstracted experience working hands-on in Linux based environments, troubleshooting on-site technical issues, using and configuring the CDS solutions to deliver critical customer driver requirements.

- Knowledge of GOTS and COTS CDS technologies on the NCDSMO approved products list.

- Responsible for development, configuration control, deployment and testing of CDSS Configurations (including Rules).

- Engineers and deploys capabilities to provide new functionality, improve system performance/availability, and for generating efficiencies in the maintenance of the operational environment.

- Experience designing secure web service-based technologies such as XML, XSLTs, Schema Validation, SOAP, REST, and related messaging protocols.

- Experience in collaborating with multiple technical teams to drive solutions that requirement driven including technical subject matter experts, including hardware and software designers, operations personnel, and test engineers and communicate potential security risks and mitigations

- Ability to clearly present technical approaches and findings.

- Able to write and implement engineering plans within a project.

- Perform system design and archiectured work to modernize our CDS solutions as new requirements come in.

- Expertise across all aspects of CDS design to include: Data Owner Guides, rule sets, dataflows and filter development.

- Works with the Assessment and Authorization (A&A) team to maintain RMF BOE to support the Authority to Operate (ATO) as required by ICD 503, NIST 800-53, CNSSI 1254 and any additional documentation as determined by the Authorizing Official (AO) and meets all FISMA obligations.

- Supports Assessment and Authorization activities related to CDS technologies, such as Site-Based Security Assessments (SBSA).

- Provide Tier 3/4 support for deployed CDS technologies.

- Must be willing to travel, as needed, up to 25%.

OR

BS (see note 1) plus 10 or more years of directly related experience. - SME implementing NCDSMO (National Cross Domain Strategy & Management Office), TSABI (Top Secret SCI and Below Interoperability) and SABI (Secret and Below Interoperability) information assurance/cybersecurity requirements to meet Raise-the-Bar.

- Experience with the design, update, and manage a Cross Domain Solution (CDS) to support multiple Commercial Solutions for Classified (CSfC) connections and classification to support mission efforts and goals.

- Designs enterprise and systems security throughout the development lifecycle; translates technology and environmental conditions (e.g., law and regulation) into security designs and processes.

- SME across all aspects of CDS design to include: Data Owner Guides, rule sets, dataflows and filter development.

- Provide Subject Matter Expertise for cross domain policy analysis, design, and implementation support to configure and validate CDS access and transfer capabilities integrated within the PM Family of Systems (FoS).

- Demonstracted experience working hands-on in Linux based environments, troubleshooting on-site technical issues, using and configuring the CDS solutions to deliver critical customer driver requirements.

- Knowledge of GOTS and COTS CDS technologies on the NCDSMO approved products list.

- Responsible for development, configuration control, deployment and testing of CDSS Configurations (including Rules).

- Engineers and deploys capabilities to provide new functionality, improve system performance/availability, and for generating efficiencies in the maintenance of the operational environment.

- Experience designing secure web service-based technologies such as XML, XSLTs, Schema Validation, SOAP, REST, and related messaging protocols.

- Experience in collaborating with multiple technical teams to drive solutions that requirement driven including technical subject matter experts, including hardware and software designers, operations personnel, and test engineers and communicate potential security risks and mitigations

- Ability to clearly present technical approaches and findings.

- Able to write and implement engineering plans within a project.

- Perform system design and archiectured work to modernize our CDS solutions as new requirements come in.

- Expertise across all aspects of CDS design to include: Data Owner Guides, rule sets, dataflows and filter development.

- Works with the Assessment and Authorization (A&A) team to maintain RMF BOE to support the Authority to Operate (ATO) as required by ICD 503, NIST 800-53, CNSSI 1254 and any additional documentation as determined by the Authorizing Official (AO) and meets all FISMA obligations.

- Supports Assessment and Authorization activities related to CDS technologies, such as Site-Based Security Assessments (SBSA).

- Provide Tier 3/4 support for deployed CDS technologies.

- Must be willing to travel, as needed, up to 25%.

OR

BS (see note 1) plus 10 or more years of directly related experience. - Designs enterprise and systems security throughout the development lifecycle; translates technology and environmental conditions (e.g., law and regulation) into security designs and processes.

- Experience architecting, designing, developing, and implementing cloud solutions on AWS platforms.

- Guide, document, validate technical efforts to design, build, and deploy AWS applications at the direction of lead architects, including large-scale data processing, computationally intensive statistical modeling, and advanced analytic.

- Participate in all aspects of the software development life cycle for AWS solutions, including planning, requirements, development, testing, and quality assurance.

- Troubleshoot incidents, identify root cause, fix and document problems, and implement preventive measures.

- Educate teams on the implementation of new cloud-based initiatives, providing associated training as required.

- Employ exceptional problem-solving skills, with the ability to see and solve issues before they affect business productivity.

- Must have understanding of and experience with the five pillars of a well-architected frameworks.

- Experience in several of the following areas: database architecture, ETL, business intelligence, big data, machine learning, advanced analytics.

- Proven ability to collaborative with multi-disciplinary teams of business analysts, developers, data scientists, and subject matter experts.

- 3 or more years of combined design and hands-on cloud experience -- Must be willing to travel, as needed, 25% or more.

OR

BS (see note 1) plus 15 or more years of directly related experience. - Serves as the on-site lead for the Assessment and Authorization team, responsible for the team tasking, deliverables, and managing project artifacts.

- Perform all ISSO duties and responsibilities in DODI 8500.01, DODI 8510.01, and AR 25–2.

- Direct experience with providing expert support, analysis and research in Intelligence Community (IC) and DoD Risk Management Framework (RMF) requirements and processes to support the IC, DoD and Army RMF assessment and authorization processes

- Includes experience as a technical SME, Information System Security Officer (ISSO) or Information Security System Engineer (ISSE) on Army Program Of Record (POR)/Quick Reaction Capability (QRC) products. ISs includes Cross Domain Solution Suites (CDSS), Tactical, Cloud, On-Prem, etc., within the program’s portfolio.

- Direct experience with implementation of DOD-I-8500, DOD-I-8510, ICD 503, NIST 800-53, CNSSI 1253, Army AR 25-2, and RMF security control requirements and able to provide technical direction, interpretation and alternatives for security control compliant.

- Direct experience with latest IC and Army RMF requirement and processes.

- Direct experience with eMASS, XACTA, or other A&A repositories and able to support the program with the ISSO / ISSE functions.

- Fully understand DISA Port Protocol, and Services Management (PPSM) requirement and able to obtain PPSM account for management of PPSM for supporting systems.

- Knowledge of CDS policies, rule sets, filters and data flow development.

- Relevant experience must be in computer or information systems design/development and with information assurance and accreditation processes (e.g., System Security Plans, Risk Assessment Reports, Assessment and Authorization Packages, and System Requirements Traceability Matrices).

OR

BS (see note 1) plus 15 or more years of directly related experience. - Leads the evaluation of cyber security risks (external & internal threats, platform & application vulnerabilities, data protection, etc.), testing controls designed to mitigate risk, communicating issues and findings to management, devising solutions for business improvements, and following-up on corrective actions, may participate on and lead professional teams to execute technical audit projects focused on evaluating the effectiveness of cyber security governance, tools and operations, may evaluate the design, effectiveness and efficiency of information technology and security processes, procedures, and technical controls including solution implementations, identify and address systemic gaps in cyber security risk management.

- Perform all ISSO duties and responsibilities in DODI 8500.01, DODI 8510.01, and AR 25–2.

- Responsible for ensuring the appropriate operational security posture is maintained for the information system (IS) on multiple security domains and classification to met Intelligence Community (IC), DoD and Army cybersecurity/information assurance regulations and policies. This includes providing guidance and oversight to vendors and/or the

- Direct experience with implementation of Intelligence Communuity (IC), DoD and Army reguluations (such as DOD-I-8500, DOD-I-8510, ICD 503, NIST 800-53, CNSSI 1253, Army AR 25-2) and RMF security control requirements and able to provide technical direction, interpretation and alternatives for security control compliant.

- Prepare Risk Management Framework (RMF) system accreditation Body of Evidence (BOE) packages using the eMASS, XACTA or other approved A&A tool to include, System Security Plans, Risk Assessment Reports, System Requirements Traceability Matrices (SCTM), and other documentation as required by ICD 503, NIST 800-53, CNSSI 1254 and any additional documentation as determined by the Authorizing Official (AO). Direct experience with eMASS, XACTA or other other A&A repositories required.

- Develops, reviews, evaluates and verifies self-testing results to validate enclave security requirements in accordance with applicable Intelligence Community, DoD and Army cybersecurity and Information Assurance (IA) regulations, policies and organizational security policies) in Information Systems (ISs) are met. ISs includes Cross Domain Solution Suites (CDSS), Cloud, On-Prem, Tactical, etc., within the program’s portfolio.

- Ensure the appropriate organizational operational security posture is maintained for the assigned Army IS.

- Ensure Army IS cybersecurity-related documentation is current and accessible to properly authorized individuals. Prepare, distribute, and maintain plans, instructions, and SOPs concerning system security.

- Review and evaluate the effects on security of system changes, including interfaces with other ISs and documents all changes. Develops and reviews necessary change management processes and artifacts to support updates to system A&As.

-Fully understand DISA Port Protocol, and Services Management (PPSM) requirement and able to obtain PPSM account for management of PPSM for supporting systems.

OR

BS (see note 1) plus 7 or more years of directly related experience. - Perform all ISSO duties and responsibilities in DODI 8500.01, DODI 8510.01, and AR 25–2.

- Responsible for ensuring the appropriate operational security posture is maintained for the information system (IS) on multiple security domains and classification to met Intelligence Community (IC), DoD and Army cybersecurity/information assurance regulations and policies. This includes providing guidance and oversight to vendors and/or the

- Direct experience with implementation of DOD-I-8500, DOD-I-8510, ICD 503, NIST 800-53, CNSSI 1253, Army AR 25-2, and RMF security control requirements and able to provide technical direction, interpretation and alternatives for security control compliant.

- Develops, reviews, evaluates and verifies self-testing results to validate enclave security requirements in accordance with applicable Intelligence Community, DoD and Army cybersecurity and Information Assurance (IA) regulations, policies and organizational security policies) in Information Systems (ISs) are met. ISs includes Cross Domain Solution Suites (CDSS), Cloud, On-Prem, Tactical, etc., within the program’s portfolio.

- Ensure the appropriate organizational operational security posture is maintained for the assigned Army IS.

- Maintain organizational situational awareness and initiate actions to improve or restore cybersecurity posture of assigned IS.

- Implement and enforce assigned Army IS cybersecurity policies and procedures, as defined by cybersecurity-related documentation.

- Ensure Army IS cybersecurity-related documentation is current and accessible to properly authorized individuals. Prepare, distribute, and maintain plans, instructions, and SOPs concerning system security.

- Prepare and maintain Risk Management Framework (RMF) system accreditation Body of Evidence (BOE) packages using the eMASS, XACTA or other approved A&A tool to include, System Security Plans, Risk Assessment Reports, System Requirements Traceability Matrices (SCTM), and other documentation as required by ICD 503, NIST 800-53, CNSSI 1254 and any additional documentation as determined by the Authorizing Official (AO). Direct experience with eMASS, XACTA or other other A&A repositories required.

- Relevant experience must be in computer or information systems design/development and with information assurance and accreditation processes (e.g., System Security Plans, Risk Assessment Reports, Certification and Accreditation Packages, and System Requirements Traceability Matrices).

- Review unit or product vendor RMF BOE and grovides guidance and oversight.

- Fully understand DISA Port Protocol, and Services Management (PPSM) requirement and able to obtain PPSM account for management of PPSM for supporting systems.

- Must be willing to travel, as needed, 25% and more.

OR

BS (see note 1) plus 10 or more years of directlty experience. - Perform all ISSO duties and responsibilities in DODI 8500.01, DODI 8510.01, and AR 25–2.

- Responsible for ensuring the appropriate operational security posture is maintained for the information system (IS) on multiple security domains and classification to met Intelligence Community (IC), DoD and Army cybersecurity/information assurance regulations and policies. This includes providing guidance and oversight to vendors and/or the

- Perform all ISSO duties and responsibilities in DODI 8500.01, DODI 8510.01, and AR 25–2.

- Direct experience with implementation of DOD-I-8500, DOD-I-8510, ICD 503, NIST 800-53, CNSSI 1253, Army AR 25-2, and RMF security control requirements and able to provide technical direction, interpretation and alternatives for security control compliant.

- Develops, reviews, evaluates and verifies self-testing results to validate enclave security requirements in accordance with applicable Intelligence Community, DoD and Army cybersecurity and Information Assurance (IA) regulations, policies and organizational security policies) in Information Systems (ISs) are met. ISs includes Cross Domain Solution Suites (CDSS), Cloud, On-Prem, Tactical, etc., within the program’s portfolio.

- Perform validation steps, comparing actual results with expected results and analyze the differences to identify impact and risks and resolve issues prior to formal Security Test events or Site-Based Security Assessments (SBSA).

- Ensure Army IS cybersecurity-related documentation is current and accessible to properly authorized individuals. Prepare, distribute, and maintain plans, instructions, and SOPs concerning system security.

- Prepare and maintain Risk Management Framework (RMF) system accreditation Body of Evidence (BOE) packages using the eMASS, XACTA or other approved A&A tool to include, System Security Plans, Risk Assessment Reports, System Requirements Traceability Matrices (SCTM), and other documentation as required by ICD 503, NIST 800-53, CNSSI 1254 and any additional documentation as determined by the Authorizing Official (AO). Direct experience with eMASS, XACTA or other other A&A repositories required.

- Proficient in primary operating system(s) of ISs undergoing security testing (example CDSS based on Linux, individual must be proficient in Linux).

- Technical experience and certification in one or more of the following areas: windows environments, Linux, networking, containers/ virtualization, DevSecOps, or database administration

- Familiar with NCDSMO National Cross Domain Services Management Office), TSABI (Top Secret SCI and Below Interoperability) and SABI (Secret and Below Interoperability) information assurance/cybersecurity requirements.

- Provide over the shoulder training to personnel on the function of the systems and critical cyber areas such as audit, backup and recovery, etc..

- Must be willing to travel, 50% or more.

OR

BS (see note 1) plus 10 or more years of directlty experience. - The Field Service Engineer Lead must have a minimum of ten (10) years related cybersecurity work experience .

- Serves as the on-site lead for the Field Service Engineer (FSE) support. Responsible for the team tasking, deliverables, and managing project artifacts.

- Performs installation, implementation, configuration, and support of Information Systems (ISs) on various networks with multilevel security requirements or requirements for the processing of multiple classification levels of data primarily applicable to government organizations (e.g., UNCLASSIFIED, SECRET, and TOP SECRET).

- Hands on experience with the installation, configuration, test, troubleshoot and support of the Information Systems (ISs) at various Government units and/or organization with approved secure baseline(s). ISs can include physical or virtual servers, workstations, Cross Domain Solutions, etc.

- Proficient in primary operating system(s) of ISs being installed (example CDSS based on Linux, individual must be proficient in Linux).

- Knowledge of CDS policies, rule sets, filters and data flow development.

- Maintain baseline system security according to organizational policies and system authorizations.

- Troubleshoot hardware/software interface and interoperability problems.

- Comply with organization system administration standard operating procedures.

- Conduct functional and connectivity testing to ensure continuing operability.

- Create and maintain all documentation related to activities to include but not limited to the system architecture, system installation procedures, system configuration, and configuration management steps to ensure the system installation / operation is duplicable at all locations.

- Implement and enforce local network usage policies and procedures.

- Provide onsite / over-the-shoulder (OTS) training during new system installation, as required.

- Work with the Assessment and Authorization (A&A) team and provide and maintain all required security documentation (RMF BOE) related to the ISs configuration, installation, and architecture integral to the security baseline.

- Configure, troubleshoot and maintain networked and standalone computing equipment.

- Provides Tier 2 support for deployed CDS technologies.

OR

BS (see note 1) plus 10 or more years of directlty experience. - Performs installation, implementation, configuration, and support of Information Systems (ISs) on various networks with multilevel security requirements or requirements for the processing of multiple classification levels of data primarily applicable to government organizations (e.g., UNCLASSIFIED, SECRET, and TOP SECRET).

- Hands on experience with the installation, configuration, test, troubleshoot and support of the Information Systems (ISs) at various Government units and/or organization with approved secure baseline(s). ISs can include physical or virtual servers, workstations, Cross Domain Solutions, etc.

- Proficient in primary operating system(s) of ISs being installed (example CDSS based on Linux, individual must be proficient in Linux).

- Knowledge of CDS policies, rule sets, filters and data flow development.

- Maintain baseline system security according to organizational policies and system authorizations.

- Troubleshoot hardware/software interface and interoperability problems.

- Comply with organization system administration standard operating procedures.

- Conduct functional and connectivity testing to ensure continuing operability.

- Create and maintain all documentation related to activities to include but not limited to the system architecture, system installation procedures, system configuration, and configuration management steps to ensure the system installation / operation is duplicable at all locations.

- Work with the Assessment and Authorization (A&A) team and provide and maintain all required security documentation (RMF BOE) related to the ISs configuration, installation, and architecture integral to the security baseline.

- Implement and enforce local network usage policies and procedures.

- Provide onsite / over-the-shoulder (OTS) training during new system installation, as required.

- Configure, troubleshoot and maintain networked and standalone computing equipment.

- Provides Tier 2 support for deployed CDS technologies.

- Must be willing to travel, 50% or more. Active TS/SCI (SI/TK) w/CI poly minimum for all locations at contract award IAT III (see Note 4, Note 5, Note 6) APG 10/31/22 4.1, 4.4 17,280 17,280 17,280 9,600 $95.92