CHARLESTON, SC // SDVOSB SOFTWARE CONSULTING

Veteran-owned software engineering, on the ground near NIWC Atlantic

SDVOSB-certified. Cleared delivery for Navy software programs out of North Charleston and Joint Base Charleston. Senior engineers who have shipped on DoD programs, not just briefed them.

Veteran-Owned SDVOSB
001 / 005 Field Conditions

Most Navy software programs in Charleston are bottlenecked by the contractor, not the mission.

Situation

NIWC Atlantic runs some of the Navy's hardest C4ISR software problems out of North Charleston. The mission isn't the issue — staffing is. Programs get juniors billed at senior rates, a prime that ran the capture from another time zone, and a sprint cadence that exists in Jira but not in reality. By month six the ATO is slipping, the pipeline is red, and the government PM is rewriting the PWS to match what the contractor can actually do. We've watched this loop on Black Pearl-adjacent work, on legacy Java sustainment, and on AI pilots that never made it past a PowerPoint.

  • Resumes shown at proposal aren't the engineers who show up on day one — and the swap happens after award.
  • "Agile" means standups, not shippable increments. CDRLs and sprint output drift apart by sprint three.
  • Modernization stalls because nobody on contract has actually pushed a container through Black Pearl or Cloud One before.
  • AI integrations get scoped against ChatGPT.com instead of the IL2/IL4 boundary the program actually lives in.
SDVOSB
SBA-certified, set-aside eligible
2–4 wk
Typical ramp to billing on task orders
Senior
10+ year engineers, not bench juniors
002 / 005 Operational Approach

How we operate on Navy software programs in the Lowcountry

  1. STEP-01

    Sit down at NIWC, in person

    We drive to North Charleston, sit in the SCIF-adjacent spaces, and work the program office face-to-face. Teams plans, IPTs, and sprint reviews land harder when the contractor is in the room, not on a Zoom tile from out of state.

  2. STEP-02

    Team with a qualified prime or sub

    As an SDVOSB we slot cleanly into set-aside vehicles, SeaPort-NxG task orders, and OTAs. We bring senior engineers; the prime brings the contract vehicle and FSO. Teaming agreements signed in days, not quarters.

  3. STEP-03

    Ship inside ATO and RMF reality

    Cloud One, Black Pearl, Party Bus — we work the pipelines that already have provisional ATOs. Code lands in GitLab, scans run in Fortify and Anchore, and we negotiate POA&Ms instead of pretending vulns don't exist.

  4. STEP-04

    Iterate without breaking the FAR

    Agile on a CPFF or FFP task order is a discipline, not a poster. We run two-week sprints with demos to the government PM, keep CDRLs current, and burn down requirements against the PWS — not against a backlog nobody approved.

  5. STEP-05

    Transition without a cliff

    When the period of performance ends, the government owns the repo, the runbooks, the threat model, and the deployment scripts. No lock-in, no "call us for the rebuild." That's how you get re-competed onto the follow-on.

YAML PATTERN
# .gitlab-ci.yml — pattern we use on NIWC-adjacent work
# Targets Black Pearl / Party Bus style pipelines with RMF artifacts

stages: [build, test, scan, package, deploy]

variables:
  IMAGE: registry.il2.dso.mil/voostack/${CI_PROJECT_NAME}
  RMF_CONTROLS: "SA-11, SI-2, SI-7, RA-5"

build:
  stage: build
  script:
    - ./gradlew assemble --no-daemon

unit-test:
  stage: test
  script:
    - ./gradlew test jacocoTestReport
  coverage: '/Total.*?([0-9]{1,3})%/'

fortify-sast:
  stage: scan
  script:
    - sourceanalyzer -b $CI_PROJECT_NAME -scan -f fortify.fpr
    - FortifyUpload --file fortify.fpr --app $CI_PROJECT_NAME

anchore-container-scan:
  stage: scan
  script:
    - anchorectl image add $IMAGE:$CI_COMMIT_SHA
    - anchorectl image wait $IMAGE:$CI_COMMIT_SHA
    - anchorectl image check --fail-on high $IMAGE:$CI_COMMIT_SHA

package-sbom:
  stage: package
  script:
    - syft $IMAGE:$CI_COMMIT_SHA -o cyclonedx-json > sbom.json
  artifacts:
    paths: [sbom.json, fortify.fpr]
    expire_in: 1 year   # keep for ATO evidence

Pipeline pattern we drop into NIWC-adjacent programs running on Black Pearl or Cloud One IL2/IL5 — generates the SAST, SBOM, and container scan artifacts an ISSM actually wants to see before signing the POA&M.

003 / 005 Common Questions

Field FAQ.

Are you actually local to Charleston, or is this a virtual office?

We have engineers on the ground in the Lowcountry who can be at NIWC Atlantic in North Charleston or Joint Base Charleston the same day. For Navy software work, that matters — IPTs, sprint reviews, and program office sidebars are still better in person. We're not running a P.O. box and flying people in from out of state when a sync slips off the calendar.

What's the SDVOSB angle and why should a prime care?

VooStack is a Service-Disabled Veteran-Owned Small Business, certified through the SBA. That makes us countable toward small business and SDVOSB subcontracting goals on the prime's plan, eligible for SDVOSB set-asides, and a clean teaming partner on SeaPort-NxG and similar vehicles. Primes use us to hit goals without inheriting risk, because we ship working code.

Do you hold clearances and can you work in SCIFs?

We staff cleared engineers up through Secret as a baseline, with TS/SCI available on specific programs. We work inside customer SCIFs at NIWC Atlantic and Joint Base Charleston, and we keep an unclassified development footprint for the parts of the work that don't need to be behind the fence. Clearance sponsorship details depend on the contract vehicle.

What does "agile" actually look like on a Navy CPFF task order?

It looks like two-week sprints with a government product owner, written sprint goals tied back to the PWS, demos that produce CDRL evidence, and a backlog that the KO and PM can both read. We don't pretend the FAR doesn't exist. We don't promise velocity we can't bill. And we don't ship to production without an ATO path agreed up front.

Can you integrate Claude, GPT, or RAG into government workflows?

Yes, with caveats that most vendors skip. On IL2/IL4 systems we work with the models authorized on Cloud One or the customer's enclave — typically Azure OpenAI in GovCloud or Bedrock Claude where the boundary allows. We design RAG against the actual document repositories in play, build evals before we build features, and write the AI use case memo the ISSM is going to ask for anyway.

How do you handle legacy modernization on a sustainment contract?

We strangle, not rewrite. Existing system stays running while we stand up new services behind an API gateway, route traffic incrementally, and retire legacy modules once the new path has burned in. Typical Navy sustainment systems we see are Java EE on WebLogic, .NET Framework on IIS, or Oracle Forms — all of which have a believable path to containers on Cloud One over 12–24 months.

What contract vehicles can you work under right now?

We sub under SeaPort-NxG, GSA MAS, CIO-SP3 SB, and various agency BPAs through primes. We pursue SDVOSB set-asides directly when the size and scope fit. For rapid starts we also work through OTAs via consortia like Tradewinds and DIU partners. If you have a vehicle and a need, send the PWS — we'll tell you honestly whether we're the right fit.

How fast can you put senior engineers on a task order?

For uncleared roles, typically 2–4 weeks from signed teaming agreement to badged-and-billing. For cleared roles where the clearance is already in scope, similar. For roles requiring a crossover or new investigation, it's whatever DCSA is doing that quarter — we'll give you a realistic date, not a sales date. We don't bench-warm resumes we can't actually deliver.

Do you only work federal, or commercial too?

Both. Roughly half our work is federal — Navy, Air Force, and civilian agencies — and half is commercial software consulting and AI integration. The commercial work keeps our engineers sharp on modern tooling that federal programs are still catching up to, which is exactly what you want on a modernization or AI integration task order.

Next step

Need senior engineers on a Navy program in Charleston? Let's talk.

Talk to a VooStack operator. We respond within one business day.