MAS - Sona Networks LLC - GS35F0251Y

GENERAL SERVICES ADMINISTRATION AUTHORIZED

MULTIPLE AWARD SCHEDULE PRICE LIST

(PREVIOUSLY CALLED: FEDERAL SUPPLY INFORMATION TECHNOLOGY SCHEDULE 70)

FSC/PSC CLASS 0000, D302, D399, AND D305

CONTRACT NUMBER: GS-35F-0251Y

PERIOD COVERED BY CONTRACT: MARCH 12, 2017 – MARCH 11, 2027

On-line access to contract ordering information, terms and conditions, up-to- date pricing, and the option to create an electronic delivery order are available through GSA Advantage!, a menu-driven database system. The INTERNET address for GSA Advantage! is: GSAAdvantage.gov.

Contractor:

SONA Networks, LLC An SBA certified HubZone, Small Disadvantaged Business UEI CC8FNPJULJP5, CAGE 4LYS7, CMMI Level 3 Services & Development, ISO 9001:2015, ISO 20000-1:2018, ISO 27001:2013 218 E Lexington Street, Suite 202 Baltimore, MD 21202 410-329-1811 (Phone); 410-329-1165 (Fax) www.sonanetworks.com (Web)

Contract administration source:

Harry Hans, President hhans@sonanetworks.com

Business size: Small Business, HubZone

Multiple Award Schedule Pricelist (Previously FSS IT Schedule 70 Pricelist)

Table of Contents Page ii

TABLE OF CONTENTS

Page

PROCUREMENT SENSITIVE

[Solicitation Number and Title]

Customer Information General Information SONA Networks, LLC has been awarded the following Special Item (SIN) Numbers:

SIN 54151S – Information Technology (IT) Professional Services (formerly SIN 132-51: IT Professional Services) – Item Descriptions and Rates can be found in Sections 3.

SIN 54151HACS - Highly Adaptive Cybersecurity Services (HACS) including Subcategories: High Value Asset (HVA) Assessments, Risk and Vulnerability Assessments (RVA), Cyber Hunt, Incident Response, and Penetration Testing (formerly SIN 132-45: Highly Adaptive Cybersecurity Services.) - Item Descriptions and Rates can be found in Sections 4.

SIN ANCILLARY - Ancillary Supplies and Services (formerly SIN 132-100: Ancillary Supplies and/or Services) – Item Descriptions and Rates can be found in Sections 6.

Lowest Priced Model Number and Lowest Priced Unit: This is not applicable; SONA Networks is selling labor categories on this schedule.

Maximum Order The Maximum Order value for SINs 54151HACS and SIN 54151Sis $500,000. The Maximum Order value for SIN ANCILLARY is $250,000.

Minimum Order The minimum dollar value of an order for delivery to one destination is $100.00.

Geographic Coverage (Delivery Area) Global Point (s) of Production (City, County, and State or Foreign Country) This section is not applicable.

Discount from List Prices, or Statement of Net Price Prices shown are NET Prices; Basic Discounts have been deducted. Further discounts (if any) will be negotiated at the Task Order level.

Quantity Discounts No quantity discounts are offered.

Prompt Payment Terms Prompt payment is 0 % - 30 days, from receipt of invoice or date of acceptance, whichever is later.

Government Purchase Cards:

SONA Networks will accept Government purchase cards at or below the micro purchase threshold.

Foreign Items This section is not applicable.

Time of Delivery SONA Networks shall deliver or perform services in accordance with the terms negotiated in an agency’s order.

Expedited Delivery: Consult with Contractor Overnight/2-Day Delivery: Consult with Contractor Urgent Requirements: Consult with Contractor FOB Point (s) Destination Ordering

Baltimore, MD 21202 Ordering Procedures: Ordering activities shall use the ordering procedures of Federal Acquisition Regulation (FAR) 8.405 when placing an order or establishing a BPA for supplies or services.

These procedures apply to all schedules.

FAR 8.405-1 Ordering procedures for supplies, and services not requiring a statement of work.

FAR 8.405-2 Ordering procedures for services requiring a statement of work.

Payment

Baltimore, MD 21202 Warranty Provisions Contractor’s Standard Warranty Export Packing Charges Not applicable Terms and Conditions of Government Purchase Card Acceptance Contact SONA Networks for terms and conditions of Government Purchase Card acceptance.

Terms and Conditions of Rental, Maintenance, and Repair Not applicable Terms and Conditions of Installation Not applicable Terms and Conditions of Repair Parts Not applicable Terms and Conditions for Any Other Services Not applicable List of Service and Distribution Points Not applicable List of Participating Dealers Not applicable Preventive Maintenance Not applicable Environmental Attributes, e.g., recycled content, energy efficiency, and/or reduced pollutants Not applicable Section 508 Compliance Contact SONA Networks for compliance information. The EIT standard can be found at: www.Section508.gov/.

DUNS Number 787980213 SAM Registration SONA Networks is registered in the System for Award Management (SAM) database.

Terms and Conditions Applicable to Information Technology (IT) Professional Services SIN 54151S (formerly SIN 132-51) Scope

Performance Incentives

Order

Performance of Services

Stop-Work Order (FAR 52.242-15) (AUG 1989)

(a) The Contracting Officer may, at any time, by written order to the Contractor, require the Contractor to stop all, or any part, of the work called for by this contract for a period of 90 days after the order is delivered to the Contractor, and for any further period to which the parties may agree. The order shall be specifically identified as a stop-work order issued under this clause. Upon receipt of the order, the Contractor shall immediately comply with its terms and take all reasonable steps to minimize the incurrence of costs allocable to the work covered by the order during the period of work stoppage. Within a period of 90 days after a stop-work is delivered to the Contractor, or within any extension of that period to which the parties shall have agreed, the Contracting Officer shall either-

(1) Cancel the stop-work order; or

(2) Terminate the work covered by the order as provided in the Default, or the Termination for Convenience of the Government, clause of this contract.

(b) If a stop-work order issued under this clause is canceled or the period of the order or any extension thereof expires, the Contractor shall resume work. The Contracting Officer shall make an equitable adjustment in the delivery schedule or contract price, or both, and the contract shall be modified, in writing, accordingly, if-

(1) The stop-work order results in an increase in the time required for, or in the Contractor's cost properly allocable to, the performance of any part of this contract; and

(2) The Contractor asserts its right to the adjustment within 30 days after the end of the period of work stoppage; provided, that, if the Contracting Officer decides the facts justify the action, the Contracting Officer may receive and act upon the claim submitted at any time before final payment under this contract.

Inspection of Services The Inspection of Services–Fixed Price (AUG 1996) (Deviation – May 2003) clause at FAR 52.246-4 applies to firm-fixed price orders placed under this contract. The Inspection–Time-and-Materials and Labor-Hour (JAN 1986) (Deviation – May 2003) clause at FAR 52.246-6 applies to time-and-materials and labor-hour orders placed under this contract.

Responsibilities of the Contractor The Contractor shall comply with all laws, ordinances, and regulations (Federal, State, City, or otherwise) covering work of this character. If the end product of a task order is software, then FAR 52.227-14 (Deviation – May 2003) Rights in Data – General, may apply.

Responsibilities of the Ordering Activity Subject to security regulations, the ordering activity shall permit Contractor access to all facilities necessary to perform the requisite IT Services.

Independent Contractor All IT Services performed by the Contractor under the terms of this contract shall be as an independent Contractor, and not as an agent or employee of the ordering activity.

Organizational Conflicts of Interest

a. Definitions.

“Contractor” means the person, firm, unincorporated association, joint venture, partnership, or corporation that is a party to this contract.

“Contractor and its affiliates” and “Contractor or its affiliates” refers to the Contractor, its chief executives, directors, officers, subsidiaries, affiliates, subcontractors at any tier, and consultants and any joint venture involving the Contractor, any entity into or with which the Contractor subsequently merges or affiliates, or any other successor or assignee of the Contractor.

An “Organizational conflict of interest” exists when the nature of the work to be performed under a proposed ordering activity contract, without some restriction on ordering activities by the Contractor and its affiliates, may either (i) result in an unfair competitive advantage to the Contractor or its affiliates or (ii) impair the Contractor’s or its affiliates’ objectivity in performing contract work.

b. To avoid an organizational or financial conflict of interest and to avoid prejudicing the best interests of the ordering activity, ordering activities may place restrictions on the Contractors, its affiliates, chief executives, directors, subsidiaries and subcontractors at any tier when placing orders against schedule contracts. Such restrictions shall be consistent with FAR 9.505 and shall be designed to avoid, neutralize, or mitigate organizational conflicts of interest that might otherwise exist in situations related to individual orders placed against the schedule contract. Examples of situations, which may require restrictions, are provided at FAR 9.508.

Invoices The Contractor, upon completion of the work ordered, shall submit invoices for IT services. Progress payments may be authorized by the ordering activity on individual orders if appropriate. Progress payments shall be based upon completion of defined milestones or interim products. Invoices shall be submitted monthly for recurring services performed during the preceding month.

Payments For firm-fixed price orders the ordering activity shall pay the Contractor, upon submission of proper invoices or vouchers, the prices stipulated in this contract for service rendered and accepted. Progress payments shall be made only when authorized by the order. For time-and-materials orders, the Payments under Time-and-Materials and Labor-Hour Contracts at FAR 52.212-4 (MAR 2009) (ALTERNATE I – OCT 2008) (DEVIATION I – FEB 2007) applies to time-and-materials orders placed under this contract. For labor-hour orders, the Payment under Time-and-Materials and Labor-Hour Contracts at FAR 52.212-4 (MAR 2009) (ALTERNATE I – OCT 2008) (DEVIATION I – FEB 2007) applies to labor-hour orders placed under this contract. 52.216-31(Feb 2007) Time-and-Materials/Labor-Hour Proposal Requirements—Commercial Item Acquisition. As prescribed in 16.601(e)(3), insert the following provision:

(1) The offeror;

(2) Subcontractors; and/or

(3) Divisions, subsidiaries, or affiliates of the offeror under a common control.

Resumes Resumes shall be provided to the GSA Contracting Officer or the user ordering activity upon request.

Incidental Support Costs Incidental support costs are available outside the scope of this contract. The costs will be negotiated separately with the ordering activity in accordance with the guidelines set forth in the FAR.

Approval of Subcontract The ordering activity may require that the Contractor receive, from the ordering activity's Contracting Officer, written consent before placing any subcontract for furnishing any of the work called for in a task order.

SONA Networks, LLC GSA Labor Categories Description and Rates IT Professional Services SIN 54151S (formerly SIN 132-51) SONA Networks is pleased to offer quality IT Services. Each labor category is considered "professional" not subject to the Service Contract Act.

This section presents descriptions of service offerings by labor categories for SIN 54151S IT Services. When determining the qualifications of an individual to fill one of the positions offered, substitutions for the education and experience requirements may be made as shown below.

The minimum education and experience will be met when the educational equivalencies in the tables below are considered.

Additional educational achievements in excess of requirements can be substituted for experience requirements:

Required Education

Actual Education Obtained Additional Years of Experience Credited the SONA Employee

Additional experience in excess of requirements can be substituted for educational requirements:

Actual Education

Required Education Additional Years of Experience Needed for Educational Requirements Equivalency

Following price list is for the 1st year of the contract. SONA Networks will increase its labor rates by 3.5% each year following the first year of the contract.

Description of Labor Categories

1. System Programmer

Minimum/General Experience: Requires a total of at least 4 years experience in Information Systems Design.

Analyzes functional business applications and design specifications for functional areas such as finance, accounting, personnel, manpower, logistics, and contracts. Develops block diagrams and logic flowcharts. Translates detailed design into computer software. Tests, debugs, and refines the computer software to produce the required product. Prepares required documentation, including both program-level and user-level documentation. Enhances software to reduce operating time or improve efficiency. Provides technical direction to programmers as required to ensure program deadlines are met.

Functional Responsibility: At least two (2) years of experience as an application programmer on large-scale DOITS, knowledge of computer equipment, and ability to develop complex software to satisfy design objectives.

Minimum Education: A Bachelor's Degree from an accredited college or university with a major in Computer Science, Information Systems, Engineering, Business, or other related scientific or technical discipline or three (3) years of equivalent experience in a related field. A Master's Degree is preferred. A Master’s Degree in one of the above disciplines equals one year specialized and two years general experience.

2. Project Control Specialist

Minimum/General Experience: Must have three (3) years of experience working with monitoring systems. Familiar with manpower and resource planning, preparing financial reports and presentations, and cost reporting Contract guidelines.

Monitors financial and/or administrative aspects of assigned Contracts and deliverables. Tracks and validates all client financial information, establishes and maintains master Contract files, prepares and monitors status of all deliverables and tracks the value of Contracts. Uses automated systems to track deliverables, financial transactions, and management information.

Functional Responsibility: Preparation and analysis of financial statements, development of project schedules, using cost-accounting and labor-reporting systems, working knowledge of Contract and subcontract management. Proficient in the use of spreadsheets and project management tools.

Minimum Education: A Bachelor's Degree from an accredited college or university.

3. Senior Applications Developer

Minimum/General Experience: At least seven (7) years of IT and business/industry work experience.

Provides design recommendations based on long-term IT organization strategy. Develops enterprise level application and custom integration solutions including major enhancements and interfaces, functions and features. Uses a variety of platforms to provide automated systems applications to customers. Provides expertise regarding the integration of applications across the business. Determines specifications, then plans, designs, and develops the most complex and business critical software solutions, utilizing appropriate software engineering processes – either individually or in concert with a project team. Will assist in the most difficult support problems.

Develops programming and development standards and procedures as well as programming architectures for code reuse. Has in-depth knowledge of state-of-the art programming languages and object-oriented approach in designing, coding, testing and debugging programs. Understands and consistently applies the attributes and processes of current application development methodologies. Researches and maintains knowledge in emerging technologies and possible application to the business. Viewed both internally and externally as a technical expert and critical technical resource across multiple disciplines. Acts as an internal consultant, advocate, mentor and change agent.

Functional Responsibility: At least three (3) years as Technical expert in IT organization. Coaches and mentors more junior technical staff. Provides technical input into the most complex and high impact IT decisions. Accountable for the most complex enterprise-wide applications and issues, translating highly complex concepts for peers and customers.

Minimum Education: Preference for a Bachelor’s or Master’s Degree in Computer Science, Information Systems, or other related field or equivalent work experience.

4. Business Systems Analyst

Minimum/General Experience: At least eight (8) years experience in business process re-engineering.

Develops business requirements and business processes re-engineering methodologies. Solves application and process related problems by creating detail process and system design specifications; and works with other areas across the business units to support a total solution approach. Communicates business requirements for reports and applications development. Facilitates collaboration within and across business units and across IT functions. Resolves problems and improves business units’ technical environments.

Functional Responsibility: At least five (5) years of experience in reengineering large scale business processes.

Minimum Education: Bachelor’s Degree from an accredited college or university in Business, Human Resources Management or a related field. An MBA or MPA is preferred.

5. Senior Database Specialist

Minimum/General Experience: Must have six (6) years experience in DOITS systems analysis and programming.

Must be capable of providing highly technical expertise and support in the use of DOITS. Must be able to evaluate and recommend available DOITS products to support validated user requirements. Defines file organization, indexing methods, and security procedures for specific user applications. Develops, implements, and maintains database back-up and recovery procedures for the processing environments, and ensures that data integrity, security, and recoverability are built into the DOITS applications.

Functional Responsibility: At least three (3) years of experience in using current DOITS technologies, application design utilizing various database management systems and experience with DOITS internals.

Minimum Education: A Bachelor's Degree from an accredited college or university with a major in Computer Science, Information Systems, Engineering, Business, or other related scientific or technical discipline or three (3) years of equivalent experience in a related field. A Master’s Degree in one of the above disciplines equals one year specialized and two years general experience.

6. Financial Analyst

Minimum/General Experience: Must have five (5) years of financial management experience.

Must be able to clearly define government financial business practices and Electronic Commerce/Electronic Data Interchange (EC/EDI) opportunities, and incorporate the defined processes into an automated solution that includes relational databases and distributed systems for integration into the government financial business system. Identifies potential problems and solutions through analysis identifying recommended solutions. Must be able to work with functional specialists, automation specialists, Master Contractors, vendors, and customers to effectively automate the customer’s requirements into an automated application. Acts as a focal point to coordinate all disciplines in the recommended solution. Must be able to communicate with both IT and financial oriented individuals to document the flow, recommend opportunities, impact recommendations, and serve as the liaison between the financial specialist and automation specialist that do not have both disciplines. Must be able to apply state-of-the-art applications that will effectively automate financial applications in the most effective manner while adhering to the established Accounting Principals and Practices.

Functional Responsibility: At least three (3) years of experience in financial management with demonstrated ability in analyzing, designing, and developing automated applications for unique business practices in a fee-for-service environment.

Minimum Education: A Bachelor's Degree from an accredited college or university with a major in Finance, Business, or other related technical discipline. A Master's Degree is preferred. A Master’s Degree in one of the above disciplines equals one year specialized and two years general experience.

7. Master Network Specialist

Minimum/General Experience: Twelve years experience in a computer-related field.

Performs a variety of network management functions in support of MIS services related to the operation, performance, or availability of data communications networks. Modifies command language programs, network start up files, assigns/re-assigns network device logical, analyzes network performance and recommends adjustments to wide variety of complex network management functions with responsibility for overall performance and availability of networks. LAN/WAN consultant skilled in network analysis, integration and tuning. Experience with cable/LAN meters, protocol analyzers, Simple Network Management Protocol (SNMP) and Remote Monitoring (RMON) based software products. Knowledge of Ethernet, FDDI and high speed WANs, routers, bridges, and switches. Analyze client LANs/WANs, isolate source of problems, and recommend reconfiguration and implementation of new network hardware to increase performance. Working knowledge of network operating systems. Conducts load balancing efforts to achieve optimum device utilization and network performance. Manages network Email functions. Establishes mailboxes and monitors mail performance on the network. Coordinates with communications engineering to resolve hardware problems. Works with customer and operations staff in scheduling preventative and emergency maintenance activities.

Functional Responsibility: Ten years experience in one or more of the following areas: data communications engineering, data communications hardware or software analysis, network administration or management, or have data communication equipment installation and maintenance. Knowledge of cable including FDDI, FOIRL, and 10Base T. Particularly desirable is experience working with IBM's SNA with knowledge of the MVS operating system and SNA protocols.

Minimum Education and Other Requirements: A Bachelor's degree from an accredited college or university with a major in Computer Science, Information Technology, Engineering, or a related discipline. If applicable, shall be certified as network engineer for the specific network operating system as defined in the Government task request. The certification criteria are determined by the network operating system vendor. An additional year of specialized experience may be substituted for the required education.

8. Program Manager

Minimum/General Experience: At least twelve (12) years of experience in program or project management.

The Program Manager is the contractor’s manager for the Contract, and serves as the single point of contact for the Master Contractor with the Government regarding the Contract. Performs overall management for Contract support operations. Organizes, directs, and coordinates the planning and production of all Contract activities, projects and support activities, including those of subcontractors. Oversees the development of or develops work breakdown structures, charts, tables, graphs, major milestone calendars and diagrams to assist in analyzing problems and making recommendations. Demonstrates excellent written and verbal communications skills. Establishes and alters corporate management structure to direct effective and efficient Contract support activities.

Functional Responsibility: At least eight (8) years of experience in supervision or oversight of IT related programs or projects.

Minimum Education: Bachelor’s Degree from an accredited college or university in Engineering, Computer Science, Information Systems, Business or other related discipline. Master’s degree and/or project management certification is preferred.

9. Master Quality Assurance Specialist

Minimum/General Experience: At least eight (8) years information systems quality assurance experience.

Provides quality management for information systems using the standard methodologies, techniques, and metrics for assuring product quality and key activities in quality management. Establish capable processes, monitoring and control of critical processes and product mechanisms for feedback of performance, implementation of an effective root cause analysis and corrective action system, and continuous process improvement. Provides strategic quality plans in targeted areas of the organization. Provides QA strategies to ensure continuous production of products consistent with established industry standards, government regulations and customer requirements. Develops and implements life cycle and QA methodologies and educates, and implements QA metrics.

Functional Responsibility: At least five (5) years experience working with statistical methods and quality standards. Must have good QA/process knowledge and possess superior written and verbal communication skills.

Minimum Education: Bachelor’s Degree from an accredited college or university in Engineering, Computer Science, Information Systems or other related discipline. A Master’s degree preferred.

10. Web Designer

Minimum/General Experience: At least five (5) years of IT work experience.

Responsible for analyzing assigned specifications, planning, designing and developing solutions, utilizing appropriate Internet/Intranet/Extranet architecture processes supporting a wide range of business process. Provides appropriate documentation for object design decisions, estimating assumptions, applets and performance metrics – as required by organization architecture process standards, or as assigned. Responsible for minimizing the issues between the client and the server applications and for the overall setup and design of the Internet and web server architecture. Impact and complexity of this job increases if organization is utilizing Internet solutions (vs. only Intranet), especially those with significant business impact (e.g., e-business).

Functional Responsibility: Has worked independently or as a part of a team under general supervision and coached more junior technical staff. Technical expert in IT organization. Provides input into highly complex and high impacting decisions as it relates to area of expertise.

Minimum Education: Preference for a Bachelor’s Degree in Computer Science, Information Systems, or other related field or equivalent work experience.

11. Senior Application Architect

Minimum/General Experience: At least ten (10) years of experience planning, designing, building, and implementing IT application systems. Must have led or been chief architect in a major IT applications implementation effort. Must have a strong background in software engineering principles and techniques.

Manages major projects that involve providing professional support services and/or the integration, implementation and transition of large, complex systems. Provides design and development of e-government solutions, and is responsible for technical design and implementation of the architecture. Designs, develops and maintains infrastructure and backend applications. Provides expertise on defining the role of broadband and wireless applications. Provides definition of current Government architecture blueprints. Provides expertise with web servers, gateways, and application servers and content management systems. Provides experience in web application technologies and middleware solutions. Researches new technologies and products for their applicability to business processes. Must be able to compare various solutions and determine the most suitable. Ensures that development efforts are well planned and in agreement with standards.

Functional Responsibility: At least six (6) years of experience in designing medium to large-scale sites and management of at least five Internet projects.

Minimum Education: Bachelor’s Degree from an accredited college or university in Engineering, Computer Science, Mathematics or other related scientific or technical discipline. Master’s degree preferred.

12. Subject Matter Expert

Minimum/General Experience: Must have seven (7) years of experience.

Defines the problems and analyzes and develops plans and requirements in the subject matter area for moderately complex-to-complex systems. Coordinates and manages the preparation of analysis, evaluations, and recommendations for proper implementation of programs and systems specifications including, but not limited to: information technology, health care, education, public safety, social services, human resources, transportation, and environment.

Functional Responsibility: At least five (5) years of combined new and related older technical experience in the IT field directly related to the required area of expertise.

Minimum Education: A Bachelor's Degree from an accredited college or university with a major in Computer Science, Information Systems, Engineering, Business, or other related scientific or technical discipline. A Master's Degree is preferred. A Master’s Degree in one of the above disciplines equals one year specialized and two years general experience.

13. Senior Subject Matter Expert

Minimum/General Experience: At least twelve (12) years of relevant industry experience in the discipline is required.

The area of expertise may be related to a specific discipline required by the Government agency including, but not limited to: information technology, health care, education, public safety, social services, human resources, transportation, and environment. Requires expertise in the formulation of specifications and in the execution of technical initiatives in vertical areas. Defines requirements, performs analyses, and develops plans and requirements for systems.

Functional Responsibility: At least ten (10) years of combined new and related older technical experience in the IT field directly related to the required area of expertise.

Minimum Education: Bachelor’s Degree from an accredited college or university in the specific discipline required by the Government. A Master’s Degree or Ph.D. Degree is preferred.

14. Senior Program Manager I

Minimum/General Experience: At least fifteen (15) years of experience in program or project management.

The Senior Program Manager I is the contractor’s manager for the Contract, and serves as the single point of contact for the Master Contractor with the Government regarding the Contract. Performs overall management for Contract support operations. Organizes, directs, and coordinates the planning and production of all Contract activities, projects and support activities, including those of subcontractors. Oversees the development of or develops work breakdown structures, charts, tables, graphs, major milestone calendars and diagrams to assist in analyzing problems and making recommendations. Demonstrates excellent written and verbal communications skills. Establishes and alters corporate management structure to direct effective and efficient Contract support activities.

Functional Responsibility: At least ten (10) years of experience in supervision or oversight of IT related programs or projects.

Minimum Education: Bachelor’s Degree from an accredited college or university in Engineering, Computer Science, Information Systems, Business or other related discipline. Project Management Professional (PMP) certification is required. Master’s degree is preferred.

15. Enterprise Architect I

Minimum/General Experience: At least seven (7) years of relevant industry experience in planning, designing, building, and implementing IT application systems. Must have a strong background in software engineering principles and techniques.

Supports major projects that involve providing professional support services and/or the integration, implementation and transition of large, complex systems. Provides design and development of e-government solutions, and is responsible for technical design and implementation of the architecture. Designs, develops and maintains infrastructure and backend applications. Provides expertise on defining the role of broadband and wireless applications. Provides definition of current Government architecture blueprints. Researches new technologies and products for their applicability to business processes. Must be able to compare various solutions and determine the most suitable.

Functional Responsibility: At least three (3) years of experience in designing medium to large-scale sites.

Minimum Education: Bachelor’s Degree from an accredited college or university in Engineering, Computer Science, Mathematics or other related scientific or technical discipline. Master’s degree preferred.

16. Enterprise Architect II

Minimum/General Experience: At least ten (10) years of relevant industry experience in planning, designing, building, and implementing IT application systems. Must have a strong background in software engineering principles and techniques.

Manages major projects that involve providing professional support services and/or the integration, implementation and transition of large, complex systems. Provides design and development of e-government solutions, and is responsible for technical design and implementation of the architecture. Designs, develops and maintains infrastructure and backend applications. Provides expertise on defining the role of broadband and wireless applications. Provides definition of current Government architecture blueprints. Provides expertise with web servers, gateways, and application servers and content management systems. Provides experience in web application technologies and middleware solutions. Researches new technologies and products for their applicability to business processes. Must be able to compare various solutions and determine the most suitable. Ensures that development efforts are well planned and in agreement with standards.

Functional Responsibility: At least six (6) years of experience in designing medium to large-scale sites.

Minimum Education: Bachelor’s Degree from an accredited college or university in Engineering, Computer Science, Mathematics or other related scientific or technical discipline. Master’s degree preferred.

17. Enterprise Architect III

Minimum/General Experience: At least fifteen (15) years of relevant industry experience in planning, designing, building, and implementing IT application systems. Must have led or been chief architect in a major IT applications implementation effort. Must have a strong background in software engineering principles and techniques.

Manages major projects that involve providing professional support services and/or the integration, implementation and transition of large, complex systems. Provides design and development of e-government solutions, and is responsible for technical design and implementation of the architecture. Designs, develops and maintains infrastructure and backend applications. Provides expertise on defining the role of broadband and wireless applications. Provides definition of current Government architecture blueprints. Provides expertise with web servers, gateways, and application servers and content management systems. Provides experience in web application technologies and middleware solutions. Researches new technologies and products for their applicability to business processes. Must be able to compare various solutions and determine the most suitable. Ensures that development efforts are well planned and in agreement with standards.

Functional Responsibility: At least eight (8) years of experience in designing medium to large-scale sites.

Minimum Education: Bachelor’s Degree from an accredited college or university in Engineering, Computer Science, Mathematics or other related scientific or technical discipline. Master’s degree preferred.

Price List SONA Networks, LLC GSA Price List SIN 54151S

Terms and Conditions Applicable to Highly Adaptive Cybersecurity Services (HACS) - SIN 54151HACS (FORMERLY SIN 132-45) Scope 54151HACS Includes a wide range of fields such as, the seven-step Risk Management Framework services, information assurance, virus detection, network management, situational awareness and incident response, secure web hosting, and backup, security services and, Security Operations Center (SOC) services. HACS vendors are cataloged under the five subcategories of High Value Asset Assessments: Risk and Vulnerability Assessments, Cyber Hunt, Incident Response, and Penetration Testing.

This SIN includes proactive and reactive cybersecurity services that improve customer enterprise-level security posture. Services to identify and protect a customer's information resources, detect and respond to cybersecurity events or incidents, and recover capabilities or services impaired by any incidents that emerge. It encompasses a wide range of fields that include, but are not limited to, Risk Management Framework (RMF) services, information assurance (IA), virus detection, network management, situational awareness and incident response, secure web hosting, and backup and security services.

The seven-step RMF includes preparation, information security categorization; control selection, implementation, and assessment; system and common control authorizations; and continuous monitoring. RMF activities may also include Information Security Continuous Monitoring Assessment (ISCMA), which evaluate organization wide ISCM implementations, and also Federal Incident Response Evaluations (FIREs), which assess an organization's incident management functions. It also includes Security Operations Center (SOC) services. The SOC scope includes services such as: 24x7x365 monitoring and analysis, traffic analysis, incident response and coordination, penetration testing, anti-virus management, intrusion detection and prevention, and information sharing.

SIN 54151HACS contain the following subcategories:

1. High Value Asset (HVA) Assessments include Risk and Vulnerability Assessment (RVA) which assesses threats and vulnerabilities, determines deviations from acceptable configurations, enterprise or local policy, assesses the level of risk, and develops and/or recommends appropriate mitigation countermeasures in operational and non-operational situations. The services offered in the RVA sub-category include Network Mapping, Vulnerability Scanning, Phishing Assessment, Wireless Assessment, Web Application Assessment, Operating System Security Assessment (OSSA), Database Assessment, and Penetration Testing. Security Architecture Review (SAR) evaluates a subset of the agency's HVA security posture to determine whether the agency has properly architected its cybersecurity solutions and ensures that agency leadership fully understands the risks inherent in the implemented cybersecurity solution. The SAR process utilizes in-person interviews, documentation reviews, and leading practice evaluations of the HVA environment and supporting systems. SAR provides a holistic analysis of how an HVA’s individual security components integrate and operate, including how data is protected during operations. Systems Security Engineering (SSE) identifies security vulnerabilities and minimizes or contains risks associated with these vulnerabilities spanning the Systems Development Life Cycle. SSE focuses on the following security areas: perimeter security, network security, endpoint security, application security, physical security, and data security, among others.

2. Risk and Vulnerability Assessment (RVA) assesses threats and vulnerabilities, determines deviations from acceptable configurations, enterprise or local policy, assesses the level of risk, and develops and/or recommends appropriate mitigation countermeasures in operational and non-operational situations. The services offered in the RVA sub-category include Network Mapping, Vulnerability Scanning, Phishing Assessment, Wireless Assessment, Web Application Assessment, Operating System Security Assessment (OSSA), Database Assessment, and Penetration Testing.

3. Penetration Testing is security testing in which assessors mimic real-world attacks to identify methods for circumventing the security features of an application, system, or network.

4. Incident Response services help organizations impacted by a cybersecurity compromise determine the extent of the incident, remove the adversary from their systems, and restore their networks to a more secure state.

5. Cyber Hunt activities respond to crises or urgent situations within the pertinent domain to mitigate immediate and potential threats. Cyber Hunts start with the premise that threat actors known to target some organizations in a specific industry or with specific systems are likely to also target other organizations in the same industry or with the same systems.

NOTE: Subject to Cooperative Purchasing Services offered on SIN 54151HACS shall be in accordance with the following laws and standards when applicable to the specific task orders, including but not limited to:

· Federal Acquisition Regulation (FAR) Part 52.204-21

· OMB Memorandum M-17-12 - Preparing for and Responding to a Breach of Personally Identifiable Information (PII)

· OMB Memorandum M- 19-03 - Strengthening the Cybersecurity of Federal Agencies by enhancing the High Value Asset Program

· 2017 Report to the President on Federal IT Modernization

· The Cybersecurity National Action Plan (CNAP)

· NIST SP 800-14 - Generally Accepted Principles and Practices for Securing Information Technology Systems

· NIST SP 800-27A - Engineering Principles for Information Technology Security (A Baseline for Achieving Security)

· NIST SP 800-30 - Guide for Conducting Risk Assessments

· NIST SP 800-35 - Guide to Information Technology Security Services

· NIST SP 800-37 - Risk Management Framework for Information Systems and Organizations: A Systems Life Cycle Approach for Security and Privacy

·…