G6_IT_Services_PWS_FY_19_8_Nov_2018_Draft.docx

Unclassified/FOUO Government Only

PERFORMANCE WORK STATEMENT (PWS)

US Army Cyber Center of Excellence, Fort Gordon, Georgia G6 Information Technology Services

Part 1

General Information

1.0 General: This is a non-personal services contract to provide Cyber Center of Excellence (CCoE) G6 Information Technology (IT) Services. The Government will not exercise any supervision or control over the contract service providers performing the services herein. Such contract service providers shall be accountable solely to the Contractor who, in turn is responsible to the Government.

1.1 Description of Services/Introduction: The Contractor shall provide all personnel, equipment, supplies, facilities, transportation, tools, materials, supervision, and other items and non-personal services necessary to perform G6 Information Technology Services as defined in this Performance Work Statement except for those items specified as Government furnished property and services. The Contractor shall perform to the standards in this contract.

1.2 Background: The Office of the G6 is a primary staff section to the Commanding General (CG) Cyber Center of Excellence and Fort Gordon Senior Mission Commander. Under the Mission Command concept the G6 receives guidance and orders from the following Headquarters (HQs): Combined Arms Center (CAC) G6, Training and Doctrine Command (TRADOC) G6, HQ Department of the Army (DA) Chief Information Officer (CIO)/G6; Army G2, Defense Information Systems Agency (DISA), and Army Cyber Command (ARCYBER). All formal directives must go through the CCoE G3 and be approved the CCoE’s Chief of Staff (CofS). The G6 works to ensure CCoE CG’s priorities are supported by capabilities. The G6 recognizes the rapid rate of change in today’s environment, especially as it pertains to Cyber, Signal and IT equipment and training. A G6 is necessary in order to address and meet the challenges of these rapid changes and to further support enhancement and maintenance of the CCoE’s IT requirements.

1.3 Objectives. This PWS will support the CCoE G6 mission to provide IT services and support at the Non-Secure Internet Protocol Router (NIPRNET), Secure Internet Protocol Router (SIPRNET), and Joint Worldwide Intelligence Communications System (JWICS) levels for the CCoE and all school through the following: Cyber Security, Training Network, Operations, IT Project Management, IT Procurement, and Enterprise Service Desk. The G6 Information Technology Services contract will provide results in the form of:

· Establishing, maintaining, and supporting the CCoE Training Network

· Providing enforcement and management of Cyber Security policies and programs

· Providing consolidated Service Desk support of the training and operational environment.

1. Creating, reviewing, maintaining, and providing assistance with IT Acquisition Management and Oversight (AMO) packets

1. Simultaneously managing multiple, diverse IT projects and IT Enterprise level solutions across multiple CCoE organizations

1. Providing day to day Operations support to G6

1.4 Scope: This PWS defines the requirements and acceptable performance levels for execution. The Contractor shall perform all administrative services, (i.e. software and material requests), quality control (QC), and correspondence, in order to meet service requirements. The Contractor shall acquire and maintain accurate and complete records, files and libraries of documents (if not Government-Furnished as identified) to include Federal, State, and local regulations, codes, laws, technical manuals and manufacturer’s instructions and recommendations, which are necessary and related to the services being provided. The Contractor shall provide support to the CCoE. The Contractor shall also assist the CCoE on IT projects and tasking’s sent down from higher headquarters (HHQ) (to include TRADOC and CAC).

1.5 Period of Performance: The period of performance shall be for one (1) Base Year of 12 months Base Year 29 March 2019 – 28 March 2020

1.6 General Information

1.6.1 Quality Control: The Contractor shall develop and maintain an effective Quality Control Program (QCP) to ensure services are performed in accordance with this PWS. The Contractor shall develop and implement procedures to identify, prevent, and ensure non-recurrence of defective services. The Contractor’s quality control program is the means by which he assures himself that his work complies with the requirement of the contract. The initial QCP shall be delivered with the Contractor’s proposal. After award, the final QCP shall be delivered within 30 days of start date and within 5 working days when changes are made thereafter. After acceptance of the QCP, the Contractor shall receive the Contracting Officer’s acceptance in writing of any proposed change to their QC system.

1.6.2 Quality Assurance: The Government will evaluate the Contractor’s performance under this contract in accordance with the Quality Assurance Surveillance Plan. This plan is primarily focused on what the Government must do to ensure that the Contractor has performed in accordance with the performance standards. It defines how the performance standards will be applied, the frequency of surveillance, and the minimum acceptable defect rate(s).

1.6.3 Recognized Holidays: The Contractor is not required to perform services on holidays. Holidays falling on a Saturday will be observed on the preceding Friday. Holidays falling on a Sunday will be observed on the following Monday. In addition to the days designated as holidays, the Government recognizes any other day designated by Federal Statute, Executive Order or Presidential Proclamation.

1.6.4 Hours of Operation: The Contractor is responsible for conducting business between the hours of 0730 to 1630 with a one (1) hour lunch, unless otherwise specified in the G6 Division-specific work hours identified below. Contractors may be required to flex hours in the event of a mission critical requirement or event (ie system outage, project deadline, etc.). Overtime is not authorized. Unless otherwise directed, the Contractor workdays will be Monday thru Friday except Federal holidays or when the Government facility is closed due to local or national emergencies, administrative closings, or similar Government directed facility closings. For other than firm fixed price contracts, the Contractor shall not be reimbursed when the Government facility is closed for the above reasons. The Contractor must at all times maintain an adequate workforce for the uninterrupted performance of all tasks defined within this PWS when the Government facility is not closed for the above reasons. When hiring personnel, the Contractor shall keep in mind that the stability and continuity of the workforce are essential.

· Procurement Services: 0730-1630. However, work hours may be required to flex hours during peak end of year (EOY) procurement processing (generally Aug – Sept) and other emergency procurement situations with little notice.

· Operations: 0730-1630

· Cyber Security: 0730-1630

· Enterprise: Staggered coverage required between the hours of 0700-1730. Must maintain two Contractor personnel present for duty with a minimum of one during the hours of 1130-1300. Must stagger Contractor personnel to accommodate coverage of 0700-1730

· Training Network: Staggered coverage required between the hours of 0700-1730. Must maintain two Contractor personnel during the hours of 1130-1300. Must stagger Contractor personnel to accommodate coverage of 0700-1730.

· For operational emergency support required outside of normal operations (0700-1730), the COR will notify the PM immediately of the requirement. Regardless of support required (remote or on site), required Contractor response time is two (2) hours. PM and COR or Division TPOC responsible for ensuring Contractor has building/room access to affected area(s) and/or system access, as required.

· When unexpected events arise requiring work schedule adjustments to meet mission requirements (i.e. end of year procurement deadlines, unexpected IT issues with Enterprise Service Desk support, Cyber Security accreditation deadlines, etc.) contract personnel work schedules may be “flexed” to meet mission requirements while still adhering to the standard five-day work week. Must be coordinated between COR and PM.

1.6.5 Place of Performance: All of the work, under this contract, will be performed at CCoE on Fort Gordon, Georgia. Contractors may be required to travel in support of this contract.

1.6.6 Type of Contract: The Government will award a firm fixed price contract.

1.6.7 Security Requirements: Contractor employees performing on this contract must be U.S. citizens. At work performance start date,e and through the life of the contract, a minimum of 16 (sixteen) Contractors identified in Exhibit 3, Workload Data, must have a final Top Secret security clearance with Sensitive Compartmented Information (TS/SCI) eligibility as well as meet position requirements IAW PWS. All other Contractors shall have a minimum of final Secret security clearance and will be initiated by their Facility Security Officer (FSO) for TS/SCI eligibility within 30 days of onboard; and shall maintain the required security clearance throughout the life of the contract. The Contractor is responsible for acquiring the clearances. The security requirements are in accordance with the attached DD Form 254, Department of Defense Contract Security Classification Specification. The Contractor shall ensure that all assigned personnel understand applicable security policies and directives found in DOD 5220.22-M, National Industry Security Program Operating Manual (NISPOM); AR 380-5, Information Security Program; and all other applicable policies and regulations.

1.6.7.1 Physical Security: The Contractor shall be responsible for safeguarding all Government equipment, information and property provided for Contractor use. At the close of each work period, Government facilities, equipment, and materials shall be secured. The Contractor shall ensure that classified data is controlled, protected, and safeguarded in accordance with AR 380-5 and current Army and Department of Defense (DOD) policy. Information shall be accessed and stored in Government spaces only appropriate to the classification level. The Contractor shall agree that any data furnished by the Government to the Contractor shall be used only for performance under this PWS, and all copies of such data shall be returned to the Government upon completion of this effort.

1.6.7.2 Key Control: The Contractor shall establish and implement methods of making sure all keys/key cards issued to the Contractor by the Government are not lost or misplaced and are not used by unauthorized persons. NOTE: All references to keys include key cards. No keys issued to the Contractor by the Government will be duplicated. The Contractor shall develop procedures covering key control that shall be included in the QCP. Such procedures shall include turn-in of any issued keys by personnel who no longer require access to locked areas. The Contractor shall immediately report any occurrences of lost or duplicate keys/key cards to the Contracting Officer.

1.6.7.2.1 In the event keys, other than master keys, are lost or duplicated, the Contractor shall, upon direction of the Contracting Officer, re-key or replace the affected lock or locks; however, the Government, at its option, may replace the affected lock or locks or perform re-keying. When the replacement of locks or re-keying is performed by the Government, the total cost of re-keying or the replacement of the lock or locks shall be deducted from the monthly payment due the Contractor. In the event a master key is lost or duplicated, all locks and keys for that system shall be replaced by the Government and the total cost deducted from the monthly payment due the Contractor.

1.6.7.2.2 The Contractor shall prohibit the use of Government issued keys/key cards by any persons other than the Contractor’s employees. The Contractor shall prohibit the opening of locked areas by Contractor employees to permit entrance of persons other than Contractor employees engaged in the performance of assigned work in those areas, or personnel authorized entrance by the Contracting Officer.

1.6.7.3 Lock Combinations: The Contractor shall establish and implement methods of ensuring that not all lock combinations are revealed to unauthorized persons. The Contractor shall ensure that lock combinations are changed when personnel having access to the combinations no longer have a need to know such combinations. These procedures shall be included in the Contractor’s QCP.

1.6.7.4 Communications Security (COMSEC): Classified COMSEC material is not releasable to Contractor employees who have not received a final clearance at the appropriate security level. COMSEC access shall be IAW DOD 5220.22-M and AR 380-40. When access is required at Government facilities, Contractor personnel will adhere to COMSEC rules and regulations as mandated by Command policy and procedures. Written concurrence of the contracting office (KO) is required prior to subcontracting.

1.6.7.5 Handling/Access to Classified Information: The Contractor shall comply with FAR 52.204-2, Security Requirements. This clause involves access to information classified Confidential, Secret, or Top Secret and requires Contractors to comply with (1) the Security Agreement (DD Form 441), including the National Industrial Security Program Operating Manual (DoD 5220.22-M), and (2) any revisions to DoD 5220.22-M.

1.6.7.6 SIPRNET and JWICS: SIPRNET and JWICS access will only be as directed by the Government requiring activity and at Government facilities only. Contractors requiring access to the SIPRNET must have a final Secret clearance or Interim TS clearance. Contractors requiring access to JWICS must have a final TS clearance and be indoctrinated for SCI access. Approval by the COR is required prior to granting access. SIPRNET/JWICS may contain NATO information and a NATO awareness brief and acknowledgement is required for all personnel prior to being granted access to the SIPRNET/JWICS. The NATO Awareness briefing is required to inform personnel how to protect NATO information in the event they come across it while accessing the SIPRNET JWICS. A written acknowledgment shall be maintained by the COR Before leaving the NATO Awareness briefing, the Contractor should request a copy of the signed agreement to provide to the COR. The Contractor shall not access, download or further disseminate any classified information from SIPRNET/JWICS, which is outside the execution of the defined contract requirements unless specifically authorized in writing by the Government Program Manager and the KO. In the event that any special access is required, the KO must modify the requirements and DD 254.

1.6.7.7 Information Assurance (IA)/Information Technology (IT) Training: All Contractor employees and associated subcontractors must complete the DoD Cyber Awareness Challenge Training (https://ia.signal.army.mil/DoDIAA) before issuance of network access and annually thereafter. Certificates of successful completion, for both initial awareness training and annual refresher training shall be provided to the COR. All Contractor employees will successfully complete all required IA training as specified in AR 25-2 and as directed by the Government. All Contractor employees working IA/IT functions must comply with DoD and Army training requirements in DoDD 8570.01, DoD 8570.01-M, and AR 25-2.

1.6.7.8 Fort Gordon Network Access: Contractor employees, to include subcontractors, requiring access to information systems to fulfill their duties must possess the required favorable security investigation. The IASO/IANO from the activity that the Contractor employee is assigned to, will submit an electronic DD 2875, System Authorization Access Request (SAAR) to the CCoE G2 for verification that the Contractor employee meets the requirements of AR 25-2 for accessing the Fort Gordon network. (Ref AR 25-2)

1.6.7.9 Cybersecurity/Information Technology (IT) Certification: Per DoD 8570.01-M, DFARS 252.239.7001 and AR 25-2, the Contractor employees' supporting IA/IT functions shall be appropriately certified upon contract award. The baseline certification as stipulated in DoD 8570.01-M must be completed upon contract award. Current guidance on baseline certifications can be found at Technical Exhibit 4, DoD 8570 Baseline Certifications, and further identified in section 1.6.8, Special Qualifications, where required, by position.

1.6.7.10 Information Security Program Training: All Contractor employees, including subcontractors, assigned to this contract shall complete the online Information Security Program Training located on the Army Learning Management System (ALMS) site. Log into AKO, “Self Service”, “My Training”, “ALMS”, “Go To Mandatory Training”. Training must be completed within 30 days of reporting for duty and annually thereafter. The Contractor shall submit certificate of completion for each affected Contractor employee and subcontractor employee to the COR and unit/activity security manager. (Ref ALARACT 207/2013, DTG 291848Z Aug 13, Subj: Army Wide Rollout and Requirement for Standardized Computer Web-Based Security Training on the Army Learning Management System (ALMS)).

1.6.7.11 Anti-Terrorism (AT) Level I Training: All Contractor employees, including subcontractors, assigned to this contract shall receive an initial Antiterrorism Level I Brief by a certified ATO Level II Officer within 30 days of reporting for duty (monthly the Garrison Antiterrorism Officer will offer briefings). Annual refresher Antiterrorism Level I training shall be completed on-line at https://jkodirect.jten.mil/Atlas2/faces/page/login/Login or they may attend the monthly training offered by the Garrison ATO. For face to face initial training, completion of training shall be reported to the COR and the unit/activity security manager. COR will confirm with sign in rosters received from AT officer. For on-line training, the Contractor shall submit certificates of completion for each affected Contractor employee and subcontractor employee to the COR and unit/activity security manager (ref Department of the Army, US Army Contracting Agency, SFCA-CO, and 5 Sep 07, Subject: Incorporation of Measures into the Contracting Process and AR 525-13, Antiterrorism). NOTE: Contractor personnel shall receive an AOR briefing when traveling OCONUS on TDY. A certified ATO Level II Officer must provide briefing within seven (7) working days prior to TDY departure outside the 50 United States, its territories and possessions. This is separate from the normal annual AT Level I training requirement. (Ref AR 525-13) iWATCH: All Contractor employees, including subcontractors, assigned to this contract shall receive a brief on the local iWATCH program (provided in conjunction with the AT Level I training). This training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the COR). This training shall be completed within 30 days of reporting to duty and annual refresher training with the results reported to the COR.

Operation Security (OPSEC) Training: All Contractor employees, including subcontractors, assigned to this contract shall complete Level I OPSEC training within 30 days of reporting for duty and then annually thereafter. The Garrison OPSEC Officer will conduct initial Level 1 OPSEC training monthly or a Level II certified OPSEC Officer. Annual refresher OPSEC training shall be completed on-line at http://cdsetrain.dtic.mil/opsec/index.htm. The Contractor shall submit certificates of completion for each affected Contractor employee and subcontractor employee to the COR and unit/activity security manager (ref AR 530-1, Operations Security). The Contractor shall adhere to local OPSEC policies and procedures of the Government requiring activity. When in a TDY status in support of this work effort, the Contractor shall also adhere to any OPSEC policies and procedures in effect at TDY locations.

1.6.7.12 Threat Awareness and Reporting Program (TARP) Training: All Contractor employees, including subcontractors, assigned to this contract shall complete TARP training within 30 days of reporting for duty and then annually thereafter. Contractor TARP training conducted monthly by the 902nd MI Group. The COR will ensure Contractors are notified of available training. Completion of training shall be reported to the COR and the unit/activity security manager Contractor personnel shall report threat-related incidents, behavioral indicators, and other matters to counterintelligence interest specified in AR 381-12 to the nearest military CI office. (Ref AR 381-12).

1.6.7.13 Installation Access: All Contractor employees, including subcontractors, shall comply with applicable installation and facility security access policies and procedures at all work and TDY locations. The Fort Gordon military installation is a limited access post. Unscheduled gate closures by the military police may occur at any time. In accordance with Army Regulation 525-13, paragraph 5-19, all prospective Contractors will undergo a verification process by the installation Provost Marshal Office, Director of Emergency Services to determine the trustworthiness and suitability prior to being granted access to federal property. This will be accomplished using the National Crime Information Center (NCIC) Interstate Identification Index (III). This is the minimum baseline background check for entrance onto Army Installations for non-CAC holders to include entrance of visitors (ref AR 190-13, paragraph 8-2). All personnel entering or exiting the installation may experience a delay due to vehicle inspections, registration checks, verification of seat belt use, etc. All vehicles and personnel are subject to search and seizure. The search and seizure provisions shall apply to Contractor personnel while within Fort Gordon's area of jurisdiction. Contractor personnel shall comply with all entry control requirements and security policies/procedures in effect. Security procedures may change without notice.

1.6.7.14 Eligibility Verification for Employment: E-Verify is an Internet-based system that compares information from an employee's Form I-9, Employment Eligibility Verification, to data from U.S. Department of Homeland Security and Social Security Administration records to confirm employment eligibility. The U.S. Department of Homeland Security is working to stop unauthorized employment. By using E-Verify to determine the employment eligibility of their employees, companies become part of the solution in addressing this problem. All U.S. employers must complete and retain a Form I-9 for each individual they hire for employment in the United States. This includes citizens and noncitizens. On the form, the employer must examine the employment eligibility and identity document(s) an employee presents to determine whether the document(s) reasonably appear to be genuine and relate to the individual and record the document information on the Form I-9. The list of acceptable documents found on the last page of the form. E-Verify is mandatory for employers with federal contracts or subcontracts that contain the Federal Acquisition Regulation E-Verify clause.

1.6.8. Special Qualifications: The Government anticipates the requirements within this PWS will require thirty seven (37) Contractor personnel with the following breakdown: one (1) Program Manager (PM); one (1) Data Center Engineer/Virtualization Architect; one (1) Senior Cyber Security Engineer; two (2) Cyber Security Analysis; four (4) Senior IT Project Managers; five (5) Senior System Administrators; seventeen (17) System Administrators; two (2) IT Procurement Specialists; one (1) Operations Specialist; one (1) Video teleconferencing (VTC) Technician; one (1) Video teleconferencing (VTC) Engineer; one (1) Network Technician and one(1) Linux Administrator. However, it is the Contractor’s responsibility to propose and deploy the correct labor types, mix, number and hours required to satisfactorily and professionally meet all PWS requirements. This information provided to the vendor as a workload estimate only. Required certifications and/or training certificates shall be presented to the COR upon hire (CDRL A003) and at renewal, if renewal is required. The COR must approve certification requirements that change during the period of performance. Contractors will be given six months to obtain required certificate of training and certification, if the requirements change during the period of performance. The Contractor shall utilize qualified personnel to meet the requirements identified in the PWS. Contract personnel shall possess the knowledge, skills and abilities that will enable them the ability to perform the duties listed in the PWS immediately when hired without additional train-up time being required. At times, the Contractor may be required to carry, move, and/or relocate/transport non-hand receipt IT peripherals in a Government vehicle.

1.6.8.1. Program Manager (PM):

· Possess and maintain an active Project Management Professional (PMP) commercial certification at start date.

· Possess one of the following:

· Master’s degree in an IT related field of study at least 5-10 years of professional experience, with 3 - 5 years of IT Program or Project Management experience OR

· Bachelor’s degree in an IT related field of study, with 10-15 years of equivalent work experience

· Must be detail-oriented with a keen focus on quality and continuous improvement.

· Must possess a high degree of professional confidence and credibility with the presence and communication skills to represent IT related concepts effectively with senior level management.

· Thorough understanding of program/project management techniques, methods and tools.

· Ability to interpret business objectives and successfully incorporate those objectives.

· Relevant industry knowledge of widely used systems and subsystems.

· Experience with group facilitation; ability to manage large-scale IT projects.

· Identify and understand complex problems/issues and develop solutions.

· Proven ability to manage teams, have demonstrated self-initiative and leadership skills.

· Strong verbal and written communication skills, ability to present to senior management, Division Chiefs and COR.

· Have the capability and authority to resolve and respond to issues directly with the COR.

· Be proficient in conflict resolution and resolve minor concerns/issues.

· Possess strong organizational and analytical skills.

· Must be physically located onsite at Fort Gordon

· At start date and through the life of the contract, Contractor must have a final Top Secret security clearance with Sensitive Compartmented Information (TS/SCI) eligibility as well as meet position requirements IAW PWS.

1.6.8.2. Procurement Specialist:

· The Contractor must have knowledge or experience with IT concepts and Army IT acquisition/procurement process sufficient to:

· Interpret IT-related Enterprise Service Agreements (ESAs), Joint/Enterprise License Agreements (J/ELAs), Service Level Agreements (SLAs), Memorandums of Understanding (MOUs), etc. in support of the CCoE C4 mission IAW applicable regulations and terms and conditions of agreements.

· Plan, prepare, execute and monitor the budget policies and procedures of the CCoE G6 to assist CCoE personnel on guidelines and policies in place for the procurement of IT items.

· The Contractor must have at least 5 years of IT experience sufficient to:

· Analyze and properly apply IT budgetary policies to create or review IT Acquisition Management and Oversight (AMO) packets and supporting documents.

· Provide recommendations or alternate, realistic IT solutions

· Screen all IT procurement actions for completeness, accuracy, and compliance to internal CCOE, TRADOC, and HQDA polices, regulations, and/or guidelines.

· Ensure required IT products and services are purchased in the most cost and time efficient manner within CCOE, TRADOC, and HQDA regulations and guidelines

· Must be proficient in Microsoft Office Suite and Adobe software applications sufficient to create and/or modify documents to streamline the procurement process.

· At PWS start date, Contractors shall have a minimum of final Secret security clearance and will be initiated by their Facility Security Officer (FSO) for TS/SCI eligibility within 30 days of onboard; and shall maintain the required security clearance throughout the life of the contract.

1.6.8.3. Data Center Engineer/ Virtualization Architect:

· Possess all of the following:

· 10+ years of experience in information technology

· 5+ years of customer-facing professional services or IT consulting experience

· 3+ years of experience in infrastructure architecture and design of complex distributed systems environments, including failover techniques, recovery/rollback, and application partitioning

· A minimum of three (3) years of experience VMWare Virtualization administration experience

· Technical Skills Required:

· Outstanding communications and interpersonal skills

· Strong VMware vSphere experience

· Strong Windows desktop OS administration experience

· Understanding of storage architectures, including peripheral interfaces (SCSI, RAID, Ethernet) and multi-processor designs (SMP)

· Technical awareness of one or more additional VMware products: vCloud Suite, vRealize Suite, vRealize Automation (vRA), vRealize Orchestrator (vRO), Horizon View, VMware Virtual SAN (vSAN), or NSX

· Horizon View design and implementation experience in enterprise environments

· Certification Requirements:

· This position is designated as Information Assurance Workforce (IAWF) Information Assurance Technical Level II (IAT II). See section 1.6.7.9, Cybersecurity/Information Technology (IT) Certification, in this PWS for detailed Army and DoD guidance and requirements. The following are required at PWSstart date and must be maintained throughout the life of the contract:

· Baseline certification: Security+ CompTIA commercial certification (or higher, such as CISSP, etc

· Computing Environment (CE): must be maintained IAW Army guidance at current platform (or higher) and adhere to VMWare recertification policies. Currently: VMware Certified Professional 6 – Data Center Virtualization (VCP6-DCV) OR VMware Certified Professional 6.5 - Data Center Virtualization (VCP6.5-DCV)

· Receive IA appointment orders from Chain of Command

· Be monitored in the Army Training and Certification Tracking System (ATCTS).

· Successfully complete Information Assurance Fundamentals on line course and exam at https://ia.signal.army.mil/IAF/default.asp.

· Complete Privileged Level Access Agreement (PLAA) annually.

· This Personnel Security Standard for this position is IT-I (Personnel in IA positions with privileged-level access to control, manage, or configure IA tools or devices, individual and networked IS and devices, and enclaves).

· At PWS start date, Contractor must have a final Secret security clearance and initiated by their Facility Security Officer (FSO) for TS/SCI eligibility within 30 days of onboard; and shall maintain the required security clearance throughout the life of the contract.

1.6.8.4. System Administrator - may be assigned to work throughout all areas of the CCoE to include Secure Compartmented Information Facilities (SCIFs).

· At least two (2) Contractor personnel must possess three (3) years of experience in server administration

· Must have at least two (2) years of experience with GNU/Linux installation, management, and troubleshooting

· Must have at least two (2) years of experience with basic switching concepts and managed switch configuration.

· Must be familiar with DevOps business practices

· Must be comfortable with executing system administration tasks using an automation framework such as salt, ansible, puppet, chef, or stackstorm. Salt experience is preferred, but not required

· Must be familiar with the git version control protocol

· Must be familiar with completely automating PXE boot processes using UEFI firmware in a GNU/Linux environment (to include secureboot, etc.)

· At least two (2) Contractor personnel must possess one (1) year experience of VTC setup and configuration

· All Contractor personnel must have knowledge of cloud and virtualization

· All Contractor personnel must possess at least five (5) years of experience in IT desktop support, IT Service Desk support

· All Contractor personnel must have knowledge of IT project management sufficient to manage a project such as Life Cycle Replacement (LCR), Windows 7 to Windows 10 Upgrade, etc.

· Certification Requirements:

· This position is designated as Information Assurance Workforce (IAWF) Information Assurance Technical Level II (IAT II). See section 1.6.7.9, Cybersecurity/Information Technology (IT) Certification, in this PWS for detailed Army and DoD guidance and requirements. The following are required at PWSstart date and must be maintained throughout the life of the contract:

· Baseline certification: Security+ CompTIA commercial certification (or higher, such as CISSP, etc.).

· Computing Environment (CE): must be current platform (or higher) IAW Army guidance (ie migration from Windows 7 to Windows 10, Server 2008 to 2012, etc.). Currently:

· VMware VCP6.5-DCV or equivalent

· All personnel: Installing and Configuring Windows 10 (70-698)

· A minimum of one (1) personnel (Linux OS support): CompTIA Linux+ (currently both LX0-103 and LX0-104)

· A minimum of three (3) personnel: Installing and Configuring Windows Server 2012 (70-410) and Configuring Advanced Server 2012 Services (70-412)

· A minimum of two (2) personnel:

· Receive IA appointment orders from Chain of Command

· Be monitored in the Army Training and Certification Tracking System (ATCTS).

· Successfully complete Information Assurance Fundamentals on line course and exam at https://ia.signal.army.mil/IAF/default.asp.

· Complete Privileged Level Access Agreement (PLAA) annually.

· This Personnel Security Standard for this position is IT-I (Personnel in IA positions with privileged-level access to control, manage, or configure IA tools or devices, individual and networked IS and devices, and enclaves).

· At PWS start date and through the life of the contract, 10 (ten) Contractors must have a final Top Secret security clearance with Sensitive Compartmented Information (TS/SCI) eligibility as well as meet position requirements IAW PWS. One (1) of the ten (10) must be the Contractor providing Linux OS support. All other Contractors shall have a minimum of final Secret security clearance and initiated by their Facility Security Officer (FSO) for TS/SCI eligibility within 30 days of onboard; and shall maintain the required security clearance throughout the life of the contract.

1.6.8.5. Video Teleconference (VTC) Technician

· At least one (1) Contractor personnel must possess Three (3) year experience of VTC setup and configuration

· All Contractor personnel must have knowledge of cloud and virtualization

· All Contractor personnel must possess at least five (5) years of experience in IT desktop support, IT Service Desk support

· Certification Requirement

· This position is designated as Information Assurance Workforce (IAWF) Information Assurance Technical Level II (IAT II). See section 1.6.7.9, Cybersecurity/Information Technology (IT) Certification, in this PWS for detailed Army and DoD guidance and requirements. The following are required at work performance start date and must be maintained throughout the life of the contract:

· Baseline certification: Security+ CompTIA commercial certification (or higher, such as CISSP, etc.).

· Computing Environment (CE): must be current platform (or higher) IAW Army guidance (ie migration from Windows 7 to Windows 10, Server 2008 to 2012, etc.). Currently:

· All personnel: Installing and Configuring Windows 10 (70-698)

· All personnel must have Sec+

· Receive IA appointment orders from Chain of Command

· Be monitored in the Army Training and Certification Tracking System (ATCTS).

· Successfully complete Information Assurance Fundamentals on line course and exam at https://ia.signal.army.mil/IAF/default.asp.

· Complete Privileged Level Access Agreement (PLAA) annually.

· This Personnel Security Standard for this position is IT-I (Personnel in IA positions with privileged-level access to control, manage, or configure IA tools or devices, individual and networked IS and devices, and enclaves).

· At work performance start date and through the life of the contract, 1 (One) Contractors must have a final Top Secret security clearance with Sensitive Compartmented Information (TS/SCI) eligibility as well as meet position requirements IAW PWS. One (1) of the ten (10) must be the Contractor providing Linux OS support. All other Contractors shall have a minimum of final Secret security clearance and will be initiated by their Facility Security Officer (FSO) for TS/SCI eligibility within 30 days of onboard; and shall maintain the required security clearance throughout the life of the contract.

1.6.8.6. Video Teleconference (VTC) Engineer

· At least one (1) Contractor personnel must possess Three (3) year experience of VTC setup and configuration and VTC Engineer experience

· All Contractor personnel must have knowledge of cloud and virtualization

· All Contractor personnel must possess at least five (5) years of experience in IT desktop support, IT Service Desk support

· Certification Requirement

· This position is designated as Information Assurance Workforce (IAWF) Information Assurance Technical Level II (IAT II). See section 1.6.7.9, Cybersecurity/Information Technology (IT) Certification, in this PWS for detailed Army and DoD guidance and requirements. The following are required at work performance start date and must be maintained throughout the life of the contract:

· Baseline certification: Security+ CompTIA commercial certification (or higher, such as CISSP, etc.).

· Computing Environment (CE): must be current platform (or higher) IAW Army guidance (ie migration from Windows 7 to Windows 10, Server 2008 to 2012, etc.). Currently:

· All personnel: Installing and Configuring Windows 10 (70-698)

· All personnel must have Sec+

· Receive IA appointment orders from Chain of Command

· Be monitored in the Army Training and Certification Tracking System (ATCTS).

· Successfully complete Information Assurance Fundamentals on line course and exam at: https://ia.signal.army.mil/IAF/default.asp.

· Complete Privileged Level Access Agreement (PLAA) annually.

· This Personnel Security Standard for this position is IT-I (Personnel in IA positions with privileged-level access to control, manage, or configure IA tools or devices, individual and networked IS and devices, and enclaves).

· At work performance start date and through the life of the contract, 1 (one) Contractors must have a final Top Secret security clearance with Sensitive Compartmented Information (TS/SCI) eligibility as well as meet position requirements IAW PWS. One (1) of the ten (10) must be the Contractor providing Linux OS support. All other Contractors shall have a minimum of final Secret security clearance and will be initiated by their Facility Security Officer (FSO) for TS/SCI eligibility within 30 days of onboard; and shall maintain the required security clearance throughout the life of the contract

1.6.8.7. Senior Linux Administrator

· At least one (1) Contractor personnel (Linux OS support) must possess the following:

· Must have at least four (4) years of experience with GNU/Linux installation, management, and troubleshooting

· Must have at least two (2) years of experience with basic switching concepts and managed switch configuration.

· Must be familiar with DevOps business practices

· Must be comfortable with executing system administration tasks using an automation framework such as salt, ansible, puppet, chef, or stackstorm. Salt experience is preferred, but not required

· Must be familiar with the git version control protocol

· Must be familiar with completely automating PXE boot processes using UEFI firmware in a GNU/Linux environment (to include secureboot, etc.)

· All Contractor personnel must have knowledge of cloud and virtualization

· All Contractor personnel must possess at least five (5) years of experience in IT desktop support, IT Service Desk support

· Certification Requirement

· This position is designated as Information Assurance Workforce (IAWF) Information Assurance Technical Level II (IAT II). See section 1.6.7.9, Cybersecurity/Information Technology (IT) Certification, in this PWS for detailed Army and DoD guidance and requirements. The following are required at work performance start date and must be maintained throughout the life of the contract:

· Baseline certification: Security+ CompTIA commercial certification (or higher, such as CISSP, etc.).

· Computing Environment (CE): must be current platform (or higher) IAW Army guidance (ie migration from Windows 7 to Windows 10, Server 2008 to 2012, etc.). Currently:

· All personnel: Installing and Configuring Windows 10 (70-698)

· All personnel must have Sec+

· A minimum of one (1) personnel (Linux OS support): CompTIA Linux+ (currently both LX0-103 and LX0-104)

· Receive IA appointment orders from Chain of Command

· Be monitored in the Army Training and Certification Tracking System (ATCTS).

1.6.8.8. Senior IT Project Manager:

· Possess and maintain an active Project Management Professional (PMP) commercial certification at start date.

· Possess one of the following:

· Bachelor's Degree or an equivalent combination of education and experience may be considered in lieu of a degree.

· 2+ years of experience leading and overseeing IT projects or deliverable lifecycles.

· Ability to plan, estimate, propose, execute, staff, budget, and close out IT projects.

· Must be able to handle multiple tasks and projects concurrently.

· Strong communications skills in verbally presentations and written documents.

· Problem solving skills in personal management, project management, and providing deliverables Good organizational skills.

· Must be a strong team player.

· Proficiency in IT project planning and monitoring progress of IT projects.

· Proven ability to meet IT project deadlines and work effectively within time constraints.

· Experience with a variety of writing types: proposals, PowerPoint presentations, manuals, job performance aids, photos, posters, project status report, etc.

· Experience with graphics programs such as Adobe Photoshop and Illustrator, SnagIt and similar programs.

· Proficient in Microsoft Office and Adobe Acrobat.

· Ability to design templates and customize styles.

· Familiarity with Desktop Publishing and DoD publications, XML, HTML and ArborText.

· At PWSstart date, Contractors must have a minimum of final Secret security clearance and initiated by their Facility Security Officer (FSO) for TS/SCI eligibility within 30 days of onboard; and shall maintain the required security clearance throughout the life of the contract.

· Expert knowledge of IT Systems and understanding of Networking and Computer Information Systems.

1.6.8.9. Senior System Administrator:

· A minimum of three (3) years of experience VMWare Virtualization administration experience including vSphere, VCenter, vMotion, Horizon View, McAfee MOVE and vRealize.

· Strong understanding of virtualization, Software Defined Networking, Software Defined Storage, local area networking, Telecom, VoIP, LANs, switching, servers, messaging, unified communications, etc.

· Ability to communicate with virtualization architects about the virtual environment.

· Ability to use infrastructure-monitoring technologies (ex. Splunk, SolarWinds, Nagios).

· Proficiency in NIST SP 800 series, Army IT and IA Regulations (ex. 25-1 and 25-2), DoD Cyber Security Regulations, OWASP, FedRamp and Cloud Security Alliance framework.

· Ability to create system documentation such as Standard Operating procedures, etc.

· Understanding of datacenter networking fabric topologies and common architectures deployed both Layer 2 and Layer 3 based.

· Understanding of user experience best practices, information architecture, and interaction/visual design.

· Certification Requirements:

· This position designated as Information Assurance Workforce (IAWF) Information Assurance Technical Level II (IAT II). See section 1.6.7.9, Cybersecurity/Information Technology (IT) Certification, in this PWS for detailed Army and DoD guidance and requirements. The following are required at PWSstart date and must be maintained throughout the life of the contract:

· Baseline certification: Security+ CompTIA commercial certification (or higher, such as CISSP, etc.).

· Computing Environment (CE): must be current platform (or higher) IAW Army guidance (ie migration from Windows 7 to Windows 10, Server 2007 to 2012, etc.). Currently:

· Installing and Configuring Windows Server 2012 (70-410)

· Configuring Advanced Server 2012 Services (70-412)

· Installing and Configuring Windows 10 (70-698)

· VMware VCA-DBT or equivalent

· Be monitored in the Army Training and Certification Tracking System (ATCTS).

· Successfully complete Information Assurance Fundamentals on line course and exam at https://ia.signal.army.mil/IAF/default.asp.

· Complete Privileged Level Access Agreement (PLAA) annually

· This Personnel Security Standard for this position is IT-I (Personnel in IA positions with privileged-level access to control, manage, or configure IA tools or devices, individual and networked IS and devices, and enclaves).

· At PWSstart date and through the life of the contract, 2 (two) Contractors must have final Top Secret security clearances with Sensitive Compartmented Information (TS/SCI) eligibility as well as meet position requirements IAW PWS. All other Contractors shall have a minimum of final Secret security clearance and initiated by their Facility Security Officer (FSO) for TS/SCI eligibility within 30 days of onboard; and shall maintain the required security clearance throughout the life of the contract.

1.6.8.10. Senior Cyber Security Engineer:

· Minimum of seven (7) years of work experience in the area of Information Assurance, Cyber/Information Security

· Technical Skills Required:

· Minimum of 1 year of experience performing high-volume analysis of logs, network and system data in one or more of the following tools: (preferred tool Assured Compliance Assessment Solution (ACAS) but also familiarity with other similar tools)

· Ability to use and recommend implementation of infrastructure and security monitoring technologies (ex. Security Onion, Splunk, SolarWinds, ACAS)

· Endpoint Protection: (ex. McAfee EPO/ Host based security system (HBSS)

· Awareness of the latest network and application hacking techniques and countermeasures (emerging trends).

· At least one (1) year of Certification and Accreditation & Cyber Risk Management experience: DoD RMF (DoD 8500, DoD 8510, NIST 800-37/-53), and DCID 6/3 and ICD 503 processes and implementing frameworks by performing risk assessments, system certification and accreditation at all classification levels (NIPRNET, SIPRNET and JWICS)

· At least three (3) years of experience in Security Engineering of DOD Network Infrastructure, Wireless Technologies (Mobile IoTs, Endpoint Security, Network protocols and Cryptography

· Demonstrated knowledge of network threats, attacks, and other methods of exploitation, and the ability to develop Tactics, Techniques, Procedures (TTPs) to mitigate, deter, and respond.

· Knowledge of Cyber Security practices for cloud and virtual environments (ex. Amazon Web Services (AWS), Microsoft Azure, VMWare and OpenStack)

· Strong Knowledge of security incident handling/incident response process, methods and coordination with Regional Cyber Center-CONUS (RCC-C), Regional Network Enterprise Center (RNEC), NEC, etc.

· Strong knowledge and understanding of DoD and Intelligence Community (IC) engineering efforts, as it relates to security engineering (MILCON/MCA projects)

· Strong knowledge of the development of CCOE Policy (Policies, SOPs, TTPs, etc) and the conduct of the associated inspections for user adherence to the CCOE policy developed.

· Certifications Required – all of the following are required

· This position is designated as Information Assurance Workforce (IAWF) (1) IAM II, (2) IASAE II and (3) CSSP Auditor. See section 1.6.7.9, Cybersecurity/Information Technology (IT) Certification, in this PWS for detailed Army and DoD guidance and requirements. The following are required at PWSstart date and must be maintained throughout the life of the contract :

· Baseline certifications. Note: Either CASP or CISSP (or associate) will satisfy baseline certifications for both IASAE II and IAM II.

· IASAE II: CASP, CISSP (or associate), or CSSLP and

· CSSP Auditor: CEH (red), CySA+ (blue), CISA, or GSNA and

· IAM II: CAP, CASP, CISM, CISSP (or associate), or GSLC

· Computing Environment (CE) certifications: N/A - only required for IAT IAWF positions.

· Be monitored in the Army Training and Certification Tracking System (ATCTS).

· Successfully complete Information Assurance Fundamentals on line course and exam at https://ia.signal.army.mil/IAF/default.asp.

· Complete Privileged Level Access Agreement (PLAA) annually.

· This Personnel Security Standard for this position is IT-I (Personnel in IA positions with privileged-level access to control, manage, or configure IA tools or devices, individual and networked IS and devices, and enclaves).

· At PWSstart date and through the life of the contract, 1 (one) Contractor must have final Top Secret security clearance with Sensitive Compartmented Information (TS/SCI) eligibility as well as meet…