XXX-Draft RFP-Estimated Labor Category Quantity and Qualifications-07 JUN 2022 v1.xlsx

LCAT Descriptions

•Oversees the execution of the complete software life-cycle for military systems •Ensures compliance with Department of Defense (DOD)/Army plans, policies, standards, and methods for the acquisition and support of software and computer resources for Army systems.

•Manages and controls schedules, cost and personnel to provide on time, within budget, performance of all aspects of the contractual effort.

•Directs operations and ensures compliance with all management policies, plans, and procedures.

•Resolves technical and administrative problems •Acts as a role model for subordinate employees, providing workforce motivation and constructive criticism.

•Understands, follows and promotes the values and principles in the Agile Manifesto •Understands, follows and promotes continuous cyber security risk management Budget Analyst •Performs a variety of budgetary functions implementing the organization's budgetary program, policies, and procedures.

•Monitors and tracks billings and payments for assigned program.

•Verifies that billings and payments occur on a timely basis.

•Takes appropriate follow-up action.

Software Developer •Develops and maintains working software that satisfies the customers needs.

•Analyzes job tasks, organizational structure and user requirements to provide system-wide solutions.

•Designs solutions based on customer needs, technical considerations and security requirements.

•Creates and maintains software code and automation scripts

• Defines, analyzes, validates and documents complex operating environments, states of technology and current processes.

•Creates and maintains technical and user documentation •Maintains configuration management and version control within a government provided software repository using Git or other version control system.

•Conducts code reviews and scans to identify potential flaws in code and mitigate vulnerabilities •Performs risk analysis to identify threats, vulnerabilities and likelihood and impact of exploitation •automates and performs unit testing •Implements Security Technical Implementation Guides •Identifies, analyzes, implements and tests software patches.

•Capture security controls used during the requirements phase to integrate security within the process, to identify key security objectives, and to maximize software security while minimizing disruption to plans and schedules.

•Understands, follows and promotes the values and principles in the Agile Manifesto •Understands, follows and promotes continuous cyber security risk management Application / System Specialist •Provides expertise in the implementation and use of a specific software application or information technology system product or suite of products.

•Performs product installation, configuration and maintenance.

•Performs user support and problem resolution.

•Provides recommendations and training on using the product to meet organizational goals.

•Holds and maintains product specific certifications and credentials •Understands, follows and promotes the values and principles in the Agile Manifesto •Understands, follows and promotes continuous cyber security risk management Information Security Engineer •Fills an IASAE Level II position responsible for the design, development, implementation, and/or integration of a DoD IA architecture, system, or system component for use within the Network Environment (NE).

•Preforms the functions listed in Table C10.T5. IASAE Level II Functions in DoD 8570.01-M

• Evaluates security architectures and designs to determine the adequacy of security design and architecture proposed or provided in response to requirements contained in acquisition documents.

• Develops and integrates cybersecurity designs for systems and networks with multilevel security requirements or requirements for the processing of multiple classification levels of data primarily applicable to government organizations

• Ensures acquired or developed software, system(s) and architecture(s) are consistent with organization’s cybersecurity architecture guidelines.

• Provides expertise in network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth).

•Understands, follows and promotes the values and principles in the Agile Manifesto •Understands, follows and promotes continuous cyber security risk management Cybersecurity Analyst •Serves as an Information System Security Officer (ISSO), Information System Security Manager (ISSM), or Vulnerability Assessment Analyst (VAA).

•Executes the DOD Risk Management Framework (RMF) process for software applications and information systems.

•Creates, maintains and manages eMASS records.

•Executes Information Assurance Vulnerability Management (IAVM) processes and activities to include vulnerability scans and Security Technical Implementation Guide (STIG) analysis, physically STIGing and Patching systems, Software Assurance (SwA), and vulnerability assessments for risk mitigations and remediation.

•Manages the Plan of Action and Milestones (POA&M), Continuous Monitoring, and Federal Information System Management Act (FISMA) compliance.

•Understands, follows and promotes the values and principles in the Agile Manifesto •Understands, follows and promotes continuous cyber security risk management DevSecOps Engineer •Implements and manages continuous integration and continuous delivery (CI/CD) systems and methodologies •Designs, implements, operates and maintains tools to automate development, security and operations processes •Collaborates with engineering team members to detect and resolve problems with and make enhancements to the software engineering infrastructure •Works in Linux and Windows environments to implement, operate and maintain tools like Jenkins, Puppet, Chef, Gitlab, and Azure DevOps •Provides expertise in infrastructure automation and testing via shell scripting and tools such as Chef, Puppet or Ansible •Understands, follows and promotes the values and principles in the Agile Manifesto •Understands, follows and promotes continuous cyber security risk management Agile Coach •Facilitates an agile culture using techniques from a wide range or agile and lean methodologies and frameworks, but be methodology agnostic

• Creates an open and trust-based environment, which enables a focus on delivery and facilitates continuous improvement

• Assesses the culture and process of a team or organization to identify and facilitate agile improvements

• Engages with stakeholders at all levels of the organization to facilities agile adoption

• Applies best tools and techniques to: team roles, behaviors, structure and culture, agile ceremonies and practices, knowledge transfer and sharing, program management, cross team coordination, and overall governance of digital service delivery

• Ensures key metrics and requirements that support the team and delivery are well defined and maintained

• Holds and maintains Agile certifications and credentials.

•Understands, follows and promotes the values and principles in the Agile Manifesto •Understands, follows and promotes continuous cyber security risk management User Experience (UX) Designer • Conducts stakeholder interviews, user requirements analysis, task analysis, conceptual modeling, information architecture, interaction design, and usability testing

• Designs and specifies user interfaces and information architecture

• Leads participatory and iterative design activities, including observational studies, customer interviews, usability testing, and other forms of requirements discovery

• Produces user requirements specifications & experience goals, personas, storyboards, scenarios, flowcharts, design prototypes, and design specifications

• Communicates research findings, conceptual ideas, detailed design, and design rationale and goals both verbally and visually

• Plans and facilitates collaborative critiques and analysis & synthesis working sessions

• Designs and develops primarily internet/web pages and applications

• Develops proof-of-concepts and prototypes of easy-to-navigate user interfaces (UIs) that consists of web pages with graphics, icons, and color schemes that are visually appealing

• Researches user needs as well as potential system enhancements

• Assists software developers to code, test, debug documents, and implement web applications using a variety of platforms •Understands, follows and promotes the values and principles in the Agile Manifesto •Understands, follows and promotes continuous cyber security risk management Cloud Engineer •Plans and designs cloud infrastructure within the Army Cloud service provider •Maintains and deploys cloud applications •Troubleshoots and resolves issues with the cloud infrastructure •Develops new cloud-based solutions •Designs, develops, and maintains plans to migrate applications to the Army Cloud provider of choice.

•Works with application maintenance teams and Cloud service providers to coordinate upgrades and changes to Cloud services •Maintains enterprise level standards for applications migrating into the Cloud and standards for applications that have already migrated into the Cloud •Understands, follows and promotes the values and principles in the Agile Manifesto •Understands, follows and promotes continuous cyber security risk management Technical Writer •Documents the specifications, design, features and operation of applications •Writes and edits user manuals, help systems and other technical documents •Creates and maintains diagrams representing system configurations and process workflows •Designs and formats documents using document-creation software •Interviews technical and functional stakeholders to obtain and validate documentation content.

•Understands, follows and promotes the values and principles in the Agile Manifesto •Understands, follows and promotes continuous cyber security risk management Software / System Tester •Designs, develops and executes manual and automated tests during software and system development to ensure they are operational and effective prior to release.

•Works with developers and stakeholders to get an understanding of what the system is meant to do, its functionality and who the end users are •Decomposes complex or large systems into smaller parts to test •Develops and executes test plans, test cases and detailed test scripts •Uses COTS testing software and frameworks perform automated testing and reporting •Performs a variety of test types including unit, functional, security, regression, limit, integration, stress, performance and scalability •Reports progress, risks and bugs identified to the software development and project management teams •Performs testing in a variety of platforms and components including networks, operating systems, applications, databases, browsers and mobile devices •Understands, follows and promotes the values and principles in the Agile Manifesto •Understands, follows and promotes continuous cyber security risk management System Administrator •Performs administration, maintenance and support tasks necessary to ensure effective and efficient information technology (IT) system performance and security •Installs, configures, troubleshoots, and maintains server and systems configurations (hardware and software) to ensure their confidentiality, integrity, and availability •Administers server-based systems, security devices, distributed applications, network storage, messaging, and performs systems monitoring •Consults on network, application, and customer service issues to support computer systems’ security and sustainability •Holds and maintains IAT Level II Commercial Baseline and Commercial Computing Environment Certifications as per DoD 8570.1M relevant to system administration duties •Holds and maintains all DoD 8570.1M certifications required to obtain elevated access permissions.

•Maintains a systems cyber security posture to include scanning and remediation of cyber vulnerabilities •Performs risk analysis to identify threats, vulnerabilities and likelihood and impact of exploitation •Performs user support and problem resolution.

•Understands, follows and promotes the values and principles in the Agile Manifesto •Understands, follows and promotes continuous cyber security risk management Network Engineer •Establishes, Operates and maintains digital networks to ensure confidentiality, integrity and availability •Monitors and maintains network performance •Builds network configurations and connections •Troubleshoots and corrects network problems •Establishes, provisions and manages network addresses, segments and subnets •Establishes networking environment by designing system configuration and directing system installation •Defines, documents, and enforces network standards •Maximizes performance by troubleshooting network problems and outages and scheduling upgrades •Installs, configures and maintains routers, switches and other network devices •Updates data servers and network equipment •Secures network system by establishing and enforcing policies and defining and monitoring access •Holds and maintains IAT Level II Commercial Baseline and Commercial Computing Environment Certifications as per DoD 8570.1M relevant to network engineering duties •Holds and maintains all DoD 8570.1M certifications required to obtain elevated access permissions.

•Maintains the network cyber security posture to include scanning and remediation of cyber vulnerabilities •Performs risk analysis to identify threats, vulnerabilities and likelihood and impact of exploitation •Performs user support and problem resolution.

•Understands, follows and promotes the values and principles in the Agile Manifesto •Understands, follows and promotes continuous cyber security risk management Database Administrator •Installs, configures, operates and maintains database servers •Develops processes for optimizing database security •Sets, implements and maintains database standards •Manages database access •Performs database systems performance tuning •Installs, upgrades, and manages database applications •Diagnoses, troubleshoots and corrects database errors •Recommends and implements emerging database technologies and security features •Creates and manages database reports, visualizations, and dashboards •Creates automation for repeating database tasks •Holds and maintains IAT Level II Commercial Baseline and Commercial Computing Environment Certifications as per DoD 8570.1M relevant to DBA duties •Holds and maintains all DoD 8570.1M certifications required to obtain elevated access permissions.

•Maintains the network cyber security posture to include scanning and remediation of cyber vulnerabilities •Performs risk analysis to identify threats, vulnerabilities and likelihood and impact of exploitation •Performs user support and problem resolution.

•Complies with organization’s information classification program and procedures for information compromise •Understands, follows and promotes the values and principles in the Agile Manifesto •Understands, follows and promotes continuous cyber security risk management Product Manager •Collaborates with key functional stakeholders produce the product the vision and roadmap •Translates business needs into product requirements and communicates these to the development team •Maintains a prioritized product backlog in collaboration with the Product Owner, so each successive development sprint can be planned clearly and efficiently, and development decisions are aligned with business needs •Participates in the day to day activities of the development team to clarify and represent the business needs •Sets clear goals and communicate these and the project vision at the beginning of every release and sprint so that the team understands the objectives and is equipped to realize it •Prioritizes and sequences the backlog according to business value or ROI •Participates with team(s) in the backlog grooming process and user story pointing •Identifies, communicates and manages dependency relationships and risks •Participates in planning meetings, reviews and retrospectives •Understands, follows and promotes the values and principles in the Agile Manifesto •Understands, follows and promotes continuous cyber security risk management Scrum Master •Leads the Agile process for one or more Scrum Teams to ensure delivery and releases are within scope.

•Guides and coaches Scrum Team in application of Scrum ceremonies, procedures and techniques.

•Facilitates the team’s progress toward the goal •Leads the team’s efforts in continuous improvement of development process, product quality and quantity of work delivered.

•Advocates Agile Values •Eliminates external impediments and blockers identified by team members •Collects, monitors and reports agile metrics •Holds and maintains Scrum Master and related certifications and credentials.

•Understands, follows and promotes the values and principles in the Agile Manifesto •Understands, follows and promotes continuous cyber security risk management Data Analyst •Develops, implements, operates and maintains data collection, storage, analysis and reporting capabilities that turn data into actionable information.

•Interprets data, analyzes results using statistical techniques and provides ongoing reports •Acquires data from primary or secondary data sources and maintains databases/data systems •Identifies, analyzes, and interprets trends or patterns in complex data sets •Understands, follows and promotes the values and principles in the Agile Manifesto •Understands, follows and promotes continuous cyber security risk management

Skill Levels

•Able to lead a team by indentifing the work required and appropriately delegating tasks to team members.

•Able to oversee work performed by others and ensure quality by identifying and correcting errors.

Journeyman •Expert knowledge and skill in performing the work described for the labor category.

•Given a desired outcome, able to identify and complete the work required without supervision.

•Provides guidance to others for resolving problems and completing complex tasks.

Intermediate •General knowledge and skill in performing the work described for the labor category.

•Able to complete assigned tasks with minimal supervision or guidance.

Entry •Basic knowledge and skill in performing the work described for the labor category.

•Able to complete assigned tasks with regular supervision and guidance.

Level Of Effort (LOE)