ETA Recompete PWS RFI V2.pdf

PERFORMANCE WORK STATEMENT

INSCOM G-7 Engineering Technical

Assistance (ETA) Support 2025 Re-Compete

Part 1

General Information

1. GENERAL: This is a non-personal services contract to provide Engineering Technical Assistance (ETA) Support. The Government will not exercise any supervision or control over the contract service providers performing the services herein. Such contract service providers shall be accountable solely to the contractor who, in turn is responsible to the Government.

1.1 Description of Services/Introduction: The contractor shall provide all personnel and supervision, necessary to perform ETA Support as defined in this Performance Work Statement (PWS) except for those items specified as Government furnished property and services. The contractor shall perform to the standards in this contract.

1.2 Background: Headquartered at Fort Belvoir, Virginia, with 17,500 Soldiers, Department of the Army (DA) civilians and contractors, located at 180 locations in 45 countries, INSCOM executes mission command of operational intelligence and security forces; conducts and synchronizes worldwide multi-discipline and all- source intelligence and security operations; delivers linguist support and intelligence-related advanced skills training, acquisition support, logistics, communications, and other specialized capabilities in support of Army, Joint, and Coalition Commands and the U.S. Intelligence Community (IC).

1.3 Objectives: The contractor shall provide the necessary products and services required by INSCOM and the IC as outlined in this PWS. The PWS outlines requirements to support INSCOM’s mission to anticipate requirements and employ innovative techniques to equip and sustain Soldiers, Civilians, systems, and facilities, as well as to enhance readiness as part of a Combined, Joint, and IC interdependent team.

1.4 Scope: The scope of this acquisition is for the contractor to provide a wide range of ETA support activities. Contractor support to the G-7 Directorate is organized into the following Task areas: The Government has a continued requirement to provide Engineering Technical Assistance (ETA) support services is to provide a wide range of ETA support activities such as Program/Project Management.

Network Engineering, Data Visualization, Cloud Engineering, System/Program Administration, Operations Research/Systems Analysis, Data Platform Analysis, System Evaluation, Test/Data Engineering, Full Stack/System/DevOps Engineering, System Engineering and Distributed Processing, Exploitation and Dissemination - Converged Infrastructure (DPED-CI).

DPED-CI requirement supports the Intelligence Systems and Analytics enterprise at INSCOM Military Intelligence Brigades (MIBs) – Theater (MIB-T) in their role as Anchor Points supporting Army Service Component Commands and Combatant Commands and Global Force Management Allocation Plan (GFMAP) requirements. In that capacity, G-7 operates, maintains, and sustains Tier II, Tier III and Depot Integration roles for DPED-CI. G-7 is also the system owner for the Reach Processing, Exploitation, and Dissemination (Reach PED) Quick Reaction Capability (QRC) in the absence of a Program of Record (POR). G-7 as the QRC capability developer and system owner is responsible to provide the acquisition components, system engineering, integrated product support, technical documentation development, configuration control, and interim sustainment support of the QRC system if/when it transitions to a POR.

INSCOM G7 supports Army Intelligence systems and analytics, QRC and DPED-CI requirements IAW AR 70-1 and DODI 5000.02. G-7 also conducts intelligence surveillance and reconnaissance (ISR) modernization of the INSCOM Intelligence Enterprise acquisition objectives. G-7 supports all INSCOM Major Subordinate Commands (MSCs), Tier II/Tier III support and technical Subject Matter Expertise (SME) in support of MSCs critical mission requirements and efforts. Work on this PWS will primarily be performed within Contractor Facilities or in Government facilities Security Compartment Information Facilities (SCIF) at one or more locations identified in the table below.

Organization: The G-7 consists of 3 Divisions. The Capabilities & Integration Division (CDD) CDI integrates across Army capability development, materiel development, and emerging technology entities to ensure INSCOM Major Subordinate Commands have modernized operationally ready and sustainable intelligence, electronic warfare, and cyber solutions that enable decision dominance in all phases of multi-domain operations.

The Emerging Capabilities Division (ECD) identifies, assesses, and delivers high-payoff, mature solutions through an understanding of developing intelligence capabilities and concepts and close collaboration with Industry, academia, government and IC partners.

The Operations & Maintenance Division (OMD) designs, procures, and provisions managed attribution platforms and conducts operations and maintenance activities supporting intelligence and cyberspace operations.

PART 5

SPECIFIC TASKS

5. Specific Tasks:

5.1 Basic Services. The contractor shall provide program management support under this contract. This includes the management and oversight of all activities performed by contractor personnel, including subcontractors, to satisfy the requirements identified in this PWS. The contractor shall identify a Program Manager (PM), by name, who shall provide management, direction, administration, quality assurance, and leadership of the execution of this contract. The contractor shall provide the technical and functional support required for the Project Management of this Performance Work Statement (PWS). The Program Management Tasks and subtask are only additional duties, which are done in conjunction with 5.2.1 and 5.2.2.

5.1.2.1 Contractor shall schedule and coordinate a Project Kick-Off Meeting at the location approved by the Government. The meeting will provide the opportunity to discuss technical, management, and security issues, and travel authorization and reporting procedures. The contractor shall provide the following at the kickoff meeting:

Schedule Performance metrics, to include methods and schedule for achieving them Security requirements Government-furnished information Monthly meeting dates Points of Contact Roles and responsibilities including coordination with the Government Technical/Training Point of Contact (TPOC) and COR Transition process and timeframes Prioritization of contractor activities Project Management Plan

5.1.2.2 The PM and the COR shall convene a monthly Contract Activity and Status Meeting with the Technical/Training Point Of Contact (TPOC), and other key Government stakeholders and provide minutes of these meetings.

5.2 Labor Categories and Descriptions.

5.2.1 Program Manager. Provide management, direction, administration, quality assurance, and leadership of the execution of contract.

5.2.2 Project Manager III. Contractor shall provide project management and technical support to assist the Government in planning, executing and maintaining emerging capability programs and projects across the multidiscipline Intelligence spectrum IAW and in compliance with DoD, Army, INSCOM and all other applicable rules, regulations, processes and procedures.

5.2.2.1 Subtasks: Contractor shall support G-7 and Command Leadership and provide project management and technical support to assist the Government in planning, executing and maintaining emerging capability programs and projects across the multidiscipline Intelligence spectrum IAW and in compliance with DoD, Army, INSCOM and all other applicable rules, regulations, processes and procedures. Produce technical documents of processes and procedures that support technology engagement and assessment as well as assessments or pilots of software and hardware intensive systems and implement best practice planning, risk mitigation, and strategic support spanning the full Project Management Lifecycle. Facilitate DoD/IC synchronization technical exchange meetings, briefings, and demonstrations, provide meeting minutes, briefing slides and/or technical documents. Contractor shall provide a PM team capable of supporting Modernization and Innovation efforts within the directorate and command. Should be able support and advise across intelligence layers and disciplines to support MDO planning and strategies.

5.2.3 Project Manager II.

5.2.3.1 Subtasks: Contractor shall provide project management and technical support to assist the Government in planning, executing and maintaining emerging capability programs and projects across the multidiscipline Intelligence spectrum IAW and in compliance with DoD, Army, INSCOM and all other applicable rules, regulations, processes and procedures. Produce technical documents of processes and procedures that support technology engagement and assessment as well as assessments or pilots of software and hardware intensive systems and implement best practice planning, risk mitigation, and strategic support spanning the full Project Management Lifecycle. Facilitate DoD/IC synchronization technical exchange meetings, briefings, and demonstrations, provide meeting minutes, briefing slides and/or technical documents.

5.2.4 Network Engineer.

5.2.4.1 Subtasks. Contractor shall provide engineering support at Fort Belvoir, VA in support of assigned and deployed INSCOM, G-7 systems. The contractor will have a strong background in network design, implementation, and optimization, with a focus on ensuring performance, reliability, and security.

Responsibilities will include designing, configuring, and maintaining network systems (physical and virtual), troubleshooting network issues, and implementing network security measures. Proficiency in networking protocols such as TCP/IP, DNS, DHCP, VLANs, and VPN, as well as experience with networking hardware from vendors like Cisco, Juniper, or Arista, is essential for this role. The Network Engineer shall provide network design, configuration, and performance support to System Evaluators and Test Engineers for planned and scheduled events. The Network Engineer will collaborate closely with cross-functional teams to support ongoing projects and ensure that our network infrastructure meets the organization's needs and objectives.

5.2.5 Cloud Engineer (Platform/Infrastructure).

5.2.5.1 Subtasks. Contractor shall provide cloud engineering support at Fort Belvoir, VA. The contractor will have extensive experience in designing, deploying, and managing AWS cloud solutions to ensure scalability, reliability, and security. Responsibilities will include architecting cloud-based systems, optimizing performance, and implementing best practices for cost-efficiency. Strong knowledge of AWS services such as EC2, S3, RDS, Lambda, and VPCs is essential, along with proficiency in infrastructure as code tools like Terraform or CloudFormation. The successful candidate will collaborate closely with cross-functional teams to support ongoing projects and drive innovation in our cloud environment.

5.2.6 Senior System Administrator.

5.2.6.1 Subtasks. Contractor shall provide IT system administrator support at Fort Belvoir, VA. Proficiency in virtualization technologies such as VMware or Hyper-V, along with experience in cloud platforms like AWS or Azure is essential for this role. The contractor will have a deep understanding of cloud-computing technologies, particularly AWS, coupled with extensive experience in system administration and architecture design. The Senior Cloud System Administrator will be responsible for overseeing the implementation, maintenance, and optimization of our cloud-based- systems to meet performance, availability, and security requirements. The Senior System Administrator should have strong experience in deploying, configuring, and administering complex Linux environments. Proficiency in scripting languages like Python or Shell scripting is essential for automation tasks and deployment processes. The ideal candidate will also possess strong leadership qualities, guiding a team of administrators and collaborating with other stakeholders to drive strategic decisions and continuous improvement in our cloud environment.

5.2.7 Program Administration Specialist.

5.2.7.1 Subtasks. The contractor shall provide administrative support to the G-7 front office by providing business operational activities. The contractor shall coordinate and schedule official meetings, briefings, conferences, and travel with the requesting organization that is conducting the event; synchronizing calendars and key leader visits. The contractor shall prepare documents as needed and ensure they are correct in form, format, content, and proper English IAW with AR 25-50 and upload these documents to the shared drive and databases within two business days of the task or as specified by the Government. The contractor shall be knowledgeable in the Defense Travel Program, Microsoft 365 applications, ETMS 2 (Task Management Tool) and be prepared to accept additional duties as necessary to execute front office, directorate and organizational tasks.

5.2.8 Data Analyst.

5.2.8.1 Subtasks. Contractor shall provide data analyst support at Fort Belvoir, VA. The contractor will have a strong background in data analysis, statistical modeling, and visualization techniques, with the ability to translate complex data into actionable insights for stakeholders. Responsibilities will include collecting, cleaning, and analyzing data from various sources to uncover trends, patterns, and opportunities for improvement. Utilize visualizations, dashboards, and reports using tools like Tableau, Power BI, or custom-built visualization tools to present data effectively. Proficiency in programming languages such as Python or R, as well as experience with SQL and data manipulation tools like Pandas, is essential for this role. The Data Analyst will collaborate closely with cross-functional teams to support decision-making processes and drive data-driven strategies across the organization.

5.2.9 Data Visualization Specialist.

5.2.9.1 Subtasks. Contractor shall provide a Data Visualization Specialist support to the G-7 directorate to assist in transforming complex data into actionable insights. This specialist is responsible for analyzing large datasets from various sources such as sensor data, intelligence reports, and operational data, interpreting trends, patterns, and anomalies to support decision-making. Design and create interactive visualizations, dashboards, and reports using tools like Tableau, Power BI, or custom-built visualization tools to present data effectively. Collaborate with intelligence analysts, data scientists, and military personnel as required to understand data needs and translate complex analytical results into clear, concise visual formats. Integrate data from multiple sources to provide a comprehensive view while ensuring data quality, consistency, and security, especially in classified environments. The specialist provides training and support to end-users on the effective use of visualization tools and develops documentation and best practices for data visualization within the organization. By staying updated with the latest trends and technologies in data visualization, they apply innovative solutions to improve existing processes and develop new visualization techniques to enhance the understanding of complex data, thereby significantly contributing to enhanced decision-making, increased efficiency, and driving modernization efforts through the adoption of cutting-edge visualization methodologies.

5.2.10 Senior Test Engineer (System Evaluator).

5.2.10.1 Subtasks. Contractor is entrusted with the assessment and system evaluation support for INSCOM MI and cyber capabilities, ensuring operational excellence in intelligence missions. The contractor's responsibilities encompass the critical analysis of system requirements for testability, the formulation of a strategic Test and Evaluation (T&E) strategy, and the diligent monitoring of test events to report on the systems' effectiveness, suitability, and survivability.

Must possess a deep understanding of T&E methodologies, military intelligence operations, exceptional analytical skills, and the ability to communicate complex technical data effectively.

The position requires travel to various test sites and operational areas, and the contractor must be adaptable to high-stress situations and responsive to rapidly evolving scenarios.

5.2.11 Senior Test Engineer.

5.2.11.1 Subtasks. Contractor shall provide test and evaluation support at Fort Meade, MD, Fort Belvoir, VA, Fort Eisenhower, GA, and the National Security Agency Washington. The contractor shall implement test and evaluation solutions across the INSCOM, G-7 Capability Evaluation Center by providing automated, manual, end-to-end, virtual, physical, and hardware-in-the-loop testing. The contractor shall review all system/capability requires and make recommendations regarding their completeness, accuracy and ability to be tested. Contractor shall create, document, and execute test plans and procedures in support of acquisition, development, and/or integration of assigned capabilities in accordance with DoD, Army, and INSCOM guidance. The Senior Test Engineer conducts component and system testing according to system evaluation and/or test plans to include designing, implementing and executing automated testing utilizing special purpose hardware and software, such as firewalls, IDS/IPS, diagnostic and data capture systems.

Deep knowledge of building and utilizing automated test harnesses and scripting languages like Python, Shell scripting, or Java is essential for this position. Extensive experience with establishing Linux environments (workstation and servers) is required. Reviews and validates test plans to ensure coverage, automation, and data collection requirements for accuracy and completeness. The contractor shall conduct manual and automated testing to include writing and updated automated testing scripts and harnesses. The Senior Test Engineer shall analyze tests results and identifies issues, defects, and opportunities for improvement. The contractor shall identify and effectively communicate results, quality risks, and provide mitigation recommendations. The Senior Test Engineer shall provide informal test and evaluation training based on DoD, Army, and Industry best practices to INSCOM G-7 test and evaluation personnel. The ideal candidate will also possess strong leadership qualities, guiding a team of test engineers and collaborating with other stakeholders to drive strategic decisions and continuous process improvement. The Contractor must be able to obtain and maintain access to National Security Agency Spaces and Information Technology systems.

5.2.12 Mid Test Engineer.

5.2.12.1 Subtasks. Contractor shall provide test and evaluation support at Fort Meade, MD, Fort Belvoir, VA, Fort Eisenhower, GA, and the National Security Agency Washington. The contractor shall implement test and evaluation solutions across the INSCOM, G-7 Capability Evaluation Center by providing automated, manual, end-to-end, virtual, physical, and hardware-in-the-loop testing. The contractor shall review all system/capability requires and make recommendations regarding their completeness, accuracy and ability to be tested. The Contractor shall create, document, and execute test plans and procedures in support of acquisition, development, and/or integration of capabilities in accordance with DoD, Army, and INSCOM guidance. The contractor conducts component and system testing according to system evaluation and/or test plans to include designing, implementing and executing automated testing utilizing special purpose hardware and software, such as firewalls, IDS/IPS, diagnostic and data capture systems.

Proficiency in building and utilizing automated test harnesses and scripting languages like Python, Shell scripting, or Java is essential for this position. Experience with establishing Linux environments (workstation and servers) is required. Creates test plans to ensure adequate coverage and testing of system/capability requirements, automation, and data collection requirements for accuracy and completeness. The contractor shall conduct manual and automated testing to include writing and updated automated testing scripts and harnesses. The contractor shall analyze test artifacts and detail findings in detailed, written report. The contractor shall identify and effectively communicate test results, quality issues, risks, and provide mitigation recommendations. The contractor shall provide informal test and evaluation training based on DoD, Army, and Industry best practices to INSCOM G-7 test and evaluation personnel. The ideal candidate will also possess strong leadership qualities, guiding a team of test engineers and collaborating with other stakeholders to drive strategic decisions and continuous process improvement.

The Contractor must be able to obtain and maintain access to National Security Agency Spaces and Information Technology systems.

5.2.13 Junior Test Engineer.

5.2.13.1 Subtasks. Contractor shall provide test and evaluation support at Fort Meade, MD and the National Security Agency Washington. The contractor shall implement test and evaluation solutions across the INSCOM, G-7 Capability Evaluation Center by providing automated, manual, end-to-end, virtual, physical, and hardware-in-the-loop testing. The contractor shall review all system/capability requires and make recommendations regarding their completeness, accuracy and ability to be tested. The Contractor shall create, document, and execute test plans and procedures in support of acquisition, development, and/or integration of capabilities in accordance with DoD, Army, and INSCOM guidance. The contractor conducts component and system testing according to system evaluation and/or test plans to include designing, implementing and executing automated testing utilizing special purpose hardware and software, such as firewalls, IDS/IPS, diagnostic and data capture systems. Familiarity with building and utilizing automated test harnesses and scripting languages like Python, Shell scripting, or Java is essential for this position.

Experience with establishing Linux environments (workstation and servers) is required. Reviews and validates test plans to ensure coverage, automation, and data collection requirements for accuracy and completeness. The contractor shall conduct manual and automated testing to include writing and updated automated testing scripts and harnesses. The contractor shall analyze test artifacts and detail findings in detailed, written report. The contractor shall identify and effectively communicate test results including issues and risks related to the test environment and/or capability. The contractor shall provide informal test and evaluation training based on DoD, Army, and Industry best practices to INSCOM G-7 test and evaluation personnel. The ideal candidate will also possess strong critical thinking and collaboration skills to drive continuous process improvement and quality. The Contractor must be able to obtain and maintain access to National Security Agency Spaces and Information Technology systems.

5.2.14 Project Manager 1 (Surge).

5.2.14.1 Subtasks. Contractor shall support G-7 and Command Leadership and provide project management and technical support to assist the Government in planning, executing and maintaining emerging capability programs and projects across the multidiscipline Intelligence spectrum IAW and in compliance with DoD, Army, INSCOM and all other applicable rules, regulations, processes and procedures. Produce technical documents of processes and procedures that support technology engagement and assessment as well as assessments or pilots of software and hardware intensive systems and implement best practice planning, risk mitigation, and strategic support spanning the full Project Management Lifecycle. Facilitate DoD/IC synchronization technical exchange meetings, briefings, and demonstrations, provide meeting minutes, briefing slides and/or technical documents. Contractor shall provide a PM team capable of supporting Modernization and Innovation efforts within the directorate and command. Should be able support and advise across intelligence layers and disciplines to support MDO planning and strategies.

5.2.15 Operations Research/Systems Analysis (ORSA) (Surge).

5.2.15.1 Subtasks. Contractor shall provide ORSA support at Fort Belvoir, VA. The contractor will have a solid background in mathematics, statistics, and optimization techniques, with experience in applying ORSA methodologies to complex problems. Responsibilities will include analyzing data, modeling scenarios, and providing insights to support strategic planning and resource allocation. Proficiency in analytical tools such as MATLAB, R, or Python, as well as experience with simulation software and decision support systems, is essential for this role. The ORSA analyst will collaborate closely with stakeholders to identify opportunities for improvement, develop models, and recommend solutions that optimize our operations and drive organizational success. Experience with Military Intelligence, Modernization, and Test and Evaluation is preferred.

5.2.16 Data Engineer (Surge).

5.2.16.1 Subtasks. The contractor will have a strong background in data architecture, Extract, Transform, and Load (ETL) processes, and data modeling, with a focus on scalability and reliability. Responsibilities will include developing and maintaining data pipelines, integrating new data sources, and ensuring data quality and integrity throughout the process. Proficiency in programming languages such as Python or Java, as well as experience with big data technologies like Hadoop, Spark, and Kafka, is crucial for success in this role. The Data Engineer will collaborate closely with cross-functional teams to understand data requirements and implement solutions that empower data-driven decision-making across the organization.

5.2.17 Full Stack Engineer (Surge).

5.2.17.1 Subtasks. Contractor shall provide full stack engineer support at Fort Belvoir, VA. The contractor will have a solid understanding of both frontend and backend technologies, including proficiency in JavaScript frameworks like React or Angular, as well as backend languages such as Node.js or Python.

Responsibilities will encompass designing and implementing user interfaces, developing server-side logic, and ensuring seamless integration of all components. Experience with databases, API development, and version control systems is essential for success in this role. The Full Stack Engineer will collaborate closely with cross-functional teams to deliver high-quality, scalable solutions that meet user requirements and business objectives.

5.2.18 Systems Engineer (Surge).

5.2.18.1 Subtasks. Contractor shall provide IT systems engineer support at Fort Belvoir, VA. The contractor will possess a deep understanding of networking, system administration, and security principles.

Responsibilities will include designing, implementing, and maintaining our network and stand-alone infrastructure, servers, and storage systems to ensure optimal performance and reliability. Proficiency in virtualization technologies such as VMware or Hyper-V, along with experience in cloud platforms like AWS or Azure, is essential for this role. The IT Systems Engineer will collaborate closely with cross-functional teams to provide technical support, troubleshoot issues, and implement best practices to enhance our IT operations.

5.2.19 DevOps Engineer (Surge).

5.2.19.1 Subtasks. Contractor shall provide DevOps engineer support at Fort Belvoir, VA. The contractor will have a strong background in software development, system operations, and automation, with a focus on improving efficiency and scalability. Responsibilities will include designing and implementing CI/CD pipelines, configuring, and managing infrastructure as code, and optimizing system performance and reliability. Proficiency in tools such as Docker, Kubernetes, Jenkins, and Ansible, as well as experience with cloud platforms like AWS or Azure, is essential for success in this role. The DevOps Engineer will collaborate closely with development teams to streamline workflows, automate repetitive tasks, and ensure smooth and continuous delivery of software solutions.

5.2.20 Data Analyst (Power Platform Analyst) (Surge).

5.2.20.1 Subtasks. Contractor shall provide power platform analyst support at Fort Belvoir, VA. The contractor will possess a strong understanding of Power Apps, Power BI, Power Automate, and Power Virtual Agents, with the ability to design and develop custom applications and workflows. Responsibilities will include gathering requirements from stakeholders, designing data models, and building and deploying Power Platform solutions that meet business needs. Proficiency in Microsoft technologies, including SharePoint, Dynamics 365, and Office 365, is essential for success in this role. The Microsoft Power Platform Analyst will collaborate closely with business users and IT teams to deliver innovative solutions, automate processes, and empower users to make data-driven decisions.

5.2.21 DPED-CI Tier III Service Desk

(1) DPED-CI System Manager: Senior Systems Engineer Principal

(2) Tier III Engineer Support

(3) Tier III Cybersecurity/Information Assurance (IA)

5.2.21 Tier III and Cybersecurity/Information Assurance (IA): Builds and maintains 24 unique security enclaves of the Quick Reaction Capability (QRC) Converged Infrastructure (CI) and the Tactical SIGINT Baseline (TSB). Tier III deploys the quarterly builds, performs break fix actions, and is the final level of support to the customer. Contractors managing these actions require successful completion of Cross Domain Solution Administrator training.

5.2.21.1 Subtasks.

5.2.21.2 Provide Tier III Enterprise Support: Tier III support shall include build installation, fault isolation, repair, periodic inspection, and analysis. This includes telephonic support and onsite repairs if telephonic support does not remedy the problem.

(1) Ensure continued availability and functionality of enterprise auditing tools and perform daily review of Splunk dashboards for AD replication, storage allocations, system health. Monitoring in includes VMware tools for VDI monitoring.

(2) SMEs must have experience and proficiency in the operations and maintenance of Cross Domain Solutions, VMware products to include Teleco level capabilities, Kubernetes environment, Windows, Red Hat Enterprise Linux (RHEL), and other modern technologies as required.

5.2.21.3 Provide Tier III Cross Domain Solution Support: Support shall provide Tier III level support to provide operations and maintenance of the local cross domain solutions. Subject Matter Experts (SMEs) need experience with Windows, RHEL, Command Line Interface, and Cross Domain Solutions (Trusted Thin Client, Trusted Gateway System, High Speed Guard). Support shall be DoD 8140 certified at the Information Assurance Technical Level III.

(1) Provide daily Touch-Maintenance for the local Cross Domain Solutions

(2) Perform quarterly security updates provided by Cross Domain Solution Vendors and report completion

(3) Ensure Cross Domain Solution functionality and availability, works with Enterprise Tier III and vendor to resolve issues that arise.

(4) Push image updates as required to Thin Client Infrastructure, and ensure functionality, user accessibility/usability

5.2.21.4 Install, Maintain, and (as necessary) Troubleshoot Operating System Deployments of Windows, RHEL, and Virtual Desktop Infrastructure (VDI) Environments: Support shall provide Operating System (Windows & RHEL) SMEs to upgrade solutions, configuration using industry best practices, security hardening, and automated deployment. SMEs need experience with Windows, RHEL, VDIs, and VMware (vCenter, Viewconnector, vRealize Log Insight, Horizon AppVolumes, etc.).

(1) Deploy baseline Operating System Template (Windows Command Line Interface/ User Experience & RHEL). VMs requiring unique configurations will be modified using the Deploy CI automation

(2) Deploy baseline VDI for users and Administrators

(3) Deploy Windows Server Update Services (WSUS) and RHEL YUM (Yellowdog Updater, Modified) servers to patch Virtual Machines (VMs) and provide quarterly patch updates in accordance with the Quarterly Build Cycle. Ensure VMs are able to be and produce clean Assured Compliance Assessment Solution (ACAS) scan results

(4) Coordinate with Integration team as needed if deployment/instructions if unanticipated results arise in the field

5.2.21.5 Install and Maintain Domain Controller Updates: Support shall provide Domain Controller SMEs to deploy Domain Controllers across the Converged Infrastructure enterprise. Additionally, support shall maintain Active Directory by defining groups, permission, and structure. SMEs need experience with Domain Controllers, Active Directory, Windows, and other COTs products.

(1) Deploy baseline Domain Controller to be built upon the Windows template. Domain Controllers must have functional replication between each other

(2) Review and maintain Active Directory. Ensure Groups, Permissions, and structure to be leveraged by the Converged Infrastructure enterprise are baselined. Ensure no drift from the INSCOM G7 approved baseline

(3) Coordinate with Integration team as needed if deployment/instructions or unanticipated results

5.2.21.6 Provide Continued Support of the Converged Infrastructure Virtual Environment, Leveraging VMware Products: Support shall provide Cloud Computing/Virtualization SMEs to provide application upgrades, configuration enhancements, and functionality testing for the Converged Infrastructure virtual environment using VMware products. SMEs need experience with cloud computing, VMware, and other COTs products.

(1) Install application upgrades for the VMware environment utilized on the Converged Infrastructure, and ensure functionality

(2) Coordinate with Integration team as needed if deployment/instructions if unanticipated results arise in the field.

5.2.21.7 Maintain Infrastructure and Enterprise Services: Support shall provide Infrastructure and Enterprise Services for the Converged Infrastructure. SMEs need experience with VMware, Certificate Authorities, Network File Shares (Windows and RHEL), Time, YUM/WSUS, McAfee cPolicy Orchestrator (ePO), Enterprise mail and other COTs products.

(1) Ensure the Converged Infrastructure is deployed per the approved build baseline, ensuring Enterprise services are modernized, patched, and security hardened

(2) Coordinate with Integration team as needed if deployment/instructions or unanticipated results arise in the field.

5.2.21.8 Install and Maintain Kubernetes Tanzu Container Infrastructure for Converged Infrastructure Single and Multi-Unit Configurations: Support shall provide SMEs to deploy a Container environment on the Converged Infrastructure for both Single and Multi-Unit Configurations. Subject Matter Experts (SMEs) need experience with Kubernetes, VMware Tanzu, Harbor, PKI, and other Commercial Off the Shelf (COTS)/ Open Source products.

(1) Deploy Container Environment for Converged Infrastructure Single and Multi-Unit Configuration according to approved build baseline

5.2.21.9 Manage Applications Running on Windows, RHEL, and VDIs: Support shall provide SME to provide Application support for applications running on top of virtual Operating Systems (OS). Support shall conduct upgrades, enhancements, and deployments of applications both natively on the OS and through VMware AppVolumes. SMEs need experience with Windows, RHEL, Windows VDIs, VMware AppVolumes, Internet Browsers, and other COTS applications. Provide onsite support as needed to continue operations and maintenance of the Converged Infrastructure.

(1) Deploy applications on the OS directly or VMware AppVolumes in accordance with baseline build

5.2.21.10 Manage Microsoft Standard Query Language (SQL) Enhancement And Maintenance for the Converged Infrastructure: Support shall provide SME to provide Microsoft SQL support for the Converged Infrastructure. Support shall conduct upgrades, enhancements, and deployments of virtual MS SQL servers. SMEs need experience with Microsoft SQL and the integration of databases.

(1) Deploy MS SQL in accordance with baseline build

5.2.21.11 Manage Operational Cybersecurity: Support shall provide SME to provide Operational Cybersecurity of the Converged Infrastructure. SMEs need experience with DISA Security Technical Implementation Guides (STIGs), Security Content Automation Protocol (SCAP), ACAS, ePO, Windows OS, RHEL OS, Splunk, Solarwinds Orion Network Performance Monitor (NPM), and VMware.

(1) Conduct scans of Converged Infrastructure enclaves and ensure deployment is baselined. If unanticipated vulnerabilities or findings arise, take corrective action to resolve

(2) Ensure periodic auditing is being accomplished across the enterprise, review necessary logs in accordance with DoD and Intelligence Community Policy. Report unaccepted/suspicious activity

(3) Conduct spot checks of Converged Infrastructure deployment to ensure settings align with approved baseline build

(4) Review Cyber Tasking Orders, report applicability, and deploy provided solutions from integration team. Upon completion report status

5.2.22 DPED-CI Tier II Service Desk

(1) Tier II Support: Systems Engineer Principal (Help Desk)

5.2.22.1 Help Desk: Provides 24/7 phone/reach support for the Converged Infrastructure. Document fix actions taken by the team, password resets, account creation, and basic administrative tasks performed by the team. The team requires experienced administrators familiar with FMV PED applications (AIMES, PICTE, SOCET GXP, InMotion, xPlorer), Distributed Common Ground Station – Army (DCGS-A) applications, and Chat applications (Pidgin, Sentinel).

5.2.22.2 Subtasks.

5.2.22.3 Provide 24/7 CI DPED Helpdesk: Helpdesk support shall include fault isolation, repair, periodic inspection, and analysis. This includes telephonic support, customer support, and if necessary, escalation to Tier III.

(1) Provide 24/7 Helpdesk/phone/ system administration support and assist users with initial corrective actions for account, share drive, profile issues, mission application problems, or other customer concerns. If necessary, document issue, and escalate to Tier III

(2) SMEs must have experience and proficiency in the operations and maintenance of Cross Domain Solutions, VMware products, Windows, RHEL, and other modern technologies as required

5.2.22.4 Provide Continued Support of the Converged Infrastructure Virtual Environment, Leveraging VMware products: Support shall provide Cloud Computing/Virtualization SMEs to monitor Infrastructure virtual environment using VMware products. SMEs need experience with cloud computing, VMware, and other COTs products.

(1) Ensure functionality for the VMware environments utilized on the Converged Infrastructure and perform problem resolution/troubleshooting as necessary

(2) Coordinate with Tier III team when unanticipated results / incidents arise in the field

5.2.22.5 Manage Applications Running on Windows, RHEL, and VDIs: Support shall provide SMEs to provide Application support for applications running on top of virtual Operating Systems (OS). Support shall interface with customers to ensure software operations and output. SMEs need experience with Windows, RHEL, Windows VDIs, VMware, Internet Browsers, and other COTS applications. Provide onsite support as needed to continue operations and maintenance of the Converged Infrastructure.

(1) Operate applications on the OS directly or VMware AppVolumes in accordance with baseline build

(2) Coordinate with Tier III as needed if unanticipated software behavior arises in the field

5.2.22.6 Create DPED-CI Accounts for Windows, RHEL, and VDIs: Support shall provide SMEs able to utilize service delivery tool to process System Authorization Access Requests (DD Form 2875), Acceptable Use Policies (AUP), and Army Training and Certification Tracking System (ATCTS) requirements.

Provide onsite support as needed to process, create and monitor Microsoft Active Directory structures within the Converged Infrastructure.

(1) Process Account Creation Paperwork

(2) Monitor Active Directory for compliance with local policies

5.2.23 Tier III Cross Domain Solution (CDS) / Tier II Local Support

(1) Tier III Cross Domain Solution / Tier II Local Support: Systems Engineer Principal

5.2.23.1 The Tier III CDS and Tier II Local support is a dual position. The level of access and skill required to support the CDS is at the Tier III level, but the local support access and skill is Tier II. The CDS administration requires two-person integrity at a minimum.

(1) Tier III CDS: Provides Tier III level support to the INSCOM owned Cross Domain Solutions.

Support includes updates, and daily touch maintenance. Position requires successful completion of Cross Domain Solution Administrator training

(2) Tier II Local Support: Provides Tier II level onsite support to the Converged Infrastructure.

Support includes loading build media, ensuring continued availability, and daily/emergency touch-maintenance

5.2.23.2 Subtasks.

5.2.23.3 Provide Tier III Cross Domain Solution Support: Support shall provide Tier III level support to provide operations and maintenance of the local cross domain solutions. Subject Matter Experts (SMEs) need experience with Windows, Red Hat Enterprise Linux (RHEL), Command Line Interface, and Cross Domain Solutions (Trusted Thin Client, Trusted Gateway System, High Speed Guard). Support shall be DoD 8140 certified at the Information Assurance.

(1) Provide daily Touch-Maintenance for the local Cross Domain Solutions, make necessary configuration changes directed by INSCOM. Changes include, adding IP ranges for VDI pools, updating Simple Mail Transfer Protocol (SMTP) server settings, patching/updating, and adding updated filters for the Cross Domain Solutions.

5.2.23.4 Provide Tier II Onsite Support: Tier II support shall include fault isolation, repair, periodic inspection and analysis, and replacing unserviceable equipment (as inventory permits). This includes telephonic support and onsite repairs if telephonic support does not remedy the problem.

(1) Load quarterly build media on Service Center unique networks upon receipt, report completion to enterprise Tier III

(2) Ensure continued availability and functionality of enterprise auditing tools and perform daily review

(3) SMEs must have experience and proficiency in the operations and maintenance of Cross Domain Solutions, VMware products, Windows, RHEL, and other modern technologies as required

(4) Provide daily & emergency Touch-Maintenance on variety of physical hardware to include Keyboard Video Monitor (KVMs), Thin Clients, Trusted Thin Clients, Trusted Gateway Systems, and High Speed Guards

(5) Perform daily checks of Service Center Enclaves and report issues to Enterprise Tier III and the Helpdesk. Daily checks include verification of Enclave functionality, VDI accessibility, enterprise services, and storage check/verification

5.2.24 Depot Level Engineer Integration

(1) Depot Integration Manager: (LCAT: Senior Engineer)

(2) Operating System/Enterprise Service Engineer (LCAT: Senior Engineer)

(3) Integration Engineer (LCAT: Journeyman Engineer)

(4) Special Mission Engineer (LCAT: Senior Engineer)

5.2.24.1 Provide Operating System / Enterprise Service Engineers: Provide security patches for the enterprise, and upgraded, automated and security-hardened Operating Systems (Windows and RHEL) in support of the converged Infrastructure. Additionally, the team develops Virtual Desktop Infrastructure (VDIs) for the users to leverage.

(1) Integration Engineers: Compile the build media provided by the other contracting companies and deploy it in the lab environment ensuring functionality and installation steps are correct.

(2) Special Mission Engineer: Provides operational support to the ONEROOF mission application.

(3) Critical Subject Matter Expertise (SME)

(a) Automation/Script SME: Provides scripting and automation support to the Converged Infrastructure to decrease manual steps required for deployment/operations, and to generated needed JavaScript Object Notation (JSON) files for the Deploy CI automation.

Additionally, the position provides custom PowerShell scripts to support the administration and operation of Converged Infrastructure.

(b) Applications SME: Provides updates, enhancements, and deployments of applications both natively on the Operating System and through Vmware AppVolumes.

(c) Container SME: Provides and maintains Kubernetes containers to replace applications that run on Virtual Machines. Containers are designed and tested in the Tanzu environment.

5.2.24.2 Subtasks.

5.2.24.3 Provide Operating System Support and Enhancements for Windows, RHEL, and Virtual Desktop Infrastructure (VDI) Environments. (This task support Greenfield (new build) and Brownfield (upgrade upgrade)): Support shall provide Operating System (Windows & RHEL) SMEs to provide upgraded solutions, configuration using industry best practices, security hardening, and automated deployment.

Subject Matter Experts (SMEs) need experience with Windows, RHEL, VDIs, and VMware (vCenter, Viewconnector, Horizon AppVolumes, etc.). Provide onsite support as needed to continue operations and maintenance of the Converged Infrastructure.

(1) Develop baseline Operating System Template (Windows Command Line Interface/ User Experience & RHEL) including required DoD security hardening, licensing, Group Policies (GPOs) (where necessary), and other configurations to meet the lowest common requirement for Converged Infrastructure Virtual Machines (VM). VMs requiring unique configurations will be modified via scripts called by the Deploy CI automation. These scripts will be documented and provided to INSCOM G7. Baseline delivery may be provided outside of the build cycle when required by government security requirements, technology changes, or compatibility issues

(2) Develops and sustains the Converged Infrastructure automation tools (Deploy CI, VirtualCI, STIG Processor, Dataflow Processor, DNS Verification Script, CI JSON Tool, etc.). These tools require personnel knowledgeable in PowerShell, PowerCLI, and Python

(3) Develop baseline VDI for users and Administrators. Ensure only the required software/packages are included on the VDI and pull other necessary applications from AppVolumes

(4) Develop and deploy WSUS and YUM virtual servers to patch VMs and provide quarterly patch updates in accordance with the Quarterly Build Cycle. Ensure VMs are able to be patched with minimal administrator input and produce clean Assured Compliance Assessment Solution (ACAS) scan results

(5) Develop baseline physical Management Server and provide quarterly updates/patching for OS/applications, including required licensing manager and Dynamic Host Control Protocol

(6) Conduct functionality testing of baseline prior to delivery, ensure functionality and compliance with DoD Cybersecurity standards

(7) Develop and provide quarterly deployment instructions, operational utilization guide, and functionality test plan

(8) Provide operational support/callback based on functionality testing. Provide resolution if unanticipated results arise in the field

5.2.24.4 Provide Quarterly Domain Controller Automated Deployment and Maintenance: Support shall provide Domain Controller SMEs to automate the deployment of Domain Controllers across the Converged Infrastructure enterprise. Additionally, support shall maintain Active Directory by defining groups, permission, and structure. SMEs need experience with Domain Controllers, Active Directory, Windows, and other COTs products. SMEs need experience with Converged Infrastructure automation tools.

(1) Develop baseline Domain Controller to be built upon the Windows template that can be deployed using automation. Domain Controllers must be able to provide replication between each other. Baseline will be provided quarterly in line with build cycle provided by INSCOM G7.

Baseline delivery may be provided outside of the build cycle when required by government security requirements, technology changes, or compatibility issues.

(2) Review and maintain Active Directory. Define required Groups, Permissions, and structure to be leveraged by the Converged Infrastructure enterprise. Document any changes and provide to INSCOM G7. Active Directory configuration must be included in the Deploy CI automation

(3) Conduct functionality testing of baseline prior to delivery, ensure functionality and compliance with DoD Cybersecurity standards

(4) Develop and provide quarterly deployment instructions, operational utilization guide, and functionality test plans

(5) Provide operational support/callback based on functionality testing. Provide resolution if

5.2.24.5 Provide Continued Sustainment Support of the Converged Infrastructure Virtual Environment, Leveraging VMware Products: Support shall provide Cloud Computing/Virtualization SMEs to provide application upgrades, configuration enhancements, and functionality testing for the Converged Infrastructure virtual environment using VMware products. SMEs need experience with cloud computing, VMware, and other COTs products.

(1) Provide application upgrades for the VMware environment utilized on the Converged Infrastructure, and ensure functional testing is produced and conducted for each Quarter. Baseline delivery may be provided outside of the build cycle when required by government security requirements, technology changes, or compatibility issues

(2) Conduct functionality testing of baseline prior to delivery, ensure functionality and compliance with DoD Cybersecurity standards

(3) Develop and provide…