SOW_BDP_-_Final_v2.docx

UNCLASSIFIED//FOR OFFICIAL USE ONLY

(U) STATEMENT OF WORK

REVISION 1.0

CONTRACT:

Table of Contents

(U) Introduction/Background (U//FOUO) USCYBERCOM established the Capabilities Development Group (CDG) to coordinate, integrate, and prioritize cyberspace capability development efforts to rapidly deliver joint operational products through integrated project delivery, enabling full-spectrum cyberspace operations. The CDG plans and synchronizes joint capability development for the cyberspace domain, rapidly delivers mission-ready operational products and services required for generating, facilitating, or monitoring effects, and operates and maintains USCYBERCOM’s technical baseline to enable the Command to execute its missions.

(U) Scope (U//FOUO) The contractor shall support Unified Platform Phase 0 development risk-reduction prototyping, to include: Proof of concept prototype continuation, detailed design of key components, integration with USCC infrastructure, and coordination with the Services and mission partners. This effort shall focus on the development and deployment of Big Data Platform (BDP) capabilities.

(U//FOUO) Critical tasks include data acquisition, processing and storing packet capture (PCAP), engineering support, enhancing the BDP tool suite according to real-world conditions, and beta testing with the user population that includes Cyber Protection Teams (CPTs), Computer Network Defense Service Providers (CNDSPs), and Regional Cyber Centers (RCCs). This effort includes the sustainment and enhancement of BDP capabilities for both classified and unclassified BDP instances.

(U) Period of Performance (U//FOUO) The Period of Performance shall consist of a base period of one year from date of award, plus two additional one-year option periods, for a total contract period of performance not to exceed three total years.

(U) Place of Performance (U//FOUO) The primary place of performance for this effort shall be the Contractor’s facility. Additional places of performance shall include, but are not limited to United States Cyber Command (USCYBERCOM), National Security Agency (NSA), and Defense Information Systems Agency (DISA). The Contracting Officer (KO) may designate other sites as required for performance of this effort. As directed by the Contracting Officer, the contractor shall continue performance in emergency or mission essential conditions. Additionally, the contractor may be required to account for the whereabouts of their personnel should this information be requested by the COR.

(U) References (U//FOUO) The contractor shall comply with and conform to the following standards and technical specification. Exceptions to these guidelines must be requested from and approved by the government contract officer in writing.

Federal Acquisition Regulation (FAR) Department of Defense Directive (DODD) 5000.01, The Defense Acquisition System DODD 8570.01, Information Assurance Training, Certification, and Work Force Management DOD Instruction (DODI) 5000.2, Operation of the Defense Acquisition System DODI 5200.02, DOD Personnel Security Program (PSP) DODI 8500.1, Cybersecurity DODI 8510.01, Risk Management Framework (RMF) for DoD Information Technology (IT) DODI 8540.01, Cross Domain (CD) Policy DODI 8580.1, Information Assurance (IA) In The Defense Acquisition System DoD Application Security and Development STIG - Version 3, Release 10 DoD Test and Evaluation Management Guide, December 2012

(U) Tasks

(U) Operating Constraints (U//FOUO) Completed increments shall comply with all USCYBERCOM cyber security guidelines for accreditation to install and operate software on USCYBERCOM networks. The contractor shall not, without written approval of the contracting officer, incorporate any copyrighted or licensed computer software under this contract unless it has met the requirements of DFARS 252.277-7014. Software will be able to operate on hardware cluster configurations that comply with the minimum recommended configuration provided by USCYBERCOM.

(U//FOUO) The contractor shall follow test plans, code quality results, and test results for all software products delivered at the time of each product delivery. The contractor shall support government test and evaluation activities to include certification and accreditation, interoperability testing, beta testing, and operational testing. The contractor shall mitigate all Priority I and Priority II findings, as defined by the test plan.

(U//FOUO) This effort shall demonstrate the analysis of data from many different data sources; therefore, the ingestion of data is a major focus. The effort shall focus on distributed services, analytic integration, and other activities of defensive cyber operations of the Department of Defense Information Network (DoDIN). This effort shall bring together the efforts NSA, USCYBERCOM, Army, and other mission partners are performing around the BDP as an enterprise architecture.

(U) BDP Optimization and System Design & Engineering (U//FOUO) This effort shall significantly enhance the capabilities of the core BDP platform. The contractor shall provide systems engineering, systems design, and software development for capabilities described below.

(U) Task 1 – System Administration (U//FOUO) The contractor shall utilize USCYBERCOM Amazon Web Services (AWS) environments to support the USCYBERCOM missions occurring at the tactical edge and enterprise. The environments shall be able to allow users the ability to access and download PCAPs relevant to their mission. The environment shall provide the ability for authorized users to access separate Rapid Analytic Deployment and Management Framework (RADMF) BDP instances of training, development/test, staging, and production environment. The number of environments shall be determined by mission requirements and administrative capacity. These environments shall be managed by qualified systems administrators and kept operational for the duration of the period of performance. Down time shall be minimized during peak hours and upgrades and installs planned to occur outside of the peak times the mission users need to access the environments.

(U//FOUO) The contractor shall support the operations and maintenance of the clusters, user access permissions, and the transfer of data between clusters for the period of performance. In addition, the contractor shall identify opportunities to enhance the BDP and provide a monthly report detailing any findings for possible distribution to the BDP community. The contractor shall also utilize the technologies developed and implemented as they become available. This shall include the Distributed Query capabilities, the BDP optimizations, the data ingest, the analytics, and the Cross Domain capabilities that may be implemented during the period of performance.

(U//FOUO) The contractor shall manage the raw packet capture (PCAP) data loaded into the AWS S3 storage. This storage is temporary for processing raw PCAP. Upon processing, the data must be transferred to the permanent location that the Cyber Protection Teams (CPTs) can access remotely, and the metadata must be transferred to the Big Data Platform (BDP) repositories (as required). The system administrator shall manage account access to this data and ensure the data follows all standards and policies as directed by USCYBERCOM.

(U//FOUO) The contractor shall provide support to the BDP deployments on NIPRNet, SIPRNet, and JWICS environments provided by the Government with experienced and qualified personnel familiar with deploying the BDP and capabilities running on the BDP to Amazon Web Services (AWS) GovCloud, S-C2S, and C2S environments. The contractor shall also support operations and maintenance of the BDP in the Cyber Immersion Lab (CIL).

(U//FOUO) The contractor shall provide operations and maintenance support to the CYBERCOM BDP instances to include updating to new versions, patching, account management, and troubleshooting technical difficulties. The contractor shall provide technical support for integrating Unified Platform processes into the BDP (i.e. distributive query, analytic test and deployment). The contractor shall assist in any future accreditation and certification of this prototype when it transitions from an applied research prototype to an operational component of the Unified Platform.

(U//FOUO) The Contractor shall prototype a landing page that creates a proof of concept for access management (streamlined DD Form 2875 process), so that users requesting access to the USCYBERCOM BDP instances have a workflow based access request with the ability to get insights into the process for account access. The contractor implementation shall be in alignment with all applicable DoD policies and the contractor shall enable the integration with the DoD PKI infrastructures for NIPRNet, SIPRNet, and JWICS along with the applicable attribute stores.

(U) Task 2 - Data Ingest and Integration to the BDP (U//FOUO) The contractor shall coordinate with USCYBERCOM to process the data to provide metadata necessary for the Big Data Platform to enable big data analytics. The contractor shall assist USCYBERCOM with tagging and parsing the packet capture and other required data (as defined by USCYBERCOM) being ingested in the BDP.

(U//FOUO) The contractor shall enhance the existing data dictionaries and develop new ones for identified data feeds. The data dictionaries shall include data source field names, corresponding catalog types, and the government-directed policy-based access controls for the data elements.

(U//FOUO) The contractor shall utilize USCYBERCOM data ingest parsers for the ingestion of operational mission required data sources. USCYBERCOM shall provide samples and documentation for the data feeds to enable the contractor to ingest them into the BDP. Due to the mission requirements, data feed development shall consist of enhancement of existing data feeds and modification for the missions.

(U//FOUO) The contractor shall utilize existing USCYBERCOM analytics. The contractor shall complete the integrations by extracting data for analysis, creating data reduction jobs as necessary to eliminate duplicate or unnecessary data, assisting with the deployment of required packages, and performing the deployment of analytics and user interfaces. The contractor shall support the testing, deployment, integration, and sustainment of BDP analytics as required. The contractor shall also assess and evaluate implementing analytics as developed by others on the BDP. As necessary, the contractor shall support the integration and modification of analytics as necessary for operation on the BDP platform. The contractor shall assist with integrating government furnished data analytic platforms and applications into the virtual environment.

(U) Task 3 - Data Transport (U//FOUO) The contractor shall coordinate and transfer data to support the large data collection activities of the mission. On an as needed basis, to support operational requirements, the contractor shall provide secure means of transporting network attached storage devices or utilize virtual private network (VPN) methods. The contractor shall track data transport, and coordinate data transfer as required (from the contractor facility to mission sites). The contractor shall provide technical support to the CPTs on employment and interface with Amazon tech support if the teams are at a location where direct contact is not feasible.

(U) Task 4 – Information Systems Security Support (U//FOUO) The Contractor shall provide support to the following information systems security requirements:

· Ensure systems are operated, maintained, and disposed of in accordance with internal security policies and practices outlined in the security plan. The contractor shall ensure that all users have the requisite security clearances, authorization, and need-to-know, and are aware of their security responsibilities before granting access to the BDP.

· Report all security-related incidents to the Information Systems Security Manager (ISSM). The contractor shall initiate, with the approval of the ISSM, protective or corrective measures when a security incident or vulnerability is discovered.

· Support the accreditation of the BDP deployed into AWS GovCloud, S-C2S, and C2S environments by developing the appropriate documentation and artifacts to create a comprehensive Risk Management Framework package for the assessment team, to include the System Security Plan (SSP)

· Develop and maintain a System Security Plan. The contractor shall conduct periodic reviews to ensure compliance with the SSP. The contractor shall ensure Configuration Management (CM) for security-related IS software, hardware, and firmware is maintained and documented.

· Ensure that system recovery processes are monitored to ensure that security features and procedures are properly restored.

· Ensure all IS security-related documentation is current and accessible to properly authorized individuals.

· Formally notify the ISSM and Authorizing Official when changes occur that might affect accreditation.

· Ensure that system security requirements are addressed during all phases of the system life cycle.

· Follow procedures developed by the ISSM, authorizing software, hardware, and firmware use before implementation on the system

(U) Manpower Estimate (U//FOUO) The following is provided as guidance for determining the overall level of effort for the tasks outlined above. Alternative manpower proposals may be submitted for review and approval by the Government. Labor category descriptions are located in Appendix B

(1 FTE = 1,880 hours) Location

(U) Management Documentation (U/FOUO) The Contractor shall be required to generate Monthly Status reports and Quarterly meetings which shall be used by USCYBERCOM to track progress. Meetings and trips shall be documented.

(U) Security (U//FOUO) The contractor shall fully comply with all security requirements established for this contract by the Contract Security Classification Specifications (DD254). The contractor shall submit, update, and maintain a current Contractor Position Roster Log (CPRL). The CPRL is to be managed according to published guidelines from the Office of Security Services Policy Issuance 10-10, Industrial Security Program, dated March 1996.

(U//FOUO) Facility Security Clearance. The work to be performed under this contract/order is up to the Top Secret level and will require Sensitive Compartmented Information (SCI) access eligibility for some personnel. Therefore, the company must have a Top Secret Facility Clearance from the Defense Security Service Facility Clearance Branch.

(U//FOUO) The contractor shall provide, if necessary, TS/SCI-cleared personnel, with full scope polygraph (unless a conditional certification of acceptance (CCA) is granted) who are qualified and fully trained.

(U//FOUO) All Contractor personnel assigned to work on classified activities shall be cleared, if necessary, at the Top Secret/Sensitive Compartmented Information (TS/SCI) level clearance in accordance with "Personnel Security Requirements for Contractor Access to NSA/CSS Sensitive Compartmented I (Attachment to DD 254)", dated January 2005. Individuals possessing a current Counter intelligence (CI) polygraph will be considered for a contract position that requires a full-scope polygraph if they possess a Conditional Certification of Access (CCA) pending the successful completion and adjudication of a full-scope polygraph. In certain circumstances and only with COR approval, uncleared personnel may be permitted to perform specific unclassified tasks (e.g. technical writing) without a final security clearance, provided that individual's security clearance has been initiated by submission of security forms and paperwork through proper channels.

(U//FOUO) Uncleared contractor personnel may be authorized to perform unclassified tasks. However, non-U.S. citizens, to include immigrant aliens, are not authorized access to any portions of this contract or to commence performance of any work under this contract without express written approval from the Contracting Officer. In accordance with the conditions as prescribed by 352.204-9014, NOTIFICATION OF NON-U.S. CITIZEN PARTICIPATION, the contractor shall provide all the requested information for processing of each non-U.S. citizen seeking access to or being proposed to perform work on this contract.

(U//FOUO) The contractor shall comply with OPSEC plans and policies provided by the government. All subcontracts for which any subcontractor employees will be required to have access to classified information shall also be subject to the same security requirements as set forth above.

(U//FOUO) Other Direct Costs are authorized, with approval by COR and shall be itemized and reported per Contract Data Requirements List (CDRL) item described in paragraph 5.1.

(U) Reports, Data and Deliverables (U//FOUO) The Contractor shall deliver all Contract Data Requirements List (CDRL) for the Government to track the Contractor’s deliverables. All CDRLs shall be delivered to the COR in electronic form. CDRLs cover sheet shall indicate the date and tracking / version number of the CDRL document for cross-referencing purposes. Required CDRL’s are documented in form DD1423.

(U) Monthly Status Report (CDRL Item A001) (U//FOUO) An unclassified itemized financial status report which shall include actual hours by employee, details of ODC expenses, expected funds depletion date, a chart of budgeted cost for work performed (BCWP), actual cost for work performed (ACWP) and variance at completion (VAC) is to be delivered to the COR. Tables, lists and charts shall also be delivered in editable Microsoft Excel format. Monthly Status Reports are due no later than ten (10) working days after the end of the month.

(U//FOUO) A work breakdown structure will be provided which shall be in MS Project format, updated for each existing and new significant action item, showing new and completed items that show management metrics. Management metrics that shall include at a minimum: start date, planned and actual hours expended by member of the staff (so that all hours charged against the effort are accounted for), percent completed and finish date.

(U) Project Management Plan (CDRL Item A002) (U//FOUO) The Contractor shall generate a project management plan (PMP) that shall be delivered within three (3) weeks of award. The plan shall be approved by the COR. The project management plan shall be a tailored document that includes a Work Breakdown Schedule (WBS), a schedule, financial plan, processes for management and addresses when the plan needs to be updated.

(U) Quarterly Review Report (CDRL Item A003) (U//FOUO) The Contractor shall deliver a quarterly review report to the COR in electronic form. This document will include the activities and progress of efforts in meeting USCYBERCOM goals. The unclassified document shall indicate the date and tracking / version number of the posted document for cross-referencing purposes. Quarterly Review Reports are due fifteen (15) working days after the end of each quarter, based on calendar year.

(U) Trip Agendas and Reports (CDRL Item A004) (U//FOUO) The Contractor shall deliver trip agendas and reports for each trip outside their place of performance. The trip agenda shall be delivered before the trip commences. The trip report shall be delivered within five (5) business days after returning from the trip.

(U) Analytic Studies and Reports (CDRL Item A005) (U///FOUO) On an as required basis, the Contractor shall be tasked to deliver analytical studies or reports to improve the efficiency of the BDP, such as cost/benefit analysis of computational scaling, data storage management, etc. Format and Topic of reports shall be determined by operational need and other requirements to be furnished by the Government.

(U) Qualifications of Personnel (U//FOUO) The Contractor shall demonstrate capabilities of proposed personnel via resume.

(U) Subcontractors (U//FOUO) Subcontractors and consultants are anticipated. Use of subcontractors and consultants other than those included in the contactor’s proposal shall require prior approval by the Contracting Officer.

(U) Administrative Information (U//FOUO) Technical discussions held by the Contractor with end-users, sponsors, or others do not authorize ANY change to cost, schedule, or scope of this effort. Such matters must be resolved by the Contracting Officer.

(U) Appendix A: Rights in Technical Data (U//FOUO) The contractor shall not incorporate copyrighted or licensed computer software under this contract without the government’s prior written consent. The following software components developed by the contractor at private expense may be included in software deliverables: RADMF, Deplicon, Metatron, Ion, Orion, Optimus, Cliffjumper, Wheeljack, Springer, Kup, Arcee, and Powerglide (technical descriptions of these software components are available upon request). If these software components are provided as a software deliverable, the contractor shall grant the government use of these software components at no additional charge but will provide these components with “restricted rights” as defined in DFARS 252.227-7014. If these software components are included or embedded within a software deliverable that is developed under this contract, the contractor shall grant the government “government purpose rights” as defined in DFARS 252.227-7014 in the deliverable. The contractor may specifically reserve all rights in intellectual property developed under or derived from this contract that is not specifically identified in the Statement of Work as a contract deliverable.

(U//FOUO) In accordance with DFARS 252.227-7017, Identification and Assertion of Restrictions on the Government's Use, Release, or Disclosure of Computer Software, the Contractor asserts for itself, or the persons identified below, that the Government's rights to use, release, or disclose the following computer software should be restricted:

Asserted Rights Category***

Name of Person Asserting Restrictions****

*Generally, development at private expense, either exclusively or partially, is the only basis for asserting restrictions on the Government's rights to use, release, or disclose computer software.

**Indicate whether development was exclusively or partially at private expense. If development was not at private expense, enter the specific reason for asserting that the Government's rights should be restricted.

***Enter asserted rights category (e.g., restricted or government purpose rights in computer software, government purpose license rights from a prior contract, rights in SBIR software generated under another contract, or specifically negotiated licenses).

****Corporation, individual, or other person, as appropriate.

Appendix B- Labor Category Descriptions

(U) System Administrator – Provides support for implementation, troubleshooting and maintenance of Information Technology (IT) systems. Manages IT system infrastructure and any processes related to these systems. Provides support to IT systems including day- to-day operations, monitoring and problem resolution for all of the client/server/storage/network devices, mobile devices, etc. Provides Tier 1 (Help Desk) and Tier 2 (Escalation problem identification, diagnosis and resolution of problems. Provides support for escalation and communication of status to Command management and internal customers. Provides support for the dispatch system and hardware problems and remains involved in the resolution process. Configures and manages both UNIX and Windows operating systems and installs/loads operating system software, troubleshoots, maintains integrity and configures network components along with implementing operating systems enhancements to improve reliability and performance.

(U) Qualifications: Three (3) years’ experience as an SA in programs and contracts of similar scope, type, and complexity is required. Bachelor’s degree in a computer science, information systems, or related field from an accredited college or university is required. One year of relevant experience may be substituted for each year of required education. Relevant certifications may be substituted for education or years of experience

(U) Information Systems Security Engineer - (U) The Information Systems Security Engineer (ISSE) performs or reviews technical security assessments of computing environments to identify points of vulnerability, non- compliance with established Information Assurance (IA) standards and regulations, and recommend mitigation strategies. Validates and verifies system security requirements definitions and analysis and establishes system security designs. Designs, develops, implements and /or integrates IA and security systems and system components including those for networking, computing, and enclave environments to include those with multiple enclaves and with differing data protections/classifications requirements. Builds IA into systems deployed to operational environments. Assists architects and system developers in the identification and implementation of appropriate information security functionality to ensure uniform application of Command security policy and enterprise solutions. Supports the building of security architectures. Enforce the design and implementation of trusted relations among external systems and architectures. Assesses and mitigates system security threats/risks throughout the program lifecycle. Contributes to the security planning, assessment, risk analysis, risk management, certification and awareness

(U) Qualifications: Seven (7) years of experience as an ISSE on programs and contracts of similar scope, type complexity required. Bachelor’s degree in Computer Science, Information Assurance, or related discipline from an accredited college or university is required. DoD 8570 compliance with IASAE Level 2 is required. One year of relevant experience may be substituted for each year of required education. Relevant certifications may be substituted for education or years of experience

(U) Project Manager (PM) – The Program Manager is responsible for the successful cost, schedule, and performance of the contract. Serves as the focal point of contact for the Contracting Officer (CO), The Contracting Officer’s Representative (COR), the Government Program Manager, and the contractor’s senior management. Directly contributes to the program efforts in several areas, including cost management/avoidance, schedule estimation and tracking, contract performance management, risk management, requirements analysis, and quality assurance activities. Ensures proper performance of tasks necessary to provide the most efficient and effective execution of the contract.

(U) Qualifications: Five (5) years’ experience as a program or project manager directly supporting programs and contracts of similar scope and complexity is required. PM shall have at least one (1) year of demonstrated experience supporting resource allocation, project costing, deliverable tracking, schedule and financial data monitoring, and financial reporting. Bachelor’s degree in Business, Finance, Accounting, Information Systems, or related field. One year of relevant experience may be substituted for each year of required education. Relevant certifications may be substituted for education or years of experience.

(U) Project Technical Lead – The technical Subject Matter Expert (SME) will be well versed in the overall scope of activities portrayed within the Statement of Work and provide guidance to the PM on decisions concerning possible changes, requirements, troubleshooting or implementation of new technologies required to maximize performance or to enable the ingest, normalization, and processing of data sets of interest to the Government.

(U) Qualifications: Five (5) years’ experience dealing with big data platforms, big data analytics, and integration of both COTS & GOTS software. Bachelor’s degree in Computer Science, engineering, or other associated technical degree is required. One year of relevant experience may be substituted for each year of required education. Relevant certifications may be substituted for education or years of experience

(U) Data Tagging SME – The data tagging SME will provide the necessary activities required to implement current and new dataflows into the Big Data Platform and AWS cloud environments applying the proper tagging data wrappers to be able to index and search data ingested into the system.

(U) Qualifications: Three (3) – five (5) years’ experience with data transformation, normalization, indexing and application of appropriate data wrappers to ensure data is transported safely without malicious activity to allow data stored in cloud environments to be queried by analysts. Bachelor’s degree in Computer Science, Statistics, Information Technology, or equivalent field. One year of relevant experience may be substituted for each year of required education. Relevant certifications may be substituted for education or years of experience.

(U) Data Scientist - The Data Scientist will support the implementation of end- to-end proof of concepts for leading edge data mining and analytics systems. They will be responsible for the implementing innovative methodologies for extracting key parameters from big data coming from various sensors. The data scientist will utilize their expertise in machine learning, statistical data analytics, and predictive analytics to help implement analytics tied to cyber security and hunting methodologies and applications. This position will not be responsible for the development of analytics, but will support the overall implementation of analytics as developed by other sources into the BDP.

(U) Qualifications: B.S. degree in Computer Science, Electrical Engineering, Statistics, or equivalent fields. Eight (8) + years of Data Scientist experience. Conduct data analysis and orchestration of a large volume of security data sources, threat indicators, and customer logs. Apply latest technologies in machine learning, data mining, and predictive analytics to correlate the big datasets and events, and derive dynamic cybersecurity rules. Generate highly accurate and near real-time security alerts based on the dynamic rules. Architect and work closely with other team members to develop a scalable cloud based cybersecurity data analytics engine.

(U) BDP Data SME - The BDP Data SME will provide the necessary activities required to design and build relational databases, perform data analysis design, and archive/recovery design and implementation. Candidate will develop strategies for data acquisition, archive recovery, and implementation of a data platform. Candidate will translate operational needs into long-term architecture solutions, as well as develop data platform blueprints, evaluate infrastructure platforms, and perform systems integration. The Candidate will review and develop object and data models and the metadata repository to structure the data for better management and quicker access.

(U) Qualifications: Five (5) years’ experience dealing with big data platforms and big data ingest and normalization. Bachelor’s degree in Computer Science, Statistics, Information Technology, or other associated technical degree is required. One year of relevant experience may be substituted for each year of required education. Relevant certifications may be substituted for education or years of experience.

(U) Sr. Software Engineer (SWE) – Leads the Development, maintenance, and enhancement of complex and diverse software systems (e.g., processing –intensive analytics, novel algorithm development, manipulation of extremely large data, sets, real time systems, and business management information systems) based upon documented requirements. Leads the team. Oversees the review and testing of software components for adherence to the design requirements and documents test results. Resolves software problem reports. Leads the team in utilizing software development and software design methodologies appropriate to the development environment. Provides specific input to the software components of system design to include hardware/software trade-offs, software reuse, use of Commercial off the shelf (COTS)/ Government Off the Shelf (GOTS) in place of new development and requirements analysis and synthesis from system level to individual software components.

(U) Qualifications: Hands on experience in programs or contracts with similar scope, type, complexity is required. Has advanced degree in Computer Science, Engineering, Mathematics, Physics, or a related field, and/or certifications related to software development. Working experience with DoD Cyber Challenges and use cases. Bachelor’s degree in Computer Science or related discipline from and accredited college or university is required. One year of relevant experience may be substituted for each year of required education. Minimum 7 years of software engineering experience.

(U) Mid-Level Software Engineer (SWE) – Supports the Development, maintenance, and enhancement of complex and diverse software systems (e.g., processing –intensive analytics, novel algorithm development, manipulation of extremely large data, sets, real time systems, and business management information systems) based upon documented requirements. Able to work individually or as part of a team. Supports the review and testing of software components for adherence to the design requirements and documents test results. Resolves software problem reports. Supports the utilization of software development and software design methodologies appropriate to the development environment. Provides input to the software components of system design to include hardware/software trade-offs, software reuse, use of Commercial off the shelf (COTS)/ Government Off the Shelf (GOTS) in place of new development and requirements analysis and synthesis from system level to individual software components.

(U) Qualifications: Hands on experience in programs or contracts with similar scope, type, complexity is required. Working experience with DoD Cyber Challenges and use cases. Bachelor’s degree in Computer Science, Engineering, Mathematics, Physics, or a related field from and accredited college or university is required. One year of relevant experience may be substituted for each year of required education. Minimum 3 years of software engineering experience. Relevant certifications may be substituted for education or years of experience.

(U) Jr. Software Engineer (SWE) – Supports the Development, maintenance, and enhancement of complex and diverse software systems (e.g., processing –intensive analytics, novel algorithm development, and manipulation of extremely large data, sets, real time systems, and business management information systems) based upon documented requirements. Able to work individually or as part of a team. Supports the review and testing of software components for adherence to the design requirements and documents test results. Resolves software problem reports. Supports the utilization of software development and software design methodologies appropriate to the development environment. Provides input to the software components of system design to include hardware/software trade-offs, software reuse, use of Commercial off the shelf (COTS)/ Government Off the Shelf (GOTS) in place of new development and requirements analysis and synthesis from system level to individual software components.

(U) Qualifications: Hands on experience in programs or contracts with similar scope, type, complexity is required. Bachelor’s degree in Computer Science, Engineering, Mathematics, Physics, or a related field from an accredited college or university is required. Minimum 1 year of software engineering experience. One year of relevant experience may be substituted for each year of required education. Relevant certifications may be substituted for education or years of experience

(U) Technical Writer - Responsible for technical writing, preparing documents, reports, responses, and briefings targeted to a wide range of audiences, to include senior management. Effectively formatting/editing technical publications, to include writing, editing and illustration. Experience with word processing, presentation, spreadsheet, and database software (PowerPoint, MS Word, MS Excel, and MS Project).

(U) Qualifications: Five (3) years’ experience writing, developing and editing technical documents and reports in compliance with Government CDRL requirements. Bachelor’s degree in English or other associated arts degree is required. One year of relevant experience may be substituted for each year of required education. Relevant certifications may be substituted for education or years of experience.

UNCLASSIFIED//FOR OFFICIAL USE ONLY

BDP Engineering and Development Services II Page Page 17 of 17 image1.jpeg