N66001-17-R-0066 RFP Attach 04 Desired Personnel Qualififcations.pdf

ATTACHMENT 04 N66001-17-R-0066

Desired Personnel Qualifications

Program Manager

Duties: Program Manager will serve as the contractor's single contract manager, and will be the contractor's authorized interface with the Government Contracting Officer (CO), government management personnel and customer agency representatives. Responsible for: Formulating and enforcing work standards, assigning contractor schedules, reviewing work discrepancies, and supervising contractor personnel; Project control of all system level changes; Responsible for the overall contract performance. Program Manager must have expertise in the management and control of funds and resources using complex reporting mechanisms, demonstrated capability in managing multi-task contracts and/or subcontracts of various types and complexity. The Program Manager is responsible for cost, schedule and performance for all task orders issued to his team under this contract. He is responsible for fiscal tracking and reporting for these tasks.

General experience: A minimum of seven years experience in systems engineering. At least 3 years supervisory experience, in a designated lead or management role, with a demonstrated success in the ability to manage local/remote staff and lead technically oriented projects and personnel. Must have experience in directing large efforts as well as multiple concurrent smaller efforts. Program Manager interfaces with Government program/technical managers to provide status of specific program/technical activities, and personnel issues to meet designated project goals and project completion. This position requires a good working knowledge of federal contract and procurement regulations. Program Manager must act as the single point of responsibility and authority to coordinate all activities of the project to meet deadlines and budgets and to resolve conflicting demands of users. Establishes costs and determines resource requirements. He/she is responsible for the administrative, contractual, and financial aspects of projects and oversees the quality assurance efforts for the work performed under this contract.

Minimum education: Bachelor’s Degree in Computer Science/Engineering or a related discipline.

Technical Project Manager

Duties: The Technical Project Manager will assist and be empowered by the Program Manager to serve as the government’s onsite primary interface in regards to day-to-day contractor work taskings and performance. The Technical Program Manager will have expertise in the management and supervising contractor personnel. The Technical Project Manager will have subject-matter expert (SME) level of knowledge for their project’s task. The Technical Project Manager will have expertise in training contractor personnel in the proper usage of government resources in relation to the performance of this contract. These resources include both technical and non-technical products such as DoD approved cybersecurity toolsets, custom-developed cybersecurity toolsets, and policies/procedures. IAT2 level certified. The Technical Project Manager will work with the Program Manager to ensure sufficient contactor resources are allocated in support of the contract.

General experience: Must meet the experience criteria of one to following labor categories at a minimum: Senior Systems Engineer / Senior Hardware Engineer / Senior Software Engineer / Senior IT Specialist / Senior Cybersecuity Specialist / Senior Validator / Software Developer. At least 2 years supervisory experience, in a designated lead or management role, with a demonstrated success in the ability to manage local/remote staff and lead technically oriented projects and personnel. Must have experience in directing large efforts as well as multiple concurrent smaller efforts. Technical Project Manager interfaces with Government program/technical managers to provide status of specific program/technical activities, and personnel issues to meet designated project goals and project completion.

Minimum education: As required by general experience requirements.

Senior Cybersecurity Specialist

Duties: The Senior Cybersecurity Specialist will perform the validation and hardening/engineering of a system with the currently available cybersecurity tools. This includes tools provided from DISA website such as STIGViewer, SCAP Compliance Checker, STIG Checklist (CKLs), and the ability to learn how to use custom validation tools. IAT2 level certified. This position requires the ability to be granted administrator access to Windows, Redhat, and Solaris systems, therefore familiarity of these systems is required. The Senior Cybersecurity Specialist will be able to perform a complete DISA STIG checklist on Windows, Redhat, and Solaris systems without assistance. This position requires the ability to interface with PMs, system administrators, and any other personnel to discuss technology data pertaining to a system and be able to perform ISSE duties.

General experience: A minimum of 5 years of experience in Cybersecurity in a DoD environment utilizing DISA STIGs. Experienced in Unix-based systems, virtualization applications such as VMWare ESX, Microsoft Hypervisor, all currently supported Microsoft operating systems, Microsoft Active Directory domains, and common Microsoft applications such as Office, SharePoint, SQL, and IIS. Familiarity with cloud based services and storage.

Minimum education: None (Bachelor’s Degree in Computer Science or Engineering can be used to meet 2 years of the general experience requirement. Associate’s Degree in Computer Science or Engineering or a Bachelor’s in an unrelated field can be used for 1 year of experience).

Cybersecurity Specialist

Duties: The Cybersecurity Specialist will support of validation and hardening/engineering of a system with the currently available cybersecurity tools. This includes tools provided from DISA website such as STIGViewer, SCAP Compliance Checker, STIG Checklist (CKLs), and the ability to learn how to use custom validation tools. IAT2 level certified. This position requires the ability to be granted administrator access to Windows, Redhat, and Solaris systems, therefore familiarity of these systems is required. The Cybersecurity Specialist will be able to perform a complete DISA STIG checklist on a Windows, Redhat, or Solaris system without assistance.

General experience: A minimum of 3 years of experience in Cybersecurity in a DoD environment utilizing DISA STIGs. Experienced in Unix-based systems or Microsoft operating systems. Familiarity with Microsoft Active Directory domains, virtualization applications such as VMWare ESX, Microsoft Hypervisor, and common Microsoft applications such as Office, SharePoint, SQL, and IIS.

Minimum education: None (Bachelor’s Degree in Computer Science or Engineering can be used to meet 2 years of the general experience requirement. Associate’s Degree in Computer Science or Engineering or a Bachelor’s in an unrelated field can be used for 1 year of experience).

Senior Validator

Duties: The Senior Validator must be NQV Level III. Must be able to demonstrate competency serving independently as a Navy Validator with experience performing Navy Validator activities for one or more Security Authorization under RMF. The candidate must Provide Mitigation and Remediation in support of the C&A/A&A process remotely and/or on-site including reports as required. The candidate must Conduct in-depth analysis of IV&V/SCA, C&A/A&A, and functional/operational test results for accuracy, compliance, adherence to DoD and Federal IA technical and operational security requirements. The candidate must document residual risks by conducting a thorough review of all the vulnerabilities, architecture and defense in depth and provide the IA risk analysis and mitigation determination results for the Test Report. The candidate must develop all C&A documentation in accordance with DoD policies and procedures to ensure that accreditation packages are complete and system compliance is met for Designated Accrediting Authority. Must have experience in allocating assigned security controls into assessment objectives and procedures, developing and executing Security Assessment Plans by selecting and tailoring appropriate assessment methods, and depth and coverage. This task will include the ability to schedule and represent systems in collaboration meetings, create POAMs, Risk Assessment Reports, understand how to interpret ACAS results and any other artifacts related the A&A process for a system. IAT2 or IAM 1 Level certified.

General experience: A minimum of 5 years of experience in performing validator functions in a DoD environment utilizing DoD approved accreditation methods (DITSCAP / DIACAP / RMF).

Must have served as the designated Navy Validator for one or more Security Authorization under RMF. Must have expertise in generating and maintaining Plan of Action and Milestones (POA&M) and Security Assessment Reports (SAR).

Minimum education: None (Bachelor’s Degree in Computer Science or Engineering can be used to meet 2 years of the general experience requirement. Associate’s Degree in Computer Science or Engineering or a Bachelor’s in an unrelated field can be used for 1 year of experience).

Validator

Duties: Validators must at a minimum complete the CBT-NQV-100 Series training, available on the Navy e-Learning. Must be at least NQV I, but preferably NQV II. Must be able to demonstrate competency serving under a level III Navy Validator with experience supporting Navy Validator activities for at least one Security Authorization Package under DIARMF or

DIACAP. The candidate must Provide Mitigation and Remediation in support of the C&A/A&A process remotely and/or on-site including reports as required. The candidate must Conduct in-depth analysis of IV&V/SCA, C&A/A&A, and functional/operational test results for accuracy, compliance, adherence to DoD and Federal IA technical and operational security requirements.

The candidate must document residual risks by conducting a thorough review of all the vulnerabilities, architecture and defense in depth and provide the IA risk analysis and mitigation determination results for the Test Report. The candidate must develop all CA&A documentation in accordance with DoD policies and procedures to ensure that accreditation packages are complete and system compliance is met for Designated Accrediting Authority. Must have experience in allocating assigned security controls into assessment objectives and procedures, developing and executing Security Assessment Plans by selecting and tailoring appropriate assessment methods, and depth and coverage. Must have the basic knowledge of EMASS, DADMS, DITPR-DON, and any other area that is required for proper reviewing the A&A package artifacts. This task will include creating POAMs, Risk Assessment Reports, understand how to interpret ACAS results and any other artifacts related the A&A process for a system and be able to communicate with all parties involved. IAT2 Level certified.

General experience: A minimum of 3 years of experience in performing validator functions in a DoD environment utilizing DoD approved accreditation methods (DITSCAP / DIACAP / RMF).

Must have experience with generating and maintaining Plan of Action and Milestones (POA&M) and Security Assessment Reports (SAR).

Minimum education: None (Bachelor’s Degree in Computer Science or Engineering can be used to meet 2 years of the general experience requirement. Associate’s Degree in Computer Science or Engineering or a Bachelor’s in an unrelated field can be used for 1 year of experience).

Senior IT Specialist

Duties: Senior IT Specialists will have thorough knowledge of the many facets that encompass an organization’s IT requirements. Must be IAT2 level certified at a minimum. This position requires the ability to be granted administrator access to Windows systems (all active directory supported desktop clients and servers), Unix systems (such as RedHat, Mac OS, Solaris), and network systems (such as Cisco and Juniper), therefore administrator level knowledge in at least two of these technologies and familiarity of all these systems is required. The Senior IT Specialist will be performing the designing, configuring, hardening, and administrating networks and associated devices (servers, workstations, software applications, routers, switches, firewalls, intrusion detection/prevention systems (IDS/IPS), IP addressing schemes, virtual lan networks (VLANs), and access control lists). This position requires the ability to interface with PMs, system administrators, and any other personnel to discuss technology data pertaining to a system and be able to perform ISSE duties.

General experience: A minimum of 5 years experience in either Windows (all active directory supported desktop clients and servers), Unix (such as RedHat, Mac OS, Solaris) or network (such as Cisco and Juniper) operating systems (with a minimum of 2 years of experience as a designated administrator of an organization’s IT network). Current administrator level certification in at least one of the following operating systems: Windows, Cisco, Redhat, and/or Solaris. Senior IT Specialists should have familiarity with different tools used in the security and hardening of operating systems. Senior IT specialists will be familiar with current technologies such as virtualization and cloud based services and storage.

Minimum education: None (Bachelor’s Degree in Computer Science or Engineering can be used to meet 2 years of the general experience requirement. Associate’s Degree in Computer Science or Engineering or a Bachelor’s in an unrelated field can be used for 1 year of experience).

IT Specialist

Duties: Must be IAT2 level certified at a minimum. This position requires the ability to be granted administrator access to either Windows (all active directory supported desktop clients and servers), Unix (such as RedHat, Mac OS, Solaris) or network (such as Cisco and Juniper) systems, therefore administrator level knowledge of one of these systems these systems is required. The IT Specialist will be assisting with the designing, configuring, hardening, and administrating networks and associated devices (servers, workstations, software applications, routers, switches, firewalls, intrusion detection/prevention systems (IDS/IPS), IP addressing schemes, virtual lan networks (VLANs), and access control lists).

General experience: A minimum of 3 years experience in either Windows (all active directory supported desktop clients and servers), Unix (such as RedHat, Mac OS, Solaris) or network (such as Cisco and Juniper) operating systems (with a minimum of 1 years of experience as Tier 1/Help Desk of an organization’s IT network). Current certification in at least one of the following operating systems: Windows, Cisco, Redhat, and/or Solaris. IT Specialists will learn to utilize the different tools used in the security and hardening of operating systems.

Minimum education: None (Bachelor’s Degree in Computer Science or Engineering can be used to meet 2 years of the general experience requirement. Associate’s Degree in Computer Science or Engineering or a Bachelor’s in an unrelated field can be used for 1 year of experience).

Software Developer

Duties: The Software Developer task comprises the performance of specifying, designing, developing, coding, testing, integrating and documenting software modules systems and subsystems to provide new functional capabilities and improve existing information assurance posture. This effort includes performing reverse engineering of software components and systems to support vulnerability and exploitation analysis. The functions to be implemented include the full spectrum of information assurance and cyber warfare. The performance of this task will adhere to open standards and modern software development methodologies, including what is considered ‘best’ practices by the industry. Provide software development/coding expertise employing the Rapid Integration and Test Environment (RITE) process for the creation, modification, and maintenance of SSC-Pacific (Code 53824/53826) developed software. This task includes agile development to meet time critical requirements, and the development of software documentation (Software Design Document, Software User’s Manual, Data Flow Description, etc.)

General experience: A minimum of 5 years of experience in performing Software Developer functions.

Technical Writer

Duties: The Technical Writer task comprises functions in support of Business Analysis/Systems Analysis required to define functional and non-functional requirements for software releases that will be developed within the scope of this task. This effort may include working closely with SPAWAR and Program office Training Development teams, SPAWAR HQ, OPNAV Resource Sponsor staff and other stakeholders to elicit, describe, refine and document software requirements. This task may also include working with systems and producing A&A documentation.

General experience: A minimum of 2 years of experience as a Technical Writer or equivalent.

Minimum education: None

Software Graphics Designer

Duties: The Software Graphics Designer task will include an overall assessment of user interface design, work processes, workflow mechanisms, reports and other outputs, in terms of usability, user experience, conformance with DoD and other Federal requirements, industry best practices, and overall user efficiency in using the tool/application to develop required documents and other outputs from Tool/Application System.

General experience: A minimum of 5 years of experience in performing Software Configuration Manager functions.

Senior Hardware Engineer

Duties: The hardware engineers will utilize the latest software and hardware tools to can identify and diagnoses complex problems and factors affecting hardware performance. He/she will be required to maintain technical currency and study vendor products to determine those which best meet our needs. The hardware engineers will analyze requirements for specific components;

create, design, and develop requirements in required media format; provide program system integration process support; test, debug and write documentation as required. Able to define interaction and interface among different categories of requirements, and develop appropriate design to support the requirements while employing engineering methodologies. Senior hardware engineers are required to serve as liaisons to interpret and translate various disciplines represented by the task team, and serve as a point of contact for evaluation of problems arising from the interdisciplinary nature of the task. Occasionally, the hardware engineer may be required to assist the installation or customer support teams with problems beyond their capabilities. This support could be required anywhere in the world.

General experience: A minimum of 8 years of experience in technical work in the areas of system management, design, test and integration. A minimum of 5 years experience in disciplines involving software and hardware test tools, electronics communications analysis and design, digital engineering, RF engineering, test engineering, networking, or electronic engineering.

Minimum education: Bachelor's degree in Engineering

Senior Software Engineer

Duties: Senior software engineers perform software engineering tasks such as modification and/or development of software systems. Formulate & develop systems or subsystems architecture, requirements, and design documents; develop software algorithms, design, coding, and documentation of systems. The senior software engineer will be responsible for developing test plans and procedures. They also evaluate subcontractor software activities, so as to ensure compliance with software engineering standards. They will provide the skills and experience to analyze requirements and develop software solutions in the area of web interfaces and GUI, databases, scripting and application software.

General experience: A minimum of 8 years of experience performing software engineering activities relative to the design and development of new & existing systems/subsystems software.

Experienced with C, C++, C#, Ada, Fortran, SQL, or third/fourth generation languages in the design and implementation of systems. Experienced with web-based system design and implementation including web server and browser based technology. Experienced with Unix-based, Microsoft, Intel-based systems. Experienced with relational database architecture, design and implementation, experienced with SQL Server, Oracle and/or Sybase. At least 5 years’ experience in state of the art real-time software design and development is required.

Senior Systems Engineer

Duties: The system engineer drives product designs and system architecture with key responsibilities in the areas of form, fit and function, performance, integrity, sustainability, interfacing with other systems, performing requirements management including identifying governing security requirements, and overall engineering configuration management and quality assurance and cost from initial concept to production. This role is responsible for conducting a technical risk assessment and abatement/mitigation plan, an engineering assessment and impact analysis of adding additional hardware and software to an existing environment. He/she assists in creating and developing product specifications, proposals, schedules and quotes. Performs analysis as necessary to schedule, integrate, and deploy sophisticated automated systems consistent with specifications provided through project tasks. Responsibilities may include Internet and email connectivity, server installation design and optimization, clustering design, routers, switches, replication and backup, legacy systems integration, and systems schedules and procedures. This role may provide leadership and supervision to less senior technical personnel.

General experience: A minimum of 8 years of experience in systems engineering playing a significant role in product design and system architecture. Experienced in Unix-based systems, Microsoft, Intel-based systems, web-based architecture and design.

Software Configuration Manager

Duties: The Software Configuration Manager task will include the tracking and controlling changes in the software of a system(s). SCM practices include revision control and the establishment of software baselines. The SCM will be able determine what was changed and who changed it. If a configuration is working well, SCM can determine how to replicate it across many hosts.

General experience: A minimum of 5 years of experience in performing Software Configuration Manager functions.

Minimum education: None (Bachelor’s Degree in Computer Science or Engineering can be used

Software Tester \ Quality Assurance

Duties: The Software Tester \ Quality Assurance task comprises functions in support of the software development effort related to testing software releases, by a variety of methods and using tools to perform both static and dynamic software testing, “black box”, “grey box” and “white box” testing of software components, modules, etc. Other services will include the development of written software test plans, based on document requirements and release plans, documentation of software defects in a defect tracking database or similar solution, managing the triage and prioritization of defect resolution and tracking, and other services related to software feature delivery.

The contractor will follow standard software configuration practices for the development of the software and control of codes and scripts. The contractor will develop a Quality Assurance Plan for the handling of software during the project development. Programming Languages are to be standard industry languages. The contractor will integrate COTS software products and custom applications to form standardized configurations for software systems, and will develop system images and scripted installation procedures.

General experience: A minimum of 3 years of experience in performing Software Tester \ Quality Assurance functions.

Minimum education: None (Bachelor’s Degree in Computer Science or Engineering can be used

Business Analyst

Duties: The Business Analyst task will include the ability to take on a super user role for understanding/learning a system to generate core requirements of said system, perform requirements management, contribute to the development of technical solutions for business problems, perform defining of system, and analyzing / documenting requirements.

General experience: A minimum of 3 years of experience as a Business Analyst or equivalent

Financial Analyst

Duties: The Financial Analyst position provides all forms of contract-related support through all phases of contract award, administration, and closeout. The Financial Analyst will serve as a business advisor for all acquisition and contract related Program Office needs.

General experience: A minimum of 3 years of experience as a Financial Analyst or equivalent