Draft Sol 1333ND23QNB770030-CAPSS Final 12.13.22.pdf

SOLICITATION, OFFER AND AWARD 1. THIS CONTRACT IS A RATED

ORDER UNDER DPAS (15 CFR 7900)

RATING

PAGE OF

PAGES

2. CONTRACT NUMBER 3. SOLICITATION NUMBER 4. TYPE OF SOLICITATION 5. DATE ISSUED 6. REQUISITION/PURCHASE NUMBER

1333ND23QNB770030 SEALED BID (IFB)

NEGOTIATED (RFP)

NB773000-22-01136

NB773000-22-01136

7. ISSUED BY CODE 000SB 8. ADDRESS OFFER TO (If other than Item 7)

NATIONAL INST OF STDS AND TECHNOLOGY

100 BUREAU DRIVE STOP 1640

BUILDING 301 ROOM B129

GAITHERSBURG MD 20899-1640

NOTE: In sealed bid solicitations "offer" and "offeror" mean "bid" and "bidder".

SOLICITATION

9. Sealed offers in original and 1 copies for furnishing the supplies or services in the Schedule will be received at the place specified in Item 8, or if handcarried, in the depository located in 100 BUREAU DRIVE STOP 1640 BUILDING

301 GAITHERSBURG MD 20899-1640

until 11:00

AM ET

local time JAN 13, (Hour) (Date)

CAUTION - LATE Submissions, Modifications, and Withdrawls: See Section L, Provision No. 52.214-7 or 52.215-1. All offers are subject to all terms and conditions contained in this solicitation.

B. TELEPHONE (NO COLLECT CALLS)10. FOR

INFORMATION CALL

A. NAME

HING PAN WONG AREA CODE

NUMBER

975-6289

EXTENSION

C. E-MAIL ADDRESS

hingpan.wong@nist.gov

11. TABLE OF CONTENTS

(X) SEC. DESCRIPTION PAGE(S) (X) SEC. DESCRIPTION PAGE(S)

PART 1 - THE SCHEDULE PART II - CONTRACT CLAUSES

X A SOLICITATION/CONTRACT FORM 1 - 1 X I CONTRACT CLAUSES 50 - 57

X B SUPPLIES OR SERVICES AND PRICES/COSTS 2 - 26 PART III - LIST OF DOCUMENTS, EXHIBITS AND OTHER ATTACH.

X C DESCRIPTION/SPECS./WORK STATEMENT 27 - 37 X J LIST OF ATTACHMENTS 58 - 59

D PACKAGING AND MARKING - PART IV - REPRESENTATIONS AND INSTRUCTIONS

X E INSPECTION AND ACCEPTANCE 38 - 39 X K REPRESENTATIONS, CERTIFICATIONS AND OTHER 60 - 77

X F DELIVERIES OR PERFORMANCE 40 - 40 STATEMENTS OF OFFERORS

X G CONTRACT ADMINISTRATION DATA 41 - 44 X L INSTRUCTIONS, CONDITIONS, AND NOTICES TO OFFERORS 78 - 93

X H SPECIAL CONTRACT REQUIREMENTS 45 - 49 X M EVALUATION FACTORS FOR AWARD 94 - 100

OFFER (Must be fully completed by offeror) NOTE: Item 12 does not apply if the solicitation includes the provisions at 52.214-16, Minimum Bid Acceptance Period.

12. In compliance with the above, the undersigned agrees, if this offer is accepted within calendar days (60 calendar days unless a different period is inserted by the offeror) from the date for receipt of offers specified above, to furnish any or all items upon which prices are offered at the set opposite each item, delivered at the designated point(s), within the time specified in the schedule.

13. DISCOUNT FOR PROMPT PAYMENT

(See Section I, Clause No. 52.232-8)

10 CALENDAR DAYS (%) 20 CALENDAR DAYS (%) 30 CALENDAR DAYS (%) CALENDAR DAYS (%)

14. ACKNOWLEDGMENT OF AMENDMENTS AMENDMENT NO. DATE AMENDMENT NO. DATE

(The offeror acknowledges receipt of amendments to the SOLICITATION for offerors and related documents numbered and dated):

CODE FACILITY 16. NAME AND TITLE OF PERSON AUTHORIZED TO SIGN OFFER

15A. NAME AND

ADDRESS OF

OFFEROR

(Type or print)

15B. TELEPHONE NUMBER 15C. CHECK IF REMITTANCE ADDRESS IS DIFFERENT

AREA CODE NUMBER

EXTENSION FROM ABOVE - ENTER SUCH ADDRESS IN SCHEDULE.

17. SIGNATURE 18. OFFER DATE

AWARD (To be completed by Government)

19. ACCEPTED AS TO ITEMS NUMBERED 20. AMOUNT 21. ACCOUNTING AND APPROPRIATION

22. AUTHORITY FOR USING OTHER THAN FULL AND OPEN COMPETITION:

10 U.S.C. 2304(c) 41 U.S.C. 3304(a) ( )

23. SUBMIT INVOICES TO ADDRESS SHOWN IN

(4 copies unless otherwise specified)

ITEM

24. ADMINISTERED BY (If other than Item 7) 25. PAYMENT WILL BE MADE BY CODE

26. NAME OF CONTRACTING OFFICER(Type or print) 27. UNITED STATES OF AMERICA 28. AWARD DATE

(Signature of Contracting Officer)

IMPORTANT - Award will be made on this Form, or on Standard Form 26, or by other authorized official written notice.

AUTHORIZED FOR LOCAL REPRODUCTION

Previous edition is unusable

STANDARD FORM 33 (REV. 6/2014)

Prescribed by GSA - FAR (48 CFR) 53.214(c)

PAGE 1 OF 100 1333ND23QNB770030

SCHEDULE Continued

ITEM NO. SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

0001 The purpose of this solicitation is to award multiple

Indefinite-Delivery, Indefinite-Quantity (IDIQ) contracts.

The maximum amount of the IDIQ contract(s), across all potential awardees, is $125,000,000.00.

Funding to be obligated via Task Orders issued under the resultant IDIQ contract(s).

SHIP TO:

NATIONAL INST OF STDS AND TECHNOLOGY

BUILDING 301 SHIPPING AND RECEIVING

100 BUREAU DRIVE

GAITHERSBURG MD 20899-0001

Period of Performance: 06/01/2023 to 05/31/2028

0.00 LO

PAGE 2 OF 100 1333ND23QNB770030

Table of Contents

SECTION B SUPPLIES OR SERVICES AND PRICES/COSTS

B.1 1352.216-75 Minimum and maximum contract amounts

B.2 IDIQ Labor Categories

SECTION C DESCRIPTION/SPECIFICATIONS/WORK STATEMENT

C.1 IDIQ Performance Work Statement

SECTION E INSPECTION AND ACCEPTANCE

E.1 52.246-4 INSPECTION OF SERVICES--FIXED-PRICE (AUG 1996)

E.2 52.246-6 INSPECTION--TIME-AND-MATERIAL AND LABOR-HOUR (MAR 2001)

SECTION F DELIVERIES OR PERFORMANCE

F.1 52.242-15 STOP-WORK ORDER (AUG 1989)

F.2 52.242-17GOVERNMENT DELAY OF WORK (APR 1984)

F.3 1352.270-70 PERIOD OF PERFORMANCE (APR 2010)

SECTION G CONTRACT ADMINISTRATION DATA

G.1 IDIQ CONTRACT INFORMATION

G.2 1352.201-70 CONTRACTING OFFICER?s AUTHORITY (APR 2010)

G.3 1352.201-72 CONTRACTING OFFICER`S REPRESENTATIVE (COR) (APR 2010)

G.4 1352.245-70 GOVERNMENT FURNISHED PROPERTY (APR 2010)

G.5 52.216-32 TASK-ORDER AND DELIVERY-ORDER OMBUDSMAN (SEPT 2019)

G.6 1352.216-76 PLACEMENT OF ORDERS (APR 2010)

SECTION H SPECIAL CONTRACT REQUIREMENTS

H.1 LOCAL CLAUSE - CONTRACTOR RESPONSIBILITY

H.2 NON PERSONAL SERVICES

H.3 1352.208-70 RESTRICTIONS ON PRINTING AND DUPLICATING (APR 2010)

H.4 1352.209-72 RESTRICTIONS AGAINST DISCLOSURE (APR 2010)

H.5 1352.209-73 COMPLIANCE WITH THE LAWS (APR 2010)

H.6 1352.209-74 ORGANIZATIONAL CONFLICT OF INTEREST (APR 2010)

H.7 1352.216-74 TASK ORDERS (APR 2010)

H.8 1352.231-71 DUPLICATION OF EFFORT (APR 2010)

H.9 1352.237-70 SECURITY PROCESSING REQUIREMENTS - HIGH OR MODERATE RISK CONTRACTS (APR 2010).. 47

H.10 1352.237-71 SECURITY PROCESSING REQUIREMENTS - LOW RISK CONTRACTS (APR 2010)

H.11 1352.239-71 ELECTRONIC AND INFORMATION TECHNOLOGY (APR 2010)

H.12 1352.239-72 SECURITY REQUIREMENTS FOR INFORMATION TECHNOLOGY RESOURCES (APR 2010)

H.13 1352.237-75 KEY PERSONNEL (APR 2010)

H.14 NIST LOCAL-07COMPUTER SECURITY POLICY

H.15 NIST LOCAL-36TRAVEL NOTE

H.16 NIST LOCAL-55ELECTRONIC BILLING INSTRUCTIONS FOR DELIVERY/TASK ORDERS

SECTION I CONTRACT CLAUSES

I.1 52.202-1DEFINITIONS (JUN 2020)

I.2 52.203-3 GRATUITIES (APR 1984)

I.3 52.203-5 COVENANT AGAINST CONTINGENT FEES (MAY 2014)

I.4 52.203-12LIMITATION ON PAYMENTS TO INFLUENCE CERTAIN FEDERAL TRANSACTIONS (JUN 2020)

I.5 52.204-4 PRINTED OR COPIED DOUBLE-SIDED ON POSTCONSUMER FIBER CONTENT PAPER (MAY 2011)

I.6 52.204-7 SYSTEM FOR AWARD MANAGEMENT (OCT 2018)

I.7 52.204-9 PERSONAL IDENTITY VERIFICATION OF CONTRACTOR PERSONNEL (JAN 2011)

PAGE 3 OF 100 1333ND23QNB770030

I.8 52.212-4CONTRACT TERMS AND CONDITIONS--COMMERCIAL PRODUCTS AND COMMERCIAL SERVICES (NOV 2021) 50

I.9 52.212-4 ICONTRACT TERMS AND CONDITIONS--COMMERCIAL PRODUCTS AND COMMERCIAL SERVICES (NOV 2021)--

ALTERNATE I (NOV 2021)

I.10 52.215-2AUDIT AND RECORDS--NEGOTIATION (JUN 2020)

I.11 52.215-8 ORDER OF PRECEDENCE--UNIFORM CONTRACT FORMAT (OCT 1997)

I.12 52.217-2 CANCELLATION UNDER MULTI-YEAR CONTRACTS (OCT 1997)

I.13 52.217-7 OPTION FOR INCREASED QUANTITY--SEPARATELY PRICED LINE ITEM (MAR 1989)

I.14 52.219-8UTILIZATION OF SMALL BUSINESS CONCERNS (OCT 2022)

I.15 52.223-6 DRUG-FREE WORKPLACE (MAY 2001)

I.16 52.224-1 PRIVACY ACT NOTIFICATION (APR 1984)

I.17 52.224-2 PRIVACY ACT (APR 1984)

I.18 52.227-1AUTHORIZATION AND CONSENT (JUN 2020)

I.19 52.227-2NOTICE AND ASSISTANCE REGARDING PATENT AND COPYRIGHT INFRINGEMENT (JUN 2020)

I.20 52.227-3 PATENT INDEMNITY (APR 1984)

I.21 52.227-14 RIGHTS IN DATA--GENERAL (MAY 2014)

I.22 52.227-17 RIGHTS IN DATA--SPECIAL WORKS (DEC 2007)

I.23 52.227-23 RIGHTS TO PROPOSAL DATA (TECHNICAL) (JUN 1987)

I.24 52.229-3 FEDERAL, STATE, AND LOCAL TAXES (FEB 2013)

I.25 52.232-1 PAYMENTS (APR 1984)

I.26 52.232-8 DISCOUNTS FOR PROMPT PAYMENT (FEB 2002)

I.27 52.232-9 LIMITATION ON WITHHOLDING OF PAYMENTS (APR 1984)

I.28 52.232-11 EXTRAS (APR 1984)

I.29 52.232-17 INTEREST (MAY 2014)

I.30 52.232-18 AVAILABILITY OF FUNDS (APR 1984)

I.31 52.232-23 ASSIGNMENT OF CLAIMS (MAY 2014)

I.32 52.232-25 PROMPT PAYMENT (JAN 2017)

I.33 52.233-1 DISPUTES (MAY 2014)

I.34 52.233-3 PROTEST AFTER AWARD (AUG 1996)

I.35 52.233-4 APPLICABLE LAW FOR BREACH OF CONTRACT CLAIM (OCT 2004)

I.36 52.237-3 CONTINUITY OF SERVICES (JAN 1991)

I.37 52.242-13 BANKRUPTCY (JUL 1995)

I.38 52.244-2SUBCONTRACTS (JUN 2020)

I.39 52.245-1GOVERNMENT PROPERTY (SEP 2021)

I.40 52.245-9 USE AND CHARGES (APR 2012)

I.41 52.246-25 LIMITATION OF LIABILITY--SERVICES (FEB 1997)

I.42 52.249-2 TERMINATION FOR CONVENIENCE OF THE GOVERNMENT (FIXED-PRICE) (APR 2012)

I.43 52.249-8 DEFAULT (FIXED-PRICE SUPPLY AND SERVICE) (APR 1984)

I.44 52.249-14 EXCUSABLE DELAYS (APR 1984)

I.45 52.253-1 COMPUTER GENERATED FORMS (JAN 1991)

I.46 52.212-5CONTRACT TERMS AND CONDITIONS REQUIRED TO IMPLEMENT STATUTES OR EXECUTIVE ORDERS--

COMMERCIAL PRODUCTS AND COMMERCIAL SERVICES (OCT 2022)

I.47 52.216-18ORDERING (AUG 2020)

I.48 52.216-19 ORDER LIMITATIONS (OCT 1995)

I.49 52.216-22 INDEFINITE QUANTITY (OCT 1995)

I.50 52.217-8 OPTION TO EXTEND SERVICES (NOV 1999)

I.51 52.217-9 OPTION TO EXTEND THE TERM OF THE CONTRACT (MAR 2000)

I.52 52.232-7PAYMENTS UNDER TIME-AND-MATERIALS AND LABOR-HOUR CONTRACTS (NOV 2021)

I.53 52.243-3 CHANGES--TIME-AND-MATERIALS OR LABOR-HOURS (SEP 2000)

I.54 52.252-2 CLAUSES INCORPORATED BY REFERENCE (FEB 1998)

I.55 52.252-6AUTHORIZED DEVIATIONS IN CLAUSES (NOV 2020)

PAGE 4 OF 100 1333ND23QNB770030

SECTION J LIST OF ATTACHMENTS

J.1 LIST OF ATTACHMENTS

SECTION K REPRESENTATIONS, CERTIFICATIONS AND OTHER STATEMENTS OF OFFERORS

K.1 52.203-11 CERTIFICATION AND DISCLOSURE REGARDING PAYMENTS TO INFLUENCE CERTAIN FEDERAL

TRANSACTIONS (SEP 2007)

K.2 52.204-8ANNUAL REPRESENTATIONS AND CERTIFICATIONS (MAY 2022)

K.3 52.209-5CERTIFICATION REGARDING RESPONSIBILITY MATTERS (AUG 2020)

K.4 52.209-7 INFORMATION REGARDING RESPONSIBILITY MATTERS (OCT 2018)

K.5 52.209-11 REPRESENTATION BY CORPORATIONS REGARDING DELINQUENT TAX LIABILITY OR A FELONY

CONVICTION UNDER ANY FEDERAL LAW (FEB 2016)

K.6 52.212-3OFFEROR REPRESENTATIONS AND CERTIFICATIONS--COMMERCIAL PRODUCTS AND COMMERCIAL SERVICES

(OCT 2022)

K.7 52.219-1SMALL BUSINESS PROGRAM REPRESENTATIONS (OCT 2022)

K.8 52.222-22 PREVIOUS CONTRACTS AND COMPLIANCE REPORTS (FEB 1999)

K.9 52.222-25 AFFIRMATIVE ACTION COMPLIANCE (APR 1984)

SECTION L INSTRUCTIONS, CONDITIONS, AND NOTICES TO OFFERORS

L.1 Instructions to Offerors

L.2 INQUIRIES

L.3 52.212-1INSTRUCTIONS TO OFFERORS--COMMERCIAL PRODUCTS AND COMMERCIAL SERVICES (NOV 2021)

L.4 52.217-5 EVALUATION OF OPTIONS (JUL 1990)

L.5 52.233-2 SERVICE OF PROTEST (SEP 2006)

L.6 52.204-24REPRESENTATION REGARDING CERTAIN TELECOMMUNICATIONS AND VIDEO SURVEILLANCE SERVICES OR

EQUIPMENT (NOV 2021)

L.7 52.204-26COVERED TELECOMMUNICATIONS EQUIPMENT OR SERVICES--REPRESENTATION (OCT 2020)

L.8 52.216-1 TYPE OF CONTRACT (APR 1984)

L.9 52.216-27 SINGLE OR MULTIPLE AWARDS (OCT 1995)

L.10 52.216-31TIME-AND-MATERIALS/LABOR-HOUR PROPOSAL REQUIREMENTS -- COMMERCIAL ACQUISITION (NOV

2021)

L.11 52.252-1 SOLICITATION PROVISIONS INCORPORATED BY REFERENCE (FEB 1998)

L.12 1352.233-70 AGENCY PROTESTS (APR 2010)

L.13 1352.233-71 GAO AND COURT OF FEDERAL CLAIMS PROTESTS (APR 2010)

SECTION M EVALUATION FACTORS FOR AWARD

M.1 Evaluation Criteria for Award

M.2 52.217-5 EVALUATION OF OPTIONS (JUL 1990)

PAGE 5 OF 100 1333ND23QNB770030

SECTION B

SUPPLIES OR SERVICES AND PRICES/COSTS

B.1 1352.216-75 Minimum and maximum contract amounts

PAGE 6 OF 100 1333ND23QNB770030

1352.216-75 Minimum and maximum contract amounts.

As prescribed in 48 CFR 1316.506(a), insert the following clause:

MINIMUM AND MAXIMUM CONTRACT AMOUNTS (APR 2010)

During the term of the contract, the Government shall place orders totaling a minimum of $50,000.00 against each awarded Indefinite- Delivery, Indefinite-Quantity contract awarded. The amount of all orders awarded against all contracts awarded shall not exceed $125,000,000.00.

B.2 IDIQ Labor Categories

PAGE 7 OF 100 1333ND23QNB770030

SCHEDULE OF LABOR CATEGORIES

Required IDIQ Labor Categories:

The following labor categories are categories that must be made available under the base IDIQ contract, at a minimum.

SCHEDULE OF LABOR CATEGORIES

The following is a description of the labor categories available for use on task orders issued under this IDIQ contract. When submitting a quotation for a task order, the Contractor may propose any combination of the below listed labor categories. In order for a candidate to be proposed and accepted under a particular labor category, the nature of the work to be performed by said candidate must fall within the scope of the respective labor category, and the candidate must meet the minimum qualifications for the respective labor category. The description of the work to be performed under each labor category is a generalized description and may be expanded under individual task orders, where the work will be further defined. In places where an advanced degree may be substituted for experience, the years’ experience given for a PhD includes time for a Masters’ degree. Only the highest-level degree should be considered in these calculations. For example, a Cybersecurity SME 3 with a PhD will get 5 years’ experience credit, not 7. All degrees must be from an accredited college or university. Degrees received outside of the US must have been evaluated by a member of either the National Association of Credential Evaluation Services (NACES) or the Association of International Credentials Evaluators (AICE).

Agile Project Manager 2

Minimum/General Experience:

This position requires 5 years’ experience working with Agile teams through effective application of Agile principles and frameworks including Scrum. Strengthens understanding of effective practices, theories, and techniques to support continuous improvement. Educates and coaches teams to create an environment that fosters self-organization, cross-functionality, collaboration, conflict resolution, transparency, and continuous improvement. Visualizes, communicates, and radiates team information to keep their work and impediments visible to stakeholders.

Functional Responsibility: Duties may include but are not limited to: Organize and lead project status, prepare and distribute progress reports, manage risks and issues, and correct deviations from plans while also incorporating continuous process improvement (e.g., Lean, Six Sigma, etc.,). Facilitate meetings with development team for purposes of idea generation, sprint planning, daily stand-ups, backlog refinement, sprint reviews, retrospectives, problem-solving, and alignment. Capable of utilizing standard applications to effectively manage development projects (e.g., JIRA, MS Project, etc.,). To be clear this LCAT is not to be used instead of a TO Level PM. This LCAT is to be used to manage technical work only.

Minimum Education: A Bachelor's degree with a relevant curriculum or major field of study, such as computer science or information technology, and a minimum of 5 years’ experience as an Agile team member or in project management. OR no degree, 9 years’ experience in SCRUM/Agile methodologies and a PMI-ACP or CSM or equivalent.

Agile Project Manager 3

PAGE 8 OF 100 1333ND23QNB770030

Minimum/General Experience:

This position requires 10 years' experience working with Agile teams through effective application of Agile principles and frameworks including Scrum. Strengthens understanding of effective practices, theories, and techniques to support continuous improvement. Educates and coaches teams to create an environment that fosters self-organization, cross-functionality, collaboration, conflict resolution, transparency, and continuous improvement. Visualizes, communicates, and radiates team information to keep their work and impediments visible to stakeholders.

Functional Responsibility: Duties may include but are not limited to: Organize and lead project status, prepare and distribute progress reports, manage risks and issues, and correct deviations from plans while also incorporating continuous process improvement (e.g., Lean, Six Sigma, etc.,). Facilitate meetings with development team for purposes of idea generation, sprint planning, daily stand-ups, backlog refinement, sprint reviews, retrospectives, problem-solving, and alignment. Capable of utilizing standard applications to effectively manage development projects (e.g., JIRA, MS Project, etc.,). To be clear this LCAT is not to be used instead of a TO Level PM. This LCAT is to be used to manage technical work only.

Minimum Education: A Bachelor's degree with a relevant curriculum or major field of study, such as computer science or information technology, and a minimum of 10 years’ experience as an Agile team member or in project management. A Master’s degree in a relevant field may be substituted for 2 years’ experience. OR no degree with 14 years’ experience in SCRUM/Agile methodologies and a PMI-ACP or CSM or equivalent.

Application Tester

Minimum/General Experience:

This position requires a minimum of 5 years' experience, of which at least 3 years must be specialized experience that includes: experience as an application tester for web-based applications, REST based data services, XML or JSON data formats, knowledge of computer equipment, and the ability to develop complex software testing approaches to satisfy design objectives and user requirements. Have experience with automated testing frameworks for web-based user interfaces, service-based testing, and performance testing web applications.

Increasingly complex and progressive experience in conducting requirements analysis consisting of development of use cases, and design of integration and functional tests for application development projects. Demonstrated ability to work independently or under only general direction.

Functional Responsibilities: Duties may include but are not limited to: analyzes design specifications and developed applications for testing activities. Applies testing expertise to verify application functionality in support of user requirements. Prepares required documentation, including test plans and test reports.

Develops test procedures and automated testing scripts. Participates in all phases of risk management assessments and software/hardware development with emphasis on analysis of user requirements, test

PAGE 9 OF 100 1333ND23QNB770030

design and test tools selection.

Minimum Education: A Bachelor's degree in computer science/systems, information systems/technology, engineering/engineering technology, software engineering/programming, management, natural sciences, social sciences, mathematics, or business/finance. A Master's Degree (in subjects described above) may be substituted for 2 years' general IT experience. OR no degree and 9 years of general IT experience of which at least 5 years must be specialized experience.

Communications Specialist 1

Minimum/General Experience:

This position requires a minimum of 3 years of general communications experience of which at least 1 must be specialized experience that includes working in communications dealing with scientific and/or technical topics.

Functional Responsibilities: Duties to include, but not be limited to: Under direct supervision, assists with the design and development of a wide variety of multimedia products using computers, production equipment, and software. Includes, but not limited to development of web pages, videos, models, graphics, etc. Writes, edits, creates layouts for publications, information displays, video scripts, internal/external websites, social media, and multimedia presentations. Promotes content standards and consistency across websites, social media, and/or content management systems. Works with technical staff to ensure content supports agency goals. Assists with preparing responses to public input on various topics.

Minimum Education: A Bachelor's degree in computer science/systems, information systems/technology, engineering/engineering technology, software engineering/programming, management, natural sciences, social sciences, mathematics, or communications. A Master's Degree (in subjects described above) may be substituted for 2 years general experience.

Communications Specialist 2

Minimum/General Experience:

This position requires a minimum of 6 years of general communications experience of which at least 3 must be specialized experience that includes working in communications dealing with scientific and/or technical topics.

Functional Responsibilities: Duties to include, but not be limited to: With limited supervision, assists with the design and development of a wide variety of multimedia products using computers, production equipment, and software. Includes, but not limited to development of web pages, videos, models, graphics, etc. Writes, edits, creates layouts for publications, information displays, video scripts, internal/external websites, social media, and multimedia presentations. Promotes content standards and consistency across websites, social media, and/or content management systems. Works with technical staff to ensure content supports agency goals. Assists with preparing responses to public input on various topics.

PAGE 10 OF 100 1333ND23QNB770030

Minimum Education: A Bachelor's degree in computer science/systems, information systems/technology, engineering/engineering technology, software engineering/programming, management, natural sciences, social sciences, mathematics, or communications. A Master’s Degree (in subjects described above) may be substituted for 2 years' general experience. A PhD (in subjects described above) may be substituted for 5 years of general experience. OR no degree and 10 years of general experience of which at least 3 years must be specialized experience.

Cryptographer 2

Minimum/General Experience:

This position requires 8 years' general experience and 3 years specialized experience is required. General experience includes all aspects of cryptography, and a mixture of experience from the mathematical disciplines and the demonstrated ability to work independently or under only general supervision.

Specialized experience includes developing cryptographic and hash algorithms including but not limited to triple DES, AES, SHA, etc. Demonstrated experience in developing, analyzing, testing, and researching Public Key Infrastructures using X.509 certificates, symmetric and public key algorithms, hash functions, and quantum cryptography.

Functional Responsibilities: Duties may include but are not limited to: Performing complex analysis, design, development, integration, testing and debugging of cryptographic and hashing algorithms. Applying cryptography-based solutions to contemporary use cases such as evaluating for FIPS 140 compliance, electronic voting, smart grid, health care, and resource constrained environments including but not limited to smart meters, smart cards, and medical devices.

Minimum Education: A Master's degree in Cryptography, Computer Science, Engineering, Mathematics, or other related scientific or technical discipline is required. A PhD in one of the subjects mentioned above may be substituted for 3 years' general cryptography experience.

Cryptographer 3 Minimum/General Experience:

This position requires 10 years' general experience and 5 years specialized experience is required. General experience includes all aspects of cryptography, and a mixture of experience from the mathematical disciplines and the demonstrated ability to work independently or under only general supervision.

Specialized experience includes developing cryptographic and hash algorithms including but not limited to triple DES, AES, SHA, etc. Demonstrated experience in developing, analyzing, testing, and researching Public Key Infrastructures using X.509 certificates, symmetric and public key algorithms, hash functions, and quantum cryptography.

Functional Responsibilities: Duties may include but are not limited to: Performs complex analysis, design, development, integration, testing and debugging cryptographic and hashing algorithms. Apply cryptography-based solutions to contemporary use cases such as evaluating for FIPS 140 compliance, PAGE 11 OF 100 1333ND23QNB770030 electronic voting, smartgrid, health care, and resource constrained environments including but not limited to smart meters, smart cards, and medical devices. May supervise Intermediate Cryptographers.

Minimum Education: A PhD in Cryptography, Computer Science, Engineering, Mathematics, or other related scientific or technical discipline is required.

Cybersecurity Subject Matter Expert 2

Minimum/General Experience:

This position requires a minimum 10 years of cybersecurity related experience in one or more of the critical infrastructure sectors, and familiarity with the legal and regulatory cybersecurity frameworks associated with respective critical infrastructure sectors, especially as related to executive-level risk management, common cybersecurity practices, and cybersecurity tools and metrics. To be clear, this LCAT is not designed for operational cybersecurity services.

Functional Responsibilities: Assists with applying subject matter expertise to high-level analysis, and guidance development for some of the nation's top cybersecurity challenges. Assists with applying high level facilitation skills within large groups in order to derive stakeholder cybersecurity imperatives and support the prioritization of sometimes competing cybersecurity imperatives.

Minimum Education: A Bachelor's degree with a curriculum or major field of study which is closely related to the work to be performed, and/or in a computer science, cybersecurity, information systems, engineering, or a mathematics-intensive discipline. A Master's Degree may be substituted for 2 years’ experience. A PhD may be substituted for 5 years’ experience.

Cybersecurity Subject Matter Expert 3

Minimum/General Experience:

This position requires a minimum 15 years of cybersecurity related experience in one or more of the critical infrastructure sectors, and familiarity with the legal and regulatory cybersecurity frameworks associated with respective critical infrastructure sectors, especially as related to executive-level risk management, common cybersecurity practices, and cybersecurity tools and metrics. To be clear, this LCAT is not designed for operational cybersecurity services.

Functional Responsibilities: Applies subject matter expertise to high-level analysis, and guidance development for some of the nation's top cybersecurity challenges. Applies high-level facilitation skills within large groups in order to derive stakeholder cybersecurity imperatives and support the prioritization of sometimes competing cybersecurity imperatives.

Minimum Education: A Bachelor's degree with a curriculum or major field of study which is closely related to the work to be performed, and/or in a computer science, cybersecurity, information systems, engineering, or a mathematics-intensive discipline. A Master's Degree may be substituted for 2 years’

PAGE 12 OF 100 1333ND23QNB770030

experience. A PhD may be substituted for 5 years’ experience.

Developer 1

Minimum/General Experience:

This position requires a minimum of 1 year of experience in performing systems analysis, development, and implementation for business, mathematical, engineering, or scientific settings using a variety of information technology resources. Requires experience with current technologies and, where required for the task, emerging technologies. Must have experience with object or functionally oriented programming languages.

Functional Responsibilities: Duties may include but are not limited to: Analyzes functional business applications and design specifications for functional activities. Develops block diagrams and logic flow charts. Translates detailed design into computer software. Tests, debugs, and refines the computer software to produce the required product. Prepares required documentation, including both program-level and user-level documentation. Enhances software to reduce operating time or improve efficiency. Takes direction from application engineer to ensure program deadlines are met.

Minimum Education: A Bachelor's degree in computer science/systems, information systems/technology, engineering/engineering technology, software engineering/programming, cybersecurity, natural sciences, social sciences, mathematics, or business/finance. A High School diploma and 4 years’ relevant experience as a developer may be substituted for a Bachelor’s degree.

Developer 2

Minimum/General Experience:

This position requires a minimum of 5 years of increasingly complex and progressive experience in performing systems analysis, development, and implementation for business, mathematical, engineering, or scientific settings using a variety of information technology resources. Requires experience with current technologies and, where required for the task, emerging technologies. Must have experience with object or functionally oriented programming languages.

Functional Responsibilities: Duties may include but are not limited to: Analyzes functional business applications and design specifications for functional activities. Develops block diagrams and logic flow charts. Translates detailed design into computer software. Tests, debugs, and refines the computer software to produce the required product. Prepares required documentation, including both program-level and user-level documentation. Enhances software to reduce operating time or improve efficiency.

May take direction from application engineer to ensure program deadlines are met.

Minimum Education: A Bachelor' s degree in computer science/systems, information systems/technology, engineering/engineering technology, software engineering/programming, cybersecurity, natural sciences, social sciences, mathematics, or business/finance. A Master's Degree in an IT-related field may be

PAGE 13 OF 100 1333ND23QNB770030

substituted for 2 years' general experience. OR no degree and 9 years of general IT-related experience of which at least 3 years must be specialized experience as a developer.

Developer 3

Minimum/General Experience:

This position requires a minimum of 7 years of increasingly complex and progressive experience in performing systems analysis, development, and implementation for business, mathematical, engineering, or scientific settings using a variety of information technology resources. Requires experience with current technologies and, where required for the task, emerging technologies. Must have experience with object or functionally oriented programming languages.

Functional Responsibilities: Duties may include but are not limited to: Analyzes functional business applications and design specifications for functional activities. Develops block diagrams and logic flow charts. Translates detailed design into computer software. Tests, debugs, and refines the computer software to produce the required product. Prepares required documentation, including both program-level and user-level documentation. Enhances software to reduce operating time or improve efficiency. Provides guidance and training to less experienced analysts/programmers.

Minimum Education: A Bachelor’s degree in computer science/systems, information systems/technology, engineering/engineering technology, software engineering/programming, cybersecurity, natural sciences, social sciences, mathematics, or business/finance. A Master’s Degree in an IT-related field may be substituted for 2 years’ experience. A PhD in an IT-related field may be substituted for 5 years’ experience.

OR no degree and 11 years of general IT-related experience of which at least 5 years must be specialized experience as a developer.

Developer 4

Minimum/General Experience:

This position requires a minimum of 10 years of increasingly complex and progressive experience in performing systems analysis, development, and implementation for business, mathematical, engineering, or scientific settings using a variety of information technology resources. Requires experience with current technologies and, where required for the task, emerging technologies. Must have experience with object or functionally oriented programming languages.

Functional Responsibilities: Duties may include but are not limited to: Formulates and defines system scope and objectives. Prepares detailed specifications for programs. Designs, codes, tests, debugs, and documents programs. Works at the highest technical level of all phases of applications, systems analysis and programming activities including the installation of enhancements, security features, and analytical tools. Provides guidance and training to less experienced analysts/programmers.

Minimum Education: A Bachelor's degree with a curriculum or major field of study which provides

PAGE 14 OF 100 1333ND23QNB770030

substantial knowledge useful in managing large, complex projects closely related to the work to be automated, and/or in a computer science, information systems, cybersecurity, a physical science, or engineering. A Master's Degree (in subjects described above) may be substituted for 2 years’ experience.

A PhD (in subjects described above) may be substituted for 5 years’ experience. OR no degree and 14 years of directly related experience.

Developer 5

Minimum/General Experience:

This position requires a minimum of 15 years of increasingly complex and progressive experience in performing systems analysis, development, and implementation for business, mathematical, engineering, or scientific settings using a variety of information technology resources. Requires experience with current technologies and, where required for the task, emerging technologies. Must have experience with object or functionally oriented programming languages.

Functional Responsibilities: Duties may include but are not limited to: Analyzes functional business applications and design specifications for functional activities. Develops block diagrams and logic flow charts. Translates detailed design into computer software. Tests, debugs, and refines the computer software to produce the required product. Prepares required documentation, including both program-level and user-level documentation. Enhances software to reduce operating time or improve efficiency. Provides guidance and training to less experienced analysts/programmers.

Minimum Education: A Bachelor's degree with a curriculum or major field of study which provides substantial knowledge useful in managing large, complex projects closely related to the work to be automated, and/or in a computer science, information systems, cybersecurity, a physical science, or engineering. A Master’s Degree (in subjects described above) may be substituted for 2 years’ experience. A PhD (in subjects described above) may be substituted for 5 years’ experience. OR no degree and 19 years of directly related experience.

Information Engineer 1

Minimum/General Experience:

This position requires a minimum of 3 years' experience, of which at least 2 years must be specialized.

Specialized experience includes functional and data requirements analysis, systems analysis and design, programming, program design, and documentation preparation. The following experience is also required:

demonstrated experience in the implementation of information engineering projects; systems planning, business information planning, and business analysis.

Functional Responsibilities: Duties may include but are not limited to: Applies business process improvement practices to re-engineer methodologies/principles and business process modernization projects. Applies, as appropriate, activity and data modeling, transaction flow analysis, internal control and risk analysis and modern business methods and performance measurement techniques. Assists in

PAGE 15 OF 100 1333ND23QNB770030

establishing standards for information systems procedures. Develops and applies organization-wide information models for use in designing and building integrated, shared software and database management systems. Constructs sound, logical business improvement opportunities consistent with corporate information management guiding principles, cost savings, and open system architecture objectives.

Minimum Education: A Bachelor's degree in computer science/systems, information systems/technology, engineering/engineering technology, software engineering/ programming, cybersecurity, natural sciences, social sciences, mathematics, or business/finance. OR no degree with 7 years' experience of which 4 must be IT-related experience.

Information Engineer 2 Minimum/General Experience:

This position requires a minimum of 6 years' experience, of which at least 4 years must be specialized.

Specialized experience includes functional and data requirements analysis, systems analysis and design, programming, program design, and documentation preparation. The following experience is also required:

demonstrated experience in the implementation of information engineering projects; systems planning, business information planning, and business analysis. Must demonstrate the ability to work independently or under only general direction.

Functional Responsibilities: Duties may include but are not limited to: Applies business process improvement practices to re-engineer methodologies/principles and business process modernization projects. Applies, as appropriate, activity and data modeling, transaction flow analysis, internal control and risk analysis and modern business methods and performance measurement techniques. Assists in establishing standards for information systems procedures. Develops and applies organization-wide information models for use in designing and building integrated, shared software and database management systems. Constructs sound, logical business improvement opportunities consistent with corporate information management guiding principles, cost savings, and open system architecture objectives.

Minimum Education: A Bachelor's degree in computer science/systems, information systems/technology, engineering/engineering technology, software engineering/ programming, cybersecurity, natural sciences, social sciences, mathematics, or business/finance. A Master's Degree may be substituted for 2 years’ experience. OR no degree and 10 years of general experience of which at least 4 must be IT-related experience.

Information Engineer 3

Minimum/General Experience:

This position requires a minimum of 10 years' experience, of which at least 8 years must be specialized.

Specialized experience includes functional and data requirements analysis, systems analysis and design, programming, program design, and documentation preparation. The following experience is also required:

PAGE 16 OF 100 1333ND23QNB770030

demonstrated experience in the implementation of information engineering projects; systems planning, business information planning, and business analysis. Must demonstrate the ability to work independently or under only general direction.

Functional Responsibilities: Duties may include but are not limited to: Applies business process improvement practices to re-engineer methodologies/principles and business process modernization projects. Applies, as appropriate, activity and data modeling, transaction flow analysis, internal control and risk analysis and modern business methods and performance measurement techniques. Assists in establishing standards for information systems procedures. Develops and applies organization-wide information models for use in designing and building integrated, shared software and database management systems. Constructs sound, logical business improvement opportunities consistent with corporate information management guiding principles, cost savings, and open system architecture objectives.

Minimum Education: A Bachelor's degree in computer science/systems, information systems/technology, engineering/engineering technology, software engineering/ programming, cybersecurity, natural sciences, social sciences, mathematics, or business/finance. A Master's Degree (in subjects described above) may be substituted for 2 years’ experience. A PhD (in subjects described above) may be substituted for 5 years’ experience. OR no degree and 14 years of general experience of which at least 12 years must be IT-related experience.

Information Engineer 4

Minimum/General Experience:

This position requires a minimum of 15 years' experience, of which at least 12 years must be specialized.

Specialized experience includes information systems development, functional and data requirements analysis, systems analysis and design, programming, program design, and documentation preparation. The following experience is also required: demonstrated experience in the implementation of information engineering projects; systems planning, business information planning, and business analysis. Must demonstrate the ability to work independently or under only general direction.

Functional Responsibilities: Duties may include but are not limited to: Applies business process improvement practices to re-engineer methodologies/principles and business process modernization projects. Applies, as appropriate, activity and data modeling, transaction flow analysis, internal control and risk analysis and modern business methods and performance measurement techniques. Assists in establishing standards for information systems procedures. Develops and applies organization-wide information models for use in designing and building integrated, shared software and database management systems.

Constructs sound, logical business improvement opportunities consistent with corporate information management guiding principles, cost savings, and open system architecture objectives. May provide daily supervision and direction to staff.

Minimum Education: A Bachelor's degree in computer science/systems, information systems/ technology, engineering/engineering technology software engineering/ programming, cybersecurity, natural sciences, PAGE 17 OF 100 1333ND23QNB770030 social sciences, mathematics, or business/finance. A Master's Degree in an IT-related field may be substituted for 2 years’ experience. A PhD in an IT-related field may be substituted for 5 years’ experience.

OR no degree and 19 years of general experience of which at least 12 years must be IT-related experience.

Program Manager 1 - Assistant Level

Minimum/General Experience:

This position requires a minimum of 3 years' general project management experience of projects that involve physical sciences, engineering, IT fields, or mathematics. Experience includes increasing responsibilities in project management.

Functional Responsibilities: Duties may include but are not limited to: Serves as an Assistant Project Manager on large or complicated Task Orders or as a Task Manager for small (under $250,000), simple tasks, working with the Lead or TO Project Manager to ensure communications are timely and clear, project materials are prepped in a timely and accurate fashion, schedules are adhered to, and all deliverables reach the COR and Tech Lead on time.

Minimum Certification/Education: No certification required. A Master's Degree in Project Management can be substituted for 2 years' project management experience.

Program Manager 2 - Task Order Level

Minimum/General Experience:

This position requires a minimum of 6 years' general project management experience and 4 years’ experience in managing projects involving physical sciences, engineering, mathematics, or IT-related fields, including cybersecurity and/or privacy. At least 2 years’ experience managing contracted projects for a US federal agency. Experience includes increasing responsibilities in project management.

Functional Responsibilities: Duties may include but are not limited to: Serves as project manager for a large, complex task order and shall assist the Lead Program Manager in working with the ordering activity Contracting Officer (CO), the Federal Acquisitions Contract - Project/Program Manager (FAC-P/PM), the contract-level Contracting Officer's Representative (COR), and the task order-level COR(s), ordering activity management of personnel and NIST representatives. The Project Manager is responsible for the overall management of the specific task order(s) and ensuring that the technical solutions and schedules in the task order are implemented in a timely manner. Performs enterprise-wide horizontal integration planning and interfaces to other functional systems.

Minimum Certification/Education: Must either be certified as a.) Project Management Professional (PMP) by the Project Management Institute (PMI) or other such credentialing organization, or b.) Have been or currently are certified as a FAC- Program/Project Manager (P/PM) (Mid or Senior level). A Defense Systems Management College (DSMC) Program Management (PM) certification of Level 2 or 3 will be considered equivalent to a FAC-P/PM Mid or Senior Level. A Master's Degree in Project Management can be

PAGE 18 OF 100 1333ND23QNB770030

substituted for 2 years' project management experience.

Program Manager 3 - Contract Level

Minimum/General Experience:

This position requires a minimum of 10 years' general project management experience, with at least 8 years managing projects involving physical sciences, engineering, mathematics, or IT-related fields, including cybersecurity and/or privacy. At least 5 years’ experience managing contracted projects under an IDIQ for a US federal agency. Experience includes increasing responsibilities in project management.

Functional Responsibilities: Duties may include but are not limited to: Serves as the Lead Program Manager for the IDIQ contract as a whole. Serves as Project Manager for a large, complex task order (or a group of task orders affecting the same common/standard/migration system) and shall assist the Government Program Manager in developing/presenting project materials by and between the Contracting Officer (CO), the NIST FAC-P/PM, the contract-level COR, the task order-level COR(s), ordering activities of the management personnel and NIST representatives. The Program Manager is responsible for the overall management of all task order(s) and ensuring that the technical solutions and schedules of the task orders are implemented in a timely manner. Performs enterprise-wide horizontal integration planning and interfaces to other functional systems. The Program Manager shall also supervise Assistant Project Managers and Project Managers at the task order level.

Minimum Certification/Education: Must either be certified as a.) a PMP by the PMI or other such credentialing organization, or b.) Have been or is currently certified as a Senior-level FAC-P/PM, or c.) Have a DSMC PM certification of Level 3. A Master's Degree in Project Management can be substituted for 2 years' project management experie nce.

Security Engineer 2

Minimum/General Experience:

This position requires 8 years' experience in technology-oriented security engineering support related to hardware, software, O/S and/or processes. To be clear, this is an operational cybersecurity LCAT.

Functional Responsibility: Duties may include but are not limited to: network security design engineering, intrusion detection/prevention engineering design and/or execution, environment risk assessments, network security architectural engineering, operating system security and operational security process engineering; providing direction to intermediate and junior staff on the tasks needed to implement security objectives.

Minimum Education: A Bachelor's degree with a curriculum or major field of study which is closely related to the work to be automated, and/or in a computer science, information system, cybersecurity, engineering, or a mathematics intensive discipline. A Master's Degree (in subjects described above) may be substituted for 2 years’ experience. A PhD (in subjects described above) may be substituted for 5 years’

PAGE 19 OF 100 1333ND23QNB770030

experience. OR no degree and 12 years of directly applicable experience coupled with an industry or vendor technical certification (e.g., CISSP, CIPA, MCSE, MCSA, CCNA, CCNE, SCSA, etc.)

Security Engineer 3

Minimum/General Experience:

This position requires 12 years' experience in technology-oriented security engineering support related to hardware, software, O/S and/or processes. To be clear, this is an operational cybersecurity LCAT.

Functional Responsibility: Duties may include but are not limited to: network security design engineering, intrusion detection/prevention engineering execution, environment risk assessments, network security architectural engineering, operating system security and operational security process engineering;

providing direction to junior staff on the tasks needed to implement security objectives.

Minimum Education: A Bachelor's degree with a curriculum or major field of study which is closely related to the work to be automated, and/or in a computer science, information system, cybersecurity, engineering, or a mathematics intensive discipline. A Master's Degree (in subjects described above) may be substituted for 2 years’ experience. A PhD (in subjects described above) may be substituted for 5 years’ experience. OR no degree and 16 years of directly applicable experience coupled with and industry or vendor technical certification (e.g., CISSP, CIPA, MCSE, MCSA, CCNA, CCNE, SCSA, etc.).

Systems Administrator 1

Minimum/General Experience:

This position requires 3 years' experience in a large enterprise environment involving network architecture and management.

Functional Responsibility: Duties may include but are not limited to: Perform functions to plan, monitor, maintain, update, and provide security and support for NIST’s servers.