API_SysAdm3_Domain_JNDI_07212026_CORA.docx
*** | SUPPLEMENTAL LABOR MANAGEMENT OFFICE
ADDITIONAL PROCUREMENT INFORMATION (API)
Title & Level
System Administrator 3
Work Group Location
Portland, OR
Specialty
Domain Administration
Offsite Work Eligibility*
Situational Telework
Organization
JNDI
Number of Days Onsite
5 days per Week
Hours
Full-Time, up to 40 hours
Additional Information
This assignment potentially could transition to routine telework at the manager s discretion.
Overtime
10% anticipated
On-Call
Yes One week every 4-5 weeks
Travel
N/A
FN Status
NOT open to Foreign Nationals
* Current telework, remote work and onsite support is based on BPA s business needs and is subject to change or termination at any time.
** Assignments with the Remote Designation must reside in WA, OR, ID or MT. Case-by-case exceptions may apply only when in the best interest of BPA.
OVERVIEW
Assignment
This contract System Administrator primarily focuses on Domain Administration. This assignment plays an integral role in building and maintaining the authentication and authorization environment, administering and troubleshooting hybrid identity environments (ensuring synchronization between on-premises Active Directory and Entra ID), planning for and managing capacity and providing Domain support services. This work required of this assignment must adhere to BPA s Cyber Security policies and be performed in a manner that is compliant with BPA s audit requirements.
Organization
This System Administrator 3 assignment will work within the Converged Infrastructure (JNDI) organization within Data Center Services (JND) subgroup within the Infrastructure Services (JN) group in the Information Technology (J) business line of *** (BPA). The JNDI organization provides storage, compute, virtualization, virtual desktop, authentication and authorization services as a part of the greater JN infrastructure services group. JND also augments facilities support for the production data centers.
ASSIGNMENT RESPONSIBILITIES
Note: All official drafts, documents and recommendations, as listed below, must be reviewed, finalized and approved / accepted by appropriate BPA manager or other federal personnel with the authority to do so.
Research, test and document standardized technical procedures for the deployment / troubleshooting of server hardware, the associated operating systems and application software.
Perform system vulnerability assessments using vendor native (MS SCT) and third party tools (Nessus), recommending mitigation options based on risk of exploit after consideration of environmental factors.
Schedule and perform risk assessments regularly and when vulnerabilities are identified on operational network equipment, such as computer systems devices and various software packages.
Act as a service response escalation point, working with teams of varying technical ability in response to service availability and/or performance related incidents / problems.
Provide recommendations for process / procedural changes that may become necessary due to environmental changes, upgrades.
Support disaster recovery by verifying continuous availability of domain services such as Active Directory, DNS, DHCP, IPAM, Client.
Serve as a technical advisor for project and service response and related tasks.
Apply the aforementioned processes/procedures in support of the following technologies:
Microsoft Windows Server 2019/2022/2025
Microsoft Active Directory
Microsoft DNS
Microsoft ADFS
Microsoft Client
Microsoft Public Key Infrastructure solutions
Hardware Security Module support for protection of private keys
SAML, OAuth 2.0, OpenID Connect and SCIM
FIDO2 security keys
As requested, provide system administration expertise for special projects, which may include working with internal and external clients and vendors. This includes technical input and recommendations; automation solutions; and, other system administration actions. Confer with BPA workplace manager or federal team lead on a routine basis for project status updates and/or any project issues.
Provide technical input and recommendations, as a non-voting participant, for potential acquisitions in area of expertise.
Provide systems administration support for any new systems added to BPA s IT infrastructure, assisting with testing, configuration, integration and implementation efforts, including developing test plans, implementation schedule, scope, dependencies, documentation, and user training.
Create, develop / draft and recommend cross training and functional documentation of subject matter for BPA audiences; conduct User training on an individual or group basis as requested.
Participate in BPA process workshops, including project lessons learned, group improvement and documentation efforts for procedures, processes, standards, guidelines, practices, and other technical and instructional material.
UREQUIREMENTS
Education & Corresponding Experience (required on matrix)
Bachelor s Degree in Computer Science, Information Technology, Engineering, or a related technical field is preferred.
With an Associate s or Bachelor s Degree in applicable fields, 8 years of experience is required.
With an Associate s or Bachelor s Degree not in applicable fields or without a degree, 10 years of experience is required.
Applicable Certifications may count for 1 year of experience.
Experience must include direct work experience in Information Technology performing System Administration.
Required Technical Skills & Experience (required on matrix)
5 Years of knowledge and experience sufficient to administer disparate Active Directory domains and services necessary to support these domains such as DNS, ADCS, Client.
7 Years of knowledge of and experience sufficient to successfully troubleshoot Windows operating systems using text-based logs, windows event logs, and various utilities.
5 Years of knowledge of and experience with TCP/IP and related services.
5 Years knowledge of and experience with Kerberos authentication in enterprise environments and a strong understanding of Active Directory (AD) integration, LDAP, and hybrid-joined infrastructure.
2 Years knowledge and experience of Active Directory Federation services as well as federated identity concepts to support authentication in a SaaS environment.
2 years Hands-on experience with Microsoft Entra ID and a solid understanding of SSO and identity protocols such as SAML, OAuth 2.0, OpenID Connect, and SCIM. Implementation of FIDO2 security keys and experience migrating large enterprise user bases from traditional MFA to passwordless solutions is desirable.
Preferred Skills & Experience (optional on matrix)
Direct experience operating an enterprise cyber vulnerability scanning and assessment infrastructure such as Nessus.
Experience configuring and managing systems using Puppet Enterprise.
Strong knowledge and experience with PowerShell to automate processes, gather information and make infrastructure configuration changes.
Windows operating system and software packaging, installation, and troubleshooting.
VMware vSphere administration and operation.
Additional Requirements (not required on matrix)
Valid U.S. Driver s License is required.
Appendices
The following appendices apply to this assignment and may be downloaded from the Fieldglass Reference Library:
Offsite Work
Training Expectations (Worker is expected to keep current on the latest technologies and skills required for the assignment.)
Training Type
Details
Provided by
Attendance at all conferences, workshops, training, etc. must be pre-approved by SLMO. Requests will be reviewed on a case-by-case basis. Approval is subject to the most current guidance provided to SLMO by BPA or DOE and is subject to change at any time. SLMO reserves the right to negotiate attendance on billable/non-billable hours and reimbursement of travel costs with the supplier. Reimbursable travel costs must adhere to the Federal Travel Regulations and be submitted via an expense sheet in Fieldglass.
CLOSELY ASSOCIATED RESPONSIBILITIES & REQUIRED ASSOCIATED MITIGATION MEASURES
The following is a list of potential inherently governmental risk areas and the measures that SLMO-Compliance has determined must be in place, via processes and procedures, to mitigate the associated risks. The BPA manager s acceptance of the API or CWSD serves as their attestation that all applicable mitigation measures listed below are or will be established and adhered to in their organization.
Area of potential Closely Associated / Inherently Government function
Mitigation Measures
Access to Confidential / Sensitive Information
CFTE must sign NDA (Non-Disclosure Agreements) at beginning of assignments. (Does not apply to Craft assignments)
CFTE must complete annual Information Security and Privacy Awareness training.
CFTE must complete and pass background investigations of an appropriate level.
Acquisition Planning / Source Selection
CFTE are not permitted to serve as voting members for acquisition selections.
All purchasing decisions must be made by appropriate federal personnel (Contracting Officers).
All acquisition documents (requirements,
SOW s, evaluation criteria, etc.) must be reviewed, finalized and approved by appropriate BPA federal personnel.
Only Contracting Officers are authorized to obligate BPA funds.
Agency / Org Planning
All drafts, documents, materials and recommendations must be reviewed, finalized and approved by appropriate BPA federal personnel.
Budget / Finance Prep
Only Federal Employees may determine budget priorities & allocations.
BFTE must control and finalize / approve all budgets and related documentation, including that for projects, programs and Organizations.
Contract Management
All Contractual documents, including invoices must be finalized / approved by appropriate Federal personnel.
All contract-related decisions (modifications, changes, performance) must be determined by appropriate federal personnel (COs).
Decision Making
CFTE may provide input and recommendations to decision-makers.
Only appropriate federal personnel may make decisions which obligate BPA resources or to a specific course of action.
Direction & Control
(directing BFTE)
CFTE are not permitted to direct the actions of federal employees (BFTE) or have any control or input into their performance.
Work of BFTE must be assigned by federal manager, supervisor, Program / Resource manager or another appropriate designee.
Disposing Govt. Property
All decisions regarding the disposal of BPA property must be made by appropriate federal personnel; and all property dispositions must be directed and controlled by the Investment Recovery Center (IRC).
Dissemination of Agency/Policy Information / Training
All training and any information that is to be disseminated must be either 1) per established policy, process, procedure, or practice; or, 2) reviewed, finalized and approved by appropriate BPA federal personnel.
Inspection / IT Testing
Processes and procedures must ensure Federal personnel review inspection findings and CFTE recommendations before acceptance or rejection of material(s) / item(s).
HR Support
CFTE may assist with HR functions per established procedures, processes and guidelines (e.g., timekeeping).
All work products must be reviewed and finalized by appropriate federal employees.
Policy Development
BPA s process for Policy development includes multiple levels of federal review prior to acceptance / adoption.
Interpretation of Policy/Regulations
Only BPA federal employees may determine the applicability and interpretation of regulations.
CFTE are not permitted to interpret regulations for or on behalf of BPA. Regulations are interpreted by federal personnel and communicated via standards, guides, policies and processes.
Representing BPA
Contract workers are required to identify themselves and their employer in signature blocks, in introductions and have a nameplate outside their cubicle.
CFTE must receive written VP approval to represent BPA at outside events, such as workshops, seminars or conferences.
Page 4 of 4 F_0121_API_TEMPLATE_030626
CFTE NON-CRAFT HIRING SAFETY TRAINING MATRIX
CONTRACT FULL TIME EQUIVALENT (CFTE)
NON-CRAFT HIRING SAFETY TRAINING MATRIX
Purpose:
The Contract Full Time Equivalent (CFTE) Hiring Safety Training Matrix is a hazard assessment for CFTE personnel routine tasks. It is intended to set a common understanding on training requirements between the CFTE personnel and the *** (BPA) managers/supervisors. BPA Requesting Managers should complete this form and coordinate with BPA Supplemental Labor Office during the procurement process to ensure the CFTE position includes a list of required trainings associated with identified tasks, conditions, and exposures. Each task, condition, and exposure indicate which training courses are required, who shall provide those trainings, and when those trainings shall occur.
This form is intended only as a reference document for contractors.
BPA Requesting Manager
(Last, First MI)
Bingaman, Paul R
Date
6/17/2026
CFTE Job Title
System Administrator 3 Domain Administration
Org
JNDI
PPE provided by Supplier or Contractor?
Yes No
If yes, list required PPE: Click or tap here to enter text.
Identify which Supplier or Contractor medical surveillance programs are required, if any*
Respirator User
Asbestos
Lead
Silica
Hearing Conservation
Other: Click or tap here to enter text.
No Medical Surveillance
*BPA Requesting Managers may use equivalent Job Title Position Hazard Assessments or project Job Hazard Analyses as indicators for which medical surveillance programs may be required. Direct any questions regarding medical surveillance program requirements to the BPA Industrial Hygienist, ***, or ***.
Instructions for BPA Requesting Manager: This template has been pre-populated with tasks and hazards generally associated with CFTE non-craft positions. BPA Requesting Managers must review this document during the CFTE procurement process. The BPA Requesting Manager will:
Select the checkbox next to each task/condition/exposure that may be encountered during the normal course of the assignment.
Identify if the mitigation for applicable tasks/conditions/exposures will be provided by BPA or the Contractor (supplier).
Indicate when the mitigation must occur (pre-hire, post-hire, pre-task).
Pre-Hire Training should be completed prior to the CFTE starting their assignment.
Post-Hire training should be completed prior to exposure to a hazardous environment and/or conducting work at a BPA worksite.
Pre-Task Training should be completed prior to conducting the associated task.
Once complete, the BPA Requesting Manager will send the completed document to the Supplemental Labor Management Office.
The listed tasks, conditions, and exposures are not all inclusive. New processes, unusual tasks, or equipment may trigger the need for specialized training. Consult with your local Safety Manager or BPA Safety Training Manager for guidance.
BPA provided safety training will be the same training provided to Federal Workers.
For the General Comments section, BPA Requesting Managers can list anything that was not already covered and provide clarification to the BPA COR to better understand the CFTE position. It may include tasks, conditions, and/or exposures that are unique to a particular position, work site, or person.
For more information on the PHA process/requirement, reference the Safety and Occupational Health Manual, Safety Management Systems Chapter.
Direct any questions regarding training requirements or issues related to this form to the BPA Safety Training Manager, ***, or ***.
Office & Remote Work/Telework Hazards
Task / Condition / Exposure
Required Training
Contractor (C) or BPA (B) Provided
Pre-Hire Training
Post-Hire Training
Pre-Task Training
Exposed to a fire in the building
BPA manager will advise of evacuation protocol and designated gathering location. Annual fire drills will be conducted.
B
Exposed to an earthquake while in the building
BPA manager will advise of evacuation protocol and designated gathering location.
B
Operating office tools (paper cutter, paper punch, staplers, etc.)
None Identified
Choose an item.
Task / Condition / Exposure
Required Training
Contractor (C) or BPA (B) Provided
Pre-Hire Training
Post-Hire Training
Pre-Task Training
Performing tasks that may result in repetitive motion injuries, prolonged sitting and computer use
Optional: SUFS Move Safe (HRMIS 016633)
C
Ergonomics
Recognize the hazards and know when it is appropriate to stretch and take breaks; ensure a proper desk, chair, and equipment adjusted at the appropriate level; ensure proper lighting. Any ergonomic assessment to be provided by the supplier.
C
Performing tasks that may result in slips, trips or falls such as carrying boxes and walking on stairs or slick surfaces
Review SOHM Chapter 9
Choose an item.
Optional: Slips, Trips & Falls Training (HRMIS 015076)
Choose an item.
Adding electronic devices that were not previously part of the home (monitors, chargers, computing equipment, etc.)
None Identified. On-the-job familiarization (if using BPA-issued equipment).
Choose an item.
Travel / Field Operation Hazards
Task / Condition / Exposure
Required Training
Contractor (C) or BPA (B) Provided
Pre-Hire Training
Post-Hire Training
Pre-Task Training
Driving vehicles on public and/or non-public roads
Review SOHM Chapter 19
B
Defensive/Distracted Driving (HRMIS 017057)
B
Worker operates forklifts
Forklift Certification
Choose an item.
Worker operates a fire extinguisher
Fire Extinguisher Use
Choose an item.
Worker operates hand tools
None Identified
Choose an item.
Worker uses personal protective equipment
Personal Protective Equipment
Choose an item.
Worker may be exposed to shock and arc-flash hazard
Shock & Arc Flash Awareness
Choose an item.
Shock & Arc Flash Basic
Choose an item.
Shock & Arc Flash Advanced / Refresher
Choose an item.
Worker may contact but will not disturb Asbestos Containing Material (ACM) or Potentially Asbestos Containing Material (PACM) 2
Asbestos Awareness
Choose an item.
Worker required to work in remote areas where bear encounters may take place
Bear Pepper Spray Training
Choose an item.
Worker exposed to rodent and bird droppings1
Biological/Vermin/Hanta Virus
Choose an item.
Worker exposed to hot and/or cold environments
None Identified
Choose an item.
Task / Condition / Exposure
Required Training
Contractor (C) or BPA (B) Provided
Pre-Hire Training
Post-Hire Training
Pre-Task Training
Worker exposed to chemicals, such as herbicides or pesticides;
Herbicide Cert. Ref. 4-hr
Choose an item.
Herb Certification 8-hr
Choose an item.
Hazardous Communication
Choose an item.
Worker exposed to lead2
Lead Awareness
Choose an item.
Lead Worker Training
Choose an item.
Worker exposed to mercury
None Identified
Choose an item.
Worker exposed to noise2
Hearing Conservation (Initial)
Hearing Conservation (Annual)
Choose an item.
Worker exposed to silica2
Silica - Awareness
Choose an item.
Worker works at heights higher than 4
Fall Protection, Awareness
Choose an item.
Fall Protection, General
Choose an item.
Fall Protection, Advanced
Choose an item.
Ladder Safety
Choose an item.
Fall Protection, Advanced (TLM)
Choose an item.
Worker is required to take first aid and may be called on to render first aid for: workers on high voltage lines and/or equipment; worker works in remote areas
First Aid/CPR/AED
(Red Cross or AHA Accredited)
Required only if specified in the API
Choose an item.
Worker performs work alone in remote areas
Wilderness Adv. First Aid
Choose an item.
Worker may prepare, transport or receive hazardous materials
DOT 1: Introduction, Classification, and the Hazardous Materials Table
DOT 2: Packaging, Labeling, Marking, and Placarding
DOT 3: Shipping Papers
DOT 4: Loading and Storage
DOT: Security for Shipment of Hazardous Materials
Hazardous Materials: Shipping Lithium Batteries under DOT Exemptions
DOT Hazardous Material Awareness for the General Hazmat Employee
Choose an item.
1 BPA workplace manager to review Hantavirus Prevention Procedure 420-240-1 before performing task.
2 These exposures may require enrollment in a Medical Surveillance Program. Ensure page 1 is marked accordingly.
Other Specific Hazards
Task / Condition / Exposure
Required Training
Contractor (C) or BPA (B) Provided
Pre-Hire Training
Post-Hire Training
Pre-Task Training
SAMPLE: Worker may make infrequent visits to field locations or substations
Worker complete the PPE assessment in the SOHM to determine need for PPE such as hard hat, safety glasses, hearing protection, safety vests, Arc Flash clothing or steel-toed boots.
B
X
Click or tap here to enter text.
Click or tap here to enter text.
Choose an item.
Click or tap here to enter text.
Click or tap here to enter text.
Choose an item.
Click or tap here to enter text.
Click or tap here to enter text.
Choose an item.
Click or tap here to enter text.
Click or tap here to enter text.
Choose an item.
Click or tap here to enter text.
Click or tap here to enter text.
Choose an item.
Click or tap here to enter text.
Click or tap here to enter text.
Choose an item.
Click or tap here to enter text.
Click or tap here to enter text.
Choose an item.
Click or tap here to enter text.
Click or tap here to enter text.
Choose an item.
Click or tap here to enter text.
Click or tap here to enter text.
Choose an item.
General Comments
BPA Requesting Manager Comments/Additional Considerations:
Click or tap here to enter text.
F_0139_HIRING_SAFETY_TRAINING_MATRIX_121624