Attachment VI - LaborCategoryDescriptions and Staffing Levels dtd 20 Jan 2011.docx

C4IT SERVICE CENTER

INFORMATION TECHNOLOGY (IT) INFORMATION ASSURANCE (IA) SECURITY MANAGEMENT SUPPORT SERVICES

HSCG79-11-R-123456

LABOR CATEGORY DESCRIPTIONS & STAFFING LEVELS

PROGRAM MANAGER –Preferred experience in the field of overall management. Incumbent acts as the counterpart to the government program/technical manager for IT IA Security Management program. Incumbent provides/technical support involving multiple tasks/projects. Requisite responsibilities include directing and/or supervising personnel, providing management support in the form of organization, directing and coordinating, planning and execution of all program/technical support activities. Incumbent must have information technology experience and experience in effectively communicating with higher echelon personnel in order to interface with all levels of management. Program Manager assigns duties and a review work of subordinates and establishes and alters management structure as necessary within the program to effectively direct program/technical support activities. Meets and confers with government officials regarding the status of specific program/technical activities and progress. Program Manager may provide expertise in the field of resolution of problems, issues or conflicts as required. Program Manager ensures that program schedule, performance, and deliverables are met.

Education: Preferred Baccalaureate Degree from an accredited University in the field of Business, Law, Economics, Mathematics, or Engineering and a minimum of seven (7) years of continuous experience in the field of C4IT engineering/logistics support and/ or management. A current Professional Project Manager (PMP) Certificate is required. A secret clearance is required.

PROJECT TEAM LEAD(s) – Provides project management professional services for smaller projects or task orders, providing leadership and is responsible for project direction through successful performance of a variety of detailed, diverse elements of project management tasks. Project Team Lead(s) direct completion of tasks within estimated timeframes and budget constraints. Schedules and assigns duties to subordinates and ensures assignments are completed as directed. Incumbent interfaces with Government representatives and reports to the Program Manager on project progress/status and various issues or problems. Duties include, program/contract management; technical guidance and oversight; supervision of design, development, and implementation of complex computer systems; business area analysis; project planning; coordination of resources (including subcontractor management); project status reporting; and performance measurement and reporting.

Education: Preferred Baccalaureate Degree from an accredited University in the field of Business, Law, Economics, Mathematics, or Engineering. Substituted experience in a related field (e.g., completion of DOD/DHS Senior enlisted or Junior Officer Leadership School) and a minimum of five (5) years of continuous experience in the field of C4IT engineering/logistics support and/or management. Demonstrated expert must have received formal educational training in Project Management with the past two (2) years. A secret clearance may be required.

DATABASE ADMINISTRATOR (DBA) - DBA administers and controls data resources; implementation of data dictionaries; data security and integrity; performance of database backups; use of data modeling techniques to analyze and specify data requirements and structures; definition of logical and physical data views; and tuning database performance.

Education: Preferred to have achieved one of the following database software program certificates from an accredited technical school within the past two (2) years: Oracle database certifications or Microsoft Certified Database Administrator or MCDBA. Demonstrated Expert: Includes a minimum of four (4) years successful hands-on experience of related work experience. A secret clearance is required.

Computer Security Specialist - evaluates and applies the technical, operational and physical information security to various system and system activities. Has knowledge of computer hardware and operating systems (Windows and UNIX). The Specialist assesses information security risks, threats, vulnerabilities; documents findings; and summarizes recommendations in written and oral form for the USCG. The specialist should be capable of designing, configuring, integrating and deploying open source and commercial applications and tools to support Information Assurance. Computer Security Specialist should have thorough knowledge of all aspects of Information Assurance in the areas of CGCIRT, C&A and/or TEMPEST to minimize any type of loss and destruction to information technology systems assets and data. The Specialist should also be proficient in researching and evaluating emerging information technologies relevant to information security; interpreting requirements and providing analytical reviews for system architecture, equipment and software; and providing recommendations. The Specialist should be proficient in IA policies, standards, and best practices and ability to convey information to technical and non-technical audiences verbally and in writing.

Senior Computer Specialist Qualifications and skills based on the DOD 8570.01-M IAT Level III position:

· Capable of interpreting and applying DOD and NIST IA related documentation.

· Certifications: MCSE, CISSP, CAP; SANS GIAC.

· Certification and Accreditation, Risk assessment and IT auditing.

· Computer Forensics, Intrusion detection, incident response, penetration testing.

· Programming in VBS, Unix Shell scripting, PHP, Perl, SQL.

· 7 years of combined education, work experience and certifications of Information Assurance specialized experience and information technology experience.

· Microsoft Windows Server and UNIX/Linux administration.

· Installation, configuration and use of IT assessment tools.

· Engineer and design network security architectures.

· Configuration and concepts in Firewall, VPN, router, switch, wireless.

· Configuration and concepts in AV, patch management.

· Configuration and concepts in domain, IIS, SQL, web, client/server services.

· Experience with virtual machine environments.

· Excellent verbal, interpersonal and written communication skills

· Strong analytical, problem-solving and decision making capabilities

· Team player with the ability to work in a fast-paced environment

· Ability to multi-task in a fast-paced environment

· Ability to obtain and maintain Secret or Top Secret Clearance.

EDUCATION: An advanced degree in Computer Science, Information Systems, Engineering, Business, or other related scientific or technical discipline.

Middle Computer Specialist Qualifications and skills based on the DOD 8570.01-M IAT Level II position:

· Certifications: MCSE, CISSP, CAP; SANS GIAC

· Capable of researching and applying DOD and NIST IA related documentation.

· Certifications: MCSE, CISSP, CAP; SANS GIAC.

· Computer Forensics, Intrusion detection, incident response, penetration testing.

· 3 years of combined education, work experience and certifications of Information Assurance specialized experience and information technology experience.

· Microsoft Windows Server and UNIX/Linux administration.

· Use and analyze IT assessment tools.

· Knowledge and capable of reading network security architectures.

· Concepts in Firewall, VPN, router, switch, wireless.

· Concepts in AV, patch management.

· Concepts in domain, IIS, SQL, web, client/server services.

· Experience with virtual machine environments.

· Good verbal, interpersonal and written communication skills.

· Has analytical, problem-solving and decision making capabilities.

· Team player with the ability to work in diverse environment.

· Ability to multi-task.

· Ability to obtain and maintain Secret or Top Secret Clearance.

EDUCATION: A Computer Science, Information Systems, Engineering, Business, or other related scientific or technical discipline.

Junior Computer Specialist Qualifications and skills based on the DOD 8570.01-M IAT Level I position:

· At direction can research DOD and NIST IA related documentation.

· Certifications: within 6 months can obtain MCSE, CISSP, CAP or SANS GIAC.

· Can assist with Certification and Accreditation, Risk assessment and IT auditing.

· Can assist with Computer Forensics, Intrusion detection, incident response, penetration testing.

· 0-5 years of combined education, work experience and certifications of Information Assurance specialized experience and information technology experience.

· Microsoft Windows Server and UNIX/Linux usage.

· Can use IT assessment tools.

· Knowledge of network security architectures.

· Knowledge of purpose and usage of Firewall, VPN, router, switch, wireless.

· Knowledge of AV, patch management.

· Knowledge of domain, IIS, SQL, web, client/server services.

· Verbal, interpersonal and written communication skills.

· Team player

· Ability to obtain and maintain Secret or Top Secret Clearance.

EDUCATION: A computer related scientific or technical discipline.

COMMSEC (TEMPEST) Specialist – The COMMSEC (TEMPEST) Specialist shall evaluate, update, and transmit to shareholders the new Coast Guard TEMPEST document, COMDTINST M2241.6. Receive, evaluate, make recommendations on, and include input from shareholders into the new document. Visually inspect assigned units. Observe, evaluate, and make recommendations concerning Instrumented TEMPEST Survey (ITS) on same. Participate in TEMPEST forums to help formulate national level TEMPEST response and policies. Evaluate reports from field for accuracy, consistency and trend analysis. Make recommendations on reporting guidelines to better provide a consistent, useful document to the field for correction and to TISCOM and MLC for analysis. Review past TEMPEST inspection reports for trend analysis. Maintain TEMPEST and installation reference library. Respond to TEMPEST inquiries. Headquarters and field units on installation guidance, report formatting, and inspection requirements. Discover and evaluate outside sources critical to CG TEMPEST effort. Identify source of criticism. Evaluate validity of concerns. If concerns are invalid, identify sources of incorrect criticism, evaluate competency in TEMPEST field, prepare for future comments, and provide evaluations and responses as needed. Prepare and recommend responses to ensure senior CG personnel have an understanding of the CG TEMPEST program, actions that have been taken, and what basis is used to evaluate criticism. Respond to and provide training for Coast Guard Field TEMPEST Inspection personnel. Provide guidance and training for personnel associated with TEMPEST concerns. Attend meetings and represent CTTA as directed. Review and comment on papers and instructions as needed (ex. draft CNSS Instruction 7003, Protected Distribution Systems.)

EDUCATION: Technical background from a variety of disciplines and TEMPEST courses. (All TEMPEST courses are taught by the Air Force sponsored by NSA at Lackland AFB, San Antonio).

· TEMPEST Fundamentals (required)

· TEMPEST RED/BLACK Design course (required)

· Test Equipment course (preferred)

· Instrumented Field Testing (preferred)

· Instrumented Laboratory Testing (preferred)

· SPAWAR or Coast Guard Visual Inspector training (preferred, but refreshers will be required)

C4IT SERVICE CENTER

INFORMATION TECHNOLOGY (IT) INFORMATION ASSURANCE (IA) SECURITY MANAGEMENT SUPPORT SERVICES

HSCG79-11-R-123456

PROJECTED STAFFING

Attachment VI – Labor Category Descriptions and Staffing Levels