MAS - Strata Consulting Services, LLC - GS35F347GA

Federal Supply Service

Authorized Federal Supply Schedule Price List

On-line access to contract ordering information, terms and conditions, up-to-date pricing, and the option to create an electronic delivery order are available through GSA

Advantage!®, a menu-driven database system. The INTERNET address GSA

Advantage!® is: GSAAdvantage.gov.

Multiple Award Schedule

FSC Group: MAS Contract Number: GS35F347GA

For more information on ordering from Federal Supply Schedules click on the FSS

Schedules button at fss.gsa.gov.

Contract Period: April 3rd 2017 through April 2nd 2022

CONTRACTOR NAME: STRATA CONSULTING SERVICES

ADDRESS: 1282 Quaker Hill Dr Alexandria VA 22314

CONTRACTOR POC: Mr. Tommy Harris, President

PHONE: (315) 374-0690

EMAIL: tommy.harris@strataitconsulting.com

WEBSITE: https://strataitconsulting.com/

BUSINESS SIZE: Small

Price list current as of April 3rd 2017

1a. Table of awarded special item number(s) with appropriate cross-reference to item descriptions and awarded price(s).

SINs SIN Descriptions

54151HACS Highly Adaptive Cybersecurity Services (HACS)

54151S Information Technology Professional Services

OLM Order Level Materials

1b. Identification of the lowest priced model number and lowest unit price for that model for each special item number awarded in the contract. This price is the Government price based on a unit of one, exclusive of any quantity/dollar volume, prompt payment, or any other concession affecting price. Those contracts that have unit prices based on the geographic location of the customer, should show the range of the lowest price, and cite the areas to which the prices apply.

OFFERED SERVICES: 54151S

LABOR CATEGORY TITLE HOURLY RATE W/IFF

IT Analyst I $81.36

IT Analyst II $100.50

IT Analyst III $114.86

IT Consultant I $110.07

IT Consultant II $124.43

IT Consultant III $138.78

IT Enterprise Architect $186.64

IT Program Manager $148.35

IT Project Manager $119.64

IT Software Engineer I $119.64

IT Software Engineer II $134.00

IT Software Engineer III $148.35

IT Subject Matter Expert I - Information Assurance $143.57

IT Subject Matter Expert II - Information Assurance $157.93

IT Subject Matter Expert III - Information Assurance $172.28

OFFERED SERVICES: 54151HACS

LABOR CATEGORY TITLE HOURLY RATE W/IFF

Penetration Testing Analyst I $81.36

Penetration Testing Analyst II $100.50

Penetration Testing Analyst III $114.86

Penetration Testing Consultant I $110.07

Penetration Testing Consultant II $124.43

Penetration Testing Consultant III $138.78

Vulnerability Assessment Analyst I $81.36

Vulnerability Assessment Analyst II $100.50

Vulnerability Assessment Analyst III $114.86

Vulnerability Assessment Consultant I $110.07

Vulnerability Assessment Consultant II $124.43

Vulnerability Assessment Consultant III $138.78

Vulnerability Assessment Enterprise Architect $186.64

1c. If the Contractor is proposing hourly rates, a description of all corresponding commercial job titles, experience, functional responsibility and education for those types of employees or subcontractors who will perform services shall be provided. If hourly rates are not applicable, indicate “Not applicable” for this item.

LABOR CATEGORY DESCRIPTIONS: 54151S

Commercial Job Title: IT Analyst I

Minimum/General Experience: 3 Year of related Technical Experience

Functional Responsibility: Works with multiple IT departments/sources to research, collect, identify and report software or system requirements using interviews, document analysis, requirements workshops, surveys, site visits, business process descriptions, use cases, scenarios, business analysis, task and workflow analysis. Critically evaluates information gathered, reconcile conflicts; decomposes high-level information into detail functional and development or system requirements. Assist

IT project managers with project plan, version scopes and timelines Work with development or systems team to implement requirements related to IT projects. Can solve simple problems, and most often times will require direct supervision provided by more experienced personnel.

Minimum Education: Bachelors Degree in related field

Commercial Job Title: IT Analyst II

Minimum/General Experience: 7 Years of related Technical Experience

Functional Responsibility: Works with multiple IT departments/sources to research, collect, identify and report software or system requirements using interviews, document analysis, requirements workshops, surveys, site visits, business process descriptions, use cases, scenarios, business analysis, task and workflow analysis. Critically evaluates information gathered, reconcile conflicts; decomposes high-level information into detail functional and development or system requirements. Assist

IT project managers with project plan, version scopes and timelines Work with development or systems team to implement requirements related to IT projects. Can solve more complex problems with minimal supervision.

Commercial Job Title: IT Analyst III

Minimum/General Experience: 11 Years of related Technical Experience

Functional Responsibility: Works with multiple IT departments/sources to research, collect, identify and report software or system requirements using interviews, document analysis, requirements workshops, surveys, site visits, business process descriptions, use cases, scenarios, business analysis, task and workflow analysis. Critically evaluates information gathered, reconcile conflicts; decomposes high-level information into detail functional and development or system requirements. Assist

IT project managers with project plan, version scopes and timelines Work with development or systems team to implement requirements related to IT projects. Can solve all problems with no supervision required. Shall supervise junior personnel.

Labor Category: IT Consultant I

Minimum Experience: 7 Year of related Technical Experience

Job Description: Professional providing general IT assistance to help customers achieve a specific solution related to the organization’s utilization of information technology products and services. Demonstrates exceptional oral and written communication skills.

Minimum Education: Bachelors Degree in Computer Science

Labor Category: IT Consultant II

Minimum Experience: 11 Years of related Technical Experience

Job Description: Professional providing general IT assistance to help customers achieve a specific solution related to the organization’s utilization of information technology products and services. Demonstrates exceptional oral and

Labor Category: IT Consultant III

Minimum Experience: 15 Years of related Technical Experience

Job Description: Professional providing general IT assistance to help customers achieve a specific solution related to the organization’s utilization of information technology products and services. Demonstrates exceptional oral and

Commercial Job Title: IT Enterprise Architect

Minimum/General Experience: 10 Years of related Technical Experience

Functional Responsibility:

Designs and develops complex business solutions using a variety of computer technologies. Independently performs a variety of system design and engineering tasks which are broad in nature and are concerned with design and implementation of major enterprise systems development and integration, including supporting personnel, hardware, software, and support facilities and/or equipment.

Considered a Subject Matter Expert (SME) in one or more specific areas of computer system design and networking.

Applies knowledge of complex concepts and techniques to develop and implement automated solutions to engineering, scientific, or business data acquisition and management problems. Uses scientific and engineering logic to independently identify conceptual or theoretical solutions to problems of technology systems hardware or software design and operation.. Evaluates and recommends optimum solutions balancing specific project needs with economic constraints.. Formulates architectural design, functional specification, interfaces and documentation of computer systems considering system interrelationships, operating modes, and equipment configurations. Responsible for developing project plans, justifications, guidelines, and controls.

Commercial Job Title: IT Program Manager

Minimum/General Experience: 12 Years of related Technical Experience

Functional Responsibility: Provides program management for multiple projects.

Prepares project implementation plan, coordinates project activities, monitors project milestones, and provides progress reports. Responsible for all aspects of performance (i.e., technical, contractual, administrative, financial). Consults with the customer to ensure adherence to contractual obligations, establishes and maintains technical and financial reports to show progress of projects to management and customers, organizes and assigns responsibilities to subordinates, and oversees the completion of all assigned tasks Performs overall management of contract support operations, possibly involving multiple projects and groups of personnel at multiple locations. Organizes, directs, and coordinates the planning and production of all contract support activities. Able to manage all programs with no supervision required.

Commercial Job Title: IT Project Manager

Functional Responsibility: Responsible for assisting the management of small to med-sized projects. Assists in preparing implementation plan, coordinates activities, monitors milestones, and provides progress reports. Creation and management of project information related to contractual requirements and cost for submittal to the program manager for review and approval.

Must have rudimentary understanding of accounting, management, and contract principles. Performs day-to-day management of assigned delivery order projects that involve teams of data processing and other information system and management professionals who have previously been involved in analyzing, designing, integrating, testing, documenting, converting, extending, and implementing automated information and telecommunications systems.

Demonstrates proven skills in those technical areas addressed by the delivery order to be managed. Organizes, directs, and coordinates the planning and production of all activities associated with assigned delivery order projects.

Demonstrates writing and oral communication skills. Able to manage more complex projects with no supervision required.

Commercial Job Title: IT Software Engineer I

Minimum/General Experience: 5 Years of related Technical Experience

Functional Responsibility: Develops and customizes application servers and toolsets to enhance business processes, including workflow development, knowledge and data management. Research, test and report capabilities of technology products, application server and toolsets, with business analysts to map business and functional requirements. Develops and applies departmental and organization-wide business modernization and process improvements models for use in designing and customizing integrated, shared application servers and knowledge and data management systems. Analyzes and resolves application software and toolset issues. Relies on experience and judgment to plan and accomplish goals. Can solve simple problems, and most often times will require direct supervision provided by more experienced personnel.

Minimum Education: Bachelors Degree in Computer Science, Information

Systems, Business or equivalent field.

Commercial Job Title: IT Software Engineer II

Minimum/General Experience: 9 Years of related Technical Experience

Functional Responsibility: Develops and customizes application servers and toolsets to enhance business processes, including workflow development, knowledge and data management. Research, test and report capabilities of technology products, application server and toolsets, with business analysts to map business and functional requirements.

Develops and applies departmental and organization-wide business modernization and process improvements models for use in designing and customizing integrated, shared application servers and knowledge and data management systems. Analyzes and resolves application software and toolset issues. Relies on experience and judgment to plan and accomplish goals. Can complete tasks of intermediate complexity alone, and may only require supervision provided by more experienced personnel for more complex problems.

Systems, Business or equivalent field

Commercial Job Title: IT Software Engineer III

Minimum/General Experience: 13 Years of related Technical Experience

Functional Responsibility: Develops and customizes application servers and toolsets to enhance business processes, including workflow development, knowledge and data management. Research, test and report capabilities of technology products, application server and toolsets, with business analysts to map business and functional requirements.

Develops and applies departmental and organization-wide business modernization and process improvements models for use in designing and customizing integrated, shared application servers and knowledge and data management systems. Analyzes and resolves application software and toolset issues. Relies on experience and judgment to plan and accomplish goals. Can complete all tasks with no supervision required. Shall supervise junior personnel.

Systems, Business or equivalent field

Commercial Job Title: IT Subject Matter Expert I – Information Assurance

Functional Responsibility: Has advanced understanding of area of expertise related to various information assurance and IT disciplines. Provides expert consultative support to a functional technical area of the project. Develops solutions to complex problems.

Works closely with the team to identify the best solution to organizational, process or technical issues. Familiar with a specific field's concepts, practices, and procedures. Relies on extensive experience and judgment to plan and accomplish goals.

Commercial Job Title: IT Subject Matter Expert II – Information Assurance

Minimum/General Experience: 15 Years of related Technical Experience

Functional Responsibility: Has advanced understanding of area of expertise related to various information assurance and IT disciplines. Provides expert consultative support to a functional technical area of the project. Develops solutions to complex problems.

Works closely with the team to identify the best solution to organizational, process or technical issues. Familiar with a specific field's concepts, practices, and procedures. Relies on extensive experience and judgment to plan and accomplish

Commercial Job Title: IT Subject Matter Expert III – Information Assurance

Minimum/General Experience: 19 Years of related Technical Experience

Functional Responsibility: Has advanced understanding of area of expertise related to various information assurance and IT disciplines. Provides expert consultative support to a functional technical area of the project. Develops solutions to complex problems.

Works closely with the team to identify the best solution to organizational, process or technical issues. Familiar with a specific field's concepts, practices, and procedures. Relies on extensive experience and judgment to plan and accomplish

LABOR CATEGORY DESCRIPTIONS: 54151HACS

Commercial Job Title: Penetration Testing Analyst I

Functional Responsibility: Under general supervision performs cyber threat intelligence analysis, correlates actionable security events, performs network traffic analysis using raw packet data, net flow, IDS, IPS, and custom sensor output as it pertains to the cyber security of communication networks, and participate in the coordination of resources during incident response efforts.

Uses both classified and unclassified information to create cyber security intelligence products and threat assessments and briefs senior leaders.

Commercial Job Title: Penetration Testing Analyst II

Functional Responsibility: With little or no supervision provides cyber intelligence analysis including the reviews classified and unclassified cyber news feeds, signature updates, incident reports, threat briefs, and vulnerability alerts from external sources and to determine its applicability to the customer environment.

Disseminates information externally within the cyber intelligence community. Interprets and compiles the information received about emerging threats at different classification levels through data feeds from Internet security firms, Government organizations, private industry, and foreign Governments into actionable monitoring either by developing custom content or by some other means.

Identifies potential threats based on enterprise utilized hardware and software and accounts for current and evolving hacking tools and methodologies available to disrupt these systems. Participates in cybersecurity exercises. Leads teams of cyber intelligence analysts.

Commercial Job Title: Penetration Testing Analyst III

Functional Responsibility: Performs complex analysis using classified and unclassified source data to proactively identify threat vectors. Provides expert level analysis for adversary capabilities, intentions, techniques, tactics, and procedures (TTP), and be used to author and redistribute cyber intelligence information, fuse cyber intelligence data into SOC monitoring systems, and provide situational awareness to other members of the cybersecurity team, communicate methods for detecting specific threats, and plan operations to mitigate or disrupt the threat as part of the overarching enterprise Computer

Network Defense (CND). Designs, leads, or supports cybersecurity exercises.

Labor Category: Penetration Testing Consultant I

Job Description: Perform Security Penetration Assessments exploiting and compromising defined targets in a global enterprise environments ranging from web applications to handheld systems. Identify and exploit vulnerabilities in web and mobile applications, OS, hardware, databases, wired and wireless networks, etc. Document technical and logical security findings identified during the security assessments and providing security recommendations for enterprise executives, developers, web/system and database administrators. Can perform minor tasks under general supervision.

Labor Category: Penetration Testing Consultant II

Job Description: Perform Security Penetration Assessments exploiting and compromising defined targets in a global enterprise environments ranging from web applications to handheld systems. Identify and exploit vulnerabilities in web and mobile applications, OS, hardware, databases, wired and wireless networks, etc. Document technical and logical security findings identified during the security assessments and providing security recommendations for enterprise executives, developers, web/system and database administrators. Can perform more complex tasks with minimal supervision.

Labor Category: Penetration Testing Consultant III

Job Description: Identifies, investigates, analyzes, and remediates information security events to ensure enterprise integrity against technical and physical risks. Conducts quality management reviews to evaluate the effectiveness of security controls. This position reports on the controls effectiveness for mitigating exposure to identified risks. Communicates security issues and control gaps through security governance processes. This position implements and integrates risk management procedures across the enterprise. Participates in the development and maintenance of business continuity planning, data, systems, and network security for systems & controls related to their job duties. Supervises junior personnel.

Commercial Job Title: Vulnerability Assessment Analyst I

Functional Responsibility: Responsible for detecting threats and vulnerabilities in target systems, networks, and applications by conducting systems, network and web penetration testing. Identifies flaws and weaknesses in the systems than can be exploited to cause business risk, and provides crucial insights into the most pressing issues, suggesting how to prioritize security resources. Can solve simple problems, and most often times will require direct supervision provided by more experienced personnel.

Commercial Job Title: Vulnerability Assessment Analyst II

Functional Responsibility: Responsible for detecting threats and vulnerabilities in target systems, networks, and applications by conducting systems, network and web penetration testing. Identifies flaws and weaknesses in the systems than can be exploited to cause business risk, and provides crucial insights into the most pressing issues, suggesting how to prioritize security resources. Can solve more complex problems with minimal supervision.

Commercial Job Title: Vulnerability Assessment Analyst III

Functional Responsibility: Responsible for detecting threats and vulnerabilities in target systems, networks, and applications by conducting systems, network and web penetration testing. Identifies flaws and weaknesses in the systems than can be exploited to cause business risk, and provides crucial insights into the most pressing issues, suggesting how to prioritize security resources. Can solve all problems with no supervision required. Shall supervise junior personnel.

Labor Category: Vulnerability Assessment Consultant I

Job Description: Provides oversight of incident data flow and response, content, and remediation, and partners with other incident response centers in maintaining an understanding of threats, vulnerabilities, and exploits that could impact networks and assets. Performs proactive security monitoring and reporting on various security enforcement systems, such as SIEM, Anti-virus, Internet content filtering/reporting, malcode prevention, Firewalls, IDS &IPS, Web Security, etc.

Labor Category: Vulnerability Assessment Consultant II

Job Description: Provides oversight of incident data flow and response, content, and remediation, and partners with other incident response centers in maintaining an understanding of threats, vulnerabilities, and exploits that could impact networks and assets. Performs proactive security monitoring and reporting on various security enforcement systems, such as SIEM, Anti-virus, Internet content filtering/reporting, malcode

Labor Category: Vulnerability Assessment Consultant III

Job Description: Provides oversight of incident data flow and response, content, and remediation, and partners with other incident response centers in maintaining an understanding of threats, vulnerabilities, and exploits that could impact networks and assets. Performs proactive security monitoring and reporting on various security enforcement systems, such as SIEM, Anti-virus, Internet content filtering/reporting, malcode

Commercial Job Title: Vulnerability Assessment Enterprise Architect

Minimum/General Experience: 10 Years of related Technical Experience

Functional Responsibility:

Applies knowledge of complex concepts and techniques to develop and implement automated solutions related to the performance of vulnerability assessments. Uses scientific and engineering logic to independently identify conceptual or theoretical solutions to problems of related to cyber security.

Responsible for developing project plans, justifications, guidelines, and controls.

SUBSTITION OF EDUCATION/EXPERIENCE

Service Contract Labor Standards: The Service Contract Labor Standards (SCLS), formerly known as the Service Contract Act (SCA), is applicable to this contract as it applies to the entire Multiple

Award Schedule (MAS) and all services provided. While no specific labor categories have been identified as being subject to SCLS/SCA due to exemptions for professional employees (FAR 22.1101,

22.1102 and 29 CRF 541.300), this contract still maintains the provisions and protections for

SCLS/SCA eligible labor categories. If and / or when the contractor adds SCLS/SCA labor categories to the contract through the modification process, the contractor must inform the Contracting Officer and establish a SCLS/SCA matrix identifying the GSA labor category titles, the occupational code, SCLS/SCA labor category titles and the applicable WD number. Failure to do so may result in cancellation of the contract.

DEGREE REQUIREMENT SUBSTITUTION OF RELEVANT EXPERIENCE

ASSOCIATES DEGREE 2 Additional Years

BACHELORS DEGREE 4 Additional Years

MASTERS DEGREE 6 Additional Years

PHD 8 Additional Years

2. Maximum Order: $500,000

3. Minimum Order: $100.00

4. Geographic Coverage (Delivery Area): Domestic

5. Point of production: Same as company address

6. Discount from list prices: Government Net Prices (discounts already deducted).

7. Quantity Discounts: 1.5% for orders exceeding $300,000

8. Prompt Payment Terms: Information for Ordering Offices: Prompt payment terms cannot be negotiated out of the contractual agreement in exchange for other concessions. 1% Net 15

9. Foreign Items: None

10a. Time of Delivery: As agreed in each task/delivery order

10b. Expedited Delivery: Contact Contractor

10c. Overnight and 2-day Delivery: Contact Contractor

10d. Urgent Requirements: Contact Contractor

11. F.O.B. Point(s): Destination

12a. Ordering Address: Same as company address

12b. Ordering procedures: For supplies and services, the ordering procedures, information on

Blanket Purchase Agreements (BPAs), and a sample EPA can be found at the GSA/FSS

Schedule homepage (fss.gsa.gov/schedules).

13. Payment address(es): Same as company address.

14. Warranty provision. Standard 1 Year Warranty

15. Export packing charges, if applicable. N/A

16. Terms and conditions of rental, maintenance, and repair (if applicable) N/A

17. Terms and conditions of installation (if applicable). N/A

18a. Terms and conditions of repair parts indicating date of parts price lists and any discounts from list prices (if applicable). N/A

18b. Terms and conditions for any other services (if applicable) N/A

19. List of service and distribution points (if applicable): Same as company address.

20. List of participating dealers (if applicab1e). N/A

21. Preventive maintenance (if applicable). N/A

22a. Special attributes such as environmental attributes (e.g., recycled content, energy efficiency, and/or reduced pollutants) N/A

22b. If applicable, indicate that Section 508 compliance information is available on Electronic and

Information Technology (EIT) supplies and services and show where full details can be found

(e.g. contractor website or other location.) The EIT standards can he found at www.Section508.gov/. N/A

23. Data Universal Number System (DUNS) number: 062569854

24. Notification regarding registration in Central Contractor Registration (CCR) database:

*Contractor http://www.section508.gov/