Flank Speed_PWS.pdf

Performance Work Statement (PWS)

Operation Flank Speed Support Services

30 November 2023

1.0 Background:

The Navy is transitioning from an on-premise architecture to a cloud centric, Zero Trust, architecture that enables secure access to the Microsoft Azure “Flank Speed” open and flexible cloud computing platform. The initiatives are aimed at bolstering Cloud Computing productivity services and improving resiliency in the Classified and Unclassified environments while delivering services across the Continental United States (CONUS) and outside CONUS

(OCONUS). Efforts will provide enhanced mobile and telecommuting capabilities, along with maximizing security and availability, while leveraging cloud efficiencies that include Machine

Learning and Artificial Intelligence. Contractor support will include sustaining the current Azure

Impact Level (IL) 4/5 security environment, support standing up a classified IL6 cloud environment, implementing efficiencies across both tenants, and delivering weekly status reports depicting network health and user impact.

Contractor support will augment the management, sustainment, and support for IL 4/5 environments, and establish IL6 support model for the Azure-based enterprise cloud architectures. The enterprise architectures are designed to support robust authentication, device hardening, and the reduction of the overall attack surface; improvements shall enhance capabilities to detect and quickly respond to adversarial activities. The implementation of Flank

Speed services are instrumental in elevating the Navy's cybersecurity posture and advancing all concepts demanded in a Zero Trust model. Furthermore, Microsoft Azure expertise is sought-after to facilitate expanding the existing Operation Flank Speed (OFS) infrastructure, including integrating with Naval Identity Services (NIS), the execution of design refinements, the deployment of additional advanced security features through automation, and the incorporation of new collaboration functionalities. These capabilities are essential to enhancing Zero Trust principles while further improving capabilities that include Azure Hyper Converged (HCI) stacks that deliver enhanced computing power and more adaptable access to the Microsoft Azure Cloud and M365.

2.0 Objective:

The objective is to procure a non-personal services contract to aid the government in various efforts, including Service Strategy and Design, Service Operations, Service Transition, and

Continual Service Improvements across the cloud tenant. Contractor Support must include, but not limited to architectural design, network monitoring, process development, sustainment, implementation, and operation of advanced security automation and collaboration features.

These capabilities are essential to facilitate maximum access to Microsoft Azure Cloud services in a rapidly changing operational networking environment. Network access to the maximum extent feasible is crucial for users operating remotely (teleworking) or on-site, utilizing

Department of Defense (DoD) networks, and shall align with the guidance as outlined in

USCYBERCOM PLANORD 20-0042. Additionally, contractor services are required to deliver ongoing support for OFS account management (i.e., e-Discovery, Records Management, Litigation Hold, etc.), and the migration of specific network components, along with all associated support activities. This framework, founded on Azure identity and security services, will enable maximum access and secure convergence of both IL5 and IL6 networks that span across ONENet, NMCI, IT-21/CANES, and Excepted networks. The totality of all efforts are crucial to broadening cloud capabilities, maximizing resiliency, and implementing state-of-the art technical advances using Artificial Intelligence and Machine Learning; all work is intended to fully support future application integration as part of the broader Navy cloud migration strategy.

3.0 Scope:

The scope of work encompasses the management of operational data spanning several Impact

Levels (IL) of information management, including IL 4, 5, and 6, while addressing all use cases involving Controlled Unclassified Information (CUI) and Navy Nuclear Propulsion Information

(NNPI). For direct contractor support within the IL6 environment, access to classified information at government facilities is required for all support staff. The ongoing implementation of an architecture that supports cloud services and the adoption of Zero Trust principles represents a significant transformation for both the Navy and the broader DoD. This transformation will demand substantial efforts, including the update or drafting security policies, the re-engineering of systems, and the retraining of personnel to effectively operate, maintain, and secure the Azure Cloud environment. Furthermore, the Navy will continue to maximize the utilization of new collaboration and productivity features that require meticulous planning, engineering, configuration, and change management. The Navy's strategy also includes migrating additional excepted networks and new applications into the OFS architecture. Future architecture improvements include implementing enterprise cloud solutions that include installing Azure HCI Stacks that will effectively bring cloud services closer to end-users. This shift aligns with network resiliency and the Navy's objectives to enable an enhanced teleworking environment while concurrently reducing data center footprints and embracing cybersecurity principles, such as Zero Trust.

The ongoing development of the enterprise Azure cloud framework is crucial as it will facilitate centralized management and monitoring, improve network flexibility, and expedite the expansion of increased compute capacity and mission workloads where required. Additionally, this contract will support implementing a Records Management capability within the Flank

Speed tenant to meet Department of the Navy (DON) data retention, legal Litigation Hold, CAPSTONE requirements and Freedom of Information Act (FOIA) search requests.

4.0 Period of Performance:

The performance period is anticipated include one (1) 3-week transition period, one (1) 11-month and 1-week base year, four (4) twelve-month option years and one (1) six (6) month option pursuant to FAR 52.217-8 – Option to Extend Services.

Period of Performance

Phase-in Period 11 September 2024 – 02 October 2024

Base Year 03 October 2024 – 10 September 2025

Option Year I 11 September 2025 – 10 September 2026

Option year II 11 September 2026 – 10 September 2027

Option year III 11 September 2027 – 10 September 2028

Option year IV 11 September 2028 – 10 September 2029

FAR 52.217-8 11 September 2029 – 10 March 2030

5.0 Place of Performance:

Work in accordance with this PWS shall be performed at:

(1) Naval Network Warfare Command, 112 Lake View Parkway, Suffolk, Virginia 23435

(2) Ad hoc Local Remote work via authorized VPN standards or situational, as directed by

Government Contracting Officer Representative (COR)

The contractor will not perform regular day-to-day work at any other location unless that work has been authorized by the Contracting Officer's Representative (COR).

6.0 Requirements:

Contractor Support (CS) is required to assist the Navy with the worldwide acceleration and migration to OFS, monitoring network services and availability, and to sustain the continually evolving security and productivity features using Microsoft Azure Zero Trust secure technologies.

OFS CS support activities include, but are not limited to the following:

Engineer solutions to enable key dependencies (e.g., Global Directory and authentication, Direct Routing, Azure Gov services).

Decouple/recommend modifications to hybrid dependencies (e.g., Domain Name Service, Load Balancing, Proxy, and Active Directory).

Manage configurations in the production Operation Flank Speed (OFS) tenant Records

.Management Requirement: Configurations include creation, deployment, and maintenance of retention labels, event types, sensitivity labels, and retention policies.

Support the migration of remaining Navy users from on-premises to OFS including CONUS, OCONUS, Excepted Networks, and Communities of Interest in IL5 and IL6 environments.

Operate, maintain, and secure the OFS tenant throughout the end of this contract

Support the planning, engineering, configuration, and architecture design to achieve OFS objectives.

Support new initiatives and apply rigor to work in progress as it pertains to Records

Management and data retention, Litigation Hold, data spillage, CAPSTONE requirements and Freedom of Information Act (FOIA) search requests.

Provide service desk support in support of user migration and OFS sustainment activities.

Records Management Request: Service desk supports includes ingestion and processing of

RM requests such as record search and retrieval (from RM SPO sites), Capstone email search and retrieval (from Capstone official exchange accounts), eDiscovery queries, litigation hold queries, permissions and access questions, and architecture questions

Provide operations and enterprise management support.

Records Management Request: Enterprise management support to include

1) The generation and distribution of audit logs pertaining to actions taken on RM SPO sites and Capstone official Exchange mailboxes

2) Generation and distribution of MS Purview compliance reporting for RM SPO sites and Capstone official Exchange mailboxes

3) Storage reporting for RM SPO sites and Capstone official Exchange mailboxes.

4) Creation and management of eDiscovery cases

5) Creation and management of Content Searches

6) Creation and distribution of Disposition Reports

7) Facilitation of electronic destruction or transfer to NARA

Assist in the architecture development, planning guidance, and enabling Azure Zero Trust services for applications to consume new identity and security features necessary to maintain end-to-end OFS services.

Assist the acquisition and operational communities in maturing the Integrated Navy

Operations Command and Control System (INOCCS) concept and other cyberspace operations functions.

Assist in enabling the connection of Azure cloud hosting services and OFS to the Department of Defense Information Network (DODIN) following DoD recognized Zero Trust

Architecture. Assist while configuring, managing, and sustaining MS Azure Stacks. Azure

Stacks are being implemented to improve network performance and enable a centrally managed Azure Stack environment managed locally at NNWC Headquarters.

Assist with electronic spillage cleanup which includes discovery and deleting unauthorized content residing in the FS Tenant.

Support the current OFS “Flow 3 and Azure Virtual Desktop” activities that enable the adoption and enablement of the Navy's collaboration and Modern Service Delivery initiatives, to include high arching goals to expand Cloud Access Points (CAP) that will enable direct internet access to OFS services.

Coordinate with Microsoft developers/engineers to understand and document customized configurations to enable OFS to meet DoD Cybersecurity policy and directives.

Support the newly designed enterprise Azure cloud framework and the Department of Navy implementation of a centrally managed and monitored instance that can rapidly onboard and drive operational workloads.

Support the Government to maintain OFS Cloud services, ensure the availability of mission applications, and troubleshoot and resolve problems with all IT equipment as it relates to

Azure cloud and OFS services.

Execute responsibilities as outlined in Section 10.0 – SUPPORT

SERVICES/QUALIFICATIONS/DUTIES

7.0 Security Requirements:

SECURITY: The contractor shall be responsible for adhering to all Department of Defense

(DOD), Department of the Navy (DON) and Command instructions, guidance, orders, directives, and supplements relative to performing tasks set forth in this PWS. The contractor shall not disclose and must safeguard procurement sensitive information, operationally sensitive data, computer systems and data, Privacy Act data, and Government personnel work products that are obtained or generated in the performance of this contract. This includes dissemination of protocols and papers not generally available through the public literature. Neither the contractor nor any of its contract service providers shall disclose or cause to disseminate any information concerning operations of military activities. Such action(s) could result in violation of the contract and possible legal actions.

Access will be granted to Government facilities as required in support of the tasking. Contractor personnel performing work under this contract must meet all requirements for gaining access to

US Government installations. The contractor shall conform to all DoD, DON, and local

(base/installation) security instructions; refer to Contractor Unclassified and Classified Access to

Federally Controlled Facilities, Sensitive Information, Information Technology (IT) Systems or

Protected Health Information.

The scope of work requires access to SECRET information for all contractor personnel.

Contractor personnel shall have the appropriate security clearance on the first day of the period of performance. Where annotated, a SECRET clearance must be based on a Single Scope

Background Investigation (SSBI). SECRET/SSBI is required for any position where system access has the potential of requiring special privileges, including system administration and configuration changes, are expected. Interim SECRET based upon SSBI is acceptable pending final adjudication.

All work is to be performed in accordance with DOD and Navy Operations Security (OPSEC) requirements and in accordance with the DD254 and all attachments.

The contractor shall comply with all applicable federal, state, and local laws and ensure performance is secure while protecting material, equipment, and supplies from damage and loss.

Government security personnel shall have the express right to inspect for security violations at any time during the term of the contract.

The contractor shall be responsible for safeguarding all government equipment, information and property provided for contractor use. At the close of each work period, government facilities, equipment and materials shall be secured.

The Common Access Card (CAC) card serves as the primary method of identification for the contractor employees, as well as providing the basis of Public Key Infrastructure (PKI) access to the Navy/Marine Corps Intranet (NMCI), the NCDOC Excepted network, and numerous Navy web sites, which may also require PKI access. The COR shall assist in providing the contractor the appropriate documentation for obtaining CACs. The contractor shall be responsible for obtaining any Government issued identification cards from former employees or employees whose access has been terminated and to turn those items over to the COR upon termination of employment or access.

Contract personnel shall wear a badge that clearly identifies them as a contractor employee. The badge will be issued by the COR, via the Special Security Office (SSO), and will contain a personal picture, name of employee, and contractor's name. Badges shall be worn on the outer garment, above the waist, in full view at all times, attached to the outer shirt or jacket pocket by a button or clip or worn around the neck secured by an appropriate identification card lanyard.

PRIVACY ACT COMPLIANCE: The contractors may be in contact with data and information subject to the Privacy Act of 1974 (Title 5 of the U.S. Code Section 552a). The contractors shall ensure that its employees assigned to this effort understand and adhere to the requirements of the

Privacy Act and to Department of Defense and Department of the Navy regulations that implement the Privacy Act. Department of Navy policy and procedures implementing the

Privacy Act are detailed in SECNAVINST 5211.5E (Department of the Navy (DON) Privacy

Act (PA) Program). The contractors shall identify and safeguard data, information and reports accordingly. In addition, the contractor shall ensure that contractor employees assigned to the contract are trained on properly identifying and handling data and information subject to the

Privacy Act prior to commencing work.

GOVERNMENT FURNISHED EQUIPMENT (GFE): GFE will be provided to contractor employees as needed to complete the tasks set forth in this performance work statement. Access to classified information must be granted in accordance with the terms and conditions contained in DOD Manual 5220.22-M and DD Form 254 (Contract Security Classification Specification).

The contractor shall comply with all current information assurance awareness, information security policies, procedures, and statutes applicable to DOD information technology; including

DOD Instruction 8500.01 on Cyber Security.

8.0 DODD 8140 CYBER SECURITY WORKFORCE (CSWF) REQUIREMENTS:

The contractor shall ensure employees have all required certifications/licenses (current and valid) for each applicable occupation category before commencement of work. contractor must meet this qualification upon first day of employment.

Procedures surrounding the qualification of the DON Cyberspace IT/Cybersecurity Workforce must be in accordance with DoD Directive 8140.01. The SECNAV M-5239.2 establishes mandatory procedures for the uniform identification, management, and qualification of the

Cyberspace IT/Cybersecurity Workforce (Cyber IT/CSWF). The contractor must demonstrate upon request by the COR that all Cyber IT/CSWF personnel have met and maintains the minimum qualification standards of their assigned Specialty Area and proficiency level throughout the duration of this contract. DON has identified appropriate training, education, and industry certification requirements along with proficiency demonstration in the lab or on the job.

All contractor personnel are required to carry an approved certification for their particular job classification.

Any full or part-time contractor, with privileged access to a DoD information system, performing

Cyber Security (information assurance) functions, regardless of job or occupational series, must meet the requirements associated with the CSWF specialty area outlined in the position description to maintain employment as part of this contracting effort. Additionally, all contractors must participate in a continuous learning program as described in SECNAVINST

1543.2. A minimum of 20 hours of Cyber IT/CSWF related continuous learning must be annually documented and available to NNWC’s CSWF Program Manager and/or COR.

Additionally, all contractors must provide proof that required annual maintenance fees are paid within seven (7) days of the due date.

All reporting contractors must meet the requirement for their position immediately upon arrival.

9.0 GENERAL/ADMINISTRATIVE MATTERS:

The contractor shall only conduct business with designated government personnel listed as points of contact (POCs). Names of authorized personnel shall be provided to the contractor by the government COR, in writing, and updated as necessary throughout the contract period.

All inquiries, comments or complaints arising from any matter observed, experienced, or learned of as a result of or in connection with the performance of this contract, the resolution of which may require the dissemination of official information, shall be directed to the COR. The COR will forward inquiries, comments or complaints to the Contracting Officer (KO).

STAFFING: The contractor shall provide a fully qualified work force on the first day of contract performance.

All contract personnel attending meetings, answering Government telephones, and working in other situations where their contractor status is not obvious to third parties are required to identify themselves as such to avoid creating an impression in the minds of members of the public that they are Government officials. They must also ensure that all documents or reports produced by contractors are suitably marked as contractor products or that contractor participation is appropriately disclosed. Additionally, they must clearly indicate on email title blocks their company name and that they are contractor personnel.

All positions are defined to fulfill tasking based on working hours. For the purpose of this PWS, Full-Time Employee (FTE) is defined as 1920 of billable work hours per calendar year.

DATA RIGHTS: It is the Government’s intent to retain unlimited rights to all software, documentation, and data first produced in performance of the task.

U.S. Government records, copies of original results and reports, verified original data, corrected data, and corrected supporting final reports are maintained by the contractor, but remain the property of the U.S. Government. These files/results must be surrendered to the COR immediately upon demand.

CONTRACTOR QUALITY ASSURANCE: The contractor shall develop and maintain a Quality

Assurance Plan (QA Plan) in order to ensure only qualified personnel, as defined in the position descriptions, are assigned to fulfill the requirements stated in this PWS. The contractor shall detail in its quality assurance plan how it intends to maintain personnel qualifications and ensure contract employees have up-to-date training and knowledge in their respective areas of endeavor.

This QA Plan shall detail the methodology to be used by the contractor to monitor and grade the performance of its personnel as they carry out the requirements of this PWS. The QA Plan shall address the contractor’s courses of action to address under-performing employees.

GOVERNMENT QUALITY ASSURANCE SURVEILLANCE: The Government shall evaluate the contractor’s performance under this contract in accordance with the Quality Assurance

Surveillance Plan (QASP). This plan is primarily focused on what the Government must do in order to ensure that the contractor is performing in accordance with the performance standards.

It defines how the performance standards will be applied, the frequency of surveillance, and the minimum acceptable defect rate(s).

COMPLAINTS LODGED AGAINST CONTRACTOR PERSONNEL: In the event that a complaint is made regarding the conduct or ability of contractor personnel, the individual receiving the complaint will contact the COR. The COR will notify the contractor. The Contract

Overarching Project Manager and COR will cooperate in investigating complaints made against contractor employees. If the results of the investigation prove the complaint(s) to be valid, the contractor shall have a maximum of three (3) working days to propose a corrective plan for resolving the matter and preventing future similar occurrences. This plan shall be submitted in writing to the Contracting Officer and COR. In the event that the Government deems the corrective plan insufficient for resolution of the problem, a written response to the contractor shall be provided within three (3) working days.

OFFICE SPACE: Government will provide office space, desk, chair, and common office supplies. In addition to office space, each contract employees shall be provided with access to

Government computers and telephones, but not cellular phones, for official use only. Under no circumstances will contractor-provided personal computers, electronic devices, or cellular phones be connected to either the Navy/Marine Corps Intranet (NMCI). Contractor personnel shall comply with all DOD and Navy internet usage and cybersecurity policies.

STATEMENT OF NON-PERSONAL SERVICE: contractor employees performing services under this contract will be controlled, directed, and supervised at all times by management personnel of the contractor. Contractor management shall ensure that employees properly comply with the performance work standards outlined in the PWS. Contractor employees shall perform their duties independently, under the supervision of, an appointed Government official. The tasks, duties, and responsibilities set forth in this contract shall not be interpreted or implemented in any manner that results in contractor employees creating or modifying Federal policy, obligating the appropriated funds of the United States Government, overseeing the work of Federal employees, providing direct personal services to Federal employees, or otherwise violating the prohibitions set forth in Parts 7.5 and 37.1 of the Federal Acquisition Regulation (FAR) http://farsite.hill.af.mil/. The Government shall control access to the facilities and shall perform the inspection and acceptance of completed work.

MANDATORY TRAINING: Government has annual training requirements for the safety and security of personnel and data that will be required to be completed by all assigned contractors.

This training will be provided by Government personnel, either in person or via computer, for completion during normal working hours. The COR will provide the annual required training list to the Company Program Manager on an annual basis, and completion will be tracked by

NNWC Training Department.

http://farsite.hill.af.mil/

Government will provide office space, desk, chair, and common office supplies. In addition to office space, each contract employee shall be provided with access to Government computers and telephones, but not cellular phones, for official use only. Under no circumstances will contractor provided personal computers be connected to either the Navy/Marine Corps Intranet

(NMCI) or any other DOD network. Contractor personnel shall comply with all DOD and Navy internet usage and cybersecurity policies.

10.0 SUPPORT SERVICES/QUALIFICATIONS/DUTIES:

Historically, the Scope of Work above is provided via fulfillment of the following positions:

Position Number Labor Category Level of Effort Per

Labor Category

Quantity of

FTE

Position 1 Project Manager II 1920 hours 1

Position 2 Technical Writer III 1920 hours 1

Position 3 Conditional Access Policy Admin 1920 hours 1

Position 4 Azure Virtual Desktop Sys Admin 7680 hours 4

Position 5 Cloud Service Support

Admin/Analyst

9600 hours 5

Position 6 Cloud Service Support Engineer 3840 hours 2

Position 7 Cloud Application Admin 1920 hours 1

Position 8 Configuration Manager 3840 hours 2

Position 9 E-Discovery Administrator

(Security/FOIA/CAPSTONE)

15360 hours 8

Position 10 Identity and Entitlement Admin 1920 hours 1

(1) Project Manager II (PM II): (Clearance requirement is SECRET).

DESCRIPTION:

These positions have been designated as a Cyber IT/Cybersecurity Workforce position in

Specialty Area 802, and as a condition of employment incumbents of the position is required to comply with the DON Cyber IT/CSWF Program requirements of SECNAV M-5239.2.

Manages strategy, personnel, infrastructure, policy enforcement, emergency planning, security awareness, and/or other resources. Coordinate the efforts of subordinate SMEs including approval of and compliance with Tactics, Techniques and Procedures (TTPs) and Standard Operating Procedures (SOPs); coordinate with Naval Network Warfare

Command (NNWC) teams to maximize effect of analysis of Flank Speed-generated data;

and provide day to day leadership and guidance to all members of the Operation Flank

Speed Effort. The contractor shall facilitate delivery of OFS Program Management tracking / artifacts / documentation to the COR or his / her designated representative.

QUALIFICATIONS REQUIRED:

Experience managing 30+ people

12 years IT experience

Extensive understanding of operating systems and networking

Organizational skills

Capable of managing multiple projects

Great communication skills (oral and written)

Azure Fundamentals Certification

Microsoft 365 Fundamentals Certification

Comprehensive understanding of cloud computing and networking

Azure Firewall Knowledge

Experience with Microsoft Office suite and PowerShell

Experienced in the administration of Microsoft SharePoint

CONTRACTOR SHALL:

Provide administrative support for centralized preparation of all contract related deliverables, and ensure contractor deliverables are aligned with critical agency priorities

Provide financial management support for centralized tracking, analysis and reporting all contract related funding, costs, and expenditures required the execution of this contract

Prepare monthly status/progress report for contract tasks

Prepare monthly contract financial reports

Prepare technical reports as required by specific projects

Provide contract tracking deliverables to the COR monthly

Liaison between contractor workforce and NNWC leadership for administrative purposes

Ensure all contractor tasks are accomplished in a timely manner and that the proper support is being delivered

Ensure product delivery is in alignment with intended government outcomes

Deliver and maintain all TTPs/SOPs and exceptions assigned by government lead

Coordinate and deliver additional tasking as assigned by OFS government leads; ensuring product delivery is in alignment with intended outcomes

Have knowledge to effectively oversee contractor workforce AND augment contractor workloads while performing the following functions:

Managing Azure identities and governance

Implementing and managing storage

Monitoring and conducting back-up to Azure resources

Configuring and managing virtual networking

Be familiar with the hierarchal structure utilized in SharePoint sites hosted in Flank

Speed

Provide support for Teams Live Events as requested

Monitor Microsoft 365 Admin Center for service-related incidents, outages, and feature releases

Monitor Azure Information Protection data labels and controls

Participate in various ITSM roles and activities (as required) including but not limited to change management, incident management and problem management

Monitor, analyze and respond to alerts from M365 SaaS cloud operational and security tools and services

Analyze SaaS cloud operational performance and trends, and support applications and systems on premise, in cloud, inclusive of network, server, and endpoints

Deploy and manage virtual machines in Azure to support a large user base

Provide technical support to the Enterprise Flank Speed Tier 2 service desk for troubleshooting issues as required

Review and provide recommendations regarding group policy and end user software

Provide recommendations regarding hierarchal management of SharePoint sites hosted in

OFS

Historical level of effort is a Project Manager II, NTE 1920 HRS:

One (1) FTE - DAY SHIFT (07:00 AM/0700 - 3:30 PM/1530) working position (Monday –

Friday). Some irregular effort will be required based of operational mission requirements, but not to exceed a 40 hour work week.

(2) Technical Writer (SME III): (Clearance requirement is SECRET).

The contractor shall perform quality reviews, rewrites, and editing of a wide-range of documentation throughout the command. Works with technical experts to develop, design, edit, all forms of documentation to include Standard Operating Procedures (SOPs), Process Guides, Instructions, Notices, Memorandums, Concept of Operations (CONOPS), and other written deliverables as requested.

3+ years IT experience

Fluent spoken and expert written English language skills

Experience in authoring executive level documentation written requirements, drafting

Operating Procedures, delivering/documenting test results, etc.

Expert level experience in Microsoft Word, and PowerPoint to include creating/applying styles, headers, footers, etc.

Familiar with tracking changes and version control

Experience with a Configuration Management tool (SharePoint) is preferred

Robust attention to detail

Strong organizational skills, with the ability to work on multiple projects with multiple deadlines

Proven ability to collaborate and negotiate with multiple stakeholders to steer and document projects through the requirements phase, establish a consensus, and complete within established timeframe

Be able to write for multiple audiences: project managers, subject matter experts, developers, system administrators, QA testers, technical support, end users, and executive decision makers.

Be able to write multiple documentation types, technical and non-technical: design specifications, technical requirements, installation procedures, system administration/management, test plans

Working knowledge of the Information Technology Infrastructure Library (ITIL)

Framework

Working knowledge of government CIVPERs classification processes, as required to write evaluation statements for positions that will transition to CES

Develop detailed technical and non-technical briefings, providing informational updates to chain of command in current and future development and implementation of measurements and data strategies

Combine disparate materials into documents that flow logically and speak with one voice.

Translate complex concepts and solutions into multiple types of documents

(requirements, compliance, SOPS, test results, etc.)

Draft documentation, user guides for all user levels, technical support and FAQs, as well as executive summaries

Develop Standard Operating Procedures (SOPs), checklists, workflow process charts, forms, Points of Contact (POC) lists, and other documentation needed to support processes and related IA functions

Create and maintain existing and potential data sources for local consumption;

collaborate with data architect to ensure data sources availability

Develop MS Power Point slides, MS Excel workbooks, and executive level word documents for review and forwarding to leadership

Create and maintain existing and potential data sources for local consumption;

collaborate with data architect to ensure data sources availability

Historical level of effort is a Technical Writer SME III for:

One (1) FTE – DAY SHIFT (07:00 AM/0700 - 3:30 PM/1530) working position (Monday –

(3) Conditional Access Policy Administrator: (Clearance requirement is SECRET).

Specialty Area 461 and as a condition of employment incumbents of the position is required to comply with the DON Cyber IT/CSWF Program requirements of SECNAV M-5239.2. The contractor shall perform tasks associated with the development, testing, deployment, and documentation of Microsoft Azure Conditional Access and Microsoft Defender for Cloud

Application policies.

5+ years IT experience with significant experience with Microsoft Azure

Azure Fundamentals Certification

Azure Administrator Certification

Understanding of cloud computing and networking

Superior organizational skills

Capable of managing multiple projects

Great communication skills (oral and written)

Familiar with tracking Access Requests and account provisioning

Experience with Account and Access Management capabilities/tools

Familiar with M365 SaaS Personas, and license types

Strong attention to detail

Maintain detailed documentation of conditional access policy, including archiving relevant configuration files to a centralized data repository

Develop, document, test, and deploy Microsoft Azure conditional access policies.

Develop, document, test, and deploy Microsoft Defender for Cloud Applications policies.

Perform verification and validation that approved changes are made properly

Perform account access provisioning and de-provisioning based on approved processes

Evaluate policies to ensure compliance with DoD Tenant Configuration Guides

Where development outpaces existing guidance, support development of DoD Tenant

Configuration Guides with mission partners and DISA.

Monitor Message Center for feature releases that have the potential to impact existing configuration, access roles and personas

Historical level of effort is a Conditional Access Policy Administrator for:

(4) Azure Virtual Desktop System Administrator: (Clearance requirement is SECRET).

Clearance requirement is SECRET. This position has been designated as a Cyber

IT/Cybersecurity Workforce position in Specialty Area 441 and as a condition of employment incumbents of the position is required to comply with the DON Cyber IT/CSWF Program requirements of SECNAV M-5239.2. Administers Navy Flank Speed Azure desktop environment server-based systems, security devices, distributed applications, network storage, and performs systems monitoring. Consults on network, application, and customer service issues to support computer systems’ security and availability.

Comptia Sec +

5+ years IT experience with significant experience with Microsoft Azure

Relevant experience as a Windows system administrator

Experience with PowerShell

Superior organizational skills

Capable of managing multiple projects

Great communication skills (oral and written)

Strong attention to detail

Deploy and manage virtual machines in Azure to support a large user base

Closely monitor session statistics to develop and refine usage metrics to inform provisioning additional resources or shutting down unused resources; assist in development of service optimization models

Provide technical support to the Enterprise Flank Speed Tier 2 service desk for troubleshooting issues as required

Manage Windows image to include group policy and end user software

Historical level of effort is an Azure Virtual Desktop Administrator for:

Four (4) FTE – DAY SHIFT (07:00 AM/0700 - 3:30 PM/1530) working position (Monday –

(5) Cloud Service Support Administrator/Analyst: (Clearance requirement is SECRET).

Specialty Area 441 and as a condition of employment incumbents of the position is required to comply with the DON Cyber IT/CSWF Program requirements of SECNAV M-5239.2. The contractor shall perform tasks associated with the administration of Microsoft 365

Software as a Service (SaaS) offerings, to include AZURE Virtual Desktop, Intune, Exchange Online, OneDrive, Teams, and SharePoint. Additionally, the contractor will perform administrative functions associated with Azure Information Protection/data labeling and control.

3+ years IT experience Azure Cloud Administrator in an enterprise level cloud computing environment.

Azure Fundamentals Certification

Microsoft 365 Fundamentals Certification

Comprehensive understanding of cloud computing and networking

Azure Firewall Knowledge

Experience with Microsoft Office suite and PowerShell

Experienced in the administration of Microsoft SharePoint

Superior organizational skills

Capable of managing multiple projects

Great communication skills (oral and written)

Strong attention to detail

Perform administrative tasks associated with the management of Microsoft 365 SaaS offerings.

Manage Azure identities and governance

Implement and manage storage

Deploy and manage Azure compute resources

Configure and manage virtual networking

Monitor and back up Azure resources

Configure and manage virtual networking

Oversee the hierarchal management of SharePoint sites hosted in Flank Speed

Manage tenant-wide configuration settings for Microsoft SaaS offerings

Provide support for Teams Live Events as requested

Monitor Microsoft 365 Admin Center for service-related incidents, outages, and feature releases

Manage Azure Information Protection data labels and controls

Participate in various ITSM roles and activities (as required) including but not limited to;

change management, incident management and problem management

Monitor, analyze and respond to alerts from M365 SaaS cloud operational and security tools and services

Perform M365 SaaS cloud service operations, analyze operational performance and trends, and support applications and systems on premise, and in cloud, inclusive of network, server, and endpoints

Deploy and manage virtual machines in Azure to support a large user base

Provide technical support to the Enterprise Flank Speed Tier 2 service desk for troubleshooting issues as required

Manage Windows image to include group policy and end user software

Oversee the hierarchal management of SharePoint sites hosted in Flank Speed

Manage tenant-wide configuration settings for Microsoft SaaS offerings.

Historical level of effort is a Cloud Service and Support Analyst for:

Three (3) FTE – DAY SHIFT (06:00 AM - 2:00 PM) working position (Monday – Friday)

Two (2) FTE – DAY SHIFT (08:00 AM - 4:00 PM) working position (Monday – Friday). Some irregular effort will be required based of operational mission requirements, but not to exceed a 40 hour work week.

NOTE: Projected to support future evening shifts as regional overseas support increases.

(6) Cloud Service Support Engineer (SME II): Clearance requirement SECRET.

This position has been designated as a Cyber IT/Cybersecurity Workforce position in Specialty

Area 46 and as a condition of employment incumbents of the position is required to comply with the DON Cyber IT/CSWF Program requirements of SECNAV M-5239.2. CONTACTOR will recommend configuration changes, test, operate, monitor, and manage network devices including hardware, software, and operating systems that permit information sharing across the full spectrum of Navy Flank Speed Cloud Transport using all media. Supports the security of information and information systems.

3+ years IT experience with significant experience with operational metrics correlation, reporting, and dash boarding in a Microsoft SaaS environment

Familiarity with concepts of data integration and normalization

Experience working in an IT environment in an operational capacity

Ability to gather metrics and report on relevant findings

Ability to use professional knowledge to collaborate with multiple competencies within the Navy

Comprehensive understanding of SLAs/SLRs and service performance quality tools, processes, and procedures

Technical understanding with ability to translate reports into mission capabilities

Practical application of statistical, numerical and analytical principles and processes

Relationship management and conflict resolution skills

Proficiency in M365 and Microsoft Office applications including Word, Visio, Project, and PowerPoint

Proficient to Master level Microsoft Excel and Access skills

Excellent written and verbal communication skills

Knowledge of Information Technology Service Management (ITSM) and ITIL

Framework

Knowledge of performance measurements and metrics methods and concepts

Knowledge of Figures of Merit (FOM), Critical Success Factors (CSF) and Key

Performance Indicators (KPI)

Knowledge of pertinent Government laws and information technology regulations as well as applicable laws, policies, standards and guidance

Knowledge of DoD requirements definition and how requirements drive KPPs, KSAs, SLAs and SLRs

Knowledge of DoD and DON acquisition management principles, policies and procedures

Leverage best practice BA/BI data correlation, aggregation and reporting in support of the Enterprise M365 SaaS capabilities

Develop dashboards, reports, presentations and actionable recommendations and escalations related to M365 SaaS enterprise service performance and quality

Identify performance measures or indicators of service performance, quality and compliance with SLAs/SLRs

Develop/Deliver monthly performance reports on-time and on-quality

Create Executive level dashboards to effectively communicate/socialize M365 SaaS performance to customer commands (CONUS & OCONUS)

Facilitate ongoing assessments and reporting of overall conformance to and compliance with Critical Success Factors (CSFs) and Key Performance Indicators (KPIs) defined within the DoD Enterprise Service Management Framework (DESMF), DoDI 8440.01

Information Technology Service Management (ITSM), and COMNAVIFOR M-2620.2

Navy Process Reference Model where applicable

Historical level of effort is a Flank Speed Transport Network Security Engineer II for the following shift:

Two (2) FTE – DAY/EVE SHIFT (07:00 AM/0700 - 3:30 PM/1530 & 15:30 – 11:30) working position (Monday – Friday). Some irregular effort will be required based of operational mission requirements, but not to exceed a 40 hour work week.

(7) Cloud Application Administrator (SME II): (Clearance requirement is SECRET/SSBI).

Area 45 and as a condition of employment incumbents of the position is required to comply with the DON Cyber IT/CSWF Program requirements of SECNAV M-5239.2. Administers

Navy Flank Speed Cloud Applications environment server-based systems, security devices, distributed applications, network storage, and performs systems monitoring. Consults on network, application, and customer service issues to support computer systems’ security and availability.

7 - 10 years of experience as Azure Cloud Administrator in an enterprise level cloud computing environment.

Azure Fundamentals Certification

Microsoft 365 Fundamentals Certification

3 years’ experience working with RMF based Information Security Systems Engineer

(ISSE) documentation

Proficient in the application of Secure Technical Implementation Guides (STIG) on cloud based systems

Familiar with enterprise backup software and administration

Familiar with enterprise storage administration and concepts

Ability to work in team setting, as well as independently

Self-starter: identify issues and create action plan for resolution

Demonstrated initiative, flexibility and ability to concurrently manage multiple deadline-driven tasks and projects

Excellent communication skills

Provide Subject Matter Expert level support for desktops in Azure cloud computing environment

Maintain systems patches

Maintain systems security posture

Implement STIGs

Improve system administration productivity by authoring/updating relevant shell scripts

Provide timely reports on projects status and other systems administration work, as required

Aggregate custom detections and alerts into a cloud native SEIM

Provide/perform on-the-job training of KQL for all assigned government and military analysts

Provide/perform on-the-job training of Navy owned Microsoft products and capabilities for all assigned

Assist in the development of a standardized cloud-based case management system

Historical level of effort is a System Administration SME III NTE 1920 HRS:

One (1) FTE - DAY SHIFT (07:00 AM/0700 - 3:30 PM/1530) working position (Monday –

(8) Configuration Manager: (Clearance requirement is SECRET).

Specialty Area 441 and as a condition of employment incumbents of the position is required to comply with the DON Cyber IT/CSWF Program requirements of SECNAV M-5239.2. The contractor shall perform tasks associated with the documentation and enforcement of technical baselines in support of change management, process and evaluate change requests, and maintain configuration control artifacts to support accreditation and monitoring in accordance with the DoD Risk Management Framework.

5+ years IT experience

Azure Administrator Certification

Strong understanding of cloud computing and networking

Superior organizational skills

Capable of managing multiple projects

Great communication skills (oral and written)

Familiar with tracking enterprise changes and version control of assets and configuration items (CIs)

Experience with Enterprise IT Configuration Management tools

Experience with hybrid IT architectures across on premise and SaaS offerings

Strong attention to detail

Working knowledge of the Information Technology Infrastructure Library (ITIL)

Working knowledge of the DoD Risk Management Framework

Assist in the development of the baseline E2E M365 SaaS architecture and configuration in hybrid environment

Maintain detailed documentation of tenant configuration, including archiving relevant configuration files to a centralized data repository

Assess planned changes for risk and impact across the hybrid environment

Perform verification and validation that approved changes are successful and achieve expected outcomes

Evaluate requested changes to ensure compliance with higher-level polices and directives

Monitor Message Center for future changes and releases that have the potential to impact existing baseline configuration

Historical level of effort is a Configuration Management Administrator for:

Two (2) FTE – DAY SHIFT (07:00 AM/0700 - 3:30 PM/1530) working position (Monday –

(9) E-Discovery Administrator (Security/FOIA/CAPSTONE): (Clearance requirement is

SECRET).

Area 75 and as a condition of employment incumbents of the position is required to comply with the DON Cyber IT/CSWF Program requirements of SECNAV M-5239.2. The contractor shall perform tasks associated with legal discovery and data archival. Additionally, the contractor will respond to reported electronic spillage of classified data and take approved remedial action.

3+ years IT experience with significant experience with Microsoft 365 Admin Center

Microsoft 365 Fundamentals Certification

Microsoft Security, Compliance, and Identity Fundamentals Certification

Relevant experience as a Microsoft Exchange administrator

Relevant experience as a Microsoft Teams administrator

Relevant experience as a Microsoft SharePoint administrator

Relevant experience as a Microsoft OneDrive administrator

Superior organizational skills

Capable of managing multiple projects

Great communication skills (oral and written)

Strong attention to detail

Take administrative action in response to reported electronic spillages of classified data, to include content search, quarantine, creating archival copies, and/or deletion of data

Manage user data retention policies, to include placing data in litigation hold

Perform data discovery and archival and prepare for transfer to legal authorities

Enable/disable user accounts based on information assurance events in coordination with

Information Systems Security Managers

Analyst shall provide knowledgeable and skilled in FOIA, Privacy, and records management processing (analyzing requests and exemptions, writing correspondence, managing workload)

Analyst will utilize FOIA, Privacy, and records management governing documents, to complete tasks

Analyst shall process requests and reviews for all public release programs to include but not limited to FOIA/PA and records management

Historical level of effort is a Spillage Remediation and Investigation Administrator for:

Eight (8) FTE – DAY SHIFT (07:00 AM/0700 - 3:30 PM/1530) working position (Monday –

(10) Identity and Entitlement Administrator: (Clearance requirement is SECRET\GENSER).

Area 75 and as a condition of employment incumbents of the position is required to comply with the DON Cyber IT/CSWF Program requirements of SECNAV M-5239.2.