Summary: Statement of Work (SOW) - DHS Cumulus Program Enterprise Cloud Service Provider Requirements

This Statement of Work defines requirements for the Department of Homeland Security's Cumulus Program, an indefinite-delivery, indefinite-quantity (IDIQ) multiple-award contract vehicle for enterprise cloud service provider (CSP) solutions. The contract will support DHS's over 600 cloud-hosted systems, including mission-critical, safety-critical, and life-critical applications, through a five-year ordering period consisting of one 12-month base year and four optional 12-month renewal periods. Task orders will focus on modernizing and innovating DHS systems through cloud-based solutions emphasizing microservices, API-driven frameworks, mobile extensibility, containerization, and standardized portable environments.

The SOW requires CSPs to provide comprehensive Anything-as-a-Service (XaaS) offerings including Infrastructure-as-a-Service (IaaS), Platform-as-a-Service (PaaS), Software-as-a-Service (SaaS), serverless computing, and integration platforms, along with enterprise support, professional services, and training. CSPs must maintain large market presence (minimum $250 million annual IaaS revenue, 100,000 virtual machines in production), offer both commercial and FedRAMP-authorized government cloud services, demonstrate scalability to 4,000 virtual instances in under 10 minutes with hundreds of petabytes of storage capability, provide 99.9% service availability with redundancy across geographically dispersed data centers, and enable rapid resource provisioning within five minutes. The contract requires firm fixed-price task orders with consumption-based and subscription-based pricing methodologies. Award decisions will be based on mission requirements, technical architecture, and cost-effectiveness analyses. Deliverables include post-award meetings, account/enrollment transfer plans, monthly usage reports, product lists, and consumption threshold notifications at 75%, 90%, and 99% of funding utilization.