MAS - Securestrux LLC - GS35F279DA

Contract Number: GS-35F-279DA

Contract Period: 05/03/2021 to 05/02/2026

GENERAL SERVICES ADMINSTRATION

FEDERAL SUPPLY SERVICE

AUTHORIZED FEDERAL SUPPLY SCHEDULE PRICE LIST

On-line access to contract ordering information, terms and conditions, up-to-date pricing, and the option to create an electronic delivery order are available through GSA Advantage! ®, a menu-driven database system. The INTERNET address GSA Advantage! ® is: GSAAdvantage.gov.

Multiple Award Schedule (MAS)

Contract Period: May 3, 2021 through May 2, 2026

Contractor: SecureStrux LLC

245 E. King Street

Lancaster, PA 17602-2960

Business Size: Small Business

Web Site: www.securestrux.com

Telephone: 717-262-2672

Email: contracts@securestrux.com; angie.gabrielson@securestrux.com

Contract Administrator: Angie Gabrielson

For more information on ordering from Federal Supply Schedules go to the GSA Schedules page at

GSA.gov.

Price list is current as of Modification #PS-0048 effective 02/24/2025.

* This is the most recently awarded Contractor initiated Modification and does not include any Mass Modifications

Prices Shown Herein are Net (discount deducted) mailto:contracts@securestrux.com mailto:angie.gabrielson@securestrux.com

CUSTOMER INFORMATION

1a. Table of awarded special item numbers with appropriate cross-reference to item descriptions and awarded prices.

SIN Description

54151HACS Highly Adaptive Cybersecurity Services (HACS)

54151S Information Technology (IT) Professional Services

*Cooperative Purchasing (RC) and Disaster Recovery Purchasing (STLOC) are available

1b. Identification of the lowest priced model number and lowest unit price for that model for each special item number awarded in the contract. This price is the Government price based on a unit of one, exclusive of any quantity/dollar volume, prompt payment, or any other concession affecting price. Those contracts that have unit prices based on the geographic location of the customer, should show the range of the lowest price, and cite the areas to which the prices apply. See pages 6 and 9

1c. If the Contractor is proposing hourly rates a description of all corresponding commercial job titles, experience, functional responsibility and education for those types of employees or subcontractors who will perform services shall be provided. If hourly rates are not applicable, indicate “Not applicable” for this item. See pages 4 through 9

2. Maximum Order: $500,000.00

3. Minimum Order: $100.00

4. Geographic Coverage (delivery area): Domestic. Domestic delivery also includes a port or consolidation point for orders received from overseas activities.

5. Point(s) of production (city, county, and state or foreign country): Same as company address

6. Discount from list prices or statement of net price: Government net prices (discounts already deducted).

7. Quantity discounts: None

8. Prompt payment terms: 1% Net 20 days

Information for Ordering Officer: Prompt payment terms cannot be negotiated out of the contractual agreement in exchange for other concessions.

9. Foreign items (list items by country of origin): None

10a. Time of Delivery (Contractor insert number of days): 30 Days After Receipt of Order (ARO) unless otherwise negotiated between SecureStrux and the Ordering Agency

10b. Expedited Delivery: Consult with Contractor

10c. Overnight and 2-day delivery: Consult with Contractor

10d. Urgent Requirements: Consult with Contractor

11. F.O.B. Point(s): Destination

12a. Ordering Address(es): Same as Contractor

12b. Ordering procedures: For supplies and services, the ordering procedures, information on

Blanket Purchase Agreements (BPA’s) are found in Federal Acquisition Regulation (FAR) 8.405-3.

13. Payment Address(es): Same as Contractor

14. Warranty Provision: None

15. Export Packing Charges (if applicable): Not Applicable

16. Terms and conditions of rental, maintenance, and repair (if applicable): Not Applicable

17. Terms and conditions of installation (if applicable): Not Applicable

18a. Terms and conditions of repair parts indicating date of parts price lists and any discounts from list prices (if applicable): Not Applicable

18b. Terms and Conditions for any other services (if applicable): Not Applicable

19. List of service and distribution points (if applicable): Not Applicable

20. List of participating dealers (if applicable): Not Applicable

21. Preventative maintenance (if applicable): Not Applicable

22a. Special attributes such as environmental attributes, e.g. recycled content, energy efficiency, and/or reduced pollutants: Not Applicable

22b. If applicable, indicate that Section 508 compliance information is available on Electronic and

Information Technology (EIT) supplies and services and show where full details can be found (e.g.

contactor’s website or other location.) The EIT standards can be found at: www.Section508.gov/.

Not Applicable

23. Unique Entity Identifier (UEI) number: W7FFRAVN1DA9

24. Notification regarding registration in System for Award Management (SAM) database:

SecureStrux is registered in SAM.

IT PROFESSIONAL SERVICES SIN 54151S LABOR CATEGORIES AND

PRICING

Information Security Specialist -I Functional Responsibility: Under direct supervision, assists in developing and maintaining knowledgebase on changing regulatory, threat, and technology landscapes to continually develop or maintain security policies and standards, and ensure compliance throughout the organization. Performs all procedures necessary to ensure the safety of information, systems assets and to protect systems from intentional or inadvertent access or destruction. Interfaces with user community to understand their security needs and implements procedures to accommodate them. Ensures that user community understands and adheres to necessary procedures to maintain security. Conducts accurate evaluation of the level of security required. Provides management with status reports. Understands security requirements for information protection for enterprise systems and networks.

Years of Experience: 1-2 Years

Education Requirements: Associates in Information Technology related degree or equivalent experience of 1-2 years in fundamental security related concepts, practices, and procedures in Information

Technology.

Maintain 8570 compliance with one of the Information Assurance Technical (IAT) or Information

Assurance Management (IAM) Level II Baseline Certifications from the options below.

IAT II GSEC, Security + CE, SSCP, CCNA-Security

IAM II CAP, GSLC, CISM, CISSP (or Associate), CASP CE

Information Security Specialist - II knowledgebase on changing regulatory, threat, and technology landscapes to continually develop or maintain security policies and standards, and ensure compliance throughout the organization. Performs all procedures necessary to ensure the safety of information, systems assets and to protect systems from intentional or inadvertent access or destruction. Interfaces with user community to understand their security needs and implements procedures to accommodate them. Ensures that user community understands and adheres to necessary procedures to maintain security. Conducts accurate evaluation of the level of security required. Provides management with status reports. Understands security requirements for information protection for enterprise systems and networks.

Years of Experience: 2-4 Years

Education Requirements: Associates in Information Technology related degree or equivalent experience of 2-4 years in fundamental security related concepts, practices, and procedures in Information

Technology.

IAT II GSEC, Security + CE, SSCP, CCNA-Security

Information Security Specialist - III Functional Responsibility: Under general supervision, uses current information security technology disciplines and practices to ensure the confidentiality, integrity, and availability of corporate information assets in accordance with established standards and procedures. Develops and maintains knowledgebase on changing regulatory, threat, and technology landscapes to continually develop or maintain security policies and standards and ensure compliance throughout the organization. Performs all procedures necessary to ensure the safety of information systems assets and to protect systems from intentional or inadvertent access or destruction. Interfaces with user community to understand their security needs and implements procedures to accommodate them. Ensures that user community understands and adheres to necessary procedures to maintain security. May require familiarity with domain structures, user authentication, and digital signatures. Conducts accurate evaluation of the level of security required.

May require understanding of firewall theory and configuration. Understands security requirements for information protection for enterprise systems and networks. Assists in the development of security policies and ensures compliance against policy and regulation.

Years of Experience: 4-6 Years

Education Requirements: Associates in IT related degree or equivalent experience 4-6 years in fundamental security related concepts, practices, and procedures in Information Technology.

Assurance Management (IAM) Level III Baseline Certifications from the options below.

IAT III CISA, CISSP (or Associate), CASP CE, GCIH, GCED

IAM III GSLC, CISM, CISSP (or Associate)

Information Security Specialist - IV Functional Responsibility: Under general direction, uses current information security technology disciplines and practices to ensure the confidentiality, integrity, and availability of corporate information assets in accordance with established standards and procedures. Develops and maintains knowledge base on changing regulatory, threat, and technology landscapes to continually develop or maintain security policies and standards and ensure compliance throughout the organization. Performs all procedures necessary to ensure the safety of information systems assets and to protect systems from intentional or inadvertent access or destruction. Interfaces with user community to understand their security needs and implements procedures to accommodate them. Ensures that user community understands and adheres to necessary procedures to maintain security. May require familiarity with domain structures, user authentication, and digital signatures. Conducts accurate evaluation of the level of security required.

May require understanding of firewall theory and configuration. Must be able to weigh business needs against security concerns and articulate issues to management. Analyzes security requirements for information protection for enterprise systems and networks. Assists in the development of security policies and ensures compliance against policy and regulation.

Years of Experience: 6-8 Years

Education Requirements: Bachelors in Information Technology related degree or equivalent experience 6-8 years in fundamental security related concepts, practices, and procedures in Information

Technology.

Information Security Specialist - V Functional Responsibility: Under general direction, uses current information security technology disciplines and practices to ensure the confidentiality, integrity, and availability of corporate information assets in accordance with established standards and procedures. Develops and maintains knowledgebase on changing regulatory, threat, and technology landscapes to continually develop or maintain security policies and standards and ensure compliance throughout the organization. Performs all procedures necessary to ensure the safety of information systems assets and to protect systems from intentional or inadvertent access or destruction. Interfaces with user community to understand their security needs and implements procedures to accommodate them. Ensures that user community understands and adheres to necessary procedures to maintain security. May require familiarity with domain structures, user authentication, and digital signatures. Conducts accurate evaluation of the level of security required.

May require understanding of firewall theory and configuration. Must be able to weigh business needs against security concerns and articulate issues to management. Analyzes security requirements for information protection for enterprise systems and networks. Assists in the development of security policies and ensures compliance against policy and regulation.

Years of Experience 8-10 Years

Education Requirements: Bachelor’s in information technology related degree or equivalent experience 8-10 years in fundamental security related concepts, practices, and procedures in Information

Technology.

Assurance Management (IAM) Level III Baseline Certifications below.

SecureStrux Pricing:

SIN Order # Labor Category Title Pricing with IFF

54151S SS001 Information Security Specialist I $103.00

54151S SS002 Information Security Specialist II $156.00

54151S SS003 Information Security Specialist III $174.50

54151S SS004 Information Security Specialist IV $187.00

54151S SS005 Information Security Specialist V $209.00

HIGHLY CYBERSECURITY SERVICES (HACS) 54151HACS LABOR

CATEGORIES AND PRICING

Information Cybersecurity Specialist -I knowledgebase on changing regulatory, threat, and technology landscapes to continually develop or maintain cybersecurity policies and standards, and ensure compliance throughout the organization.

Performs all procedures necessary to ensure the safety of information, systems assets and to protect systems from intentional or inadvertent access or destruction. Interfaces with user community to understand their cybersecurity needs and implements procedures to accommodate them. Ensures that user community understands and adheres to necessary procedures to maintain cybersecurity. Conducts accurate evaluation of the level of cybersecurity required. Provides management with status reports.

Understands cybersecurity requirements for information protection for enterprise systems and networks.

Years of Experience: 1-2 Years

Education Requirements: Associates in Information Technology related degree or equivalent experience of 1-2 years in fundamental cybersecurity related concepts, practices, and procedures in

Information Technology.

IAT II GSEC, Cybersecurity + CE, SSCP, CCNA-Cybersecurity

Information Cybersecurity Specialist - II knowledgebase on changing regulatory, threat, and technology landscapes to continually develop or maintain cybersecurity policies and standards, and ensure compliance throughout the organization.

Performs all procedures necessary to ensure the safety of information, systems assets and to protect systems from intentional or inadvertent access or destruction. Interfaces with user community to understand their cybersecurity needs and implements procedures to accommodate them. Ensures that user community understands and adheres to necessary procedures to maintain cybersecurity. Conducts accurate evaluation of the level of cybersecurity required. Provides management with status reports.

Understands cybersecurity requirements for information protection for enterprise systems and networks.

Years of Experience: 2-4 Years

Education Requirements: Associates in Information Technology related degree or equivalent experience of 2-4 years in fundamental cybersecurity related concepts, practices, and procedures in

Information Technology.

IAT II GSEC, Cybersecurity + CE, SSCP, CCNA-Cybersecurity

Information Cybersecurity Specialist - III Functional Responsibility: Under general supervision, uses current information cybersecurity technology disciplines and practices to ensure the confidentiality, integrity, and availability of corporate information assets in accordance with established standards and procedures. Develops and maintains knowledgebase on changing regulatory, threat, and technology landscapes to continually develop or maintain cybersecurity policies and standards and ensure compliance throughout the organization.

Performs all procedures necessary to ensure the safety of information systems assets and to protect systems from intentional or inadvertent access or destruction. Interfaces with user community to understand their cybersecurity needs and implements procedures to accommodate them. Ensures that user community understands and adheres to necessary procedures to maintain cybersecurity. May require familiarity with domain structures, user authentication, and digital signatures. Conducts accurate evaluation of the level of cybersecurity required. May require understanding of firewall theory and configuration. Understands cybersecurity requirements for information protection for enterprise systems and networks. Assists in the development of cybersecurity policies and ensures compliance against policy and regulation.

Years of Experience: 4-6 Years

Education Requirements: Associates in IT related degree or equivalent experience 4-6 years in fundamental cybersecurity related concepts, practices, and procedures in IT.

Information Cybersecurity Specialist - IV Functional Responsibility: Under general direction, uses current information cybersecurity technology disciplines and practices to ensure the confidentiality, integrity, and availability of corporate information assets in accordance with established standards and procedures. Develops and maintains knowledgebase on changing regulatory, threat, and technology landscapes to continually develop or maintain cybersecurity policies and standards and ensure compliance throughout the organization. Performs all procedures necessary to ensure the safety of information systems assets and to protect systems from intentional or inadvertent access or destruction. Interfaces with user community to understand their cybersecurity needs and implements procedures to accommodate them. Ensures that user community understands and adheres to necessary procedures to maintain cybersecurity. May require familiarity with domain structures, user authentication, and digital signatures. Conducts accurate evaluation of the level of cybersecurity required. May require understanding of firewall theory and configuration. Must be able to weigh business needs against cybersecurity concerns and articulate issues to management. Analyzes cybersecurity requirements for information protection for enterprise systems and networks. Assists in the development of cybersecurity policies and ensures compliance against policy and regulation.

Years of Experience: 6-8 Years

Education Requirements: Bachelors in IT related degree or equivalent experience 6-8 years in fundamental cybersecurity related concepts, practices, and procedures in IT.

Information Cybersecurity Specialist - V Functional Responsibility: Under general direction, uses current information cybersecurity technology disciplines and practices to ensure the confidentiality, integrity, and availability of corporate information assets in accordance with established standards and procedures. Develops and maintains knowledgebase on changing regulatory, threat, and technology landscapes to continually develop or maintain cybersecurity policies and standards and ensure compliance throughout the organization. Performs all procedures necessary to ensure the safety of information systems assets and to protect systems from intentional or inadvertent access or destruction. Interfaces with user community to understand their cybersecurity needs and implements procedures to accommodate them. Ensures that user community understands and adheres to necessary procedures to maintain cybersecurity. May require familiarity with domain structures, user authentication, and digital signatures. Conducts accurate evaluation of the level of cybersecurity required. May require understanding of firewall theory and configuration. Must be able to weigh business needs against cybersecurity concerns and articulate issues to management. Analyzes cybersecurity requirements for information protection for enterprise systems and networks. Assists in the development of cybersecurity policies and ensures compliance against policy and regulation.

Years of Experience 8-10 Years

Education Requirements: Bachelors in Information Technology related degree or equivalent experience 8-10 years in fundamental cybersecurity related concepts, practices, and procedures in

Information Technology.

Assurance Management (IAM) Level III Baseline Certifications below.

SecureStrux Pricing:

SIN Order # Labor Category Title Pricing with IFF

54151HACS SS001 Information Cybersecurity Specialist I $103.00

54151HACS SS002 Information Cybersecurity Specialist II $156.00

54151HACS SS003 Information Cybersecurity Specialist III $174.50

54151HACS SS004 Information Cybersecurity Specialist IV $187.00

54151HACS SS005 Information Cybersecurity Specialist V $209.00

Service Contract Labor Standards: The Service Contract Labor Standards (SCLS), formerly known as the Service Contract Act (SCA), is applicable to this contract as it applies to the entire Multiple Award Schedule (MAS) and all services provided. While no specific labor categories have been identified as being subject to SCLS/SCA due to exemptions for professional employees

(FAR 22.1101, 22.1102 and 29 CRF 541.300), this contract still maintains the provisions and protections for SCLS/SCA eligible labor categories. If and / or when the contractor adds SCLS/SCA labor categories to the contract through the modification process, the contractor must inform the

Contracting Officer and establish a SCLS/SCA matrix identifying the GSA labor category titles, the occupational code, SCLS/SCA labor category titles and the applicable WD number. Failure to do so may result in cancellation of the contract.