040ADV-24-R-0037 - SAM.pdf

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS

OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, & 30

1. REQUISITION NUMBER PAGE 1 OF 6

2. CONTRACT NO. 3. AWARD/EFFECTIVE

DATE

4. ORDER NUMBER 5. SOLICITATION NUMBER

040ADV-24-R-0037

6. SOLICITATION ISSUE

DATE

7. FOR SOLICITATION

INFORMATION CALL:

a. NAME b. TELEPHONE NUMBER (No collect calls)

8. OFFER DUE DATE/

LOCAL TIME

04/26/2024 17:00

9. ISSUED BY CODE 10. THIS ACQUISITION IS UNRESTRICTED OR SET ASIDE: 0 % FOR:

SMALL BUSINESS WOMEN-OWNED SMALL BUSINESS

(WOSB) ELIGIBLE UNDER THE WOMEN-OWNED

11. DELIVERY FOR FOB DESTINA-

12. DISCOUNT TERMS

HUBZONE SMALL

BUSINESS

SERVICE-DISABLED

VETERAN-OWNED

SMALL BUSINESS

SMALL BUSINESS PROGRAM

EDWOSB

8 (A)

13b. RATING

NAICS:

SIZE STANDARD:

TION UNLESS BLOCK IS

MARKED

SEE SCHEDULE

13a. THIS CONTRACT IS A

RATED ORDER UNDER

DPAS (15 CFR 700)

14. METHOD OF SOLICITATION

RFQ IFB RFP

15. DELIVER TO

See Schedule

CODE 16. ADMINISTERED BY CODE

Same As Issuing Office

17a. CONTRACTOR/

OFFEROR

CODE FACILITY

CODE

18a. PAYMENT WILL BE MADE BY CODE

TELEPHONE NO.

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT SUCH ADDRESS IN

18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a UNLESS BLOCK

OFFER BELOW IS CHECKED SEE ADDENDUM

19.

ITEM NO.

20.

SCHEDULE OF SUPPLIES/SERVICES

21.

QUANTITY

22.

UNIT

23.

UNIT PRICE

24.

AMOUNT

(Use Reverse and/or Attach Additional Sheets as Necessary)

25. ACCOUNTING AND APPROPRIATION DATA

26. TOTAL AWARD AMOUNT (For Govt. Use Only)

27a. SOLICITATION INCORPORATES BY REFERENCE FAR 52.212-1, 52.212-4. FAR 52.212-3 AND 52.212-5 ARE ATTACHED. ADDENDA

27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212-5 IS ATTACHED. ADDENDA

ARE ARE NOT ATTACHED

ARE ARE NOT ATTACHED

28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN

COPIES TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH AND

DELIVER ALL ITEMS SET FORTH OR OTHERWISE IDENTIFIED ABOVE AND ON ANY

ADDITIONAL SHEETS SUBJECT TO THE TERMS AND CONDITIONS SPECIFIED

29. AWARD OF CONTRACT: REF. OFFER

DATED . . YOUR OFFER ON SOLICITATION

(BLOCK 5), INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE

SET FORTH HEREIN, IS ACCEPTED AS TO ITEMS:

30a. SIGNATURE OF OFFEROR/CONTRACTOR 31a. UNITED STATES OF AMERICA (SIGNATURE OF CONTRACTING OFFICER)

30b. NAME AND TITLE OF SIGNER (Type or print) 30c. DATE SIGNED 31b. NAME OF CONTRACTING OFFICER (Type or print) 31c. DATE SIGNED

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

STANDARD FORM 1449 (REV. 2/2012)

Prescribed by GSA - FAR (48 CFR) 53.212

19.

ITEM NO.

20.

SCHEDULE OF SUPPLIES/SERVICES

21.

QUANTITY

22.

UNIT

23.

UNIT PRICE

24.

AMOUNT

32a. QUANTITY IN COLUMN 21 HAS BEEN

RECEIVED INSPECTED ACCEPTED, AND CONFORMS TO THE CONTRACT, EXCEPT AS NOTED:

32b. SIGNATURE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32c. DATE 32d. PRINTED NAME AND TITLE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32e. MAILING ADDRESS OF AUTHORIZED GOVERNMENT REPRESENTATIVE 32f. TELPHONE NUMBER OF AUTHORZED GOVERNMENT REPRESENTATIVE

32g. E-MAIL OF AUTHORIZED GOVERNMENT REPRESENTATIVE

33. SHIP NUMBER 34. VOUCHER NUMBER 35. AMOUNT VERIFIED

CORRECT FOR

36. PAYMENT

COMPLETE PARTIAL FINAL

37. CHECK NUMBER

PARTIAL FINAL

38. S/R ACCOUNT NO. 39. S/R VOUCHER NUMBER 40. PAID BY

41a. I CERTIFY THIS ACCOUNT IS CORRECT AND PROPER FOR PAYMENT 42a. RECEIVED BY (Print)

41b. SIGNATURE AND TITLE OF CERTIFYING OFFICER 41c. DATE

42b. RECEIVED AT (Location)

42c. DATE REC'D (YY/MM/DD) 42d. TOTAL CONTAINERS

STANDARD FORM 1449 (REV. 2/2012) BACK

040ADV-24-R-0037

Contents

040ADV-24-R-0037

04/26/2024 17:00 See Schedule Same As Issuing Office See Schedule

A.2 SCOPE

This RFP will renew current services contract which is ending its five year term. The Contractor shall work with agency’s technical team to assist with overall scope of this solicitation. Prices shall include all direct labor, overhead, and general and administrative costs for required services. Individual orders may be placed on a firm fixed unit price basis. Orders placed against the contract will be in accordance with the MMAR. The terms and conditions of the contract will be incorporated in any resulting order. Only the Government Publishing Office Contracting Officers may place orders against this award

A.3 PRICE/SCHEDULE

BASE YEAR: June 1, 2024 – September 30, 2024

CLIN

Description Quantity Unit Price Total Price Technical Project Manager (Key Position) Senior Network Engineer Senior Cloud Network Engineer & Architect Cloud Network Engineering & Administrations Network Engineering and Device Administration Voice Over IP Engineering and Administration (See details in position description section below) Network Engineering and Firewall support (See details in position description section below) OPTION YEAR 1: October 1, 2024 – September 30, 2025

CLIN

Description Quantity Unit Price Total Price Technical Project Manager (Key Position) Senior Network Engineer

Senior Cloud Network Engineer & Architect Cloud Network Engineering & Administrations Network Engineering and Device Administration Voice Over IP Engineering and Administration (See details in position description section below) Network Engineering and Firewall support (See details in position description section below) OPTION YEAR 2: October 1, 2025 – September 30, 2026

CLIN

Description Quantity Unit Price Total Price Technical Project Manager (Key Position) Senior Network Engineer Senior Cloud Network Engineer & Architect Cloud Network Engineering & Administrations Network Engineering and Device Administration Voice Over IP Engineering and Administration (See details in position description section below) Network Engineering and Firewall support (See details in position description section below) OPTION YEAR 3: October 1, 2026 – September 30, 2027

CLIN

Description Quantity Unit Price Total Price Technical Project Manager (Key Position) Senior Network Engineer Senior Cloud Network Engineer & Architect

Cloud Network Engineering & Administrations Network Engineering and Device Administration Voice Over IP Engineering and Administration (See details in position description section below) Network Engineering and Firewall support (See details in position description section below) OPTION YEAR 4: October 1, 2027 – September 30, 2028

CLIN

Description Quantity Unit Price Total Price Technical Project Manager (Key Position) Senior Network Engineer Senior Cloud Network Engineer & Architect Cloud Network Engineering & Administrations Network Engineering and Device Administration Voice Over IP Engineering and Administration (See details in position description section below) Network Engineering and Firewall support (See details in position description section below)

END OF SECTION B

C. STATEMENT OF WORK: NETWORK AND TELECOMMUNICATION SUPPORT SERVICES

D. PACKAGING AND MARKING

F. DELIVERY OR PERFORMANCE

END OF SECTION F

G. CONTRACT ADMINISTRATION DATA

H. SPECIAL CONTRACT REQUIREMENTS

H.1 DISSEMINATION OF INFORMATION

H.2 NOTIFICATION OF DEBARMENT/SUSPENSION STATUS

H.3 PERMITS AND LICENSES

H.4 SUBCONTRACTING RESTRICTION

H.5 INDEMNIFICATION

H.6 QUALITY ASSURANCE REPORTS

H.7 PROTESTS

H.8 AWARD WITHOUT DISCUSSION:

I. CONTRACT CLAUSES

REGULATIONS GOVERNING PROCUREMENT

L. INSTRUCTIONS, CONDITIONS AND NOTICES TO OFFERORS

M. EVALUATION FACTORS

BASIS FOR AWARD

• PROPOSAL SUBMITTAL AND INQUIRIES

040ADV-24-R-0037

A.1 BACKGROUND

The Government Publishing Office (GPO) intends to issue a single award (Firm-Fixed Price) contract, via Best Value Tradeoff process per MMAR 15.101-1 for Information Technology (IT).

A.2 SCOPE

This RFP will renew current services contract which is ending its five year term. The Contractor shall work with agency’s technical team to assist with overall scope of this solicitation. Prices shall include all direct labor, overhead, and general and administrative costs for required services. Individual orders may be placed on a firm fixed unit price basis. Orders placed against the contract will be in accordance with the MMAR. The terms and conditions of the contract will be incorporated in any resulting order. Only the Government Publishing Office Contracting Officers may place orders against this award.

A.3 PRICE/SCHEDULE

1. The contractor shall furnish all the necessary qualified personnel and management resources.

2. Time to time government can also order hardware equipment and software subscriptions or licenses based on its need towards capacity planning, life cycle refresh or enhancements, within the terms specified and at the price(s) stated.

3. It is understood and agreed that the contractor shall provide Fixed-Price quotes when requested by the CO. The CO will issue Firm-

Fixed-Priced contract upon completion of negotiations of contractor quotes.

4. Offerors must complete pricing CLINS below and shall provide with the quote submission to be considered complete.

END OF SECTION A

B. SUPPLIES OR SERVICES AND PRICES/COST

BASE YEAR: June 1, 2024 – September 30, 2024

CLIN Description Quantity Unit Price Total Price

0001 Technical Project Manager (Key Position) 1

0002 Senior Network Engineer 1

0003 Senior Cloud Network Engineer & Architect 1

0004 Cloud Network Engineering & Administrations 1

0005 Network Engineering and Device Administration 1

0006 Voice Over IP Engineering and Administration (See details in position description section below) 1

Network Engineering and Firewall support (See details in position description section below) 1

OPTION YEAR 1: October 1, 2024 – September 30, 2025

0001 Technical Project Manager (Key Position) 1

0002 Senior Network Engineer 1

0003 Senior Cloud Network Engineer & Architect 1

0004 Cloud Network Engineering & Administrations 1

0005 Network Engineering and Device Administration 1

0006 Voice Over IP Engineering and Administration (See details in position description section below) 1

OPTION YEAR 2: October 1, 2025 – September 30, 2026

0001 Technical Project Manager (Key Position) 1

0002 Senior Network Engineer 1

0003 Senior Cloud Network Engineer & Architect 1

0004 Cloud Network Engineering & Administrations 1

0005 Network Engineering and Device Administration 1

0006 Voice Over IP Engineering and Administration (See details in position description section below) 1

OPTION YEAR 3: October 1, 2026 – September 30, 2027

0001 Technical Project Manager (Key Position) 1

0002 Senior Network Engineer 1

0003 Senior Cloud Network Engineer & Architect 1

0004 Cloud Network Engineering & Administrations 1

0005 Network Engineering and Device Administration 1

0006 Voice Over IP Engineering and Administration (See details in position description section below) 1

OPTION YEAR 4: October 1, 2027 – September 30, 2028

0001 Technical Project Manager (Key Position) 1

0002 Senior Network Engineer 1

0003 Senior Cloud Network Engineer & Architect 1

0004 Cloud Network Engineering & Administrations 1

0005 Network Engineering and Device Administration 1

0006 Voice Over IP Engineering and Administration (See details in position description section below) 1

END OF SECTION B

C. STATEMENT OF WORK: NETWORK AND TELECOMMUNICATION SUPPORT SERVICES

C.1 INTRODUCTION

The U.S. Government Publishing Office (GPO) is the Federal Government’s official, digital, secure resource for producing, procuring, cataloging, indexing, authenticating, disseminating, and preserving the official information products of the U.S. Government. The GPO is responsible for the production and distribution of information products and services for all three branches of the Federal Government, including U.S. passports for the Department of State as well as the official publications of Congress, the White House, and other Federal agencies in digital and print formats.

The mission of the Government Publishing Office can be traced to the requirement in Article I of the Constitution that Congress “keep a journal of its proceedings and from time to time publish the same." Congressional publications services are the primary function of GPO’s Plant Operations facility in Washington, DC. GPO’s Plant Operations facility also produces the daily Federal Register and Code of Federal Regulations, and the annual Budget of the U.S. Government, as well as U.S. passports and other secure Federal credentials.

The GPO requires highly qualified Information Technology (IT) engineering staff to perform day to day operations, administration, management, monitoring, long and short range projects related to GPO’s production Network and telecommunication support services, to suffice agency’s mission of Keeping America Informed as the Official, Digital, and Secure source for producing, protecting, preserving, and distributing the official publications and information products of the Federal Government to its internal and external stake holders.

C.2 BACKGROUND

The mission of GPO’s Office of Chief Information Officer (OCIO) is to provide a wide range of IT Operations, Application Development & Management, IT-Security, Policy planning and budget services to meet common goal of the agency, i.e., accomplishing its Mission and Vision and to suffice OCIO’s tactical and long-term IT strategic plan.

IT Operations Division under OCIO, provides the mission-critical IT foundation for computing services used by all Business Units (BUs) across the GPO to accomplish their annual goals and objectives. GPO’s Common IT Security Controls, Continuity of Operation (COOP) and General Support Systems (GSS) are also maintained, managed and administered by the IT operation division.

The IT support and engineering services detailed in this requirement statement will be performed directly under the IT Operation Division within Network and Telecommunications Branches. Technical work will be delegated to the incumbent by the division chief as well as branch chiefs of network and telecommunication branches.

C.3 OBJECTIVES

The Government Publishing Office (GPO) Office of the Chief Information Officer (OCIO) has a requirement for contractor IT technical staff to assist with overall scope of this SOW. The Contractor shall provide onsite resources per CLIN table in this SOW. Contractor staff will work together with government’s technical team to manage, maintain, upgrade, configure, integrate, install and troubleshoot components, systems and software, user issues and project needs of all aspects of Enterprise Network and Telecommunication support. Testing for system upgrades as well as enhancements, emerging projects, and implementation of new services.

Contractor will be required to perform all production and support activities using ‘IT Service Hub’ Information Technology Service Management (ITSM) system based on ITIL standards for submitting, routing and escalating user or Business office support tickets as well as project management documentation, developing knowledge base articles and written instructions for commonly used tasks which shall be followed and resolved by the help desk technicians.

Under the technical supervision of branch chiefs of Network and Telecommunications branch chiefs, the contractor shall manage and maintain all aspects of engineering, design, configuration and installation support to the GPO enterprise LAN and WAN environments at the two data centers. Test and verify system upgrades as well as enhancements, emerging projects, and implementation of new services specifically at agency’s two data center locations. Furthermore, for all delegated project related task, contractor must provide detailed project and task management and oversight of all tasks and requirements under this SOW.

C.4 CONTRACT OVERVIEW

The performance of the contractor will be measured and evaluated based on Service Level Agreements (SLAs) comprised of a set of service level metrics with clearly defined acceptable levels of quality (AQL), which will be reviewed quarterly and adjusted as required. SLA and AQL standards will be provided by the IT Ops management after the award has been made.

C.5 CONTRACT TRANSITION

The Contractor shall submit a Transition Plan to include description of tasks, resources, schedule, assumptions and dependencies. Upon Government approval of the Transition Plan, the Contractor will coordinate with IT Operation management and assume responsibilities as described in this SOW. This phase will incorporate activities – such as staff onboarding, knowledge transfer and asset inspection - that are deemed necessary by the GPO and the contractor to begin service delivery under the new contract. The overarching objective of this phase is a low risk and low impact to end-users and GPO’s production activities. A startup transition period not to exceed sixty (60) days shall be required after final contract award for the Contractor to conduct transition services.

C.6 CONTRACT PHASE OUT

The Contractor shall provide transition phase-out support and various activities to transition support to the Federal Government or a third-party service provider at contract end-of-life. All privileged account credentials securely documented and delivered to IT Ops management per their instructions.

C.7 IT OPERATIONS PROGRAM AND PROCESS MANAGEMENT

This on-boarding contractor shall assist IT Operations division to provide sufficient management to ensure activities on the contract are performed efficiently, accurately, on time, and in compliance with requirements of the contract. Specifically, the contractor shall designate key personnel to supervise staff assigned to this contract.

The Contractor shall ensure that appropriate performance reports are submitted to IT Ops management team. Their report must outline staffing progress, status, and any problems/issues encountered in the performance of the contract. The Contractor shall require all subcontractors to furnish performance report data where there are critical or significant tasks related to the prime contract.

C.8 GENERAL REQUIREMENTS

Contractor shall work a standard, eight‐hour business schedule (8 billable hours, does not include lunch and breaks) between 6:30 am and 6:30 pm, Monday through Friday. Holidays are defined as federal holidays see:

http://www.opm.gov/Operating_Status_Schedules/Fedhol/2012.asp and those observed by the GPO. Note that the GPO may be closed and/or CIO operations suspended on occasion due to inclement weather or other circumstances. The contractor shall provide a list of any company holidays observed by their employees that differ from the federal holiday schedule (e.g., Friday after Thanksgiving). Unless specifically requested by the Contracting Officer’s Representative (COR), contract personnel will not work on federal holidays. As part of current OCIO policy, the contractor will be allowed to Telework, however, if instructed by Branch or Division chief, required contract resource must report onsite during any weekday or to support weekend maintenance activities onsite or remotely.

Contractor shall comply with all general requirements outlined as follows;

• Contractor shall be in full compliance with and support enforcement of all Federal and GPO policies and security controls

• Contractor shall regularly monitor, review and document Information Technology Service Management (ITSM) requests, incident, and problem tickets, take appropriate action to rectify any deficiencies in ticket quality and support services including all requests that failed to meet target performance metrics.

• Contractor PM shall ensure knowledge base articles (KBAs) or work instructions (WIs) are established and maintained in the ITSM repository for common activities associated with interactions, incident response, and changes. All documents are updated/certified no less than quarterly.

• Present the finding to the division and branch chief to determine next steps and/or recommend improvement.

C.8.1 Current Technical Environment

1. Physical Network Layout

2. Logical Network Layout

3. Core Systems

4. Server and Network Applications

5. Enterprise Network Storage Appliances

6. IT-Security appliances

7. Cloud Services (MS Azure Network components)

8. Secured Name resolution service (Cloud Flare)

C.8.2 Physical Network Layout

The Agency’s network consists of Five sites: 1) GPO Head Quarters (HQ) comprising a cluster of four buildings, physically connected 2) Passport backup facility at Stennis air-force base 3) Warehouse in Laurel, MD 4) Warehouse in Pueblo, Colorado 5) Primary data center, Manassas, Va.

The core network and virtual infrastructure is housed at the two data centers Manassas and HQ. The two warehouse and passport backup facility sites connect either to HQ or primary data center using secure MPLS links while the two data centers connect over high-capacity redundant WAN links. Manage, maintain and administer Cloud flare service for agency’s secure DNS traffic.

The user and access network connects over Ethernet back-bone. All cables are terminated at a central location and are connected to Cisco enterprise back-bone switching fabric.

C.8.3 Logical Network Layout

GPO’s network is based on the campus model – consisting of core, distribution, and access layers. It is segmented into multiple networks or VLANs, including:

• The management network containing the core and distribution switches, as well as various network appliances pertaining to security monitoring, Wireless controllers, Access Points (APs), Multi-Function printing devices, Voice Over IP controllers and network management appliances

• The dedicated network, isolated to traverse storage traffic between the SAN and server farm comprising of HP synergy blade technology, HP rack mount servers and several appliances

• Additionally, there are several VPN connections to suffice secure data transfer needs of agency’s Business Units (BU) with external Federal agencies, Legislative branches and contractors.

C.8.3.1 Responsibilities of the Agency

• The agency’s network and telecommunications branch chiefs under IT operations division will be responsible for delegating and oversighting the overall day to day support activities, long and short-term projects, knowledge transfer for the agency’s computing and technical environment to the Vendor’s staff

• The IT operations division will provide on-site office space to be utilized by the vendor technician(s)

• The IT operation will provide network account with e-mail access, government furnished equipment (GFE) and remote capability to the vendor technician(s)

C.8.3.2 Responsibilities of the Vendor

Provide technical staffing that have a high enough level of expertise to suffice the requirements described in the CLIN tables of this SOW

C.8.4 TECHNICAL REQUIREMENTS

Work with Federal technical teams in Network and Telecommunication branches to provide support to all aspects of Network and Telecommunication platforms across the agency to include engineering, design, advance troubleshooting, systems requiring administrative access to the appliances that cannot be resolved by an End-User services team as well as resolve all day to day user-support service requests as delegated by the branch managers. Typical network administration and support activities required by the contractor are as described below;

• Team with IT Federal staff to maintain and or recommend High Availability (HA), Redundancy and Fail Over (FO) capabilities in all critical LAN/WAN platforms across the agency

• Assist with maintaining and supporting network and connectivity aspects of Mobile Data Center for Disaster Recovery and COOP functions to support congressional deliverables

• Utilizing monitoring tools such as SolarWinds and other management tools to perform 24 x 7 pro-active monitoring and alerting of all traffic, interfaces and health of all network components to maximized uptime of GPO’s compute environment

• Directly work with vendors to address any hardware malfunctions and faults and escort in-person, vendor-dispatch for replacement of parts or systems when necessary

• Contractor shall monitor, troubleshoot and work with vendors’ repair team for replace defective hardware parts as needed per industry best practices or according to manufacturer’s guidelines

• Contractor shall provision and configure out of band management modules, connectivity modules for pro-active monitoring

• Contractor shall remove/decommission physical devices as requested

• Contractor shall perform regular account administration for privileged and service accounts and provide monthly reports of inactive OR un-used accounts

• Contractor shall address operating system and software vulnerabilities detected on all network infrastructure and telecommunication gear physical or virtual during monthly vulnerability scans. Recommend patch upgrade plan and schedule during off-hours to ensure no impact on production systems

• Contractor shall deploy patches no less than quarterly to all infrastructure platforms utilizing automated procedures or native patch deployment tool

• Contractor shall provision and configure new hardware devices and configure in compliance with GPO security baselines as requested.

C.8.5 SCOPE

The GPO requires delivery of Information Technology (IT) professional support services to manage, maintain and enhance wide range of enterprise (IT) systems and components which constitutes its core computing environment. Primary support and services in scope for this SOW includes day to day operational & Maintenance (O & M) responsibilities within two branches 1) Network and Data Center (NDB) and 2) Telecommunication & Mobile Services (TMB) of IT Operations Division in the GPO OCIO. The contractor shall assist with network operations and installation, maintenance and support by performing all aspects of network infrastructure, life cycle management, such as but not limited to:

• Troubleshoot, manage, maintain and monitor LAN/WAN services o Copper and fiber connectivity issues (cable installation is out of scope) o MPLS, leased lines and channelized fax lines o Internet services o Remote access solution (Cisco gateways and AnyConnect clients) o Full range of VPN solutions (Gateway to Gateway VPN tunnels) o Manage and monitor hosted DNS services such as Cloud Flare o Full range of Network monitoring and management of day to day activities and traffic patterns using tools such as SolarWinds, GigaMon, Net Brain, AlgoSec etc.

o Responsible for administration of enterprise level switching appliances such as;

Cisco Nexus and catalyst platform o Firewall appliances ((Cisco ASA, Palo Alto), o F5 Big-IP LTM and GTM load balancer appliances o Wireless controllers, and Access Point (AP units) o Cisco ISE for access control authentication; authorization o IP address management o Assist with new projects covering network engineering design documentation, market research to recommend state of the art technologies o Assist in managing and troubleshooting network performance and traffic analysis to isolate root causes o Maintain IT operations security parameters o Evaluate current networks, identify deficiencies, document and recommend performance improvements or enhancements o Develop long and short-term technical project plans and schedule o Provide weekly status reports.

o Assist with life-cycle management and assessment of technologies related to General Support services and other platforms listed above in support of GPO’s production environment.

o Assist with GPO’s Cisco-based Unified Communication (UC) platform o Administer Cloud flare service for agency’s secure DNS traffic and DNS appliances

C.8.6 LABOR CATEGORY SPECIFICATIONS & QUALIFICATIONS REQUIREMENTS

The contractor shall provide necessary personnel with at least the minimum qualifications identified in this Section to perform each task assignment in accordance with executed task orders.

C.8.6 KEY PERSONNEL

Contractor must respond to the requirements described below regarding key personnel for the performance of this contract:

C.8.6.1 Project Manager

The Contractor must provide a resource for the PM position with broad range of technical expertise to carry out the multiple components of this requirement. Such expertise must have high technical and professional qualifications and experience.

C.8.6.2 Personnel Approvals

a) No replacement of key personnel must be made by the Contractor without prior written approval by GPO IT Operations management

b) GPO Contracting Officer may require dismissal from this contract of those individuals which he/she deems incompetent, careless, insubordinate, unsuitable or otherwise objectionable, or whose continued employment he/she deems contrary to the public interest or inconsistent with the best interest of national security.

c) The contractor shall identify the key personnel that will be responsible for managing the task orders issued under this SOW. The Project

Manager (PM) shall be the single point of contact for the management of this contract issued against this SOW. The PM is responsible to communicate all changes and staffing updates to the COR and the CO for compliance with the requirements of this contract.

d) The PM shall supervise and maintain a hierarchical, comprehensive management organization over staff working on task orders issued under this SOW. A staff management plan delineating the lines of authority shall be maintained and provided to the COR on a quarterly basis.

e) The PM must meet with the COR no less than once per month to discuss issues related to the administration of the contract and actual performance on respective task orders.

f) The PM is expected to be available onsite or remote (per branch chief guidelines) during normal business hours of 8:30 AM to 5:00 PM

Monday through Friday.

g) The Contractor PM must work on-site OR Telework (per CO guidelines) unless otherwise approved by the Government in order for his or her time to be billable to the GPO.

h) The Contractor shall not remove or divert key personnel unless written notice is provided at least 30 business days prior to the removal.

Furthermore, a replacement for the key person must be approved by the CO at least 10 business days prior to the removal to ensure business continuity and transfer of institutional knowledge.

i) The Contractor is required to utilize the key personnel, specialists, and individual consultants named in their proposal, as accepted by the

Government

C.8.6.3 QUALIFICATIONS REQUIREMENTS

C.8.6.3.1 PROJECT MANAGER (Key Position) (CLIN 0001) Contractor shall provide overall task/project management support. Project manager will be responsible for oversight, coordination and management of contractor staffing, performance, day to day work activities and projects as delegated by the branch chiefs of Network and Telecommunication branches. Contractor shall ensure proper staffing to maintain the support requirements of operating a highly reliable environment with Technologies, Systems and Services as described in the previous sections of this SOW.

C.8.6.3.2 Duties:

a) Serve as full time corporate representative who can make commitments on behalf of contracting company in all administrative and technical matters related to the performance of tasks

b) Supervise all contract personal assigned to the contract

c) Manage all subcontracting agreements, security enforcement and task reporting and coordination

d) Coordinate with the Contracting Officer Representative (COR) to ensure proper execution of the contract to meet agency needs and is the primary liaison between the contractor personal and the COR

e) Provide technical, financial and administrative updates to the COR, Division Chief and Branch Chief on regular basis

f) Ensure that the GPO security and confidentiality requirements and procedures are met for all contractor staff according to agency policy

g) Performs contract review and coordinate daily and long-range work activities with the designated Branch Chiefs and Federal

Technical Leads. Immediately report problems, issues service outages to the division or branch chiefs

h) Develop Plan, automate, test and implement deployment of enterprise network and telecommunication gear as part of agency’s

Hardware Lifecycle Refresh

i) Develop automated procedures leveraging existing software tools at GPO, to forecast, schedule, and deploy new systems in the GPO user or data center networks

C.8.6.3.3 Minimum Qualifications:

a) Working knowledge of security protocols and applications

b) Supporting complex IT operations such as:

1. Single point of contact while leading agency level project or troubleshooting major outage OR in solving problems for Business Units or specific user-group

2. Installing, configuring and testing network, multi-node enterprise firewalls, load balancers, data center switching back-bone access and server farm networks

3. Perform troubleshooting of complex issues in a complex enterprise network environment

4. Ensuring overall security guidelines are fully implemented on network platforms

5. Planning work, controlling projects and reporting progress via verbal briefing or regular reporting process

6. Prepare technical specifications or work with vendors to determine Bill of Materials for procuring new equipment

7. Guide and monitor the work of staff developing deliverables

8. Review team products to assure quality before delivery.

C.8.6.3.4 Experience

• Experience in putting processes in place to managing projects or automate tasks

• Eight years of experience managing infrastructure support contracts, of which one year must include the management of at least 10 or more employees. Experience must include assuming full responsibility of the recruitment, hiring, development and supervision of employees.

• Five years of hands-on experience managing one of more infrastructure support contracts. Must be able to manage the planning, budgeting, staffing and control of each task assignment.

• Experience with enterprise Cisco, F5, Palo Alto, Info Blox and Cloud flare technologies as a system architect. Expert in managing firewall rule-base for perimeter firewalls

• At least Five years’ experience in identifying, determining the feasibility of, and analyzing the costs and benefits of alternatives for new hardware, software and systems configuration approaches. This experience must include but not limited to:

o Identification of alternatives, feasibility analysis and risk management plan o Develop final recommendation for management o Experience in client relations, working closely with the clients and/or Business Unit front-line leadership to assist in specific IT issues or feasibility studies associated with IT solution C.8.7 Senior Network Engineer (CLIN 0002)

C.8.7.1 Duties

• Perform all aspects of the installation, maintenance and usage of a large-scale local and wide area network and Infrastructure as a

Service (IaaS) within cloud subscription.

• Manage network performance and maintains IT operational security

• Implement automated monitoring process to assess systems performance regularly, identify and troubleshoot difficult or unusual problems

• Analyze and perform feasibility reports to implement new systems OR upgrade legacy systems transparent to the production environment.

• Be able to assumes a technical leadership or supervisory role as required.

• Monitors resource allocation/utilization and performs capacity planning. Maintains expertise with, and advises management on, current technologies.

• Work with vendors and/or research, assess and acquire new or upgraded technologies. Act as a Subject Matter Specialist (SME) in supporting firewalls, routers and core switching fabrics

• Assume technical leadership role to implement projects such as cable plant installation or expansion, router or firewall configuration, installation, deployment, test, verify, document and recommend GPO management to release in production.

• Develop detail project plans and project schedule. Provide peer learning opportunities to other team members.

• Coach lower-level staff to elevate over-all institutional knowledge among the technical teams

• Produce high level system engineering design layout covering all aspects of implementations

• Excellent communication skills, to be able to provide technical briefings or present technical presentations to the upper management or stake holders.

• Develop weekly and monthly network and circuit utilization reports using approved network management tools.

C.8.7.2 Minimum Qualifications:

• Subject Matter Expert (SME) to manage, maintain and administer agency’s multi-node, geographically dispersed enterprise firewall environment.

• Thorough knowledge of computer network telecommunications, Windows Server operating systems, virtualization in a VMWare environment, and the TCP/IP protocol and TCP ports

• At least four years of progressive experience in supporting a large network comprising Internet based gateway-to-gateway VPNs, MPLS and point-to-point WAN products

• Thorough knowledge of network management protocols and related standard tools.

• Advanced knowledge of load balancing technologies and implementation with F5 BigIP appliances. Additionally, must have thorough knowledge of F5s SSLO, APM, SWG, LTM, GTM, AVR, AAM, and iRule LX

• Thorough knowledge of telecommunications, network, and computer security principles and protocols. Be able to determine related issues and established security practices

• Lead approved LAN/WAN technology deployments and network expansions and upgrades to ensure documented procedures and policies are followed

• Recommend equipment, parts and software required to be purchased by the Government in support of the System Improvement Plan

C.8.7.3 Experience

• At least six years of experience in a large organization responsible for administering, operating, maintaining, and securing a large-scale computer network, including two years in a technical leadership or supervisory role.

• At least five years of experience in supporting a complex back-end firewall infrastructure environment covering all aspects of firewall administration (including modular policy framework and flex configuration) such as hardware, Operating System, encryption tunnels, gateway-to-gateway VPNs, remote access VPNs, TCP port exemptions, day-to-operations of firewall rules-base, adding, modifying Backup and restore of management consoles, firewall OS and rules

C.8.8 Senior Cloud Network Engineer and Architect (CLIN 0003)

C.8.8.1 Duties:

• Act as a Subject Matter Expert (SME) to perform all aspects of cloud network architect, security controls in agency’s Azure subscriptions

• Play a key role in ensuring the reliability, security, and performance of network segments and all virtual components in agency’s Azure cloud environments

• Perform cross-functional teams to deploy and manage cloud services, automate tasks, and optimize agency’s cloud infrastructure for efficiency and scalability

• Collaborate with software architects and other stakeholders to design and implement Azure cloud infrastructure solutions that meet the organization's needs, including virtual networks, secure connections and interfaces between on-premise and cloud network

• Efficiently provision, configure, and manage Azure network resources and protocols to support the organization's applications and workloads

• Ensure proper resource allocation and utilization. Develop and maintain automation scripts and templates (e.g., ARM templates, PowerShell) to streamline the deployment and management of Azure network resources

• Implement and enforce security best practices, including identity and access management, network security, and encryption (where needed).

• Continuously optimize Azure infrastructure for cost-effectiveness and performance wherever possible.

• Work closely with cross-functional teams to gather requirements, provide technical guidance, and document Azure architecture and configurations.

• Troubleshoot and resolve Azure’s network related issues and incidents, providing timely and effective solutions.

• Design and implement scalable and highly available solutions using Azure services and features, such as Azure Load Balancers, Availability Sets, and Azure App Service Environments.

• Recommend system enhancements and expansion to IT Operation management.

• Support the full lifecycle of cloud computing management, from customer needs analysis and environment assessment, through design, test, migration, and operation.

• Meet the scope, deadline, budget and client expectations of the cloud project

C.8.8.2 Minimum Qualifications:

• At least six years of experience in a large organization responsible for administering, operating, maintaining, and securing a large-scale computer network, including two years in a technical leadership or supervisory role.

• At least five years of experience in supporting a complex secure cloud infrastructure as a Service (IaaS) and PaaS environment covering all aspects of cloud administration

• Subject Matter Expert (SME) to manage, maintain and administer virtual network components an resources. Be able to install, test and verify upgrades, perform hardware life cycle refresh

• Thorough knowledge of computer network telecommunications, Windows Server operating systems, virtualization in a VMWare environment, and the TCP/IP protocol and TCP ports in Secure Cloud Platform

• At least four years of progressive experience in supporting a large network comprising Internet based gateway-to-gateway VPNs, MPLS and point-to-point WAN products

• Thorough knowledge of telecommunications, network, and computer security principles and protocols. Be able to determine related issues and established security practices

• Be able to lead approved LAN/WAN technology deployments and network expansions and upgrades to ensure documented procedures and policies are followed

• Recommend equipment, parts and software required to be purchased by the Government in support of the System Improvement Plan

C.8.8.3 Experience

• At least five years of hands-on experience in business requirements gathering, architecting and designing an on-premise or Cloud base solution based on Network and security principles

• Hands-on experience with Azure Vault, IAM, Secret Manager, built DevOps pipelines, and write Code

• Understand the client’s automation goals to support the development of software solutions to meet or exceed those goals

• Thorough knowledge of network management protocols and related standard tools.

• Advanced knowledge of load balancing technologies and implementation with F5 BigIP appliances. Additionally, must have thorough knowledge of F5s SSLO, APM, SWG, LTM, GTM, AVR, AAM, and iRule LX

C.8.9 Network Engineering and Device Administration (CLIN 0004)

C.8.9.1 Duties

• Assist in all aspects of the installation, maintenance and usage of a large-scale local/wide area network on-premise as well as in Cloud subscription.

• Manages network performance and administer implementation and verification of security controls per agency’s IT-security team.

• Evaluates current networks, identifies deficiencies and recommends performance improvements.

• Assumes a technical leadership role or supervisory as required. Monitors system resource allocation/utilization and performs capacity planning.

• Maintains expertise with, and advises management on, current technologies.

• Technical writer with proven customer services skills.

• Assist with advanced data and VoIP design, upgrades, troubleshooting, and Level 3 operational support for the campus and wide area networks

• Provide senior‐level operational support (troubleshooting and resolving network problems and outages on-premise OR in agency’s cloud subscription)

• Document network diagrams, network device configuration templates, design validation reports, test plans

• Coordinate work activities on projects including assigning and scheduling tasks

• Follow GPO IT Governance methodology for managing projects. Provide system engineering technical support

• Ensure compliance with agency’s security controls and policies.

C.8.9.2 Minimum Qualifications

• Be able to take lead in implementing approved LAN/WAN technology deployments and network expansions and upgrades on-premise and in Agency’s cloud subscriptions

• Be able to create systems documentation and ensures the contractor staff follow documented procedures and policies

• Be able to assess network access controls including Cisco ACS and Cisco ISE and provide reports to Division and branch chiefs

• Be able to market research and recommend equipment, parts and software required to be purchased by the Government in support of the System Improvement Plan

• Be able to take lead in performing engineering design, monitor, maintain and manage the implementation of mid to large scale business continuity, High Availability, redundancy, diversity, and fail‐over for data services

• Architect Microsoft Azure IaaS and PaaS offerings in FedRamp Certified tenant

• Efficiently provision, configure, and manage Azure resources to support the organization's applications and workloads

• Implement and enforce security best practices, including identity and access management, network security, and encryption (where needed).

C.8.9.3 Experience

• At least five years of experience in a large organization responsible for deploying computer system applications in a client/server network environment.

• Thorough knowledge of computer network telecommunications, firewall, Windows Server operating systems, and TCP/IP (IPv4 and IPv6) protocol.

• Thorough knowledge of network management protocols and related standard tools.

• Thorough knowledge of network-based application software such as SCCM, DNS/DNSSec, DHCP, Cloudflare DDoS Cloud-Based Service, Internet based Domain Naming services and registration process

• Thorough knowledge of telecommunications, network, and computer security issues and established security practices.

• Experience evaluating current networks, identifying deficiencies, and recommending performance improvements

C.8.10 Voice Over IP Engineering and Administration Partial Support (CLIN 0006) (Part Time: up to 80 Hours per year as requested and approved by the Government officials)

GPO’s phone service is based on Cisco’s Unified Communication (US) platform.

C.8.10.1 Duties

• VoIP engineer will oversee and engage in the design, implementation, support, troubleshooting, maintenance, and upgrading of Voice over Internet Protocol systems.

• He/she will ensure VoIP connections function with the speed and clarity necessary for high quality telephony communications.

• Configure and maintain SIP gateways

• Responsible for design, staging, configuration, implementation, and support for VoIP installations and/or network communications systems as necessary.

• Troubleshoots major telecommunications issues.

• Provides design and software support for VoIP PBX, voice mail, voice networks, and video systems

• Participates on project teams for larger telecommunications project initiatives

C.8.10.2 Minimum Qualifications

• VoIP engineer must possess a deep understanding of the technology and be proficient with the current hardware and software tools necessary to fix issues that arise.

• Defines and updates departmental telecommunications documentation and databases.

• Provides customer liaison role for day-to-day support activities and/or critical telecommunications functions.

• Be able to administer the Call Manager environment such as phone feature administration, directory services, call routing, universal templates, auto registration, etc.

• Take lead in support and resolve complex issues with implementation and troubleshoot voice issues

• Be able to independently administer and maintain Cisco UCCX such as configuring, testing, and implementing IVR scripts and skill groups, etc.

C.8.10.3 Experience

• Experience in telecommunications disaster recovery, strategic planning, and execution

• Must be well-versed in SIP through multiple carriers

• Experience with Cisco CUBE router configurations

C.8.11 Network Engineering and Firewall support (CLIN 0007) (Part Time: up to 350 Hours per year as requested, and approved by the Government officials)

C.8.11.1 Duties This part time position will be dedicated to support public facing (DMZ/Internet) platform only. Candidate will be required to work with GovInfo team which supports Agency’s public web site and its infrastructure. Duties include,

• Manage network performance and administer implementation and verification of security controls per agency’s standards

• Evaluates current networks, identifies deficiencies and recommends performance improvements

• Provide operational support (troubleshooting and resolving network problems, performance or outages

• Support firewall rule-base requirements pertaining to DMZ and public web sites

• Submit help desk requests for new firewall rules and/or modify existing rule-base. (Actual rule-base development and management is not part of the duties)

• Attend stand-up meetings and pursue action items as delegated by the federal technical staff

C.8.11.2 Minimum Qualifications

• Be able to draft access requirements for firewall and network access in the support ticket for implementation by the central IT support team

• Be able to market research and recommend equipment, parts and software required to be purchased by the Government in support of the System Improvement Plan

• Be able to take lead in performing engineering design, monitor, maintain and manage the implementation of mid to large scale business continuity, High Availability, redundancy, diversity, and fail‐over for data services

• Implement and enforce security best practices, including identity and access management, network security, and encryption (where needed).

C.8.11.3 Experience

• At least five years of experience in a large organization responsible for deploying computer system applications in a client/server network environment.

• Thorough knowledge of computer network telecommunications, firewall, Windows Server operating systems, and TCP/IP (IPv4 and IPv6) protocol.

• Thorough knowledge of network management protocols and related standard tools.

• Thorough knowledge of firewall rule-base management, network, and computer security issues and established security practices.

C.9 DELIVERABLES

C.9.1 Key Deliverables Item No.

Deliverable

Description

Frequency

Delivery Format

Due By

1 Monthly Status Report

The contractor shall submit a monthly report detailing hours worked by contractor personnel in each labor category for all tasks.

The report shall include accomplishments during the month, problems and resolutions and any outstanding problems.

The monthly…