MAS - Metova Federal, LLC - GS35F242BA

Multiple Award Schedule (MAS)

FSC 70: ADP Equipment Software, Supplies, Equipment

Contract Number: GS-35F-242BA

Contract Period: 2/26/2014 – 2/25/2024

Price List through: MOD 27 effective 2/26/2019

Contractor: Metova Federal, LLC

Address: 4510 Daly Drive, Suite 300

Chantilly, VA 20151-3709 Telephone: 703-224-1000

Business Size: Large

Web Site:

https://bylight.com/metova-federal/

Contract Administration: Maureen L. Soldano

E-Mail: maureen.soldano@bylight.com

For more information on ordering from Federal Supply Schedules click on the FSS Schedules button at http://www.gsa.gov/schedules-ordering

GENERAL SERVICES ADMINISTRATION

Federal Acquisition Service

Authorized Federal Supply Schedule Price List

On-line access to contract ordering information, terms and conditions, up-to-date pricing, and the option to create an electronic delivery order is available through GSA Advantage!™, a menu-driven database system. The INTERNET address for GSA Advantage!™ is: http://www.GSAAdvantage.gov.

Contractor:

Metova Federal, LLC

Contract Number:

GS-35F-242BA

CUSTOMER INFORMATION

1a. TABLE OF AWARDED SPECIAL ITEM NUMBERS (SINS):

NAICS: 541519 Special Item No. 54151HACS – Highly Adaptive Cybersecurity Services NAICS: 611420 Special Item No. 611420 – Information Technology Training NAICS: 541519 Special Item No. 54151S - Information Technology Professional Services Special Item No. OLM – Order-Level Materials (OLM)

**Cooperative Purchasing (STLOC)

1b. LOWEST PRICED MODEL NUMBER AND PRICE FOR EACH SIN: N/A

1c. HOURLY RATES (SERVICES ONLY): See attached pricelist for details

2. Maximum order*: $5,000,000.00 The maximum order is $100,000 for SIN OLM *If the best value selection places your order over the Maximum Order identified in this catalog/price list, you have an opportunity to obtain a better schedule contract price. Before placing your order, contact the aforementioned contactor for a better price. The contractor may (1) offer a new price for this requirement (2) offer the lowest price available under this contract or (3) decline the order. A delivery order that exceeds the maximum order may be placed under the schedule contract in accordance with

FAR 8.404.

3. Minimum order: $100.00

4. Geographic coverage (delivery area): Continental U.S., Alaska, Hawaii, Puerto Rico

5. Point(s) of production (city, county, and State or foreign country): N/A

6. Discount from list prices or statement of net price: Prices shown are GSA net prices as shown in the attached pricelist. The negotiated discount has been applied and the IFF has been added.

7. Quantity discounts: None

8. Prompt payment terms: None

9. Foreign items (list items by country of origin): None

10a. Time of delivery: 30 Days ARO

10b. Expedited Delivery: 15 Days ARO

10c. Overnight and 2-day delivery: N/A

10d. Urgent Requirements: N/A

11. F.O.B. point: Destination Note: All travel required in the performance of this contract and orders placed hereunder must comply with the Federal Travel Regulations (FTR) or Joint Travel Regulations (JTR), as applicable, in effect on the date(s) the travel is performed. Established Federal Government per diem rates will apply to all contractor travel. Contractors cannot use GSA city pair contracts. The contractor shall not add the Industrial Funding Fee onto travel costs.

12a. Ordering address: 4510 Daly Drive, Suite 300, Chantilly, VA 20151

12b. Ordering procedures: Ordering activities shall use the ordering procedures described in Federal Acquisition Regulation 8.405-3 when placing an order or establishing a BPA for supplies or services. The ordering procedures, information on Blanket Purchase Agreements (BPA’s) and a sample BPA can be found at the GSA/FSS Schedule Homepage (fss.gsa.gov/schedules).

13. Payment address: 4510 Daly Drive, Suite 300, Chantilly, VA 20151

14. Warranty provision: Standard Commercial

15. Export packing charges: N/A

16. Terms and conditions of rental, maintenance, and repair: N/A

17. Terms and conditions of installation: N/A

18a. Terms and conditions of repair parts indicating date of parts price lists and any discounts from list prices: N/A

18b. Terms and conditions for any other services: None

19. List of service and distribution points: N/A

20. List of participating dealers: N/A

21. Preventive maintenance: N/A

22a. Special attributes such as environmental attributes (e.g., recycled content, energy efficiency, and/or reduced pollutants): N/A

22b. SECTION 508 COMPLIANCE FOR EIT:

Section 508 compliance information on the supplies and services in this contract are available at the following website address (URL): http://www.bylight.com/.

The EIT standard can be found at: www.Section508.gov/.

23. UNIQUE ENTITY IDENTIFIER (UEI) number: CG5ELJ6ES9F4 CAGE CODE: 6EPC5

24. NOTIFICATION REGARDING REGISTRATION IN SYSTEM FOR AWARD

MANAGEMENT (SAM) DATABASE: regarding registration in SAM/Central Contractor Registration (CCR) database: Registered in SAM.gov

TERMS AND CONDITIONS APPLICABLE TO ALL

INFORMATION TECHNOLOGY SERVICES

ORGANIZATIONAL CONFLICTS OF INTEREST

a) Definitions

“Contractor” means the person, firm, unincorporated association, joint venture, partnership, or corporation that is a party to this contract.

“Contractor and its affiliates” and “Contractor or its affiliates” refers to the Contractor, its chief executives, directors, officers, subsidiaries, affiliates, subcontractors at any tier, and consultants and any joint venture involving the Contractor, any entity into or with which the Contractor subsequently merges or affiliates, or any other successor or assignee of the Contractor.

An “Organizational conflict of interest” exists when the nature of the work to be performed under a proposed ordering activity contract, without some restriction on ordering activities by the Contractor and its affiliates may either (i) result in an unfair competitive advantage to the Contractor or its affiliates or (ii) impair the Contractor’s or its affiliated’ objectivity in performing contract work.

b) To avoid an organizational or financial conflict of interest and to avoid prejudicing the best interests of the ordering activity, ordering activities may place restrictions on the Contractors, its affiliates, chief executives, directors, subsidiaries and subcontractors at any tier when placing orders against schedule contracts. Such restrictions shall be consistent with FAR 9.505 and shall be designed to avoid, neutralize, or mitigate organizational conflicts of interest that might otherwise exist in situations related to individual orders placed against the schedule contract. Example of situations, which may require restrictions, are provided in FAR 9.508.

SERVICES PERFORMED

a) All services performed by the Contractor under the terms of this contract shall be as an independent Contractor, and not as an agent or employee of the ordering activity.

b) The Contractor shall commence performance of services on the date agreed to by the Contractor and the ordering activity.

c) The Contractor agrees to render services only during normal working hours, unless otherwise agreed to by the Contractor and the ordering activity.

TRAVEL

Any Contractor travel required in the performance of services must comply with the Pub. L. 99-234 and FAR Part 31.205-46, as applicable, in effect on the date(s) the travel is performed. Established Federal Government per diem rates will apply to all Contractor travel.

WARRANTY

a) Unless otherwise specified in this contract, the Contractor’s standard commercial warranty as stated in the contract’s commercial pricelist will apply to this contract.

b) The Contractor’s commercial guarantee/warranty shall be included in the Commercial Supplier

Agreement to include the Enterprise User License Agreements or Terms of Services (TOS) agreements, if applicable.

c) Except at otherwise provided by an express or implied warranty, the Contractor will not be liable to the ordering activity for consequential damages resulting from any defect or deficiencies in accepted items.

Regulation Number Regulation Title/Comments

52.222-46 EVALUATION OF COMPENSATION FOR PROFESSIONAL EMPLOYEES (FEB 1993)

52.222-48 EXEMPTION FROM APPLICATION OF THE SERVICE CONTRACT LABOR STANDARDS TO

CONTRACTS FOR MAINTENANCE, CALIBRATION, OR REPAIR OF CERTAIN EQUIPMENT

CERTIFICATION (MAY 2014)

52.223-19 COMPLIANCE WITH ENVIRONMENTAL MANAGEMENT SYSTEMS (MAY 2011)

52.223-2 AFFIRMATIVE PROCUREMENT OF BIOBASED PRODUCTS UNDER SERVICE AND

CONSTRUCTION CONTRACTS (SEP 2013)

52.229-1 STATE AND LOCAL TAXES (APR 1984)

52.222-62 PAID SICK LEAVE UNDER EXECUTIVE ORDER 13706 (JAN 2017)

52.223-13 ACQUISITION OF EPEAT - REGISTERED IMAGING EQUIPMENT (JUN 2014)

52.223-14 ACQUISITION OF EPEAT® - REGISTERED TELEVISIONS (JUN 2014)

52.223-16 ACQUISITION OF EPEAT® - REGISTERED PERSONAL COMPUTER PRODUCTS (OCT 2015)

552.238-115 SPECIAL ORDERING PROCEDURES FOR THE ACQUISITION OF ORDER-LEVEL MATERIALS

(MAY 2019)

552.238-107 TRAFFIC RELEASE (SUPPLIES) (MAY 2019)

552.238-73 IDENTIFICATION OF ELECTRONIC OFFICE EQUIPMENT PROVIDING ACCESSIBILITY FOR THE

HANDICAPPED (MAY 2019)

552.238-86 DELIVERY SCHEDULE (MAY 2019)

552.238-89 DELIVERIES TO THE U.S. POSTAL SERVICE (MAY 2019)

552.238-90 CHARACTERISTICS OF ELECTRIC CURRENT (MAY 2019)

552.238-91 MARKING AND DOCUMENTATION REQUIREMENTS FOR SHIPPING (MAY 2019)

552.238-92 VENDOR MANAGED INVENTORY (VMI) PROGRAM (MAY 2019)

552.238-93 ORDER ACKNOWLEDGMENT (MAY 2019)

552.238-94 ACCELERATED DELIVERY REQUIREMENTS (MAY 2019)

TERMS AND CONDITIONS APPLICABLE TO HIGHLY ADAPTIVE

CYBERSECURITY SERVICES (HACS) (SIN 54151HACS)

****NOTE: Non-professional labor categories must be incidental to, and used solely to support Highly Adaptive Cybersecurity Services, and cannot be purchased separately. Further, non-professional labor categories shall be offered under SIN ANCILLARY only.

****NOTE: Labor categories under the Special Item Number 54151S Information Technology Professional Services may remain under SIN 54151S unless the labor categories are specific to the Highly Adaptive Cybersecurity Services SINs.

SCOPE

****NOTE: SUBJECT TO COOPERATIVE PURCHASING

54151HACS includes a wide range of fields such as, the seven-step Risk Management Framework services, information assurance, virus detection, network management, situational awareness and incident response, secure web hosting, and backup, security services and Security Operations Center (SOC) services. HACS vendors are cataloged under the five (5) subcategories of High Value Asset Assessments; Risk and Vulnerability Assessments; Cyber Hunt; Incident Response; and Penetration Testing.

54151HACS includes proactive and reactive cybersecurity services that improve the customer’s enterprise-level security posture. Services to identify and protect a customer’s information resources, detect and respond to cybersecurity events or incidents, and recover capabilities or services impaired by any incidents that emerge.

The scope of this category encompasses a wide range of fields that include, but are not limited to, Risk Management Framework (RMF) services, information assurance (IA), virus detection, network management, situational awareness and incident response, secure web hosting, and backup and security services.

The seven-step RMF includes preparation, information security categorization; control selection, implementation, and assessment; system and common control authorizations; and continuous monitoring. RMF activities may also include Information Security Continuous Monitoring Assessment (ISCMA) which evaluate organization-wide ISCM implementations, and also Federal Incident Response Evaluations (FIREs), which assess an organization’s incident management functions.

The scope of this category also includes Security Operations Center (SOC) services. The SOC scope includes services such as: 24x7x365 monitoring and analysis, traffic analysis, incident response and coordination, penetration testing, anti-virus management, intrusion detection and prevention, and information sharing.

HACS vendors are able to identify and protect a customer’s information resources, detect and respond to cybersecurity events or incidents, and recover capabilities or services impaired by any incidents that emerge.

SUB-CATEGORIES

High Value Asset (HVA) Assessments include Risk and Vulnerability Assessment (RVA) which assesses threats and vulnerabilities, determines deviations from acceptable configurations, enterprise or local policy, assesses the level of risk, and develops and/or recommends appropriate mitigation countermeasures in operational and non-operational situations. The services offered in the RVA sub- category include Network Mapping, Vulnerability Scanning, Phishing Assessment, Wireless Assessment, Web Application Assessment, Operating System Security Assessment (OSSA), Database Assessment, and Penetration Testing. Security Architecture Review (SAR) evaluates a subset of the agency’s HVA security posture to determine whether the agency has properly architected its cybersecurity solutions and ensures that agency leadership fully understands the risks inherent in the implemented cybersecurity solution. The SAR process utilizes in-person interviews, documentation reviews, and leading practice evaluations of the HVA environment and supporting systems. SAR provides a holistic analysis of how an HVA’s individual security components integrate and operate, including how data is protected during operations. Systems Security Engineering (SSE) identifies security vulnerabilities and minimizes or contains risks associated with these vulnerabilities spanning the Systems Development Life Cycle. SSE focuses on but is not limited to the following security areas: perimeter security, network security, endpoint security, application security, physical security, and data security.

Risk and Vulnerability Assessment (RVA) assesses threats and vulnerabilities, determines deviations from acceptable configurations, enterprise or local policy, assesses the level of risk, and develops and/or recommends appropriate mitigation countermeasures in operational and non-operational situations. The services offered in the RVA sub-category include Network Mapping, Vulnerability Scanning, Phishing Assessment, Wireless Assessment, Web Application Assessment, Operating System Security Assessment (OSSA), Database Assessment, and Penetration Testing.

Penetration Testing is security testing in which assessors mimic real-world attacks to identify methods for circumventing the security features of an application, system, or network.

Incident Response services help organizations impacted by a cybersecurity compromise determine the extent of the incident, remove the adversary from their systems, and restore their networks to a more secure state.

Cyber Hunt activities respond to crises or urgent situations within the pertinent domain to mitigate immediate and potential threats. Cyber Hunts start with the premise that threat actors known to target some organizations in a specific industry or with specific systems are likely to also target other organizations in the same industry or with the same systems.

The Contractor shall provide services at the Contractor’s facility and/or at the ordering activity location, as agreed to by the Contractor and the ordering activity.

Vendor suitability for offering services through the Highly Adaptive Cybersecurity Services (HACS) SIN must be in accordance with the following laws and standards when applicable to the specific task orders, including but not limited to:

Federal Acquisition Regulation (FAR) Part 52.204-21 OMB Memorandum M-17-12 - Preparing for and Responding to a Breach of Personally

Identifiable Information (PII) OMB Memorandum M- 19-03 - Strengthening the Cybersecurity of Federal Agencies by enhancing the High Value Asset Program 2017 Report to the President on Federal IT Modernization The Cybersecurity National Action Plan (CNAP) NIST SP 800-14 - Generally Accepted Principles and Practices for Securing Information

Technology Systems NIST SP 800-27A - Engineering Principles for Information Technology Security (A Baseline for Achieving Security) NIST SP 800-30 - Guide for Conducting Risk Assessments NIST SP 800-35 - Guide to Information Technology Security Services NIST SP 800-37 - Risk Management Framework for Information Systems and

Organizations: A Systems Life Cycle Approach for Security and Privacy NIST SP 800-39 - Managing Information Security Risk: Organization, Mission, and

Information System View NIST SP 800-44 - Guidelines on Securing Public Web Servers NIST SP 800-48 - Guide to Securing Legacy IEEE 802.11 Wireless Networks NIST SP 800-53 – Security and Privacy Controls for Federal Information Systems and

Organizations NIST SP 800-61 - Computer Security Incident Handling Guide NIST SP 800-64 - Security Considerations in the System Development Life Cycle NIST SP 800-82 - Guide to Industrial Control Systems (ICS) Security NIST SP 800-86 - Guide to Integrating Forensic Techniques into Incident Response NIST SP 800-115 - Technical Guide to Information Security Testing and Assessment NIST SP 800-128 - Guide for Security-Focused Configuration Management of Information

Systems NIST SP 800-137 - Information Security Continuous Monitoring (ISCM) for Federal

Information Systems and Organizations NIST SP 800-153 - Guidelines for Securing Wireless Local Area Networks (WLANs) NIST SP 800-160 - Systems Security Engineering: Considerations for a Multidisciplinary

Approach in the Engineering of Trustworthy Secure Systems NIST SP 800-171 - Protecting Controlled Unclassified Information in non-federal

Information Systems and Organizations

ORDER

a. Agencies may use written orders, Electronic Data Interchange (EDI) orders, Blanket Purchase Agreements, individual purchase orders, or task orders for ordering services under this contract. Blanket Purchase Agreements shall not extend beyond the end of the contract period; all services and delivery shall be made, and the contract terms and conditions shall continue in effect until the completion of the order.

b. All task orders are subject to the terms and conditions of the contract. In the event of conflict between a task order and the contract, the contract will take precedence.

INSPECTION OF SERVICES

Inspection of services is in accordance with 552.212-4 - CONTRACT TERMS AND

CONDITIONS – COMMERCIAL ITEMS (OCT 2018) (DEVIATION FEB 2018) & (ALTERNATE

I - JAN 2017) (DEVIATION – FEB 2007) for Time-and-Materials and Labor-Hour orders placed under this contract.

RESPONSIBILITIES OF THE ORDERING ACTIVITY

Subject to the ordering activity security regulations, the ordering activity shall permit Contractor access to all facilities necessary to perform the requisite Highly Adaptive Cybersecurity Services.

INVOICES

The Contractor, upon completion of the work ordered, shall submit invoices for Highly Adaptive Cybersecurity Services. Progress payments may be authorized by the ordering activity on individual orders if appropriate. Progress payments shall be based upon completion of defined milestones or interim products. Invoices shall be submitted monthly for recurring services performed during the preceding month.

RESUMES

Resumes shall be provided to the GSA Contracting Officer or the user ordering activity upon request.

APPROVAL OF SUBCONTRACTS

The ordering activity may require that the Contractor receive, from the ordering activity Contracting Officer, written consent before placing any subcontract for furnishing any of the work called for in a task order.

DESCRIPTION OF HIGHLY ADAPTIVE CYBERSECURITY SERVICES AND PRICING

a. The Contractor shall provide a description of each type of Highly Adaptive Cybersecurity Service offered under Special Item Number 54151HACS for Highly Adaptive Cybersecurity Services and it should be presented in the same manner as the Contractor sells to its commercial and other ordering activity customers. If the Contractor is proposing hourly rates, a description of all corresponding commercial job titles (labor categories) for those individuals who will perform the service should be provided.

b. Pricing for all Highly Adaptive Cybersecurity Services shall be in accordance with the Contractor’s customary commercial practices; e.g., hourly rates, minimum general experience and minimum education.

TERMS AND CONDITIONS APPLICABLE TO INFORMATION TECHNOLOGY (IT)

PROFESSIONAL SERVICES (SIN 54151S)

****NOTE: All non-professional labor categories must be incidental to, and used solely to support professional services, and cannot be purchased separately. Further, non-professional labor categories shall be offered under SIN ANCILLARY only.

SCOPE

****NOTE: SUBJECT TO COOPERATIVE PURCHASING

54151S IT Professional Services and/or labor categories for database planning and design;

system analysis, integration, and design; programming, conversion and implementation support; network services, data/records management, and testing.

ORDER

a. Agencies may use written orders, EDI orders, blanket purchase agreements, individual purchase orders, or task orders for ordering services under this contract. Blanket Purchase Agreements shall not extend beyond the end of the contract period; all services and delivery shall be made, and the contract terms and conditions shall continue in effect until the completion of the order.

b. All task orders are subject to the terms and conditions of the contract. In the event of conflict between a task order and the contract, the contract will take precedence.

INSPECTION OF SERVICES

Inspection of services is in accordance with 552.212-4 - CONTRACT TERMS AND

CONDITIONS – COMMERCIAL ITEMS (OCT 2018) (DEVIATION FEB 2018) & (ALTERNATE

I - JAN 2017) (DEVIATION – FEB 2007) for Time-and-Materials and Labor-Hour orders placed under this contract.

RESPONSIBILITIES OF THE ORDERING ACTIVITY

Subject to security regulations, the ordering activity shall permit Contractor access to all facilities necessary to perform the requisite IT Professional Services.

INVOICES

The Contractor, upon completion of the work ordered, shall submit invoices for IT Professional services. Progress payments may be authorized by the ordering activity on individual orders if appropriate. Progress payments shall be based upon completion of defined milestones or interim products. Invoices shall be submitted monthly for recurring services performed during the preceding month.

RESUMES

Resumes shall be provided to the GSA Contracting Officer or the user ordering activity upon request.

APPROVAL OF SUBCONTRACTS

The ordering activity may require that the Contractor receive, from the ordering activity's Contracting Officer, written consent before placing any subcontract for furnishing any of the work called for in a task order.

DESCRIPTION OF IT PROFESSIONAL SERVICES AND PRICING

a. The Contractor shall provide a description of each type of IT Service offered under Special Item Numbers 54151S Professional Services should be presented in the same manner as the Contractor sells to its commercial and other ordering activity customers.

If the Contractor is proposing hourly rates, a description of all corresponding commercial job titles (labor categories) for those individuals who will perform the service should be provided.

b. Pricing for all IT Professional Services shall be in accordance with the Contractor’s customary commercial practices; e.g., hourly rates, monthly rates, term rates, and/or fixed prices, minimum general experience and minimum education.

APPROVED PRICING

The rates shown below include the Industrial Funding Fee (IFF).

SIN Labor Category GSA Rate 54151HACS Cybersecurity Engineer

$56.76 54151HACS Cyber Effect Operations Planner

$76.45 54151HACS Cybersecurity Services Senior

$76.45 54151HACS Communications Engineer

$70.93 54151HACS Computer Programmer/Software Engineer

$79.42 54151HACS Cyber/Electronic Warfare Analyst Engineer

$81.91 54151HACS Database Programmer

$61.83 54151HACS Functional Area Expert

$72.33 54151HACS Information System Security Officer

$61.83 54151HACS Logistics Technician

$37.43 54151HACS Network Operations Engineer

$72.54 54151HACS Program Manager

$99.55 54151HACS Security Analyst

$37.43 54151HACS Security Analyst Engineer

$81.91 54151HACS Senior Network/Data Engineer

$70.93 54151HACS Senior Principal Engineer

$79.42 54151HACS Senior Principal Systems Engineer

$102.42 54151HACS Senior Radio Frequency Engineer

$81.36 54151HACS Senior SATCOM Engineer

$70.93 54151HACS Senior System Administrator

$74.79 54151HACS Security Auditor

$79.42 54151HACS Cybersecurity Lead

$126.90 54151HACS Software Engineer-Intermediate

$70.28 54151HACS Managed Systems Engineer Senior

$78.12

SIN Labor Category GSA Rate

54151S Senior IT Specialist $68.96 54151S Webmaster $49.82 54151S Graphics Specialist $35.40 54151S Program Coordinator IA $38.01 54151S Senior IT Systems Solution Architect $87.79 54151S Senior Applications Programmer $74.95 54151S Senior Systems Analyst $66.53 54151S Software Engineer $74.84 54151S Database Administrator $57.17 54151S System Administrator Intermediate $57.17 54151S Software Engineer Journeyman $49.89 54151S Senior Information Assurance Engineer $74.54 54151S Information Assurance Engineer $64.72 54151S Senior Systems Engineer $71.96 54151S Senior Network Engineer $77.43 54151S Technical Instructor $74.07 54151S System Administrator $61.95 54151S Senior System Administrator $78.14 54151S Programmer I $42.98 54151S Information Security Specialist $52.76 54151S Program Manager $64.96 54151S

Service Desk Technician $25.47 54151S

Help Desk Analyst $36.90 54151S

IT Support Technician I $53.79 54151S

Administrator Intermediate $51.66 54151S

DLDC Lead Senior Engineer $69.66 54151S

Designer $93.80 54151S

Developer $93.80 54151S

Digital Videographer/Photographer $40.57 54151S

Doctrine Writer $43.15 54151S

Documentation Manager $87.88

54151S GIS Technician $ 64.40

54151S Information Analyst Administrator $ 48.27

54151S IT Support Technician II $ 80.81

54151S Junior Computer Programmer $ 75.42

54151S Lead Cyberspace Operations Analyst $ 76.96

54151S Lead Developer $ 122.44

54151S Lessons Learned Analyst $ 43.15

54151S Managed Systems Engineer-Senior $ 81.62

54151S Network Administrator $ 86.89

54151S Program Manager Senior $ 104.00

54151S Program Manager Support $ 88.87

54151S Quality Assurance Specialist $ 35.98

54151S Quality Assurance Analyst-Senior $ 68.30

54151S Quality Assurance Lead $ 61.24

54151S Quality Assurance Manager $ 108.61

54151S Quality Professional Staff Intermediate $ 62.31

54151S SD2 Service Desk $ 21.88

54151S Senior Analyst $ 62.77

54151S Senior Cyber Ops Analyst DCO $ 68.88

54151S Software Engineer 2 $ 85.55

54151S Software Engineer-Intermediate $ 73.42

54151S Software Developer $ 52.06

54151S Software Development Manager $ 148.11

54151S Senior Software Engineer $ 61.24

LABOR CATEGORY DESCRIPTIONS

SIN Labor Title Functional Responsibility (Description) Minimum

Education/

Experience

54151HACS Cyber Security Engineer

Engineer, implement and monitor security measures for the protection of computer systems, networks and information. Identify and define system security requirements. Design computer security architecture and develop detailed cyber security designs.

Prepare and document standard operating procedures and protocols. Configure and troubleshoot security infrastructure devices. Develop technical solutions and new security tools to help mitigate security vulnerabilities and automate repeatable tasks.

Ensure that the company knows as much as possible, as quickly as possible about security incidents. Write comprehensive reports including assessment-based findings, outcomes and propositions for further system security enhancement.

BA/BS Degree in Computer Science or related field and two (2) years’ experience

54151HACS Cyber Effect Operations Planner

Develops cyber TTPs that advise the future operations planners on achieving Cyberspace Operations effects within the "realm of the possible" in support of operations and exercise objectives. Acts as technical liaison between capability SMEs and capability developers, capability testers, planning teams, operations support staff, and operating units during planning and operations.

BA/BS Degree and five (5) years’ experience

54151HACS Cybersecurity Services Senior

Perform threat and vulnerability assessment and provide subject matter expertise on appropriate threat mitigation. Identify intrusion activity by leveraging alert data from multiple sensors and systems and determine priority for response. Leverage threat intelligence e.g. FSISAC, NCFTA while actively monitoring critical financial services infrastructure. Assess the impact of potentially malicious traffic on company network and infrastructure. Perform in-depth analysis in support of network monitoring and incident response operations. Perform live incident response (reactive and proactive incident management) by identifying and remediating malicious applications and infrastructure components. Collaborate with other Information Security and IT team members to develop and implement innovative strategies for monitoring and preventing attacks. Develop appropriate metrics (key risk and performance indicators) to measure the monitoring program and related process.

Develop/Monitor basic IDS/IPS rules to identify and/or prevent malicious activity. Develop and test new correlation content and use cases using SIEM filters, rules, data monitors, active lists, and session lists. Conduct research of emerging security threats.

Propose additional components and techniques that could be used to proactively detect and prevent malicious activity.

BA/BS Degree and six (6) years’ experience

54151HACS Communications Engineer

Establish development plans for conventional and specialized communication equipment and systems. Support Software Development/test production sustainment, information assurance, security certification and accreditation DoD/AF development.

Support program management and technical meeting reviews.

Provide documentation development, communication support testing and qualification tests activities.

BA/BS Degree and four (4) years’ experience

54151HACS Computer

Programmer/ Software Engineer

Determines operational feasibility by evaluating analysis, problem definition, requirements, solution development, and proposed solutions. Documents and demonstrates solutions by developing documentation, flowcharts, layouts, diagrams, charts, code comments and clear code. Prepares and installs solutions by determining and designing system specifications, standards, and programming. Improves operations by conducting systems analysis; recommending changes in policies and procedures.

Obtains and licenses software by obtaining required information from vendors; recommending purchases; testing and approving products. Updates job knowledge by studying state-of-the-art development tools, programming techniques, and computing equipment; participating in educational opportunities; reading professional publications; maintaining personal networks;

participating in professional organizations.

BA/BS Degree and four (4) years’ experience

54151HACS Cyber/Electronic Warfare Analyst Engineer

Prepares and reviews documentation to include System Security Plans (SSPs), Risk Assessment Reports, Certification and Accreditation (C&A) packages, and System Requirements Traceability Matrices (SRTMs). Performing vulnerability and risk assessment analysis to support required certification and authorization. Provide Cybersecurity oversight, guidance and support to the customer in accordance with the requirements of the Army Information Assurance program.

Bachelor's Degree in Cyber Security, Engineering or IT;

Master's preferred plus one (1) year of experience

54151HACS Database Programmer

Use database theory including relational databases to design table structures and relationships, queries, macros, forms and reports;

normalize data; and use data flow and entity relationship diagrams to accomplish daily tasks. Gather requirements and design databases to support modeling, simulations, analysis, assessments, and war gaming. Facilitate the preparation and input for all data and databases used for analysis, modeling, and simulation. Prepare resulting data to facilitate analysis of model results. Establish links to prepare files containing modeling results data. Provide presentation data in various formats to the user.

Bachelor’s Degree and a minimum of five (5) years’ experience in computer information systems or a related field.

54151HACS Functional Area Expert

Responsible for defining the functional processes, the business policies and the application requirements. Leads the business rules acquisition activities as an expert.

Bachelor’s Degree and five (5) years’ experience

54151HACS Information System Security Officer

Determine enterprise information security standards. Establish, plan, and administer the overall policies, goals and procedures for the information security function. Manage the information security efforts. Coordinate and track information technology and security related audits while providing guidance, evaluation, and advocacy on audit responses. Ensure network security and production system security policy implementation in concert with SysOps.

Manage network scanning, penetration testing, and ethical hack initiatives. Perform information risk evaluations on a regular time schedule and promote information security awareness within the organization. Create and deliver security training for employees.

Develop and oversee effective incident response and disaster recovery policies and standards in accordance with organizational information security standards.

BS Degree and eight (8) or more years’ of relevant

54151HACS Logistics Technician This candidate will be helping to build the different loads that are transported to clients/distribution centers and making sure they are getting to the end destination and meeting the regulations that are required.

High School Diploma and one

(1) year relevant experience

54151HACS Network Operations Engineer

Deployment, integration and management of both next-gen and traditional firewalls for access control, visibility and security.

Troubleshooting of network connectivity and performance problems and subsequent remediation. Scheduled and emergency network maintenance (software/firmware upgrades, hardware replacement/RMAs, etc.). Network design/architecture of customer networks using best practices. Ability to lead projects through all phases from initial planning through completion, including:

Development and documentation of project plans, detailing required tasks. Execution of project plan with minimal impact to production networks/services. Post-installation testing for validation/successful project completion. Installation and management of other networking infrastructure such wireless controllers/APs, VoIP systems, etc. Deployment and administration of network security features. Documentation of project plans, network diagrams (physical and logical) and test plans.

High School Diploma and five

(5) years’ networking experience, CCNP or equivalent, Layer 3 networking experience, and thorough understanding of protocols

54151HACS Program Manager Under indirect supervision, oversees the operational planning, establishment, execution, and evaluation of a multifaceted program/project typically consisting of a set of closely related subprograms or associated activities. Oversees fiscal, operational, administrative, and human resources management of the program;

seeks and develops outside funding sources, serves as principal point of representation and liaison with external constituencies on operational matters, and provides day-to-day technical/professional guidance and leadership as appropriate to the area of expertise.

BA/BS Degree and ten (10) years’ experience

54151HACS Security Analyst Develop, review, coordinate and track all security reviews, assessments and other documentation. Responsible for the full scope of document management process, including receipt, distribution, auditing, and filing in accordance with DoD security standards.

BA/BS Degree and two (2) years’ experience in security operations

54151HACS Security Analyst Engineer

Develop, review, coordinate and track all security reviews, assessments and other documentation. Assist in the review and coordination of security technical assessments/recommendations, preparation of presentation and supporting materials to facilitate system security engineering meetings. Assist with project planning and scheduling, including the development and maintenance of a Work Breakdown Structure and master schedule. Create monthly progress reports and conduct meetings.

BA/BS Degree or security related certification and six

(6) years’ experience

54151HACS Senior Network/Data Engineer

Responsible for the management of the interoperability between various platforms, use of alarm and ticket systems, individual designed customized scripts, customer notification, and Business Partner escalations. Maintains routers, switches, and trunk capacity as well as configuration to meet various requirements. Provides real time in-depth analysis and real time trouble resolution of incidents.

Bachelor Degree or equivalent experience, CCNA Certification CCNP Certification and four

(4) years’ experience

54151HACS Senior Principal

Engineer Lead the Systems Engineering efforts. Oversee the activities for requirements definition, requirements verification, development of Systems Integration & Test documentation, as well as other system engineering activities during the design, integration, and testing of the new components.

Bachelor of Science Degree in Engineering or related field and four (4) years’ experience

54151HACS Senior Principal Systems Engineer

Formulate operational concepts, perform mission, functional, cost-benefit, and risk analyses, select candidate system architectures, and prepare specifications to ensure concepts meet the mission needs of the end user. Exercise critical thinking and leadership to deliver innovative, flexible, integrated solutions to meet changing business and operational needs.

Bachelor of Science Degree in Engineering or related field and six

(6) years’ experience

54151HACS Senior Radio Frequency Engineer

Draft test plans, collect and analyze test data, and report findings.

Operate and test radio frequency (RF) equipment. Evaluate test results for possible application to develop additional systems or other uses. Apply RF monitoring, detection, identification, and direction finding in operationally relevant test environments.

Bachelor’s Degree or higher in Electrical Engineering or Physics plus one

(1) year of experience

54151HACS Senior SATCOM Engineer

Provide transmissions management and network management of Wideband SATCOM Operational Management System (WSOMS) and other MILSATCOM C2 programs. Serves as technical consultant for transmissions management and control in the Super High Frequency (SHF) (i.e., Defense Satellite Communications System (DSCS), Wideband Global SATCOM (WGS) and Global Broadcast Service (GBS)) functional area. Develop/coordinate policy and plans. Develop definitive technical solutions that consider systems architecture, interoperability, interfaces, protocols, networking, expansion potential and overall end-to-end compatibility. Analyze, evaluate, and recommend solutions to future communications and automation operational challenges.

Provides technical and operational planning, system configuration and operational mission support.

BA/BS Degree plus one (1) year of experience

54151HACS Senior System Administrator

Thorough knowledge of one or more of the following IT technologies: Servers, data network, telephony, enterprise storage and backup, desktops. Broad knowledge and understanding of computer hardware, applications, network, and operating systems.

Knowledge and understanding of related Information Technology trends. Organize technical work; demonstrate excellent planning, problem solving, analysis, documentation, presentation and organization skills; analyze and interpret data, processes and needs based on limited information; organize work and resources;

define problems and solutions, prioritize work load; make recommendations; manage time effectively and plan and implement objectives effective.

BA/BS Degree plus one (1) year of experience

54151HACS Security Auditor Develops methods to monitor and measure risk, compliance, and assurance efforts. Monitors and evaluates a system's compliance with information technology (IT) security, resilience, and dependability requirements. Performs validation step. Provides recommendations for possible improvements and upgrades.

Reviews and conduct audits of IT programs and projects.

Develops and implements IT security independent audit processes for application software/networks/systems.

BA/BS Degree and four (4) years’

54151HACS Cybersecurity Lead Responsible for cybersecurity/defensive cyberspace operations initiatives, programs and systems, hardware and/or software. This includes accreditation(s), policy guidance, user awareness training, and tactics, techniques and procedures for responding, preventing, and/or reacting to security alerts, incidents, or compromises.

BA/BS Degree in Computer Information Systems Security Professional

(CISSP)

Certification

54151HACS Software Engineer- Intermediate

Design and develop software through the application of a systematic, disciplined, quantifiable approach to the development, operation, and maintenance of software.

BS/MS Degree in Computer Science

54151HACS Managed Systems Engineer Senior

Applies an enterprise-wide set of disciplines for the planning, analysis, design and construction of information systems on an enterprise-wide basis or across a major sector of the enterprise.

Develops analytical and computational techniques and methodology for problem solutions. Performs enterprise-wide strategic systems planning, business information planning, business and analysis.

Bachelor's Degree and eight (8) years’ related experience

54151S Senior IT Specialist Devises or modifies procedures to solve complex problems considering computer equipment capacity and limitations, operating time and form of desired results.

BS/MS Degree and six (6) years’ experience

54151S Webmaster Under general direction, designs and builds web pages using a variety of graphics software applications, techniques, and tools.

Designs and develops user interface features, site animation, and special-effects elements. Contributes to the design group’s efforts to enhance the look and feel of the organization’s online offerings.

Designs the website to support the organization’s strategies and goals relative to external communications. Requires understanding of web-based technologies and thorough knowledge of HTML, PhotoShop, Illustrator, and/or other design-related applications.

Bachelor’s Degree and three (3) years’ related experience, or six (6) years’ applicable experience which should include three (3) years’ specialized experience.

54151S Graphics Specialist Responsible for graphics design and use, operation and setup of computer graphic systems for business communications. Executes graphic projects and assists in coordination of all graphic production scheduling; coordinates production support with outside contractors, as needed. Ensures that graphic projects are completed on time, within budget and to user’s satisfaction.

Interfaces with users to determine scope of project and best graphic medium. Trains other personnel in proper use of computer graphic equipment. Troubleshoots computer equipment problems and performs minor preventive maintenance.

Bachelor’s Degree and three (3) years’ related experience, or six (6) years’ applicable experience which should include three (3) years’ specialized experience.

54151S Program Coordinator IA

Under general direction, responsible for all activities relating to information assurance procedures and systems. Develops information systems assurance programs and control guidelines.

Confers with and advises subordinates on administrative policies and procedures and resolving technical problems, priorities, and methods. Consults with and advises other sections regarding internal controls and security procedures. Prepares activity and progress reports relating to the information systems audit function.

Bachelor’s Degree and four (4) years’ related experience, or eight (8) years’ applicable experience which should include five

(5) years’ specialized

54151S Senior IT Systems

Solutions Architect Participates in the design, creation, and maintenance of computerized databases. Responsible for the quality control and auditing of Telelogic System Architect (SA) databases to ensure accurate and appropriate use of data. Consults with and advises users on access, works directly with users to resolve data conflicts and inappropriate data usage, and directs the maintenance and use of the enterprise architecture encyclopedia. Consults with SA programming personnel to resolve system performance issues.

Responsible for the installation, maintenance, configuration, and integrity of SA. Implements application enhancements that will improve the reliability and performance of the application. Works with network Engineering to schedule installations and upgrades and maintains them in accordance with established IT policies and procedures. Responsible for file maintenance, control, and product support and facilitates change control, problem management, and communication among architects, Engineering, and analysts.

Establishes and enforces processes to ensure a consistent, well-managed, and well-integrated application infrastructure. Develops appropriate application and process documentation.

Master’s Degree and four (4) years’ related experience or Bachelor’s Degree and six (6) years’ applicable experience which should include four

(4) years’ specialized experience

54151S Senior Applications Programmer

Shall possess progressively complex experience in computer simulation, client-server architectures, advanced networking techniques and protocols, data bases, high-order programming languages, and operating systems. In addition must have experience in design and development of advanced networking techniques and protocols, database management systems, and programming in high order languages.

Bachelor’s Degree and eight (8) years’ applicable experience

54151S Senior Systems Analyst

Under general direction, formulates/defines system scope and objectives based on user needs. Devises or modifies procedures to solve complex problems considering computer equipment capacity and limitations, operating time and form of desired results.

Prepares detailed specifications from which programs will be written. Analyzes and revises existing system logic difficulties and documentation as necessary. Competent to work at the highest technical level of all phases of applications systems analysis activities. May use CASE tools.

Bachelor’s Degree and six (6) years’ applicable experience

54151S Software Engineer Under general direction, conducts or participates in multidisciplinary research and collaborates with equipment designers and/or hardware Engineering in the planning, design, development, and utilization of electronic data processing systems software. Determines computer user needs; advises hardware designers on machine characteristics that affect software systems such as storage capacity, processing speed, and input/output requirements; designs and develops compilers and assemblers, utility programs, and operating systems.

Bachelor’s Degree and two (2) years’ related experience

54151S Database Administrator

Participates in the design, creation, and maintenance of computerized databases. Responsible for the quality control and auditing of databases to ensure accurate and appropriate use of data. Works with management to develop database strategies to support organization requirements. Consults with and advises users on access to various databases. Works directly with users to resolve data conflicts and inappropriate data usage. Directs the maintenance and use of the corporate data dictionary.

Bachelor’s Degree and two (2) years’

54151S System Administrator

Intermediate Under general supervision, responsible for installing, configuring, and maintaining operating system workstations and servers, including web servers, in support of business processing requirements. Performs software installations and upgrades to operating systems and layered software packages. Schedules installations and upgrades and maintains them in accordance with established IT policies and procedures. Monitors and tunes the system to achieve optimum performance levels.

Bachelor’s Degree and two (2) years’ related experience, or four (4) years’ applicable experience which should include two

(2) years’ specialized experience

54151S Software Engineer Journeyman

Under general supervision, conducts or participates in multidisciplinary research and collaborates with equipment designers and/or hardware Engineering in the planning, design, development, and utilization of electronic data processing systems software. Determines computer user needs; advises hardware designers on machine characteristics that affect software systems such as storage capacity, processing speed, and input/output requirements; designs and develops compilers and assemblers, utility programs, and operating systems.

Bachelor’s Degree and two (2) years’ related experience, or four (4) years’ applicable experience which should include two

(2) years’ specialized experience

54151S Senior Information Assurance Engineer

Under general direction, performs all procedures necessary to ensure the safety of information systems assets and to protect systems from intentional or inadvertent access or destruction.

Interfaces with user community to understand their security needs and implements procedures to accommodate them.

Ensures that user community understands and adheres to necessary procedures to maintain security. May require familiarity with domain structures, user authentication, and digital signatures. Conducts accurate evaluation of the level of security required.