MAS - Yahya Technologies LLC - GS35F314CA

Federal Supply Service Authorized Federal Supply Schedule Price List On line access to contract ordering information, terms and conditions, up to date pricing, and the option to create an electronic delivery order are available through GSA Advantage!®, a menu driven database system. The INTERNET address GSA Advantage!® is: GSAAdvantage.gov.

MULTIPLE AWARD SCHEDULE (MAS)

Class(es)/Product code(s) and/or Service Codes (as applicable)

54151HACS

Highly Adaptive Cybersecurity Services (HACS)

CONTRACT NUMBER: GS-35F-314CA

For more information on ordering from Federal Supply Schedules, go to the GSA Schedules page at GSA.gov.

CONTRACT PERIOD: May 5, 2025, through May 4, 2030

YAHYA TECHNOLOGIES, LLC

DBA Y-TECH

1401 Mercantile Ln., Suite 200-G Largo, Maryland 20774 Tel: 301-363-2199 | Fax: 301-363-2198 | www.ytechllc.com Business Size: Small Business

GENERAL SERVICES ADMINISTRATION

GENERAL SERVICES ADMINISTRATION

Pricelist current through Mod PO-0013 dated March 27, 2025 Prices Shown Herein are Net (discount deducted)

Modified: March 26, 2025 2 Federal Supply Schedule Price List

TABLE OF CONTENTS

1a. AUTHORIZED SPECIAL ITEM NUMBERS (SINs): CUSTOMER INFORMATION

Vendor suitability for offering services through the Highly Adaptive Cybersecurity Services (HACS) SIN must be in accordance with the following laws and standards when applicable to the specific task orders, including but not limited to:

· Federal Acquisition Regulation (FAR) Part 52.204-21

· OMB Memorandum M-17-12 - Preparing for and Responding to a Breach of Personally Identifiable Information (PII)

· OMB Memorandum M- 19-03 - Strengthening the Cybersecurity of Federal Agencies by enhancing the High Value Asset Program

· 2017 Report to the President on Federal IT Modernization

· The Cybersecurity National Action Plan (CNAP)

· NIST SP 800-14 - Generally Accepted Principles and Practices for Securing Information Technology Systems

· NIST SP 800-27A - Engineering Principles for Information Technology Security (A Baseline for Achieving Security) TERMS AND CONDITIONS APPLICABLE TO

HIGHLY ADAPTIVE CYBERSECURITY SERVICES (HACS)

(SPECIAL ITEM NUMBER 132-45)

· NIST SP 800-30 - Guide for Conducting Risk Assessments

· NIST SP 800-35 - Guide to Information Technology Security Services

· NIST SP 800-37 - Risk Management Framework for Information Systems and Organizations: A Systems Life Cycle Approach for Security and Privacy

· NIST SP 800-39 - Managing Information Security Risk: Organization, Mission, and Information System View

· NIST SP 800-44 - Guidelines on Securing Public Web Servers

· NIST SP 800-48 - Guide to Securing Legacy IEEE 802.11 Wireless Networks

· NIST SP 800-53 – Security and Privacy Controls for Federal Information Systems and Organizations

· NIST SP 800-61 - Computer Security Incident Handling Guide

· NIST SP 800-64 - Security Considerations in the System Development Life Cycle

· NIST SP 800-82 - Guide to Industrial Control Systems (ICS) Security

· NIST SP 800-86 - Guide to Integrating Forensic Techniques into Incident Response

· NIST SP 800-115 - Technical Guide to Information Security Testing and Assessment

· NIST SP 800-128 - Guide for Security-Focused Configuration Management of Information Systems

· NIST SP 800-137 - Information Security Continuous Monitoring (ISCM) for Federal Information Systems and Organizations

· NIST SP 800-153 - Guidelines for Securing Wireless Local Area Networks (WLANs)

· NIST SP 800-160 - Systems Security Engineering: Considerations for a Multidisciplinary Approach in the Engineering of Trustworthy Secure Systems

· NIST SP 800-171 - Protecting Controlled Unclassified Information in non-federal Information Systems and Organizations

Contractor travel. Contractors cannot use GSA city pair contracts. All travel will be agreed upon with the client prior to the Contractor’s travel.

4. INSPECTION OF SERVICES

Inspection of services is in accordance with 552.212-4 - CONTRACT TERMS AND CONDITIONS– COMMERCIAL ITEMS (Jan 2017) & (ALTERNATE I-Jan 2017) for Time-and-Materials and Labor-Hour orders placed under this contract.

5. RESPONSIBILITIES OF THE CONTRACTOR

The Contractor shall comply with all laws, ordinances, and regulations (Federal, State, City, or otherwise) covering work of this character. If the end product of a task order is software, then FAR 52.227-14 (May 2014) Rights in Data – General, may apply.

The Contractor shall comply with contract clause (52.204-21) to the Federal Acquisition Regulation (FAR) for the basic safeguarding of contractor information systems that process, store, or transmit Federal data received by the contract in performance of the contract. This includes contract documents and all information generated in the performance of the contract.

6. RESPONSIBILITIES OF THE ORDERING ACTIVITY

Subject to the ordering activity security regulations, the ordering activity shall permit Contractor access to all facilities necessary to perform the requisite Highly Adaptive Cybersecurity Services.

7. INDEPENDENT CONTRACTOR

All Highly Adaptive Cybersecurity Services performed by the Contractor under the terms of this contract shall be as an independent Contractor, and not as an agent or employee of the ordering activity.

“Contractor” means the person, firm, unincorporated association, joint venture, partnership, or corporation that is a party to this contract.

“Contractor and its affiliates” and “Contractor or its affiliates” refers to the Contractor, its chief executives, directors, officers, subsidiaries, affiliates, subcontractors at any tier, and consultants and any joint venture involving the Contractor, any entity into or with which the Contractor subsequently merges or affiliates, or any other successor or assignee of the Contractor.

An “Organizational conflict of interest” exists when the nature of the work to be performed under a proposed ordering activity contract, without some restriction on ordering activities by the Contractor and its affiliates, may either (i) result in an unfair competitive advantage to the Contractor or its affiliates or (ii) impair the Contractor’s or its affiliates’ objectivity in performing contract work.

The Contractor, upon completion of the work ordered, shall submit invoices for Highly Adaptive Cybersecurity Services. Progress payments may be authorized by the ordering activity on individual orders if appropriate. Progress payments shall be based upon completion of defined milestones or interim products. Invoices shall be submitted monthly for recurring services performed during the preceding month.

10. RESUMES

Resumes shall be provided to the GSA Contracting Officer or the user ordering activity upon request.

11. APPROVAL OF SUBCONTRACTS

The ordering activity may require that the Contractor receive, from the ordering activity Contracting Officer, written consent before placing any subcontract for furnishing any of the work called for in a task order.

12. DESCRIPTION OF HIGHLY ADAPTIVE CYBERSECURITY SERVICES AND PRICING

Please refer to the labor category descriptions and pricing incorporated into this GSA Pricelist.

TERMS AND CONDITIONS APPLICABLE TO INFORMATION TECHNOLOGY (IT) PROFESSIONAL SERVICES (SPECIAL ITEM NUMBER 132-51)

The Inspection of Services–Fixed Price (AUG 1996) (Deviation 1 – May 2003) clause at FAR 52.246-4 applies to firm-fixed price orders placed under this contract. The Inspection–Time-and-Materials and Labor-Hour (May 2001) (Deviation 1 – May 2003) clause at FAR 52.246-6 applies to time-and-materials and labor-hour orders placed under this contract.

7. RESPONSIBILITIES OF THE CONTRACTOR

The Contractor shall comply with all laws, ordinances, and regulations (Federal, State, City, or otherwise) covering work of this character. If the end product of a task order is software, then FAR 52.227-14 (Deviation – Dec 2007) Rights in Data – General, may apply.

8. RESPONSIBILITIES OF THE ORDERING ACTIVITY

Subject to security regulations, the ordering activity shall permit Contractor access to all facilities necessary to perform the requisite IT Professional Services.

9. INDEPENDENT CONTRACTOR

All IT Professional Services performed by the Contractor under the terms of this contract shall be as an independent Contractor, and not as an agent or employee of the ordering activity.

“Contractor” means the person, firm, unincorporated association, joint venture, partnership, or corporation that is a party to this contract.

“Contractor and its affiliates” and “Contractor or its affiliates” refers to the Contractor, its chief executives, directors, officers, subsidiaries, affiliates, subcontractors at any tier, and consultants and any joint venture involving the Contractor, any entity into or with which the Contractor subsequently merges or affiliates, or any other successor or assignee of the Contractor.

An “Organizational conflict of interest” exists when the nature of the work to be performed under a proposed ordering activity contract, without some restriction on ordering activities by the Contractor and its affiliates, may either (i) result in an unfair competitive advantage to the Contractor or its affiliates or (ii) impair the Contractor’s or its affiliates’ objectivity in performing contract work.

The Contractor, upon completion of the work ordered, shall submit invoices for IT Professional services. Progress payments may be authorized by the ordering activity on individual orders if appropriate. Progress payments shall be based upon completion of defined milestones or interim products. Invoices shall be submitted monthly for recurring services performed during the preceding month.

12. PAYMENTS

For firm-fixed price orders the ordering activity shall pay the Contractor, upon submission of proper invoices or vouchers, the prices stipulated in this contract for service rendered and accepted. Progress payments shall be made only when authorized by the order. For time-and-materials orders, the Payments under Time-and-Materials and Labor-Hour Contracts at FAR 52.212-4 (OCT 2008) (ALTERNATE I – OCT 2008) (DEVIATION I – FEB 2007) applies to time-and-materials orders placed under this contract. For labor-hour orders, the Payment under Time-and-Materials and Labor-Hour Contracts at FAR 52.212-4 (OCT 2008) (ALTERNATE I – OCT 2008) (DEVIATION I – FEB 2007) applies to labor-hour orders placed under this contract. 52.216-31(Feb 2007) Time-and-Materials/Labor-Hour Proposal Requirements—Commercial Item Acquisition As prescribed in 16.601(e)(3), insert the following provision:

Resumes shall be provided to the GSA Contracting Officer or the user ordering activity upon request.

14. INCIDENTAL SUPPORT COSTS

Incidental support costs are available outside the scope of this contract. The costs will be negotiated separately with the ordering activity in accordance with the guidelines set forth in the FAR.

15. APPROVAL OF SUBCONTRACTS

The ordering activity may require that the Contractor receive, from the ordering activity's Contracting Officer, written consent before placing any subcontract for furnishing any of the work called for in a task order.

16. DESCRIPTION OF IT PROFESSIONAL SERVICES AND PRICING

Please refer to the labor category descriptions and pricing incorporated into this GSA Pricelist.

LABOR CATEGORY PRICING

(including IFF)

54151S, 54151HACS

54151S, 54151HACS

54151S, 54151HACS

54151S

54151S

54151S

54151S

54151S

54151S

54151S

54151S

54151S

54151S

54151S

54151S

54151S

54151S

54151S

No SCLS labor categories or services are offered. However, the SCLS is applicable to this contract as it applies to the entire Schedule and all services provided. While no specific labor categories have been identified as being subject to SCLS due to exemptions for professional employees (FAR 22.1101, 22.1102 and 29 CFR 541.300), this contract still maintains the provisions and protections for SCLS eligible labor categories.

The following labor category descriptions describe the Functional Responsibilities and the Minimum Education and Experience requirements for each labor category. Education and experience may be substituted for each other. Each year of relevant experience may be substituted for one year of education and vice versa. In addition, certifications, professional licenses, and vocational technical training may be substituted for experience or education.LABOR CATEGORY DESCRIPTIONS

High School

GED

*Successful completion of each year of higher education that has not yet resulted in a degree may be counted for 1-for-1 for a year of experience I. Network and Telecommunications Services

I.1. Telecommunications Specialist Level I

Minimum/General Experience: Three years’ experience with minimal knowledge of design, development and evaluation of various telecommunications systems and equipment.

Functional Responsibilities: Evaluates communication hardware and software, troubleshoots LAN/MAN/WAN and other network related problems, provides technical expertise for performance and configurations of networks, performs general LAN/MAN/WAN administration, and assists with the integration and test of complex large-scale computer integrated networks. Schedule’s conversions and cut-overs, monitors maintenance of systems, coordinates with all responsible users and sites, and provides direction to LAN/WAN Engineers. May also work with Avaya/PBX administration, Octel, Call Management System utilizing complex vectoring, T1 and trunk group administration, testing, installation and ordering, T1’s, T3’s, routing and trunking, vectoring, and/or wire management skills.

Minimum Education: High school graduate or equivalent with three years general experience or an applicable training certificate from an accredited training institution.

I.2. Telecommunications Specialist Level II

Minimum/General Experience: 7 years of experience; telecommunications experience with intermediate knowledge of design, development and evaluation of various telecommunications systems and equipment.

Functional Responsibilities: Evaluates communication hardware and software, troubleshoots LAN/MAN/WAN and other network related problems, provides technical expertise for performance and configuration of networks, performs general LAN/MAN/WAN administration, and provides technical support in the integration and test of complex large-scale computer integrated networks. Schedule’s conversions and cut-overs, supervises maintenance of systems, coordinates with all responsible users and sites, and provides direction to LAN/WAN Engineers. May also work with Avaya/PBX administration, Octel, Call Management System utilizing complex vectoring, T1 and trunk group administration, testing, installation and ordering, T1’s, T3’s, routing and trunking, vectoring, and/or wire management skills.

Minimum Education: High school graduate or equivalent with seven years general experience or an applicable training certificate from an accredited training institution.

I.3. Telecommunications Specialist Level III

Minimum/General Experience: Ten years of telecommunications experience with expert knowledge of design, development and evaluation of various telecommunications systems and equipment.

Functional Responsibilities: Evaluates communication hardware and software, troubleshoots LAN/MAN/WAN and other network related problems, provides technical expertise for performance and configurations of networks, performs general LAN/MAN/WAN administration, and provides technical leadership in the integration and test of complex large-scale computer integrated networks. Schedules conversions and cut-overs, supervises maintenance of systems, coordinates with all responsible users and sites, and provides direction to LAN/WAN Engineers. May also work with Avaya/PBX administration, Octel, Call Management System utilizing complex vectoring, T1 and trunk group administration, testing, installation and ordering, T1’s, T3’s, routing and trunking, vectoring, and/or wire management skills.

Minimum Education: High school graduate or equivalent with ten years general experience or an applicable training certificate from an accredited training institution.

I.4. Network Engineer Level I

Minimum/General Experience: Three years’ experience analyzing, identifying and resolving complex network hardware, circuit, and transmission logic problems. Knowledge of the design, installation and acceptance testing of complex high-speed networks. Applies the principles of assessing and analyzing network transmission application to resolve reported malfunctions.

Functional Responsibilities: Under direct supervision designs and coordinates the installation and acceptance testing of the system network. Monitors network hardware operations to ensure properly set configuration options. Assist with plan implementation of enhancements and upgrades to the network; performs cost/benefit studies of network configurations and recommends enhancements; directs acquisition, installation, and testing of network hardware; advises network users of hardware requirements, configurations, and limitations; and isolates, resolves, or circumvents network problems.

Minimum Education: High school graduate or equivalent with three years general experience, Cisco Certified Network Associate (CCNA) certification.

I.5. Network Engineer Level II

Minimum/General Experience: Seven years experience analyzing, identifying and resolving complex network hardware, circuit, and transmission logic problems. Experience in the design, installation and acceptance testing of complex high-speed networks. Applies the principles of assessing and analyzing network transmission application to resolve reported malfunctions.

Functional Responsibilities: Under minimal supervision designs and coordinates the installation and acceptance testing of the system network. Monitors network hardware operations to ensure properly set configuration options. Plans implementation of enhancements and upgrades to the network; performs cost/benefit studies of network configurations and recommends enhancements; directs acquisition, installation, and testing of network hardware; advises network users of hardware requirements, configurations, and limitations; and isolates, resolves, or circumvents network problems.May provide daily supervision and direction to support staff.

Minimum Education: Bachelor Degree from an accredited college or university in computer science/systems, information systems/technology, engineering/engineering technology, software engineering/programming, management, natural sciences, social sciences, mathematics or business/finance and Cisco Certified Network Associate (CCNA) or Cisco Certified Network Professional (CCNP) certification.

I.6. Network Engineer Level III

Minimum/General Experience: Ten years’ experience analyzing, identifying and resolving complex network hardware, circuit, and transmission logic problems. Experience in the design, installation and acceptance testing of complex high-speed networks. Applies the principles of assessing and analyzing network transmission application to resolve reported malfunctions.

Functional Responsibilities: Under minimal supervision designs and coordinates the installation and acceptance testing of the system network. Monitors network hardware operations to ensure properly set configuration options. Plans implementation of enhancements and upgrades to the network; performs cost/benefit studies of network configurations and recommends enhancements; directs acquisition, installation, and testing of network hardware; advises network users of hardware requirements, configurations, and limitations; and isolates, resolves, or circumvents network problems.May provide daily supervision and direction to support staff.

Minimum Education: Bachelor Degree from an accredited college or university in computer science/systems, information systems/technology, engineering/engineering technology, software engineering/programming, management, natural sciences, social sciences, mathematics or business/finance and Cisco Certified Network Associate (CCNA) or Cisco Certified Network Professional (CCNP) certification.

I.7. Network Architect

Requirements Summary: Bachelor Degree, CCIE, Minimum/General Experience: 10 years’ experience, ide Subject Matter Expert guidance in local\ wide area networking, communications, and related software/hardware within a multi-platform operating environment. Must possess Subject Matter Expert experience in designing and implementing large-scale complex network solutions. Must have extensive experience publishing technical standards for design, defining engineering specifications, and developing basis of design documentation and analysis. Has extensive multi-tasking experience in managing project schedules and requirements, while working in a complex agile environment. Must lead Subject Matter Expert teams in planning next generation network design and define network overlay technologies, network function virtualization as well as integrations with existing technologies and internal systems. Possess expert written\verbal skills for presentations to senior level management and negotiations with vendors. Subject Matter Expert in understanding TCP/IP, SSL management, routing, access control lists, security, firewall and network traffic analysis. In addition, must be Internet savvy with regards to security, DNS, SMTP and Virtual Private Networks. Subject Matter Expert in management and configuration of Cisco ASR, SBC, edge routers/switches and Firewall, Remote Access servers, RIP, EIGRP, BGP, OSPF, HSRP, NAT, Layer 2 and Layer 3 VLANs, Fast/Gig Ether channel, L7 filtering and load balancing using load balancers. Expert experience with physical layer technologies-Gig/10G Ethernet, CAT5/6 cabling and Fiber. Strong experience in supporting SaaS/cloud applications ideally around collaboration tools

Functional Responsibilities: Responsible for architecting, designing and engineering client network infrastructures. Also responsible for defining the standards and strategy for emerging network architectures within our customer’s network footprint. Responsible for the integration of a total network including the planning, design, installation, maintenance, management, and coordination of a corporate LAN/WAN. Stay current on technological developments, applications, and evaluates vendor products to make recommendations for purchase. Recommends network security and policies. Must create network roadmaps, presentations, cost-saving initiatives, and business cases for new products. Monitor protocol compatibility, perform system tuning, and make recommendations for improvements. Integrate and schematically depict communication architectures, topologies, hardware, software, transmission and signaling links and protocols into complete network configurations. Provide data on system application network activity and give interpretation\guidance to relevant stakeholders. Detect, diagnose, and resolve network problems using methods that minimally impact production environment function. Lead monthly infrastructure capacity planning and expansion activities. Maintain network security controls and compliance on all network hardware. Maintain a service oriented environment focused on problem prediction, detection and resolution.

Minimum Education: Bachelor Degree from an accredited college or university in computer science/systems, information systems/technology, engineering/engineering technology, software engineering/programming, management, natural sciences, social sciences, mathematics or business/finance and Cisco Certified Internet Expert certification

II. High Value Asset (HVA) Assessments, Risk & Vulnerability Assessment (RVA), Cyber Hunt, Incident Response, Penetration Testing, Information Assurance and Security

II.1. Cyber Program Manager I

Minimum/General Experience and Years of Experience: Minimum 3 years of experience Functionality Responsibility (Summary): Responsible for and leads team on small to midsized projects. Supports the translation of customer requirements into formal journey maps and plans to culminate in customer acceptance or results. Possesses knowledge and understanding of cyber governance and policies, industry guidelines and best practices, and technical processes. Responsible for performance, cost, scope, schedule, quality, and appropriate business measurements for their project, according to their project charter. Subsequently leads a team in the initiating, planning, controlling, executing, and closing tasks of a project (or segment of a project) to produce the solution deliverable. Executes a wide range of process activities beginning with the request for proposal through development, test, and final delivery. Anticipates future customer, industry, and business trends. Applies this understanding to complex problems to meet project objectives. As appropriate, challenges the validity of given procedures and processes with a view toward enhancement or improvement. Analyzes information and situations and implements actions independently and or through the management team, to ensure project objectives are met. Analyzes new and complex project related problems and creates innovative solutions involving finance, scheduling, technology, methodology, tools and solution components. Possesses significant breadth of knowledge in business matters, finance, planning, and forecasting and personnel in order to manage team and business processes.

Educational Requirements: Bachelor’s Degree in Computer Science, Engineering, Physics, Math or related discipline

II.2. Cyber Program Manager II

Minimum/General Experience and Years of Experience: Minimum 7 years of experience Functionality Responsibility (Summary): Responsible for and leads team on small to midsized projects. Supports the translation of customer requirements into formal journey maps and plans to culminate in customer acceptance or results. Possesses knowledge and understanding of cyber governance and policies, industry guidelines and best practices, and technical processes. Responsible for performance, cost, scope, schedule, quality, and appropriate business measurements for their project, according to their project charter. Subsequently leads a team in the initiating, planning, controlling, executing, and closing tasks of a project (or segment of a project) to produce the solution deliverable. Executes a wide range of process activities beginning with the request for proposal through development, test, and final delivery. Anticipates future customer, industry, and business trends. Applies this understanding to complex problems to meet project objectives. As appropriate, challenges the validity of given procedures and processes with a view toward enhancement or improvement. Analyzes information and situations and implements actions independently and or through the management team, to ensure project objectives are met. Analyzes new and complex project related problems and creates innovative solutions involving finance, scheduling, technology, methodology, tools and solution components. Possesses significant breadth of knowledge in business matters, finance, planning, and forecasting and personnel in order to manage team and business processes.

Educational Requirements Bachelor’s Degree in Computer Science, Engineering, Physics, Math or related discipline

II.3. Cyber Project Manager I

Minimum/General Experience and Years of Experience: Minimum 3 years of experience.

Functionality Responsibility (Summary): Experience includes increasing responsibilities in information systems management and implementation. Serves as project manager for a task/call order (or a group of task orders affecting the same common/standard/migration system) and shall assist the Program Manager in working with the ordering activity Contracting Officer (CO), the contract-level Contracting Officer’s Representative (COR), the task order-level COR(s), ordering activity management personnel and customer agency representatives. Under the guidance of the Program Manager, responsible for the overall management of the specific task order(s) and insuring that the technical solutions and schedules in the task order are implemented in a timely manner. Performs enterprise wide horizontal integration planning and interfaces to other functional systems.

Educational Requirements: Bachelor’s Degree in Computer Science, Engineering, Physics, Math or related discipline

II.4. Cyber Subject Matter Expert I

Minimum/General Experience and Years of Experience: Minimum 7 years’ experience Functionality Responsibility (Summary): Subject Matter Expertise in Information Technology, Information Security, or any other type of cyber related to service area being supported. Capable of identifying issues and developing recommended courses of action based on experience and industry best practices. The level I Cyber SME is a recognized expert in a given area of cyber. In addition to providing significant cyber IT support, the Level I Cyber SME is capable of directing teams engaged in large scale, complex projects.

Provides high-level subject matter expertise for work described in the task. Provides advanced technical knowledge and analysis of highly specialized applications and operational environment, high-level functional systems analysis, design, integration, documentation, training, and implementation advice on complex problems, which require doctorate level knowledge of the subject matter for effective implementation. Applies principles, methods, and knowledge of specific functional areas of expertise to specific task order requirements.

Educational Requirements: Bachelor’s Degree in Computer Science, Engineering, Physics, Math or related discipline

II.5.