API_BSA2_JSP_20260902_CORA.docx
*** | SUPPLEMENTAL LABOR MANAGEMENT OFFICE
ADDITIONAL PROCUREMENT INFORMATION (API)
Title & Level
Business Systems Analyst 2
Work Group Location
Vancouver, WA
Specialty
Compliance, Change & Configuration Management
Offsite Work Eligibility*
Remote Work Eligible - Must live in BPA's service territory of WA, OR, ID, MT. Official Duty Station is the home address.**
Organization
JSP
Number of Days Onsite
0 days per Week
Hours
Full-Time, up to 40 hours
Additional Information
Telework full-time, days onsite as required for meetings/training.
Overtime
10% anticipated
On-Call
No
Travel
Up to 5% for meetings/training
FN Status
NOT open to Foreign Nationals
* Current telework, remote work and onsite support is based on BPA s business needs and is subject to change or termination at any time.
** Assignments with the Remote Designation must reside in WA, OR, ID or MT. Case-by-case exceptions may apply only when in the best interest of BPA.
OVERVIEW
Assignment
This contract Business Systems Analyst 2 assignment will support *** s (BPA s) OT Cybersecurity Program Management & Compliance (JSP) organization. OT Cybersecurity Program Management Mgmt & Compliance is responsible for providing centralized program management, reliability standards owner, and program support services for Field Compliance and Security, Asset Management, Business Continuity, Vulnerability Management, Change and Configuration Management, and Security Management Programs.
This assignment will serve as primary analyst for the Change and Configuration Management team. The Change and Configuration Management Team identifies, controls, and documents changes to the hardware, software (third-party and BPA executables), and database schemas for all Control Center information systems that reside in production and/or on production networks. These teams work closely with one another supporting OT s Change and Configuration Management (CCM) Program, with projects that often overlap and complement.
Organization
JSP operates with a high level of collaboration and transparency. While work is guided by a structured compliance calendar, team members must remain agile to successfully manage emergent, high-priority tasks. This assignment provides an excellent opportunity to gain deep insight into the strict regulatory requirements governing Federal Critical Assets. The ideal candidate is highly adaptable to changing priorities. This assignment is primarily sedentary.
ASSIGNMENT RESPONSIBILITIES
Note: All official drafts, documents and recommendations, as listed below, must be reviewed, finalized and approved / accepted by appropriate BPA manager or other federal personnel with the authority to do so.
General
These responsibilities are performed by both teams / areas of focus; some duties will be performed by collaboration of the two teams.
Perform BPA management-approved processes and procedures to support NERC (North American Electric Reliability Corporation) Mandatory Reliability standards CIP (Critical Infrastructure Protection) and Department of Energy NIST/FISMA (National Institute of Standards and Technology/Federal Information Security Management Act) security requirements.
Provide quality data management and stewardship. Maintain filing system(s), files, emails and records in accordance with compliance requirements. File and disperse documents/letters only to appropriate personnel. Maintain all official records in accordance with the Information Governance & Lifecycle Management (IGLM) standards and procedures. Validate official records are accurately maintained for auditing purposes.
With federal employee oversight, perform review and verification of Control Center (CC) and other applicable GSS compliance with regulations from FISMA, DOE, WECC, NERC, and FERC; as well as performing audit preparation for the aforementioned regulatory bodies and Internal (CG) audits; and Self-Certification data calls.
Participate in improvement efforts, providing recommendations and hands-on assistance with position-related quality, compliance or efficiency improvements.
Validate TTL items are currently modeled correctly in the ChangeGear (CMDB) database; alert SME or BPA manager of any issues or concerns.
Maintain a high-level overview of the complex inter-connected data systems that make up the Change and Configuration Management (CCM) Program. (TripWire, SolarWinds, AssetDB, ChangeGear, CMS, etc.).
Attend meetings, conferences, and seminars to support the customer needs as they related to BPA s CCM Program
IT Change Management
Monitor the Request for Change (RFC) Queue; verify pre and post testing has been performed by the appropriate Resource Managers (RM).
Review specifications, verifying that all essential requirements are documented; alert applicable SME or BPA manager of results or any issues / concern; make recommendations for corrections / changes.
Review the logical top-level design for applications and information systems (including test plans and procedures); provide results, concerns and/or recommendations to BPA manager.
Collaborate with other IT CM Specialists to share best practices, provide recommendations and assistance on critical needs, and coordinate Transmission-wide initiatives.
Identify and recommend training needs and include major areas of uncertainty in approach, methodology, or interpretation and evaluation processes resulting from such elements as continuing changes in program, technological developments, unknown phenomena, or conflicting requirements.
Support the program presentations, in-house and client training, and functional education; arrange, conduct and facilitate management-approved presentations and training sessions.
Develop and present recommendations and supporting analysis for management decisions.
Prepare technical reports, documents, studies, and system documentation as required.
Confer with system users to document and resolve existing system issues and problems.
Provide back-up support and workload assistance for the group s Process & Controls Support Team.
Support configuration change management efforts.
System modeling and maintain technical configuration baseline documentation
Detect and correct configuration baseline errors
Assist in defining, developing and documenting of new processes and procedures as required
Support process and procedure roll-out
Provide support for both the manual and automated software patch program
Track the Request for Change (RFC) related to each mitigation plan and report status to appropriate system owner.
Assist BPA management with developing and documenting system processes and procedures to support NERC (North American Electric Reliability Corporation) Mandatory Reliability standards CIP (Critical Infrastructure Protection) and Department of Energy NIST/FISMA (National Institute of Standards and Technology/Federal Information Security Management Act) security requirements.
Support the development of necessary documentation to support reporting and audit requirements.
Provide quality assurance for organization to verify compliance to regulatory standards and guidelines.
Provide support, including gathering & formatting information/data, to NERC annual certification process, WECC audit, and any other spot audit or compliance data request.
Assist with data stewardship for the configuration management program.
Attend meetings to support the customer needs. Attendance assists in maintaining currency of technical, procedural and acquisition knowledge.
REQUIREMENTS
Education & Corresponding Experience (required on matrix)
An Associate s or Bachelor s degree in Computer/Information Technology, Business Systems, Engineering or a directly-related technical field is preferred.
With an applicable Associates degree, 7 years of experience is required.
With an applicable Bachelor s degree, 5 years of experience is required.
Without an applicable degree, 9 years of experience is required.
Experience should include demonstrated analyst work experience in Computer/Information Technology, Business Systems and requirements engineering, operations management or other closely related field.
Required Technical Skills & Experience (required on matrix)
3 years experience working with the following:
Configuration Change management concepts and practices for secure/reliable technology systems
Compliance standards and best practices frameworks as applied to systems development and program management
Process and procedure development
1 year experience in the use of configuration change management tools/systems
1 year previous compliance and/or audit support experience
Preferred Skills & Experience (optional on matrix)
Experience in any aspect of the software development lifecycle for a utility environment
Experience with the set-up, configuration or oversight of change and/or configuration management tools
Experience implementing NIST/FISMA standards/guidelines
Experience with applying the concepts of ITIL v3 or later, or similar technology management frameworks
Additional Requirements (not required on matrix)
Valid U.S. Driver s License is required.
Other Assignment Considerations
Selectee will be expected to complete and maintain North American Reliability Corporation (NERC) Critical Infrastructure Protection (CIP) certifications for secure locations and to possibly act as an escort as required.
Appendices
The following appendices apply to this assignment and may be downloaded from the Fieldglass Reference Library:
Offsite Work
Training Expectations (Worker is expected to keep current on the latest technologies and skills required for the assignment.)
Attendance at all conferences, workshops, training, etc. must be pre-approved by SLMO. Requests will be reviewed on a case-by-case basis. Approval is subject to the most current guidance provided to SLMO by BPA or DOE and is subject to change at any time. SLMO reserves the right to negotiate attendance on billable/non-billable hours and reimbursement of travel costs with the supplier. Reimbursable travel costs must adhere to the Federal Travel Regulations and be submitted via an expense sheet in Fieldglass.
CLOSELY ASSOCIATED RESPONSIBILITIES & REQUIRED ASSOCIATED MITIGATION MEASURES
The following is a list of potential inherently governmental risk areas and the measures that SLMO-Compliance has determined must be in place, via processes and procedures, to mitigate the associated risks. The BPA manager s acceptance of the API or CWSD serves as their attestation that all applicable mitigation measures listed below are or will be established and adhered to in their organization.
Area of potential Closely Associated / Inherently Government function
Mitigation Measures
Access to Confidential / Sensitive Information
CFTE must sign NDA (Non-Disclosure Agreements) at beginning of assignments. (Does not apply to Craft assignments)
CFTE must complete annual Information Security and Privacy Awareness training.
CFTE must complete and pass background investigations of an appropriate level.
Acquisition Planning / Source Selection
CFTE are not permitted to serve as voting members for acquisition selections.
All purchasing decisions must be made by appropriate federal personnel (Contracting Officers).
All acquisition documents (requirements,
SOW s, evaluation criteria, etc.) must be reviewed, finalized and approved by appropriate BPA federal personnel.
Only Contracting Officers are authorized to obligate BPA funds.
Agency / Org Planning
All drafts, documents, materials and recommendations must be reviewed, finalized and approved by appropriate BPA federal personnel.
Budget / Finance Prep
Only Federal Employees may determine budget priorities & allocations.
BFTE must control and finalize / approve all budgets and related documentation, including that for projects, programs and Organizations.
Contract Management
All Contractual documents, including invoices must be finalized / approved by appropriate Federal personnel.
All contract-related decisions (modifications, changes, performance) must be determined by appropriate federal personnel (COs).
Decision Making
CFTE may provide input and recommendations to decision-makers.
Only appropriate federal personnel may make decisions which obligate BPA resources or to a specific course of action.
Direction & Control
(directing BFTE)
CFTE are not permitted to direct the actions of federal employees (BFTE) or have any control or input into their performance.
Work of BFTE must be assigned by federal manager, supervisor, Program / Resource manager or another appropriate designee.
Disposing Govt. Property
All decisions regarding the disposal of BPA property must be made by appropriate federal personnel; and all property dispositions must be directed and controlled by the Investment Recovery Center (IRC).
Dissemination of Agency/Policy Information / Training
All training and any information that is to be disseminated must be either 1) per established policy, process, procedure, or practice; or, 2) reviewed, finalized and approved by appropriate BPA federal personnel.
Inspection / IT Testing
Processes and procedures must ensure Federal personnel review inspection findings and CFTE recommendations before acceptance or rejection of material(s) / item(s).
HR Support
CFTE may assist with HR functions per established procedures, processes and guidelines (e.g., timekeeping).
All work products must be reviewed and finalized by appropriate federal employees.
Policy Development
BPA s process for Policy development includes multiple levels of federal review prior to acceptance / adoption.
Interpretation of Policy/Regulations
Only BPA federal employees may determine the applicability and interpretation of regulations.
CFTE are not permitted to interpret regulations for or on behalf of BPA. Regulations are interpreted by federal personnel and communicated via standards, guides, policies and processes.
Representing BPA
Contract workers are required to identify themselves and their employer in signature blocks, in introductions and have a nameplate outside their cubicle.
CFTE must receive written VP approval to represent BPA at outside events, such as workshops, seminars or conferences.
Page 4 of 4 F_0121_API_TEMPLATE_030626
CFTE NON-CRAFT HIRING SAFETY TRAINING MATRIX
CONTRACT FULL TIME EQUIVALENT (CFTE)
NON-CRAFT HIRING SAFETY TRAINING MATRIX
Purpose:
The Contract Full Time Equivalent (CFTE) Hiring Safety Training Matrix is a hazard assessment for CFTE personnel routine tasks. It is intended to set a common understanding on training requirements between the CFTE personnel and the *** (BPA) managers/supervisors. BPA Requesting Managers should complete this form and coordinate with BPA Supplemental Labor Office during the procurement process to ensure the CFTE position includes a list of required trainings associated with identified tasks, conditions, and exposures. Each task, condition, and exposure indicate which training courses are required, who shall provide those trainings, and when those trainings shall occur.
This form is intended only as a reference document for contractors.
BPA Requesting Manager
(Last, First MI)
Gallman Jr, Stephen W
Date
7/31/26
CFTE Job Title
Business Systems Analyst 2
Org
JSP
PPE provided by Supplier or Contractor?
Yes No
If yes, list required PPE: Click or tap here to enter text.
Identify which Supplier or Contractor medical surveillance programs are required, if any*
Respirator User
Asbestos
Lead
Silica
Hearing Conservation
Other: Click or tap here to enter text.
No Medical Surveillance
*BPA Requesting Managers may use equivalent Job Title Position Hazard Assessments or project Job Hazard Analyses as indicators for which medical surveillance programs may be required. Direct any questions regarding medical surveillance program requirements to the BPA Industrial Hygienist, ***, or ***.
Instructions for BPA Requesting Manager: This template has been pre-populated with tasks and hazards generally associated with CFTE non-craft positions. BPA Requesting Managers must review this document during the CFTE procurement process. The BPA Requesting Manager will:
Select the checkbox next to each task/condition/exposure that may be encountered during the normal course of the assignment.
Identify if the mitigation for applicable tasks/conditions/exposures will be provided by BPA or the Contractor (supplier).
Indicate when the mitigation must occur (pre-hire, post-hire, pre-task).
Pre-Hire Training should be completed prior to the CFTE starting their assignment.
Post-Hire training should be completed prior to exposure to a hazardous environment and/or conducting work at a BPA worksite.
Pre-Task Training should be completed prior to conducting the associated task.
Once complete, the BPA Requesting Manager will send the completed document to the Supplemental Labor Management Office.
The listed tasks, conditions, and exposures are not all inclusive. New processes, unusual tasks, or equipment may trigger the need for specialized training. Consult with your local Safety Manager or BPA Safety Training Manager for guidance.
BPA provided safety training will be the same training provided to Federal Workers.
For the General Comments section, BPA Requesting Managers can list anything that was not already covered and provide clarification to the BPA COR to better understand the CFTE position. It may include tasks, conditions, and/or exposures that are unique to a particular position, work site, or person.
For more information on the PHA process/requirement, reference the Safety and Occupational Health Manual, Safety Management Systems Chapter.
Direct any questions regarding training requirements or issues related to this form to the BPA Safety Training Manager, ***, or ***.
Office & Remote Work/Telework Hazards
Task / Condition / Exposure
Required Training
Contractor (C) or BPA (B) Provided
Pre-Hire Training
Post-Hire Training
Pre-Task Training
Exposed to a fire in the building
BPA manager will advise of evacuation protocol and designated gathering location. Annual fire drills will be conducted.
C
Exposed to an earthquake while in the building
BPA manager will advise of evacuation protocol and designated gathering location.
C
Operating office tools (paper cutter, paper punch, staplers, etc.)
None Identified
C
Task / Condition / Exposure
Required Training
Contractor (C) or BPA (B) Provided
Pre-Hire Training
Post-Hire Training
Pre-Task Training
Performing tasks that may result in repetitive motion injuries, prolonged sitting and computer use
Optional: SUFS Move Safe (HRMIS 016633)
C
Ergonomics
Recognize the hazards and know when it is appropriate to stretch and take breaks; ensure a proper desk, chair, and equipment adjusted at the appropriate level; ensure proper lighting. Any ergonomic assessment to be provided by the supplier.
C
Performing tasks that may result in slips, trips or falls such as carrying boxes and walking on stairs or slick surfaces
Review SOHM Chapter 9
Choose an item.
Optional: Slips, Trips & Falls Training (HRMIS 015076)
Choose an item.
Adding electronic devices that were not previously part of the home (monitors, chargers, computing equipment, etc.)
None Identified. On-the-job familiarization (if using BPA-issued equipment).
Choose an item.
Travel / Field Operation Hazards
Task / Condition / Exposure
Required Training
Contractor (C) or BPA (B) Provided
Pre-Hire Training
Post-Hire Training
Pre-Task Training
Driving vehicles on public and/or non-public roads
Review SOHM Chapter 19
Choose an item.
Defensive/Distracted Driving (HRMIS 017057)
Choose an item.
Worker operates forklifts
Forklift Certification
Choose an item.
Worker operates a fire extinguisher
Fire Extinguisher Use
Choose an item.
Worker operates hand tools
None Identified
Choose an item.
Worker uses personal protective equipment
Personal Protective Equipment
Choose an item.
Worker may be exposed to shock and arc-flash hazard
Shock & Arc Flash Awareness
Choose an item.
Shock & Arc Flash Basic
Choose an item.
Shock & Arc Flash Advanced / Refresher
Choose an item.
Worker may contact but will not disturb Asbestos Containing Material (ACM) or Potentially Asbestos Containing Material (PACM) 2
Asbestos Awareness
Choose an item.
Worker required to work in remote areas where bear encounters may take place
Bear Pepper Spray Training
Choose an item.
Worker exposed to rodent and bird droppings1
Biological/Vermin/Hanta Virus
Choose an item.
Worker exposed to hot and/or cold environments
None Identified
Choose an item.
Task / Condition / Exposure
Required Training
Contractor (C) or BPA (B) Provided
Pre-Hire Training
Post-Hire Training
Pre-Task Training
Worker exposed to chemicals, such as herbicides or pesticides;
Herbicide Cert. Ref. 4-hr
Choose an item.
Herb Certification 8-hr
Choose an item.
Hazardous Communication
Choose an item.
Worker exposed to lead2
Lead Awareness
Choose an item.
Lead Worker Training
Choose an item.
Worker exposed to mercury
None Identified
Choose an item.
Worker exposed to noise2
Hearing Conservation (Initial)
Hearing Conservation (Annual)
Choose an item.
Worker exposed to silica2
Silica - Awareness
Choose an item.
Worker works at heights higher than 4
Fall Protection, Awareness
Choose an item.
Fall Protection, General
Choose an item.
Fall Protection, Advanced
Choose an item.
Ladder Safety
Choose an item.
Fall Protection, Advanced (TLM)
Choose an item.
Worker is required to take first aid and may be called on to render first aid for: workers on high voltage lines and/or equipment; worker works in remote areas
First Aid/CPR/AED
(Red Cross or AHA Accredited)
Required only if specified in the API
Choose an item.
Worker performs work alone in remote areas
Wilderness Adv. First Aid
Choose an item.
Worker may prepare, transport or receive hazardous materials
DOT 1: Introduction, Classification, and the Hazardous Materials Table
DOT 2: Packaging, Labeling, Marking, and Placarding
DOT 3: Shipping Papers
DOT 4: Loading and Storage
DOT: Security for Shipment of Hazardous Materials
Hazardous Materials: Shipping Lithium Batteries under DOT Exemptions
DOT Hazardous Material Awareness for the General Hazmat Employee
Choose an item.
1 BPA workplace manager to review Hantavirus Prevention Procedure 420-240-1 before performing task.
2 These exposures may require enrollment in a Medical Surveillance Program. Ensure page 1 is marked accordingly.
Other Specific Hazards
Task / Condition / Exposure
Required Training
Contractor (C) or BPA (B) Provided
Pre-Hire Training
Post-Hire Training
Pre-Task Training
SAMPLE: Worker may make infrequent visits to field locations or substations
Worker complete the PPE assessment in the SOHM to determine need for PPE such as hard hat, safety glasses, hearing protection, safety vests, Arc Flash clothing or steel-toed boots.
B
X
Click or tap here to enter text.
Click or tap here to enter text.
Choose an item.
Click or tap here to enter text.
Click or tap here to enter text.
Choose an item.
Click or tap here to enter text.
Click or tap here to enter text.
Choose an item.
Click or tap here to enter text.
Click or tap here to enter text.
Choose an item.
Click or tap here to enter text.
Click or tap here to enter text.
Choose an item.
Click or tap here to enter text.
Click or tap here to enter text.
Choose an item.
Click or tap here to enter text.
Click or tap here to enter text.
Choose an item.
Click or tap here to enter text.
Click or tap here to enter text.
Choose an item.
Click or tap here to enter text.
Click or tap here to enter text.
Choose an item.
General Comments
BPA Requesting Manager Comments/Additional Considerations:
Click or tap here to enter text.
F_0139_HIRING_SAFETY_TRAINING_MATRIX_121624