Draft PWS.pdf

Performance Work Statement (PWS)

For

Technical Services Division Support Contract

US Army Command and Control Support Agency (CCSA)

PART 1: GENERAL INFORMATION

1. General: The United States Army Command and Control Support Agency (CCSA) has a requirement to provide Information Technology (IT) support services to the HQDA Army Staff and Deputy Chief of Staff G-3/5/7. CCSA will execute a non-personal services and support contract for onsite Contract Manpower Equivalent (CME) staff to assist CCSA in meeting its IT mission requirements. Services include: IT network services and support, Network infrastructure and server services, end-user system and device services, connected systems/devices, Change and Configuration Management, Audio Visual conference services, web development services, Help desk functions and services, Information Assurance, Telecommunications services, application and portal development services, Command and Control (C2) business applications administration and development, database and web services and maintenance and operations management as defined further in the Performance Work Statement (PWS).

1.1 These services are provided in a restricted and secure environment requiring personnel to have a Top-Secret Clearance with some requiring Sensitive Compartmented Information (SCI) eligibility to be defined in the labor category descriptions of Section 1.6.14. All references to a network or networks in this PWS refer to both Secure Internet Protocol Router Network (SIPRnet) and Non-Secure Internet Protocol Router Network (NIPRnet) unless otherwise stated.

1.1.1 The Government shall not exercise any supervision or control over the contract service providers performing the services herein. Such contract service providers shall be accountable solely to the Contractor who, in turn is responsible to the Government.

1.2 Background: CCSA provides support to the Headquarters, Department of the Army (HQDA) with development, installation, operation, and maintenance of C2 systems. In addition, CCSA provides Chief Information Officer (CIO) services to the HQDA, Deputy Chief of Staff

(DCS) G-3/5/7.

1.2.1 CCSA is the Army’s C2 Mission Assurance Category Level I (MAC I) organization responsible for providing C2 IT support services to the HQDA, G-3/5/7, Department of the Army Management Office (DAMO)-Operations Directorate (OD), Army Operations Center (AOC), Alternate Army Operations Center (AAOC), and the Resource and Situational Awareness Center (RSAC) located in the Arlington and Washington DC and as required at alternate locations. Access to CCSA support locations requires a Top-Secret clearance. CCSA provides and/or performs IT operations and IT support services for desktop, multifunctional devices, plotters, audiovisual systems, mobile communications, telecommunications, network infrastructure and design services, network support services, systems and server administration, cybersecurity, remote access, application development, troubleshooting, maintenance, and administration, and Concept of Operations Planning and support services

(COOP).

1.2.2 CCSA supports a local user community that fluctuates between 400 and 750 users at any given time based on mission requirements or worldwide events. CCSA further supports a much larger user community remotely through their SharePoint environment and systems of record. CCSA Contractor Manpower Equivalents (CMEs) identified as Emergency Response Group (ERG) members are required to relocate to an alternate site and provide support for extended hours and periods. CCSA operates in both a classified and unclassified environment 24/7/365. CCSA maintains up to 1,500 workstations (subject to mission requirements) community with associated multi-function devices, laptops, mobile devices, phones (secure/unsecure), and other network IT resources. The devices and services are hosted in a multi-node clustered environment, eliminating a single point of failure and ensuring Sigma level 5-percentage yield availability of all network services.

1.2.3 CCSA maintains and operates a virtual server environment with over 116 physical hosts spanning multiple nodes and locations with the capacity for 2,320 virtual servers. In addition to the virtual environment, CCSA operates multiple legacy systems supporting both Windows and UNIX based environments.

1.2.4 CCSA continuously researches and invests in new technologies to reduce costs, gain performance efficiencies, increase survivability, and reduce reliance on outside sources; all while maintaining a secure and operational environment. CCSA owns and manages its own Internet Protocol (IP) space, servers, server space and remote access assets while working with Pentagon infrastructure providers to manage and maintain the network infrastructure.

1.3 Objectives:

• To obtain support services to assist CCSA in providing the required support and services to the C2 user community.

• Ensure continued mission success for the war fighter community who are the final recipients of the decisions and products developed by the G-3/5/7 HQDA DAMO- OD staff and subordinate organizations.

• Provide a range of automation services supporting CCSA’s mission and accreditation requirements in a collaborative environment.

• Sustain performance of in-house C2 and business applications.

• Identify and mitigate risks and issues; maintain and troubleshoot applications and databases as necessary.

• Provide support by managing the complexities and difficulties that are characteristic of implementing, integrating, maintaining, and securing software solutions.

1.4 Scope: The contractor shall provide a properly trained and certified workforce. The contractor shall perform operational/maintenance and IT support services under accepted best business practices and or industry standards regarding devices, ancillary equipment, software, firmware, associated procedures and services (including support services), and related resources.

1.4.1 The contractor shall provide management and technical Information Technology (IT) support for the automation services of the CCSA in support of the HQDA G-3/5/7. It includes in-house C2 and business solutions, such as Capabilities and AROC Management System (CAMS), Equipment Common Operating Picture (ECOP), Emergency Relocation Staff Roster (ERoSter), Granite Look Tracker (GLT) and Mobilization Common Operating Picture (MOBCOP), supporting the HQDA G-3/5/7, Major Commands (MACOMs), Army Component

Commands, and Headquarters, Department of the Army. The services also include the securing, testing, implementation, documentation, training, accreditation, management, and the operation and maintenance (O&M) of all DCS G-3/5/7 internal automation services. The intent of this Performance Work Statement (PWS) is to provide the broadest opportunity to acquire innovative, cost-effective, and efficient integrated solutions for meeting the mission and program objectives of CCSA in the AOC and HQDA G-3/5/7.

1.4.2 For MOBCOP, the contractor shall maintain current and future software of all associated MOBCOP Enterprise Suite applications in response to requirements and tasks provided by the Government. The contractor shall configure Commercial off the Shelf (COTS) software as requested by the Contracting Officer’s Representative (COR).

1.4.3 The contractor shall provide all personnel, equipment, tools, materials, and other supplies and services necessary to support the scope as defined in this PWS except as specified in Part 3 as Government furnished property, equipment, materials and services. The program-level management and technical activities envisioned under this contract form an integrated set of activities. The contractor shall accomplish these activities as tasks through the issuance of task orders under this contract. The contractor shall ensure that all work performed under this contract complies with enterprise-level standards, guidance, and requirements for integration according to CCSA’s enterprise operational, management, communications, and security environments.

1.4.4 Additionally, there are general tasks for functional areas that may be required under this contract. General tasks are best business practices or industry defined practices required to meet the requirements for a functional area to be successful. Section 5 of this PWS provides additional detail on the specific tasks to be performed.

1.4.5 All staff shall provide IT support services within the NCR and an alternate location not to exceed a 150-mile radius of the primary work location if ERG is activated.

1.5 Period of Performance: The period of performance shall be for one (1) year of 12 months with 12 months option period. See Section F of the solicitation/contract for details.

1.6 General Information

1.6.1 Quality Control (QC): The contractor shall develop and maintain an effective QC program to ensure services performed are in accordance with this PWS. The contractor shall develop, implement and follow existing procedures to identify, prevent, and ensure non-recurrence of defective services. The contractor’s QC program is how the contractor assures that all work complies with the requirement of the contract. The contractor shall deliver a comprehensive written Quality Control Plan (QCP) [Deliverable A0011] within 30 days after the contract award. The contractor shall develop quality control procedures that address the areas identified in Technical Exhibit 2, “Performance Requirements Summary. Contractor shall submit two (2) copies of the QCP to the Contracting Officer (KO) and Contracting Officer Representative (COR) within 5 working days when changes made thereafter. After acceptance of the QCP, the contractor shall receive the COR’s acceptance in writing of any proposed change to his QC system.

1.6.1.1 The contractor shall ensure that all personnel maintain the requisite Top-Secret clearance to work in the designated Government facilities and that they maintain technical proficiency in their areas of responsibility. Personnel on this contract are designated Information

Assurance Support Personnel IAW AR 25-2 and must be trained and Information Assurance (IA) certified to the labor category as identified in AR 25-2. In addition, personnel working as Systems Administrators shall be certified based on industry standards on the Operating Systems (OS) and Information Systems (IS) they are managing.

1.6.2 Quality Assurance: The government shall evaluate the contractor's performance under this contract in accordance with the Quality Assurance Surveillance Plan (QASP). [Deliverable A0037] This plan is primarily focused on what the Government shall do to ensure that the contractor has performed in accordance with the performance standards. It defines how the performance standards are applied, the frequency of surveillance, and the minimum acceptable defect rate(s). Please refer to the Performance Requirements Summary Table for further detail regarding Quality Assurance Surveillance.

1.6.3 Recognized Holidays: Contractor shall not be required to perform work on Federal Holidays except for exercises, contingencies or for extraordinary circumstances, such as incidents and emergency troubleshooting.

New Year’s Day Labor Day Martin Luther King Jr.’s Birthday Columbus Day President’s Day Veteran’s Day Memorial Day Thanksgiving Day Independence Day Christmas Day Juneteenth

1.6.4 Hours of Operation: Contractor is responsible for conducting business, between the hours of 0600 and 1800 Monday thru Friday except Federal holidays. For other than firm fixed price contracts, Contractor will not be reimbursed when the government facility is closed for the above reasons. Contractor shall maintain an adequate workforce for the uninterrupted performance of all tasks defined within this PWS when the Government facility is not closed for the above reasons. When hiring personnel, Contractor shall keep in mind that the stability and continuity of the workforce are essential.

1.6.4.1 Announced Government closures – CCSA provides C2 MAC 1 level services, which require operations and services to be available 24/7/365 regardless of government operational status. Contractor shall provide Tier II/III support services regardless of government closures, weather conditions, or events where the primary work location is inaccessible for all non-essential personnel [Deliverable A0008]. It is the responsibility of the contractor to notify the government of staff status during these closures.

1.6.5 Place of Performance: The work to be performed under this contract will be performed at Government facilities, such as the Pentagon or other support offices within one hundred fifty

(150) miles of the primary work location. Security engineering personnel shall be ready to deploy to an alternate location to provide Cyber Security Service Provider (CSSP) support services during exercise and emergency situations.

1.6.5.1 Requirements for this contract include work in Government facilities and alternate locations. As described above and elsewhere within this PWS the alternate location is within one hundred fifty (150) miles of the primary work location.

1.6.5.2 When hiring personnel, the contractor must be able to provide qualified employees during core hours, weekly evening ASIs, and/or in cases of network emergencies, system failures or in the event of crisis operations. The contractor must provide the Government with designated points of contact, who must be reachable in the event of system failures. Under crisis conditions, work hours and location are subject to change without notice.

1.6.5.3 All Contractor shall be appointed as a member on the Emergency Response Group (ERG) [Deliverable A0002]. Contractor staff identified as ERG members shall relocate to alternate sites located within 150 miles of the primary work location in response to exercises, crisis events or unplanned operations. As members of the ERG they shall be required to work twelve (12) hours or more shifts and shall be required to board, at the government's expense, within the alternate sites.

1.6.6 Type of Contract: The government will award a Firm Fixed Price (FFP) single award contract.

1.6.7 Security Requirements: All Contractor personnel performing work under this contract shall have an active Top Secret Clearance and shale be listed as requested. Clearance must be active at time of the proposal’s submission and must maintain the level of security required for the life of the contract. The security requirements are in accordance with the DD254.

1.6.7.1 Physical Security: Contractor shall be responsible for safeguarding all Government equipment, information and property provided for contractor use. At the close of each work period, Government facilities, equipment, and materials shall be secured. [Deliverable A0035]

1.6.7.2 Key Control: Contractor shall establish and implement methods of making sure all keys/key cards issued to Contractor by the Government are not lost or misplaced and are not used by unauthorized persons. NOTE: All key references include key cards. No keys issued to Contractor by the Government shall be duplicated. Contractor shall develop procedures covering key control that shall be included in the QCP. Such procedures shall include turn-in of any issued keys by personnel who no longer require access to locked areas. Contractor shall immediately report any occurrences of lost or duplicate keys/key cards to the KO. [Deliverable A0036]

1.6.7.2.1 In the event keys, other than master keys, are lost or duplicated, Contractor shall, upon direction of the COR, re-key or replace the affected lock or locks; however, the Government, at its option, may replace the affected lock or locks or perform re-keying. When the replacement of locks or re-keying is performed by the Government, the total cost of re-keying or the replacement of the lock or locks shall be deducted from the monthly payment due the Contractor. In the event a master key is lost or duplicated, all locks and keys for that system shall be replaced by the Government and the total cost deducted from the monthly payment due the Contractor.

1.6.7.2.2 Contractor shall prohibit the use of Government issued keys/key cards by any persons other than the Contractor’s employees. Contractor shall prohibit the opening of locked areas by Contractor employees to permit entrance of persons other than Contractor employees engaged in the performance of assigned work in those areas, or personnel authorized entrance by the COR.

1.6.7.3 Lock Combinations: Contractor shall establish and implement methods of ensuring that all lock combinations are not revealed to unauthorized persons. Contractor shall ensure that lock combinations are changed when personnel having access to the combinations no longer have a need to know such combinations. These procedures shall be included in the

Contractor’s QCP.

1.6.8 Special Qualifications: Contractor personnel performing work under this contract shall have the appropriate professional certifications required for their position and shall be listed at the time of the proposal submission and shall maintain the level of certification required for the life of the contract. Contractor shall provide a Responsibility Assignment Matrix (RAM) identifying proposed personnel cross referenced against Task requirements in PART 5 [Deliverable A0033]. Skills labor matrix shall denote Name, Phone number, Labor Category, clearance, and primary/secondary responsibilities.

1.6.9 All Contractor employees, to include subcontractor employees, requiring access to Army installations, facilities and controlled access areas shall complete the required US ARMY Mandatory training within thirty (30) calendar days after entering on contract and annually thereafter. The contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee to the COR within thirty (30) calendar days after completion of training by all employees and subcontractor personnel.

1.6.10 N/A

1.6.11 N/A

1.6.12 Post Award Conference/Periodic Progress Meetings: The Contractor shall attend all post award conferences convened by the contracting activity or contract administration office in accordance with Federal Acquisition Regulation Subpart 42.5. [Deliverable A0034] The COR, and other authorized Government personnel, as appropriate, may meet periodically with the contractor to review the contractor's performance. At these meetings the COR or other authorized Government personnel will apprise the contractor of how the government views the contractor's performance and the contractor will apprise the Government of any problems.

Appropriate action shall be taken to resolve outstanding issues. These meetings shall be at no additional cost to the government.

1.6.13 Contracting Officer Representative (COR): The COR will be identified by separate letter.

The COR monitors all technical aspects of the contract and assists in contract administration.

The COR is authorized to perform the following functions: assure that Contractor performs the technical requirements of the contract: perform inspections necessary in connection with contract performance; maintain written and oral communications with Contractor concerning technical aspects of the contract; issue written interpretations of technical requirements, including Government drawings, designs, specifications; monitor Contractor's performance and notifies both the KO and Contractor of any deficiencies; coordinate availability of government furnished property; and provide site entry of Contractor personnel. A letter of designation issued to the COR, a copy of which is sent to the Contractor, states the responsibilities and limitations of the COR, especially with regard to changes in cost or price, estimates or changes in delivery dates. The COR is not authorized to change any of the terms and conditions of the resulting order. All Other Direct Cost (ODC) material expenses require Government approval/authorization and notification to the COR prior to invoicing. IT hardware shall not be purchased under this contract.

1.6.14 Key Personnel: Contractor shall provide a Program Manager who shall be responsible for the performance of the work. The name of this person and an alternate who shall act for Contractor when the manager is absent shall be designated in writing to the COR. The Program Manager or alternate shall have full authority to act for Contractor on all contract matters relating to daily operation of this contract. The Program Manager or alternate shall be available between 0800 and 1600, Monday through Friday except Federal holidays. All personnel identified as “key” are mission essential. All “key” billets must be filled within thirty (30) calendar days of vacancy. The absence of any “key” personnel for any period greater than thirty (30) calendar days will have a detrimental impact on the AOC global C2 mission. Listed below are personnel requirements and their required qualifications that are considered “key” personnel by the Government:

1.6.14.1 Program Manager: shall provide oversight and direct contract staff on this requirement. This manager works with the COR to ensure mission requirements are met and has full authority to act for the contractor on all matters relating to daily operations on this requirement. The Contractor shall appointment a PM and submit the appointment in writing to the COR at contract award. The program manager or alternate shall be available during normal business hours to address any issues or concerns that may arise and shall possess an active Top Secret (TS) clearance at time of contract award.

The Program Manager shall have full authority to commit the Contractor on matters concerning the contract including negotiating and approving modifications, all actions necessary to ensure contract compliance and proper performance on assigned work, hiring, firing, and assigning personnel, and taking all actions necessary to ensure contract compliance and proper performance. The Program Manager(s) shall not be subcontracted personnel.

The Contractor shall be responsible for compliance with all regulations and orders of the Commanding Officer, respecting identification of employees, movements on installation, parking, truck entry, and all other military regulations, which may affect the work.

1.6.14.1.1 Security Clearance: Top Secret with SCI eligibility

1.6.14.1.2 Position Requirements: Bachelor of Science in Computer Science or other relevant discipline; or equivalent work experience; and a Project Management Institute (PMI) Project Management Professional (PMP) and a Certified Information Systems Security Professional (CISSP) certifications related field or four-year equivalent training and at least 6 years’ experience in the field of cybersecurity; or 10-15 years of experience in the field.

Required to be certified Information Assurance Manager (IAM) Level III, IAW DoDD

8140.01 and DoD 8570.01M at time of contract initiation / on-boarding.

1.6.14.1.3 Key duties: responsible for the overall performance of the contractor workforce, providing skills analysis and receiving, evaluating, and acting on government feedback on the contractor workforce accomplishments and shortcomings. Responsible for providing the skills required to accomplish the managing the operations of cybersecurity personnel, applications, and appliances employed to defend the CCSA cyber terrain. Responsible project tracking, provide detailed work plans, schedules, project estimates, resource plans, and status reports.

Provides advice and assistance to the government organization relevant to IT related best practices. Researches and investigates new or improved IT products and practices and presents briefings and recommendations to the government staff. Conducts meetings with COR to review, discuss and evaluate progress of accomplishments, way ahead and resolve any problems or issues. [Deliverable A0012] Ensures adherence to quality standards and reviews project deliverables. Tracks and reviews vendor deliverables. Provides technical and analytical guidance to the vendor team. Recommends and takes action to direct the analysis and solutions of problems. Coordinates with team members to implement and maintain a Secure Software Development Life Cycle (SSDLC) with an understanding of the National Institute of

Standards and Technology (NIST) SP 800-63 Risk Management Framework (RMF) and the DoD implementation of RMF. Requires certification as an IAM Management III, DoDD 8140.01/DoDI 8570.01-M when performance of this labor category commences with respect to any task required under the contract. All additional mandatory certifications shall be acquired within six (6) months of the start of the performance period.

Additional requirements include:

Knowledge of FAR regulations and requirements.

Knowledge of network design, operation, and maintenance.

Knowledge of Department of Defense (DoD) network security requirements.

Knowledge of DoD Cybersecurity requirements.

Knowledge of and experience with help desk support and operation.

Knowledge of networking and network-based software applications.

Demonstrated ability for oral and written communication with the highest levels of management.

1.6.14.2 Systems Engineer – Lead (Security): Must possess knowledge and experience in IT engineering principles, security regulation in compliance legislation, Army Information Security (IS) programs and enterprise level IS policies.

1.6.14.2.1 Security Clearance: Top Secret with SCI eligibility

1.6.14.2.2 Position Requirements: Requires bachelor’s degree in computer science, Physics, Programming, or equivalent. Requires 8 years of progressive experience at the senior level for Information Security. Requires CISSP certification and to maintain certification at Information Assurance Manager (IAM) Level II, IAW DoDD 8140.01 and DoD 8570.01M at time of contract initiation / on-boarding. These requirements may (but are not required to) be waived in writing by the COR upon receipt and review of the candidate’s individual resume. If waived, the individual will be required to operate at a level commensurate with the requirements above.

1.6.14.2.3 Key Duties: Creating and maintaining programmatic and technical documentation to ensure efficient planning and execution. Manage and document system configurations and changes. Experience and familiarization with RMF, utilizing eMASS, and Authorization to Operation (ATO) requirements.

1.6.14.3 Systems Engineer – Lead (Virtualization/Virtual Architecture): Shall possess progressive experience leading IT related projects and programs within controlled environment, as well as projects and programs that involve external providers. Shall have in-depth technical knowledge of all facets of infrastructure technologies such as, but not limited to, compute & storage technologies, data & voice network technologies, AD, Exchange, cloud computing, cloud storage, Virtualization, and Enterprise management tools.

1.6.14.3.1 Security Clearance: Top Secret

1.6.14.3.2 Position Requirements: Requires bachelor’s degree in computer science, Business, or Information Technology with minimum of 8 years of progressive experience in the

IT industry. Required to be certified Information Assurance Manager (IAM) Level II, IAW AR 25-2 and DA Pam 25-2-6 at time of contract initiation / on-boarding. All additional mandatory certifications shall be acquired within six (6) months of the start of performance.

1.6.14.3.3 Key Duties: Ability to delve into technical problems and create reliable & cost-effective solutions. Ability to work with technical teams in a collaborative manner to design infrastructure solutions. WAN & LAN experience: Transmission Control Protocol/Internet Protocol (TCP/IP); Domain Name System (DNS); Virtual Local Area Networks (VLANs). Server virtualization experience: VMWare; HyperV; Xen, SAN / NAS experience (EMC), strong and thorough understanding of Disaster Recovery components and procedures, SAN technologies and Hardware and the leading vendors (EMC, IBM, HP, Cisco, Brocade). Hands-on experience on Data Replication, Data protection, Data provisioning (EMC Products), and Data virtualization (VMWARE). Must have familiarity with intrusion detection systems, network security and network management.

1.6.14.4 Systems Engineer - Senior (Integration): Shall possess in-depth knowledge of system development and completing actions within systems specifications, technical, and logical requirements, and other disciplines. Requires experience in creating and maintaining programmatic and technical documentation to ensure efficient planning and execution.

1.6.14.4.1 Security Clearance: Top Secret

1.6.14.4.2 Position Requirements: Requires bachelor’s degree in computer science, Business, or Information Required to be certified in accordance with Information Assurance Manager (IAM) Level II, IAW DoDD 8140.01 and DoD 8570.01M at time of contract initiation / on-boarding. All additional mandatory certifications shall be acquired within six months of the start of performance.

1.6.14.4.3 Key Duties: Developing and completing actions in systems specifications, technical and logistical requirements, and other disciplines. Creating and maintaining programmatic and technical documentation to ensure efficient planning and execution of projects. Manage and document system configurations, as required. Manage and document system configurations. Developing and completing actions in systems specifications, technical and logistical requirements, and other disciplines. Creating and maintaining programmatic and technical documentation to ensure efficient planning and execution of projects. Manage and document system configurations, as required. Manage and document system configurations.

1.6.14.5 Systems Administrator – Senior (Windows): Shall possess extensive knowledge of Windows Operating Systems; Installing, configuring, and turning Operating Systems; Troubleshooting operating system, applications, databases, email, and complex data interface issues.

1.6.14.5.1 Security Clearance: Top Secret

1.6.14.5.2 Position Requirements: Bachelor’s degree in information technology, Computer Science/Computer Engineering or equivalent. Seven (7) years Windows System Administration experience with extensive knowledge of Windows Operating Systems. Required to be certified in accordance with Information Assurance Manager (IAM) Level II, IAW DoDD

8140.01 and DoD 8570.01M at time of contract initiation / on-boarding. All additional mandatory certifications shall be acquired within six (6) months of the start of performance.

1.6.14.5.3 Key Duties: Installing, configuring, and tuning Operating Systems.

Troubleshooting operating systems, applications, databases, email systems, and complex data interface issues. Managing Windows systems hosted in a complex, multi-layered network.

Knowledge and experience with current IA and IT Security control implementation procedures.

Monitoring and intrusion/penetration detection and alert notification. SAN experience, to include enterprise backup solutions and fault tolerant technologies. Experienced with tools and applications as described in Technical Exhibit 6.

1.6.14.6 Systems Administrator – Senior (LINUX/UNIX): Must possess extensive knowledge of IT networking, hardware, firmware, application software, operating system software, and database management systems (DBMS).

1.6.14.6.1 Security Clearance: Top Secret

1.6.14.6.2 Position Requirements: Bachelor’s degree in computer science/computer engineering/network engineering/Electronic with five (5) years of experience working in Information Technology, the last three (3) must be in LINUX/UNIX System Administration.

Required to be certified in accordance with Information Assurance Manager (IAM) Level II, IAW DoDD 8140.01 and DoD 8570.01M at time of contract initiation / on-boarding.

These requirements may (but are not required to) be waived in writing by the COR upon receipt and review of the candidate's individual resume. If waived, the individual will be required to operate at a level commensurate with the requirement above.

1.6.14.6.3 Key Duties: Installing, configuring, and tuning Operating Systems.

Troubleshooting operating systems, applications, databases, email systems, and complex data interface issues. Managing Linux systems hosted in a complex, multi-layered network.

Knowledge and experience with current IA and IT Security control implementation procedures.

Monitoring and intrusion/penetration detection and alert notification. SAN experience, to include enterprise backup solutions and fault tolerant technologies.

1.6.14.7 Systems Administrator – Senior (SharePoint): Shall be able to independently design, plan, implement, and maintain complex SharePoint (SP) and Windows Server environments.

1.6.14.7.1 Security Clearance: Top Secret

1.6.14.7.2 Position Requirements: Bachelor’s degree in computer science/information systems/engineering/business with 8 years of experience in MSFT Power Platform(s), SharePoint administration, installation, migration, implementation, topology, and server configuration (web and Index). This position is required to be proficient with the software, tools, and programming languages depicted in Technical Exhibit 6 and is required to be proficient in war fighting reporting systems that focus on military functions, such as equipping the force, causalities, planning, logistics, and COOP. Required to be certified Information Assurance Manager (IAM) Level II, IAW AR 25-2 and DA Pam 25-2-6 at time of contract initiation / on-boarding. These requirements may (but are not required to) be waived in writing by the COR upon receipt and review of the candidate's individual resume. If waived, the individual will be required to operate at a level commensurate with the requirement above.

1.6.14.7.3 Key Duties: Works independently designing, planning, implementing, and maintaining complex SP Server2016/2019, SharePoint Online, MSFT Power Platform(s), MSFT Windows (e.g. R2/2016/2019) environments, including implementation and support of web front-end servers, index servers, and application and search servers. Supports all components of the SP environment including form, administrative site collection administration activities such as site creation, user training, backup, restore, performance analysis, and issue resolution. Assists in the design, architecture, availability, reliability, and security of future SP environments. Works with customers to document administrative tasks and verify service level agreement requirements are being met. Works closely with staff to provide advice and support to properly implement engineering efforts into staging. Work with other technical staff to train them on proper SP Administration and troubleshooting techniques as well as outline standard processes and procedures for administration and engineering.

1.6.14.8 COOP Project Engineer: Shall be proficient in war fighting reporting systems that focus on military functions, such as equipping the force, causalities, planning, logistics, continuity of operations planning, and requirements development.

1.6.14.8.1 Security Clearance: Top Secret

1.6.14.8.2 Position Requirements: Bachelor’s degree in computer science/information systems/engineering/business with 5 years of experience working in a technically complex information technology environment. Required to be CISSP certified in accordance with position requirements and Information Assurance Manager (IAM) Level III, IAW DoDD

8140.01 and DoD 8570.01M at time of contract initiation / on-boarding. These requirements may (but are not required to) be waived in writing by the COR upon receipt and review of the candidate's individual resume. If waived, the individual will be required to operate at a level commensurate with the requirement above.

1.6.14.8.3 Key Duties: Provide project management oversight for the continuity of operation program in conjunction with the HQDA COOP office requirements and process. Synchronize Mission Essential Functions (MEF) with Agency and Division Leadership. Track and manage mission essential personnel, training status, and logistical preparations for COOP scenarios.

Support planned exercises and unplanned events with logistical support, personal coordination, and any required load out scenarios.

1.6.14.9 Network Engineer – Senior: Experienced in analysis, administration and support of voice, video, and/or data communications networks; Solid knowledge of managing various operating systems, system images, security configurations, access control lists, and applying STIGs.

1.6.14.9.1 Security Clearance: Top Secret

1.6.14.9.2 Position Requirements: Bachelor’s degree in computer science, Engineering, or a related technical discipline, or the equivalent combination of education, technical certifications or training, or work experience. Requires 5 years of directly related experience in network analysis and administration. Required to be certified in accordance with Information Assurance Manager (IAM) Level II, IAW DoDD 8140.01 and DoD 8570.01M at time of contract initiation / on-boarding, CCNP preferred. All additional mandatory certifications shall be acquired within six months of the start of performance of the related task order.

1.6.14.9.3 Key duties: Analyze user’s requirements, concept of operations documents, and high-level system architectures to develop network requirements specifications. Guides users in formulating requirements, advises alternative approaches, and conducts feasibility studies.

Provide technical leadership for the integration of network requirements, design, and technology. Incorporates new network plans, designs, and systems into ongoing operations.

Develop network architecture and network design documentation. Manage the transition and migration of networks and development of network addressing schemes. Evaluate and report on new/emerging network/communication technologies to enhance capacity, performance, and reliability of the network. Perform site surveys to new installations and technology refresh.

Develop and maintain network architecture diagrams.

1.6.14.10 Software Engineer – Senior: Shall be able to work independently designing and engineering new software products or major enhancement to existing software.

1.6.14.10.1 Security Clearance: Top Secret

1.6.14.10.2 Position Requirements: Bachelor’s degree in computer science, Information Systems, Engineering, Business, or related discipline with more than eight (8) years of experience in software design, engineering, installation, integration, evaluation, enhancement, maintenance, testing, or problem diagnosis and resolution. Requires proficiency in software development, security, and operations (DevSecOps) methodologies (i.e., Agile, Scrum, MSFT Power Platform, etc.). This position is required to be proficient with the software, tools, and programming languages depicted in Technical Exhibit 6. Required to be certified in accordance with Information Assurance Manager (IAM) Level II, IAW DoDD 8140.01 and DoD 8570.01M at time of contract initiation / on-boarding. These requirements may (but are not required to) be waived in writing by the COR upon receipt and review of the candidate's individual resume. If waived, the individual will be required to operate at a level commensurate with the requirement above.

1.6.14.10.3 Work independently designing and engineering software products or major enhancements to existing software. May lead a team in the design of highly complex software systems. Acts as the highest-level technical expert, addressing problems of systems integrations, compatibility, and multiple platforms. Works independently designing and engineering new software products or major enhancements to existing software. Devises or modifies procedures to solve complex problems considering computer equipment capacity and limitations, operating time, and form of desired results. Designs, codes, tests, debugs, and documents those programs. Conduct code review of subordinate developers and peers.

Competent to work at the highest technical level of all phases of applications programming activities. Coordinates with Cybersecurity team members to implement and maintain a SSDLC with an understanding of NIST SP 800-63 RMF and the DoD implementation of RMF.

1.6.14.11 Business Systems Analyst - Senior: Works independently analyzing business systems needs working with various level of end-users, including government senior leaders, to create the logical specifications for software application systems that will provide a solution for the needs of moderate to complex business problems.

1.6.14.11.1 Security Clearance: Top Secret

1.6.14.11.2 Position Requirements: Bachelor’s degree in computer science/information systems/engineering/business with seven (7) years of experience in information systems projects involving planning and performing complex studies and analyses of functional requirements and the derivation of automated processes that satisfy application requirements.

Required to be certified in accordance with Information Assurance Manager (IAM) Level II, IAW DoDD 8140.01 and DoD 8570.01M at time of contract initiation / on-boarding.

These requirements may (but are not required to) be waived in writing by the COR upon receipt and review of the candidate's individual resume. If waived, the individual will be required to operate at a level commensurate with the requirement above.

1.6.14.11.3 Key Duties: Performs the research necessary to create technical designs and logical functionality which will ensure that business application systems can be effectively engineered and implemented to meet actual business needs. Responsible for creating all SSDLC required documentation, such as, Project Charter, Project Scope, Business Requirement Document, Use Case, Functional Requirement Document, Project Schedule, Test Case, Test Plan, Test Script, and User Guide. This position is responsible for creating documents for briefings and presentations. This position typically does not involve hands-on programming, but focuses on the analysis, definition, and logical design of software application systems. Conducts reviews of subordinates and peers’ work.

1.6.14.12 Database Administrator – Senior: Shall be able to independently design, implement, operate, and maintain database programs and applications.

1.6.14.12.1 Security Clearance: Top Secret with SCI eligibility

1.6.14.12.2 Position Requirements: Bachelor’s degree in computer science/information systems/engineering/business with 10 years of experience in SQL Server database engineering, design, development, management, installation, installation, integration, evaluation, enhancement, maintenance, testing, or problem diagnosis and resolution. This position is required to be proficient with the software, tools, and programming languages depicted in Technical Exhibit 6. Required to be certified in accordance with Information Assurance Manager (IAM) Level II, IAW DoDD 8140.01 and DoD 8570.01M at time of contract initiation / on-boarding. These requirements may (but are not required to) be waived in writing by the COR upon receipt and review of the candidate's individual resume. If waived, the individual will be required to operate at a level commensurate with the requirement above.

1.6.14.12.3 Key Duties: Write advanced T-SQL, SQL Server Integrated Services (SSIS), and SSRS packages. Designs, implements, operates, and maintains databases and database programs and applications. Evaluates and recommends available database management system products after matching requirements with system capabilities. Determines file organization, indexing methods, and security procedures for specific applications. Controls the design and use of databases. Controls the global view of databases. Controls access to databases. Assures the safekeeping of the databases (from accidental or intentional damage or loss). Monitors the use of databases. Supports several tasks concurrently and evaluates problems of workflow, organization, and planning, and develops appropriate corrective actions.

Prepares and performs presentations at technical interchange meetings and project design reviews. Leads a database administrator team in management of highly complex software systems. Conducts code and design reviews of subordinate database administrators and peers.

1.6.14.13 System Engineer - Senior: Shall possess in-depth knowledge of system development and completing actions within systems specifications, technical, and logical requirements, and other disciplines. Requires experience in creating and maintaining programmatic and technical documentation to ensure efficient planning and execution.

1.6.14.13.1 Security Clearance: Top Secret

1.6.14.13.2 Position Requirements: Requires a bachelor’s degree in Computer Science, Business, or Information Technology with minimum of 10 years of experience with coordinating systems development tasks. Required to be certified in accordance with Information Assurance Manager (IAM) Level II, IAW DoDD 8140.01 and DoD 8570.01M at time of contract initiation / on-boarding. All additional mandatory certifications shall be acquired within six months of the start of performance.

1.6.14.13.3 Key Duties: Developing and completing actions in systems specifications, technical and logistical requirements, and other disciplines. Creating and maintaining programmatic and technical documentation to ensure efficient planning and execution of projects. Manage and document system configurations, as required. Manage and document system configurations. Developing and completing actions in systems specifications, technical and logistical requirements, and other disciplines. Creating and maintaining programmatic and technical documentation to ensure efficient planning and execution of projects. Manage and document system configurations, as required. Manage and document system configurations.

1.6.15 MOBCOP performance requirements includes:

1.6.15.1 Basic Services. The contractor shall provide all personnel, equipment, tools, materials, and services necessary to support mobilization and deployment operations except as specified in Section 8 as Government furnished property, equipment, materials, and services.

Contractor shall regularly report progress.

1.6.15.2 Standards. The software maintained for use in G-3/5/7 shall be compliant with the information technology standards as directed by the Defense Information Systems Agency (DISA), Enterprise Mission Assurance Support Service (eMASS). Application software shall be implemented so that upgrades to the operating system and network operating system will not be required for at least the initial plus one version upgrade of the application.

1.6.15.3 Resources. The contractor shall identify any Government client server resources needed (i.e. disk, bandwidth, etc.,) six months prior to the requested installation date. The Government shall notify the contractor within five working days if the resources are available.

Commercial off the Shelf (COTS) software used shall be approved by the COR. Deviation to use nonstandard COTS shall be approved by the COR prior to its use.

1.6.15.4 Documentation. The contractor shall provide updates to documentation for existing systems when significant changes occur to include but not limited to certification, security, training and S2S web services. The contractor shall provide documentation for any new system work. Documentation includes Virtual Training videos (para 5.5.5) and Department of Defense Architecture Framework (DoDAF) Operational Views (OV) -1, -2, -3, -4, and -5 for MDIS, DAMPS, DAMPS-U, OCO-IND, OCO-TCS, and ToD.

1.6.16 Identification of Contractor Employees: All contract personnel attending meetings, answering Government telephones, and working in other situations where their contractor status is not obvious to third parties are required to identify themselves as such to avoid creating an impression in the minds of members of the public that they are Government officials. They must also ensure that all documents or reports produced by contractors are suitably marked as contractor products or that contractor participation is appropriately disclosed. Contractor personnel shall be required to obtain Pentagon building passes.

1.6.17 Contractor Travel: Contractor will be required to travel within the NCR during the performance of this contract to attend meetings, conferences, and training. All travel requires Government approval/authorization and notification to the COR.

1.6.18 Other Direct Costs: This category includes travel (outlined on 1.6.13), reproduction, and shipping expenses associated with training activities and visits to contractor facilities. It could also entail the renting of suitable training venues.

1.6.19 Data Rights: The Government has unlimited rights to all documents/material produced under this contract. All documents and materials, to include the source codes of any software, produced under this contract shall be Government owned and are the property of the Government with all rights and privileges of ownership/copyright belonging exclusively to the Government. These documents and materials may not be used or sold by Contractor without written permission from the Contracting Officer. All materials supplied to the Government shall be the sole property of the Government and may not be used for any other purpose. This right does not abrogate any other Government rights.

1.6.20 Organizational Conflict of Interest: Contractor and subcontractor personnel performing work under this contract may receive, have access to or participate in the development of proprietary or source selection information (e.g., cost or pricing information, budget information or analyses, specifications, or work statements, etc.) or perform evaluation services which may create a current or subsequent Organizational Conflict of Interests (OCI) as defined…