SOW - FY26 Biomedical Engineering Nutanix_UPDATED.docx

Statement of Work VISN 5 Nutanix: Hyper Converged Infrastructure Hosting System Licensing BPA

A. GENERAL

Scope:

The purpose for this request is to procure and implement replacement hardware for the VISN 5 Nutanix: Hyper Converged Infrastructure Hosting Platform. Existing nodes are approaching end of life, some as early as March 2027. Replacement of this hardware is essential to maintain system functionality and ensure a continued standardized hosting for medical applications/information systems for all medical specialties including anesthesia, cardiology, pharmacy, emergency care, lab, oncology, radiology, PACS, and telemedicine solutions across the medical centers throughout VISN 05. Replacing all nodes during this procurement will standardize the replacement cycle moving forward and ensure interoperability between all nodes and hosts in the VISN. These replacement nodes must be brand name or equal to function with existing infrastructure and system operation. Award will be made to the bid considered technically feasible with the lowest cost. Solicitation will be posted through the contracting vehicle NASA SEWP.

Locations:

Baltimore VAMC, 10 North Greene Street, Baltimore, MD 21201 Beckley VAMC, 200 Veterans Ave, Beckley, WV 25801 Louis A. Johnson VAMC, 1 Medical Center Dr., Clarksburg, WV 26301 Martinsburg VAMC, 510 Butler Ave, Martinsburg WV 25405 Hershel "Woody" Williams VAMC, 1540 Spring Valley Drive, Huntington WV 25704 Washington DC VAMC, 50 Irving Street, NW, Washington DC 20422

B. WORK HOURS

a. Hours of Operation: Normal business hours are Monday through Friday, 8:00 a.m. to 4:00 p.m., excluding holidays. Should the Contractor require work afterhours, the Contractor shall arrange in advance with the Contracting Officer’s Representative (COR).

b. National Holidays: The holidays observed by the Federal Government are: New Year’s Day, Martin Luther King Day, President’s Day, Memorial Day, Juneteenth, Independence Day, Labor Day, Columbus Day, Veteran’s Day, Thanksgiving Day, and Christmas Day and any other day specifically declared by the President of the United States to be a national holiday. Contractor may work on holidays with prior communication and coordination.

C. Technical Requirements

a. Node Specifications

i. Nodes included in bids must be brand-name or equal in performance to Nutanix NX-8150 G10 for backup infrastructure and Nutanix NX-3460 G10 for server infrastructure.

ii. Hardware must be approved for use with Nutanix Acropolis Hypervisor v7.x. Documentation of approval for use of OEM partners with Nutanix Acropolis Hypervisor must be included with the bid.

iii. Backup Infrastructure included in bid must support hyperconverged architecture and be sufficient to host the core count, memory and storage loads for each of the clusters designated in Table 1. The solution must fit within the vertical rack space designated in the table.

Table 1: Backup Infrastructure Node Requirements

iv. Server Infrastructure included in bid must support hyperconverged architecture and be sufficient to host the core count, memory and storage loads for each of the clusters designated in Table 2. The solution must fit within the vertical rack space designated in the table.

Table 2: Server Infrastructure Node Requirements

v. Solution must include a sufficient processing core count to ensure a minimum processing capacity meeting the specifications above with a 3 GHz processor. Other processor speeds are allowed to be proposed but the minimum processor speed must be 3 GHz.

vi. Solution must include hardware support including hard drive and component failure replacement for at least 7 years post-installation.

b. Components

i. All necessary data and connecting cables to integrate the node into the Nutanix platform must be provided.

ii. All necessary cabling to power the node must be provided. Networking cables should connect to Juniper QFX5120-48Y Switches with redundant connections per node to 2 different switches. The network cable length shall be minimum 10 meters.

iii. Any additional network interface cards (minimum of 25 GB/s ), hard drives, or other components required to operate the nodes at the advertised specifications must be included.

c. Implementation

i. Contractor must provide training on node installation to VISN 5 Biomedical Engineering staff.

ii. Contractor must ensure full node functionality upon install and provide written documentation indicating system is functioning as expected.

iii. Contractor must perform full platform integration of each node including all networking, interfacing, and backup restoration.

d. Licensing

i. Per node Nutanix hypervisor licensing will be purchased on an annual basis outside of this contract. This contract should be for hardware and hardware support only.

e. Training

i. Contractor shall provide additional professional training opportunities in accordance with their SEWP/GSA/FSS contract and the part numbers above for designated staff technicians for the maintenance and troubleshooting to qualify them to completely maintain the automated supply distribution system. The technicians will be trained to diagnose failures, perform repairs, verify proper operation, and perform quality assurance checks required for PM standards.

ii. All training shall be coordinated with the designated Contracting Officer’s Representative for each delivery order.

iii. Training materials provided (instructional texts, audio-visual materials) must be available to the VISN 5 Biomedical Engineering team as needed throughout the life of the system.

f. Access Authority

i. Contractor provided hardware and software shall limit the system access to those individuals requiring access to perform their job responsibilities. The contractor hardware and software shall permit only authorized users to have access to the system and its resources. For each object requiring control, the contractor will provide an access list, which specifies the minimum user/groups that need access and their specific rights (e.g., read, write, create, delete). Contractor shall restrict the creating/modifying/deleting of access controls to authorized administrators only and owners of specific objects. Contractor shall check the user access rights to an object, at a minimum, when access to that resource is initiated.

g. Audit and Variance Detection

i. Contractor provided hardware and software shall provide the capability for systems audit variance detection. Contractor shall maintain, and protect a security audit trail of user and administrator actions so that security relevant events can be traced to a specific user for accountability. Logs should be maintained at a minimum of six (6) months. These audit trails shall provide both MAC (add, moves and changes) and maintenance activities. The systems shall provide a historical audit of all users system configuration activities.

h. Documentation

i. Contractor provided documentation will include user instructions for the system. Software will include copyright information and licenses. Contractor provided hardware will include all necessary user instructions and manuals.

i. ID & Authentication

i. Contractor provided hardware and software will include the capability to assign a unique user identification code for accountability and audit ability.

j. Personnel Screening

i. The contractor staff and subcontractors must complete background screening before access is permitted to VA systems.

k. Production

i. Contractor provided hardware and software shall provide the capability to handle input/output storage and disposal of sensitive materials (e.g., paper, diskettes, etc.) which are generated by that system.

l. Remote Access

i. Remote access will only be permitted on a per-demand VA supervised dial- in/out basis.

m. Security

i. The contractor provided software and hardware shall provide restricted management access capabilities for displaying, modifying, or deleting user account information. It shall provide a means to uniquely identify: 1) security attributes for a user, 2) all the users associated with an attribute, and 3) definition and maintenance of groups. It shall be capable of defining and maintaining security controls for subjects (e.g., users, groups) and objects (e.g., directories, files, resources) using defined access rights (e.g., read, write, execute).

n. Systems Entry

i. Contractor provided software shall limit the number of login sessions the single user can use to log into the system from different workstations. The system shall only grant entry to a user if the systems administrator has created a user access profile. Shall upon entry into the system, the system shall display date, and time of users last successful entry, number of unsuccessful entry attempts. Contractor shall terminate an interactive session after an administrator specified interval of user inactivity. The default shall be fifteen minutes (depends upon system’s rules and current VHA policy).