MAS - Lunarline, Inc. - GS35F0392X

FSS Price List, MAS Page 1 of 43 GS‐35F‐0392X

GENERAL SERVICES ADMINISTRATION

FEDERAL SUPPLY SERVICE

Authorized Federal Supply Schedule Price List

On‐line access to contract ordering information, terms and conditions, up‐to‐date pricing, and the option to create an electronic delivery order is available through GSA Advantage!®, a menu‐driven database system.

The internet address for GSA Advantage!® is GSAAdvantage.gov.

Multiple Award Schedule FSC Group 70 Information Technology Equipment, Software, and Services

Contract Number GS‐35F‐0392X

Contract Period May 18, 2011 – May 17, 2026

Current through Modification Mod A837 effective October 27, 2021

For more information on ordering from Federal Supply Schedules, click on the FSS Schedules button at www.fss.gsa.gov.

Contractor Lunarline, Inc.

3300 Fairfax Drive, Suite 212 Arlington, VA 22201

P: 571‐481‐9300 F: 703-890-1594

E: lunarline.contracts@motorolasolutions.com www.lunarline.com

Contract Administration Source Lawrence Brooks

E: lawrence.brooks@motorolasolutions.com

Business Size: Large Business http://www.fss.gsa.gov/ mailto:lunarline.contracts@motorolasolutions.com http://www.lunarline.com/ mailto:lunarline.accounting@motorolasolutions.com

FSS Price List, MAS Page 2 of 43 GS‐35F‐0392X

TABLE OF CONTENTS

CUSTOMER INFORMATION

PRICE LIST

SIN 511210 IT SOFTWARE LICENSE DESCRIPTIONS

SIN 54151HACS LABOR CATEGORY DESCRIPTIONS

SIN 54151S LABOR CATEGORY DESCRIPTIONS

SIN 611420 COURSE DESCRIPTIONS

TERMS AND CONDITIONS APPLICABALE TO SIN 511210

TERMS AND CONDITIONS APPLICABLE TO SIN 54151HACS

TERMS AND CONDITIONS APPLICABLE TO SIN 54151S

TERMS AND CONDITIONS APPLICABLE TO SIN 611420

FSS Price List, MAS Page 3 of 43 GS‐35F‐0392X

CUSTOMER INFORMATION

1a Table of Awarded Special Item Numbers (SINs):

SIN SIN Title 511210 Software Licenses 54151HACS Highly Adaptive Cybersecurity Services (HACS) 54151S Information Technology Professional Services 611420 Information Technology Training

1b Lowest Priced Model Number and Price for Each SIN:

SIN Item Description Price 511210 1 LunarGravity $ 986.42 54151HACS 4 Cyber Analyst Jr 103.68 54151S 17 Help Desk Analyst 49.11 611420 1 Cybersecurity Fundamentals Workshop 4 Day 2,021.05

1c Hourly Rates, Job Titles, Experience, Functional Responsibility, and Education List: Refer to Price List

2 Maximum Order*: $500,000/Order

*If the best value selection places your order over the Maximum Order identified in this catalog/price list, you have an opportunity to obtain a better schedule contract price. Before placing your order, contact the aforementioned contactor for a better price. The contractor may (1) offer a new price for this requirement (2) offer the lowest price available under this contract or (3) decline the order. A delivery order that exceeds the maximum order may be placed under the schedule contract in accordance with FAR 8.404.

3 Minimum Order: $100

4 Geographic Coverage:

• SINs 511210 and 611420: International

• SINs 54151HACS and 54151S: Domestic within the 48 contiguous states, Alaska, Hawaii, Puerto Rico, Washington, DC, and U.S. Territories

5 Points of Production: Professional and subscription services only

6 Discount from List Prices: Prices shown are Net

7 Quantity/Volume Discounts:

• SIN 511210:

o 2‐4 licenses receive a 5% quantity discount o 5+ licenses receive a 20% quantity discount

• SIN 54151HACS: 1% for orders at or exceeding $500,000

• SIN 54151S:

o 1% for orders at or exceeding $100,000; and o 3% for orders at or exceeding $500,000

• SIN 611420: None

8 Prompt Payment Terms: 1% net 20 days for SINs 54151S and 611420. SINs 54151HACS and 511210 are net 30 days.

Information for Ordering Offices: Prompt payment terms cannot be negotiated out of the contractual agreement in exchange for other concessions.

FSS Price List, MAS Page 4 of 43 GS‐35F‐0392X

9a Government purchase cards are accepted at or below the micro‐purchase threshold

9b Government purchase cards are not accepted above the micro‐purchase threshold

10 Foreign Items: None

11a Time of Delivery: 30 days ARO

11b Expedited Delivery: Items available for expedited delivery are noted in this price list

11c Overnight and 2‐day Delivery: Not available

11d Urgent Requirements: Agencies can contact the Contractor’s Representative to effect a faster delivery

12 F.O.B. Point(s): Destination

Note: All travel required in the performance of this contract and orders placed hereunder must comply with the Federal Travel Regulations (FTR) or Joint Travel Regulations (JTR), as applicable, in effect on the date(s) the travel is performed. Established Federal Government per diem rates will apply to all contractor travel. Contractors cannot use GSA city pair contracts. The contractor shall not add the Industrial Funding Fee onto travel costs. (FOB Terms noted above)

13a Ordering Address: Lunarline, Inc., 3300 Fairfax Dr, Ste 212, Arlington, VA 22201

13b Ordering Procedures: For supplies and services, the ordering procedures, information on Blanket Purchase Agreements (BPAs) are found in Federal Acquisition Regulation (FAR) 8.405‐3

14 Payment Address: Lunarline, Inc., c/o Delta Risk 106 S. St. Mary's St. Ste 601 San Antonio, TX 78205

15 Warranty Provision: Not applicable

16 Export Packing Charges: Not applicable

17 Terms and Conditions of Government Purchase Card Acceptance: Accepted at or below the micro‐ purchase level

18 Terms and Conditions of Rental, Maintenance, and Repair: Not applicable

19 Terms and Conditions of Installation: Not applicable

20 Terms and Conditions of Repair Parts: Not applicable

20a Terms and Conditions for Any Other Services: Not applicable

21 List of Service and Distribution Points: Not applicable

22 List of Participating Dealers: Not applicable

23 Preventative maintenance: Not applicable

24a Special Attributes: Not applicable

24b Section 508 Compliance for Electronic and Information Technology (EIT) Supplies and Services:

• SIN 511510: All offerings are 508 compliant in accordance with § 508 of the Rehabilitation Act of 1973, as amended (29 U.S.C. 794d), FAR 39.2, and the EIT Accessibility Standards (36 CFR 1194).

Section 508 compliance information on the supplies and services in this contract are available at the following address: lunarline.com. The EIT standard can be found at: Section508.gov/.

• SINs 54151HACS, 54151S, and 611420: Not applicable

25 DUNS: 14‐7181569

26 Lunarline has an active registration in the System for Award Management (SAM) database

FSS Price List, MAS Page 5 of 43 GS‐35F‐0392X

SIN 54151HACS

No. Labor Category Rate/Hr

1 Cyber Program Manager $204.03 2 Cyber Penetration Tester – Senior 149.62 3 Cyber Penetration Tester – Intermediate 124.69 4 Cyber Analyst – Senior 174.56 5 Cyber Analyst – Intermediate 134.66 6 Cyber Analyst – Junior 103.68 7 Cyber Engineer – Senior 179.55 8 Cyber Engineer – Intermediate 139.65 9 Cyber Engineer – Junior 113.55 10 Cyber Subject Matter Expert 194.84

SIN 611420

No. Course Title # of Students

Rate/ Course

Cybersecurity Fundamentals Workshop 4 Day 1 $2,021.05

Cyber Tools and Analysis Workshop 4 Day 1 2,021.05

3 Recovery Planning Practitioner COOP 5 Day 1 2,425.25

PRICE LIST

SIN 511520

No. Software Name Annual Fee/License 1 LunarGravity $986.42

SIN 54151S

No. Labor Category Rate/Hr No. Labor Category Rate/Hr 1 Analyst (Business/System/Data) $129.24 26 Information Security Engineer ‐ Junior $ 55.15 2 Application Analyst 70.82 27 Information System Security Specialist 153.52 3 Application Developer ‐ Senior 117.22 28 Internet Developer ‐ Senior 123.23 4 Application Developer ‐ Mid 93.17 29 Internet Developer ‐ Mid 97.18 5 Application Developer ‐ Junior 74.54 30 IT Subject Matter Expert 143.26 6 Application Integration Specialist 139.26 31 IT Technologist 99.15 7 Certification Specialist ‐ Senior 94.07 32 Network Engineer ‐ Senior 133.24 8 Certification Specialist ‐ Mid 78.38 33 Network Engineer ‐ Mid 97.18 9 Certification Specialist ‐ Junior 62.70 34 Network Security Specialist 139.26 10 Computer System Security Specialist 86.49 35 Penetration Tester ‐ Senior 90.66 11 Configuration Management Specialist 89.16 36 Penetration Tester ‐ Junior 75.55 12 Database Administrator 133.24 37 Program Manager 139.26 13 Database Designer 129.24 38 Project Control Analyst 137.75 14 Enterprise Architect ‐ Senior 135.98 39 Project Manager 139.26 15 Enterprise Architect ‐ Mid 113.32 40 Quality Assurance Specialist 129.24 16 Enterprise Architect ‐ Junior 97.27 41 R&D Specialist 147.76 17 Help Desk Analyst 49.11 42 Security Subject Matter Expert 147.76 18 Information Assurance Engineer ‐ Senior 129.24 43 Software Tester 93.17 19 Information Assurance Engineer ‐ Mid 80.27 44 System Administrator 133.24 20 Information Assurance Engineer ‐ Junior 73.66 45 System/Software Architect 134.25 21 Information Security Analyst ‐ Senior 133.24 46 Technical Instruction Specialist 89.16 22 Information Security Analyst ‐ Mid 92.59 47 Technical Writer ‐ Mid 68.56 23 Information Security Analyst ‐ Junior 51.94 48 Technical Writer ‐ Junior 57.13 24 Information Security Engineer ‐ Senior 149.27 49 Web Specialist 139.26 25 Information Security Engineer ‐ Mid 68.94

FSS Price List, MAS Page 6 of 43 GS‐35F‐0392X

SIN 511210 IT SOFTWARE LICENSE DESCRIPTIONS

1 Software Name: LunarGravity Description and Equipment Compatibility: LunarGravity allows users to convert files from a vulnerability scanner into a consolidated Excel workbook that is easily readable by humans. Users will have access to spreadsheets with information detailing each instance of every vulnerability discovered. Worksheets providing additional information, including the risk level posed by each vulnerability and a list of hosts where a given vulnerability was found, are supplied with the software. LunarGravity outputs reports in formats to support the assessment and authorization (A&A) process, the Federal Risk and Authorization Management Program (FedRAMP), risk assessment, Plan of Action & Milestones (POA&M), and Department of Defense (DoD). The software supports any vulnerability or risk assessment and authorization or penetration test. LunarGravity runs on Windows 10.X and above, and supports multiple static and dynamic code, vulnerability and penetration testing tools by the following vendors in the accompany formats:

Vendor Scanner Name Supported Exports Application Security, Inc. AppDetective Pro *.xml Application Security, Inc. DbProtect *.xml BD Worldwide BD Protect *.xml Center for Internet Security Router Audit Tool *.html or *.txt DISA STIG Viewer (Up to Version 2.4) *.ckl eEye Retina and Retina CS *.xml Hewlett Packard Fortify SCA *.fpl, *.fvdl, *.xml Insecurity.com LLC WebInspect *.xml McAfee Vulnerability Manager *.xml Netsparker Ltd. Netsparker *.htm, *.html PortSwigger Burp Suite *.xml Rapid7 Metasploit (Limited) *.xml Rapid7 Nexpose (Version 2.0) *.xml Tenable Nessus *.nessus

Technical Support:

• Hot Line Technical Support Number: 571‐481‐9300

• Email Technical Support: Lunarline.corporatesupport@motorolasolutions.com

• Hours of Operation: 9 AM to 5 PM Eastern Standard Time (EST)

License Type: Term, defined as a limited period of one (1) year. Licenses are not owned in perpetuity; users revoke the right to use the software license upon the end of the term period.

LunarGravity does not support open standard interoperability.

Software Maintenance: Each term license includes bug and defect fixes via updates and email technical support for one (1) year from the date of purchase.

SIN 54151HACS LABOR CATEGORY DESCRIPTIONS

1 Commercial Job Title: Cyber Program Manager Technical Qualifications/Experience: Minimum five (5) years of experience in the IT industry, out of which at least three (3) years must be in the field of Project Management, Business Administration, Human Resources, and/or Client Relationship Management.

Functional Responsibility: Act as the central point of contact with the Contracting Officer, Contracting Officer’s Representative and Task Managers. Responsible for coordinating the management of all work performed on this contract, including subcontractors, team members, and vendors. Keep in constant touch with the project managers regarding the status of various task order projects, the issues facing the project teams and mailto:Lunarline.corporatesupport@motorolasolutions.com

FSS Price List, MAS Page 7 of 43 GS‐35F‐0392X effectively and regularly updates the client representatives. Also facilitate the information, which the team requires from the client to effectively implement various Task Order Projects and if necessary, escalates the burning issues to the client representatives and contract officer. All the Task Order Project Managers typically report to the Program Manager for that contract.

Minimum Education: Undergraduate degree from an accredited institution or equivalent technical qualification. Seven (7) years of relevant experience is acceptable in lieu of a degree.

2 Commercial Job Title: Cyber Penetration Tester – Senior Technical Qualifications/Experience: Minimum five (5) years of experience in security assessments, three (3) of which consist of performing penetration testing using both automated tools and manual methods to exploit identified weaknesses and vulnerabilities in information systems.

Functional Responsibility: Responsible for performing penetration testing on organizational information systems using both automated tools and manual methods to exploit identified weaknesses in applications, systems, and networks. Conducts extensive research and capitalizes on experience and skills to craft new exploitations, stress systems to achieve non‐standard responses, and breech authorization boundaries.

Mimics threat adversary capabilities, tactics, techniques, and procedures to attain information disclosure, root/administrative access, or other exploitation success. Conducts technical and physical social engineering activities to obtain unauthorized information disclosure while identifying human error and weakness in an organization. Responsible for adhering to the developed test plan, rules of engagement, conducting system testing as per pre‐defined test cases, complete test reporting documentation, and recommending actions and strategies to mitigate known vulnerabilities and exploitation.

Minimum Education: Undergraduate degree from an accredited institution or equivalent technical qualification. Seven (7) years of relevant experience is acceptable in lieu of a degree.

3 Commercial Job Title: Cyber Penetration Tester – Intermediate Technical Qualifications/Experience:

Minimum three (3) years of experience in security assessments, two (2) of which consist of performing penetration testing using both automated tools and manual methods to exploit identified weaknesses and vulnerabilities in information systems.

Functional Responsibility: Responsible for performing penetration testing on organizational information systems using both automated tools and manual methods to exploit identified weaknesses in applications, systems, and networks. Conducts extensive research and capitalizes on experience and skills to craft new exploitations, stress systems to achieve non‐standard responses, and breech authorization boundaries.

Mimics threat adversary capabilities, tactics, techniques, and procedures to attain information disclosure, root/administrative access, or other exploitation success. Conducts technical and physical social engineering activities to obtain unauthorized information disclosure while identifying human error and weakness in an organization. Responsible for adhering to the developed test plan, rules of engagement, conducting system testing as per pre‐defined test cases, complete test reporting documentation, and recommending actions and strategies to mitigate known vulnerabilities and exploitation.

Minimum Education: Undergraduate degree from an accredited institution or equivalent technical qualification. Five (5) years of relevant experience is acceptable in lieu of a degree.

4 Commercial Job Title: Cyber Analyst – Senior Technical Qualifications/Experience: Minimum five (5) years of experience in defining, implementing and maintaining the information security for businesses, business units, divisions, organizations, agencies, etc. Must have strong knowledge of encryption, intrusion detection/prevention, network security, and ethical hacking/penetration testing.

Functional Responsibility: Responsible for ensuring that the organization’s networks, as well as information, is secure. Employ continuous monitoring of intrusion detection/prevention and other perimeter defense devices.

Ensure appropriate data encryption (in transit and at rest) levels based on protection needs of targeted data.

FSS Price List, MAS Page 8 of 43 GS‐35F‐0392X

Maintain awareness of system/network security posture to include vulnerability scanning to facilitate application of quick and effective corrective measures, while ensuring configuration management requirements are met. Provide technical knowledge and information assurance analysis support, to include security assessment of applications; operating systems; internet‐facing interfaces, intranet and other interconnections. Strong knowledge of best practices associated with as well as appropriate authoritative guidance for physical security; network security; security risk assessments; critical infrastructure protection;

continuity and contingency planning; emergency preparedness; security awareness and training. Provide analysis of existing systems vulnerabilities including possible intrusion/entry points, resource manipulation, denial of service, and/or destruction of resources. Provide technical support and analysis to document organizational information protection framework, and support policy and procedures preparation and implementation.

Minimum Education: Undergraduate degree from an accredited institution or equivalent technical qualification. Seven (7) years of relevant experience is acceptable in lieu of a degree.

5 Commercial Job Title: Cyber Analyst – Intermediate Technical Qualifications/Experience: Minimum three

(3) years of experience in defining, implementing and maintaining the information security for businesses, business units, divisions, organizations, agencies, etc. Must have strong knowledge of encryption, intrusion detection/prevention, network security, and ethical hacking/penetration testing.

Functional Responsibility: Responsible for ensuring that the organization’s networks, as well as information, is secure. Employ continuous monitoring of intrusion detection/prevention and other perimeter defense devices.

Ensure appropriate data encryption (in transit and at rest) levels based on protection needs of targeted data.

Maintain awareness of system/network security posture to include vulnerability scanning to facilitate application of quick and effective corrective measures, while ensuring configuration management requirements are met. Provide technical knowledge and information assurance analysis support, to include security assessment of applications; operating systems; internet‐facing interfaces, intranet and other interconnections. Strong knowledge of best practices associated with as well as appropriate authoritative guidance for physical security; network security; security risk assessments; critical infrastructure protection;

continuity and contingency planning; emergency preparedness; security awareness and training. Provide analysis of existing systems vulnerabilities including possible intrusion/entry points, resource manipulation, denial of service, and/or destruction of resources. Provide technical support and analysis to document organizational information protection framework, and support policy and procedures preparation and implementation.

Minimum Education: Undergraduate degree from an accredited institution or equivalent technical qualification. Five (5) years of relevant experience is acceptable in lieu of a degree.

6 Commercial Job Title: Cyber Analyst – Junior Technical Qualifications/Experience: Minimum zero to one (0‐1) year of experience in defining, implementing and maintaining the information security for businesses, business units, divisions, organizations, agencies, etc. Must have strong knowledge of encryption, intrusion detection/prevention, network security, and ethical hacking/penetration testing.

Functional Responsibility: Responsible for ensuring that the organization’s networks, as well as information, is secure. Employ continuous monitoring of intrusion detection/prevention and other perimeter defense devices.

Ensure appropriate data encryption (in transit and at rest) levels based on protection needs of targeted data.

Maintain awareness of system/network security posture to include vulnerability scanning to facilitate application of quick and effective corrective measures, while ensuring configuration management requirements are met. Provide technical knowledge and information assurance analysis support, to include security assessment of applications; operating systems; internet‐facing interfaces, intranet and other interconnections. Strong knowledge of best practices associated with as well as appropriate authoritative guidance for physical security; network security; security risk assessments; critical infrastructure protection;

FSS Price List, MAS Page 9 of 43 GS‐35F‐0392X continuity and contingency planning; emergency preparedness; security awareness and training. Provide analysis of existing systems vulnerabilities including possible intrusion/entry points, resource manipulation, denial of service, and/or destruction of resources. Provide technical support and analysis to document organizational information protection framework, and support policy and procedures preparation and implementation.

Minimum Education: Undergraduate degree from an accredited institution or equivalent technical qualification. Three (3) years of relevant experience is acceptable in lieu of a degree.

7 Commercial Job Title: Cyber Engineer – Senior Technical Qualifications/Experience: Minimum five (5) years of experience in defining, implementing and maintaining the information security of firms. Must have a strong know‐how of encryption, intrusion detection, network security and ethical hacking.

Functional Responsibility: Responsible for defining/ameliorating the IS Policy, including the Disaster Recovery Policy for client organizations. Also responsible for ensuring that the organization networks as well as information is secure at all times by constantly monitoring intrusion detection, data encryption, and taking quick and effective corrective measures in the event of a breach. Provide technical knowledge and analysis of information assurance, to include applications; operating systems; Internet and Intranet; physical security;

networks; risk assessment; critical infrastructure continuity and contingency planning; emergency preparedness; security awareness and training. Provide analysis of existing system's vulnerability to possible intrusions, resource manipulation, resource denial and destruction of resources. Provide technical support and analysis to document organizational information protection framework, and supports policy and procedures preparation and implementation. Monitors firewall logs. Analyze the client system security, conducts gap analysis, determines enterprise information security standards, and develops and implements information security standards and procedures. Ensure that all information systems are functional and secure.

Minimum Education: Undergraduate degree from an accredited institution or equivalent technical qualification. Seven (7) years of relevant experience is acceptable in lieu of a degree.

8 Commercial Job Title: Cyber Engineer – Intermediate Technical Qualifications/Experience: Minimum three (3) years of experience in defining, implementing and maintaining the information security of firms.

Must have a strong know‐how of encryption, intrusion detection, network security and ethical hacking.

Functional Responsibility: Responsible for defining/ameliorating the IS Policy, including the Disaster Recovery Policy for client organizations. Also responsible for ensuring that the organization networks as well as information is secure at all times by constantly monitoring intrusion detection, data encryption, and taking quick and effective corrective measures in the event of a breach. Provide technical knowledge and analysis of information assurance, to include applications; operating systems; Internet and Intranet; physical security;

networks; risk assessment; critical infrastructure continuity and contingency planning; emergency preparedness; security awareness and training. Provide analysis of existing system's vulnerability to possible intrusions, resource manipulation, resource denial and destruction of resources. Provide technical support and analysis to document organizational information protection framework, and supports policy and procedures preparation and implementation. Monitors firewall logs. Analyze the client system security, conduct gap analysis, determine enterprise information security standards, and develop and implement information security standards and procedures. Ensure that all information systems are functional and secure.

Minimum Education: Undergraduate degree from an accredited institution or equivalent technical qualification. Five (5) years of relevant experience is acceptable in lieu of a degree.

9 Commercial Job Title: Cyber Engineer – Junior Technical Qualifications/Experience: Minimum zero to one (0‐1) year of experience in defining, implementing and maintaining the information security of firms. Must have a strong know‐how of encryption, intrusion detection, network security and ethical hacking.

FSS Price List, MAS Page 10 of 43 GS‐35F‐0392X

Functional Responsibility: Responsible for defining/ameliorating the IS Policy, including Disaster Recovery Policy for client organizations. Also responsible for ensuring that the organization networks as well as information is secure at all times by constantly monitoring intrusion detection, data encryption, and taking quick and effective corrective measures in the event of a breach. Provide technical knowledge and analysis of information assurance, to include applications; operating systems; Internet and Intranet; physical security;

networks; risk assessment; critical infrastructure continuity and contingency planning; emergency preparedness; security awareness and training. Provide analysis of existing system's vulnerability to possible intrusions, resource manipulation, resource denial and destruction of resources. Provide technical support and analysis to document organizational information protection framework, and supports policy and procedures preparation and implementation. Monitors firewall logs. Provide system administration of Network, Web, and/or communications systems, including Local Area Network (LAN), Wide Area Network (WAN). Maintain servers, creates monitoring reports and logs and ensure functionality of links.

Minimum Education: Undergraduate degree from an accredited institution or equivalent technical qualification. Three (3) years of relevant experience is acceptable in lieu of a degree.

10 Commercial Job Title Cyber Subject Matter Expert: Technical Qualifications/Experience: Minimum six (6) years of experience in defining, implementing and maintaining the information security of firms. Must have strong know‐how of encryption, intrusion detection, network security and ethical hacking.

Functional Responsibility: Responsible for defining the IS Policy of an organization. Also responsible for ensuring that the organization networks as well as information is secure at all times, constantly monitoring the intrusion detection, data encryption, and for taking quick and effective corrective measures in the event of a breach. Provide technical knowledge and analysis of information assurance, to include applications; operating systems; Internet and Intranet; physical security; networks; risk assessment; critical infrastructure continuity and contingency planning; emergency preparedness; security awareness and training. Provide analysis of existing system's vulnerability to possible intrusions, resource manipulation, resource denial and destruction of resources. Provide technical support and analysis to document organizational information protection framework, and supports policy and procedures preparation and implementation. Monitor firewall logs.

Provide system administration of Network, Web, and/or communications systems, including Local Area Network (LAN), Wide Area Network (WAN). Maintain servers, creates monitoring reports and logs and ensure functionality of links. Establish backups and monitor site security.

Minimum Education: Undergraduate degree from an accredited institution or equivalent technical qualification. Eight (8) years of relevant experience is acceptable in lieu of a degree.

SIN 54151S LABOR CATEGORY DESCRIPTIONS

1 Commercial Job Title: Analyst (Business/System/Data) Technical Qualifications/Experience: Overall six

(6) years of experience in analyzing the business processes, data and information systems of organizations, mentoring other Business/System Analysts, coordinating and supporting the development, enhancement, and maintenance of products and services applicable to multiple lines of a customer's business using information technology.

Functional Responsibility: Perform information technology analysis activities to support business decisions relative to the development, enhancement, and maintenance of products and services applicable to multiple lines of business. Responsible for technically analyzing business processes, data and/or information systems, including analysis of system architecture and associated hardware/software, e.g., functional implementation of each application, database(s), platform(s), etc. Data analysis, including reliability, integrity, etc., associated processes, business logic, etc., is also included. Anticipate and identify user problems and needs. Recommend business solutions based on analysis activities, customer requirements, industry trends, and best

FSS Price List, MAS Page 11 of 43 GS‐35F‐0392X practices/authoritative guidance. Lead, plan, schedule, and control complex projects and activities with customers, support groups, and vendors on concurrent projects. Apply extensive business and industry knowledge to develop project specifications. Advise on methods to improve business processes and remove non‐value added activities. Coordinate and participate in proposals, feasibility studies, implementations, and new business development. Lead training activities for knowledge transfer, and build relationships with multiple customer/business levels.

Minimum Education: Bachelor’s degree in Computer Sciences, Information Systems, Business, Mathematics or Engineering (Electrical, Computer, Mechanical) or related degree. Candidates having a bachelor’s degree in disciplines other than those listed above may be considered if and only if they have at least eight (8) years of experience in analyzing the business processes and information systems of organizations.

2 Commercial Job Title: Application Analyst Technical Qualifications/Experience: Overall three (3) years of experience in analyzing the software applications for their functionality, monitoring performance, identifying bottlenecks and recommending measures to improve application performance.

Functional Responsibility: Work with Software Design and Development groups to analyze software applications for functionality, performance and integration with other systems. Monitor application performance, identify bottlenecks and recommend measures to improve application performance.

Minimum Education: Bachelor’s degree in Computer Sciences, Information Systems, Business, Mathematics or Engineering (Electrical, Computer, Mechanical) or related degree. Candidates having a bachelor’s degree in disciplines other than those listed above may also be considered if and only if they have at least four (4) years of experience in analyzing the software applications of organizations.

3 Commercial Job Title: Application Developer – Senior Technical Qualifications/Experience: Minimum six

(6) years of experience in supervising and mentoring other Application Developers in the performance of detailed analysis, building software development tools and producing highly technical programs such as cross‐ compilers and communications software operating systems. Must be proficient in programming in the relevant programming language/s, e.g., Java, XML, .Net, Web Methods, C, C++, Perl, COBOL, Oracle PL/SQL, Unix Shell scripting.

Functional Responsibility: Lead business logic and data modeling activities associated with application development. Direct the activities of programmers and analysts in the performance of detailed analysis, building software development tools and in producing highly technical programs such as cross‐compilers and communications software operating systems. Responsible for measuring software performance through project design, implementation and evaluation of results. Supervise and participate in the development of manuals and user guides for programmers and operating staff. Establish and supervise software design efforts necessary to integrate new hardware and code programs in applicable languages using standard requirements documentation, e.g., detailed flow diagrams, input/output descriptions, performance specifications, etc.

Supervise software analysis, the development of program specifications and the development of program code. Perform implementation tasks and direct the conduct of application testing to insure results. Direct and participate in the development of manuals and user guides for programmers and operating staff.

Minimum Education: Bachelor’s degree in Computer Sciences, Information Systems, Mathematics or Engineering (Electrical, Computer, Mechanical) or related field. Candidates having a bachelor’s degree in disciplines other than those listed above may also be considered if and only if they have at least eight (8) years of experience in supervising and mentoring Application Developers in the performance of detailed analysis, building software development tools, and producing highly technical programs such as cross‐compilers and communications software operating systems.

4 Commercial Job Title: Application Developer – Mid Technical Qualifications/Experience: Minimum four

(4) years of experience in independently developing and testing various mission critical applications and

FSS Price List, MAS Page 12 of 43 GS‐35F‐0392X implementation of information processing systems and applications that use current operating systems, programming languages and applications development tools, computer systems, multi‐programming technology, database management techniques, and data communications protocol. Must be skilled in programming in the relevant programming language/s (Java, XML, .Net, Web Methods, C, C++, Perl, COBOL, Oracle PL/SQL, Unix Shell scripting).

Functional Responsibility: Assist in the logic behind and the data modeling associated with application development. Perform the development and/or programming, and implementation of information processing systems and applications that use current operating systems, programming languages and applications development tools, computer systems, multi‐programming technology, database management techniques, and data communications protocol. Work independently in support of joint applications development efforts.

Responsible for writing application software, data manipulation, databases programming, testing and implementation, technical and user documentation, software conversions; environments include, but are not limited to, mainframe, mid‐range, personal computers, laptops, mobile devices, and other emerging technology platforms.

Minimum Education: Bachelor’s degree in Computer Sciences, Information Systems, Mathematics or Engineering (Electrical, Computer, Mechanical) or related field. Candidates having a bachelor’s degree in disciplines other than those listed above may also be considered if and only if they have at least six (6) years of experience in independently developing industry applications.

5 Commercial Job Title: Application Developer – Junior Technical Qualifications/Experience: Minimum two

(2) years of experience in independently developing and testing various mission critical applications and implementation of information processing systems and applications that use current operating systems, programming languages and applications development tools, computer systems, multi‐programming technology, database management techniques, and data communications protocol. Must be skilled in programming in the relevant programming language/s (Java, XML, .Net, Web Methods, C, C++, Perl, COBOL, Oracle PL/SQL, Unix Shell scripting).

Functional Responsibility: Assist in the logic behind and the data modeling associated with application development. Perform the development and/or programming, and implementation of information processing systems and applications that use current operating systems, programming languages and applications development tools, computer systems, multi‐programming technology, database management techniques, and data communications protocol. Work independently in support of joint applications development efforts.

Responsible for writing application software, data manipulation, databases programming, testing and implementation, technical and user documentation, software conversions; environments include, but are not limited to, mainframe, mid‐range, personal computers, laptops, mobile devices, and other emerging technology platforms.

Minimum Education: Bachelor’s degree in Computer Sciences, Information Systems, Mathematics or Engineering (Electrical, Computer, Mechanical) or related field. Candidates having a bachelor’s degree in disciplines other than those listed above may also be considered if and only if they have at least six (6) years of experience in independently developing industry applications.

6 Commercial Job Title: Application Integration Specialist Technical Qualifications/Experience: Minimum six (6) years of technical experience with the integration of multi‐vendor software and hardware components in Client/Server, LAN and WAN environments. Requires competence in software and hardware implementation, analysis techniques, concepts and methods. Has the proven ability to work well independently with minimal supervision.

Functional Responsibility: Provide computer systems expertise relative to automated information system(s) integration with existing infrastructure, architecture, and/or other systems. Perform systems analysis, alternative solutions, and design of technical and business solutions. Under minimal guidance and supervision, FSS Price List, MAS Page 13 of 43 GS‐35F‐0392X conduct project feasibility and implementation studies, including the development project plans, testing methodologies/plans, and overarching project management documentation. Develop and implement data conversion routines. Perform/direct system testing to insure satisfactory results within requirements. Duties require knowledge of data sources, data flow, system interactions, computer equipment, including hardware and software applications. Provide technical support to the project team. Establish and maintain development, testing environments and configuration management processes and structures. Serve as primary point‐of‐ contact for third party software and hardware vendors.

Minimum Education: Bachelor’s degree in Computer Science, Information Systems, Engineering, Business, Economics, or Mathematics. Candidates having a bachelor’s degree in disciplines other than those listed above may also be considered if they have at least eight (8) years of experience with the integration of multi‐vendor software and hardware components in Client/Server, LAN and WAN environments, software and hardware implementation, analysis techniques, concepts and methods.

7 Commercial Job Title: Certification Specialist – Senior Technical Qualifications/Experience: Overall six (6) years of experience in assessing, analyzing, evaluating, validating, certifying and accrediting, etc., various businesses, systems, software development processes, etc., relative to one or more compliance standard, security controls/requirements, etc.

Functional Responsibility: Responsible for evaluating various businesses, systems, software development processes, etc., validating against standard requirements and/or compliance controls, e.g., ISO, CMMI, HIPAA/HITECH, NIST, DIACAP, DODIIS/DCID, CNSS, ICD 503, etc. Responsible for assisting in the scoping effort relative to the target compliance activity. Assist in the development of the compliance methodology based on experience as well as best practices associated with target compliance activity. Document tasks to justify compliance, bring target into compliance (both technically and non), and present compliance package for approval by clients and/or approval chains as is appropriate. Analyze and evaluate the security requirements/controls in an organization, validating them with standard security guidelines and policies, and certifying that all information systems are compliant with standard security guidelines.

Minimum Education: Bachelor’s degree in Computer Sciences, Information Systems, Mathematics, Engineering or related field. Candidates having a bachelor’s degree in disciplines other than those listed above may be considered if and only if they have at least four (4) years of relevant experience.

8 Commercial Job Title: Certification Specialist – Mid Technical Qualifications/Experience: Overall three (3) years of experience in assessing, analyzing, evaluating, validating, certifying and accrediting, etc., various businesses, systems, software development processes, etc., relative to one or more compliance standard, security controls/requirements, etc.

Functional Responsibility: Responsible for evaluating various businesses, systems, software development processes, etc., validating against standard requirements and/or compliance controls, e.g., ISO, CMMI, HIPAA/HITECH, NIST, DIACAP, DODIIS/DCID, CNSS, ICD 503, etc. Responsible for assisting in the scoping effort relative to the target compliance activity. Assist in the development of the compliance methodology based on experience as well as best practices associated with target compliance activity. Document tasks to justify compliance, bring target into compliance (both technically and non), and present compliance package for approval by clients and/or approval chains as is appropriate. Analyze and evaluate the security requirements/controls in an organization, validating them with standard security guidelines and policies, and certifying that all information systems are compliant with standard security guidelines.

Minimum Education: Bachelor’s degree in Computer Sciences, Information Systems, Mathematics, Engineering or related field. Candidates having a bachelor’s degree in disciplines other than those listed above may be considered if and only if they have at least four (4) years of relevant experience.

FSS Price List, MAS Page 14 of 43 GS‐35F‐0392X

9 Commercial Job Title: Certification Specialist – Junior Technical Qualifications/Experience: Overall one

(1) year of experience in assessing, analyzing, evaluating, validating, certifying and accrediting, etc., various businesses, systems, software development processes, etc., relative to one or more compliance standard, security controls/requirements, etc.

Functional Responsibility: Responsible for evaluating various businesses, systems, software development processes, etc., validating against standard requirements and/or compliance controls, e.g., ISO, CMMI, HIPAA/HITECH, NIST, DIACAP, DODIIS/DCID, CNSS, ICD 503, etc. Responsible for assisting in the scoping effort relative to the target compliance activity. Assist in the development of the compliance methodology based on experience as well as best practices associated with target compliance activity. Document tasks to justify compliance, bring target into compliance (both technically and non), and present compliance package for approval by clients and/or approval chains as is appropriate. Analyze and evaluate the security requirements/controls in an organization, validating them with standard security guidelines and policies, and certifying that all information systems are compliant with standard security guidelines.

Minimum Education: Bachelor’s degree in Computer Sciences, Information Systems, Mathematics, Engineering or related degree. Candidates having a bachelor’s degree in disciplines other than those listed above may be considered if and only if they have at least four (4) years of relevant experience.

10 Commercial Job Title: Computer System Security Specialist Technical Qualifications/Experience:

Minimum three (3) years of experience in defining, implementing and maintaining the information security for businesses, business units, divisions, organizations, agencies, etc. Must have strong knowledge of encryption, intrusion detection/prevention, network security, and ethical hacking/penetration testing.

Functional Responsibility: Responsible for ensuring that the organization’s networks, as well as information, is secure. Employ continuous monitoring of intrusion detection/prevention and other perimeter defense devices.

Ensure appropriate data encryption (in transit and at rest) levels based on protection needs of targeted data.

Maintain awareness of system/network security posture to include vulnerability scanning to facilitate application of quick and effective corrective measures, while ensuring configuration management requirements are met. Provide technical knowledge and information assurance analysis support, to include security assessment of applications; operating systems; internet‐facing interfaces, intranet and other interconnections. Strong knowledge of best practices associated with as well as appropriate authoritative guidance for physical security; network security; security risk assessments; critical infrastructure protection;

continuity and contingency planning; emergency preparedness; security awareness and training. Provide analysis of existing systems vulnerabilities including possible intrusion/entry points, resource manipulation, denial of service, and/or destruction of resources. Provide technical support and analysis to document organizational information protection framework, and support policy and procedures preparation and implementation.

Minimum Education: Bachelor’s degree in Computer Sciences, Information Systems, Mathematics, Engineering, or related field. Candidates having a bachelor’s degree in disciplines other than those listed above may also be considered if and only if they have at least five (5) years of experience in analyzing, designing, implementing, integrating and maintaining computer/information systems security postures.

11 Commercial Job Title: Configuration Management Specialist Technical Qualifications/Experience:

Minimum four (4) years of general IT experience, with three (3) years of specialized experience in Configuration Management, Version Control, Process Improvement, Activity/Process Modeling. Must be familiar with one or more of the Configuration Tools like Clearcase, PVCS, Endevor, CMVC, Visual SourceSafe, or other CM tool.

Functional Responsibility: Support the development and maintenance of configuration management plans, processes, procedures, etc., and scheduling, and documenting configuration management reviews. Shall be capable of monitoring the configuration control process and ensuring that procedures comply with client

FSS Price List, MAS Page 15 of 43 GS‐35F‐0392X and/or applicable specifications. Requires minimal supervision; however overarching strategic direction must be provided. Knowledgeable of software development techniques, change control processes, configuration audits and client/government regulations, manuals, technical orders, standards and industry publications related to configuration/data management required to perform the task.

Minimum Education: Bachelor’s degree in Computer Sciences, Information Systems, Mathematics or Engineering (Electrical, Computer, Mechanical) or related field. Candidates having a bachelor’s degree in disciplines other than those listed above may also be considered if and only if they have at least five (5) years of experience in performing configuration management and version control tasks.

12 Commercial Job Title: Database Administrator Technical Qualifications/Experience: Five (5) years of general experience including two (2) years specialized experience. Serves in a supervisory manner, has responsibility for junior staff tasking/development, also serves as a management interface. Two of the five years of experience must include providing direction to personnel performing database administration tasks and technical expertise in using at least one of the following DBMS products relevant to the specific task: IMS, DB2, ADABAS, ORACLE, SYBASE, SQL Server, INGRES or similar.

Functional Responsibility: Responsible for building/installing databases on servers/clients. Maintain and create users, nodes, instances, databases, tablespaces, containers, bufferpools and logs. Migrate data between databases. Extract data from one system into flat files and then load into the database without constraints.

Write stored procedures, and triggers to populate data from non‐constraints tables to normalized tables with constraints. Tune the database manager configuration, database configuration parameters like bufferpools, shared memory variables, I/O variables, application heap, database heap size, logs and sort area to increase performance of the system. Analyze the execution path of the query to determine the cost, indexing and cardinality.