I_4 20240530 0932 5000174533 SF1014 RFI.pdf

CLOUDBEES JENKINS

Reference/Notice Number (if applicable):

Project Title / Short Description: CloudBees Jenkins

PSC code: 7A21 NAICS Code: 541519

Release Date: May 30, 2024 Response Date: June 06, 2024

Primary Point of Contact:

Contact Information for Primary Point of Contact: Vincent.J.Hill@irs.gov

Secondary Point of Contact (optional): None.

Description:

This is a Small Business Sources Sought notice (hereinafter Notice). This is NOT a solicitation for proposals, proposal abstracts, request for bids or quotations, nor a promise to issue a solicitation in the future. The purpose of this notice is to obtain information regarding the availability and capability of qualified small business sources (e.g. HUBZone small business; service-disabled veteran-owned small business (SDVOSB); 8(a) small business; veteran-owned small business; woman-owned small business (WOSB), including economically disadvantaged women-owned small business (EDWOSB) or small disadvantaged business concerns) for this potential requirement.

Additionally, responses to this Notice will assist the Government in determining whether or not a set-aside is possible.

To qualify as a small business the NAICS code for this Notice is 541519 with a size standard of $19.5 Million. An organization that is not considered a small business under the applicable NAICS code should not submit a response to this Notice.

Detail Statements:

The Internal Revenue Service (IRS), Enterprise Operations (EOps), Servers and Support Services Division (SSSD) has interest in and is seeking small business vendors capable of meeting the critical elements listed below.

IRS requires an automated DevSecOps solution for coordinating activities, conducting Cyber required security scanning for vulnerabilities via AppScan and NexusIQ, performing quality scanning for code issues via SonarQube to prevent bugs, performing required testing to ensure code performs as expected and will not create issues, and then deploying that code to production. The solution requires integration with the agency’s release orchestration tool (Ansible Automation Platform) and integration with the agency ticketing system for IT Service Management (ServiceNow) for full traceability and audit history, as well as logging and verifying approvals that are mandated as part of every deployment of code to production. These requirements are outlined in the Internal Revenue Manual (IRM), detailing the need for every application to meet specific Cyber requirements and obtain necessary approvals from Change Control Boards, in accordance with IRS policy. There is not a manual workaround in place for these activities, they must be performed through the Enterprise CICD Jenkins pipeline.

• Enterprise Jenkins Scalability to ensure ability of the enterprise pipeline to handle growth and meet increased demand.

IRS is currently using CBJ tool infrastructure. If a vendor proposes a solution other than CBJ, the vendor is responsible for the following:

The vendor must continue to keep the existing Cloudbees Jenkins (CBJ) infrastructure running during the transition period with no impact to existing IRS users who will continue making application code deployments throughout transition.

The vendor must be prepared for and complete any needed tool customization to align with existing CICD pipeline requirements as described above (security connectors, tool incorporation with existing pipeline users) and integration to various enterprise DevSecOps solutions in place such as Ansible, ServiceNow, Rational Team Concert Enterprise Workflow Management tool suite, GitHub Enterprise, Nexus.

The vendor must ensure transition occurs in coordination with stakeholder groups supporting existing CBJ Licenses, other ongoing licenses/tools in the existing Jenkins pipeline, and contractor support from CICD, Nexus, Ansible, ServiceNow vendor and AD development teams working their individual project transitions.

The Critical elements for this requirement that must be in place for IRS to successfully offer an Enterprise CICD Jenkins pipeline are:

• Continuous Integration Management Software for automated building and testing of code by project teams.

• Supports Open Source Jenkins (OSJ) automation servers to enable software deployment by project teams.

• Centralized Jenkins Deployment and Configuration for administrators to manage users and add-ins and overlook the state of systems, servers, and software from a central dashboard to manage the enterprise pipeline.

• Jenkins Connector Support for third party Tools Integration for diverse needs of IRS project teams

• Jenkins Cloud Hosting to support projects deploying to cloud environments.

• Advanced Security Connectors to ensure integration capabilities with required

Cyber tools: AppScan, NexusIQ, Qualys, Splunk

• Release Orchestration to support automated deployment through Ansible

Automation Platform

The vendor is responsible for the transition that includes moving from the CICD CBJ pipeline to the new vendor solution and the migration of 160+ core tax processing projects. During the transition period, the new vendor will carry any CBJ license costs until all users are established under the new tool. The transition must be completed within 180 days of contract execution.

The total budget for the period of performance is $8,071,875 to support 2,000 licenses.

Base Year amount:

September 25, 2024 – September 24, 2025 is $3,937,500.

Option Year 1:

September 25, 2025 – September 24, 2026 is $4,134,375.

Period of Performance Base period September 25, 2024 – September 24, 2025 Option Year September 25, 2025 – September 24, 2026

How to Submit a Response.

The point of contact for this Notice is: Vincent.J.Hill@irs.gov

Email responses to this Notice shall be sent to the attention of individual(s) listed in this Notice.

Due date and time for responses is June 06, 2024, at 12:00 PM ET.

Responses should be limited to 5 pages; and the file format and type should be the following:

• Adobe (Preferred)

• Microsoft Word 2007 or above

• Spreadsheets: Microsoft Excel 2007 or above

• Main Text: Arial, font size 12

• Table/Figure: Arial, no smaller than font size 9

• Table/Figure title: Arial, no smaller than font size 9

• Margins: Top, bottom, right, and left: No smaller than .75”

• Header and footer shall fall within the .75” margin and contain the date, page number, and company name.

• Page size: Letter, 8.5”x11”

Terms and Conditions regarding this Notice:

This Notice does not obligate the Government to award a contract or otherwise pay for the information provided in response. All costs associated with responding to this Notice are solely at the responding party's expense. The Government reserves the right to use information provided by respondents for any purpose deemed necessary and legally appropriate. Further, the Government may contact the vendor for additional information regarding the information submitted as part of this market research effort. Any organization responding to this notice should ensure that its response is complete and sufficiently detailed to allow the Government to determine brand name the organization’s qualifications to perform the work. Respondents are advised that the Government is under no obligation to acknowledge receipt of the information received or provide feedback to respondents with respect to any information submitted. After a review of the responses received, a pre-solicitation synopsis and solicitation may be published in the Government Point of Entry or other similar source (Eg. GSA e-Buy). However, responses to this notice will not be considered adequate responses to a solicitation.

Responses to this notice are not offers and cannot be accepted by the Government to form a binding contract or agreement. The Government will not be obligated to pursue any particular acquisition alternative as a result of this notice. Responses to the notice will not be returned. Not responding to this notice does not preclude participation in any future solicitation if one is issued.

No proprietary, classified, confidential, or sensitive information should be included in responses to this Notice, unless otherwise appropriately marked by the Respondent.

The Government reserves the right to use any non-proprietary technical information received in response to this Notice in any resultant solicitation(s).

Do Not Submit any Proposals/Offers in response to this Notice.