L-8 Sample Description of Work.docx

DESCRIPTION OF WORK

Global Tactical Edge & Hybrid Cloud Enclave (GTE-HCE)

2.0 Scope

The scope of this requirement is to establish a secure, resilient, and elastic hybrid cloud and tactical edge capability—spanning unclassified Impact Level 5 (IL5) enclaves and Classified Secret Impact Level 6 (IL6) enclaves—to support real-time tactical communications, metadata synchronization, and sensor-data analysis at OCONUS forward-deployed locations. Deployed tactical enclaves must maintain complete localized operational utility during prolonged degraded, intermittent, or limited (DDIL) network connectivity, enabling forward operators to execute database transactions and ingest sensor feeds locally, with automated, conflict-free database synchronization occurring once network paths are restored in accordance with JWCC UCM Core PWS 6.2.7 (Edge Devices & Services).

In completing the following, please use vendor-neutral language. Do not include any company names or vendor-unique brand, product, or application titles. In all responses, please provide functional descriptions of requirements using generic rather than vendor-specific language.

3.0 Background/Current Environment

Do you have a current environment?

☐ No, current environment does not exist ☑ Yes, fill out the details below Do you have unclassified system diagrams, data architecture diagrams, charts, or other information for your current environment to upload?

☐No ☑ Yes, include corresponding documents, diagrams, or other relevant information Number of instances: Two (2) unique instances Per unique instance:

Instance 1: GTE-HCE Unclassified Logistical Asset Enclave (IL5) Instance 2: GTE-HCE Classified Tactical Command Portal (Secret/IL6)

3.1 Instance 1: GTE-HCE Unclassified Logistical Asset Enclave (IL5) Number of instances with the following configurations: 1 Location of current environment: [X] Hybrid Data classification level: [X] Unclassified Impact level: [X] Impact level 5 (IL5) Type of cloud deployed in: [X] Commercial cloud Region(s):

CONUS: [X] West OCONUS: [X] USEUCOM (Rota, Spain) Current Usage: [X] Event based: Active theater operations and logistical exercise peaks Location(s) and approximate number of current users:

CONUS (West): 150 users OCONUS (USEUCOM): 800 users Approximate number of vCPUs/size of compute: 512 vCPUs Processor Speed (GHz): 2.8 GHz baseline Operating System & Licensing: Enterprise Linux (Transfer Existing) Memory (GB): 2,048 GB RAM Current Payment Arrangement: [X] Pay-as-you-go Storage Type and current size:

☑ Block Storage: 60 TB (SSD, 5,000 IOPS performance) ☑ Object Storage: 80 TB (Standard SSD Performance) Performance tier: [X] Compute Optimized (Supports high-write logistical transactional processing) Storage Performance Requirements: [X] SSD Approximate data/internet egress per month: 10 TB Approximate data/internet ingress per month: 15 TB Do you need your current environment to integrate with JWCC UCM Core offerings? (If moving to a new provider) ☑ Yes: The unclassified IL5 asset registry must feed secure cross-domain metadata enclaves to synchronize unclassified movements with classified Secret (IL6) theater command portals.

Additional information: Operational baseline requires high-availability clustering and automated failover across at least two geographically separated data centers.

3.2 Instance 2: GTE-HCE Classified Tactical Command Portal (Secret/IL6) Number of instances with the following configurations: 1 Location of current environment: [X] Hybrid Data classification level: [X] Secret Type of cloud deployed in: [X] Commercial cloud Region(s):

CONUS: [X] West OCONUS: [X] USEUCOM (Sigonella, Italy) Current Usage: [X] Evenly distributed Location(s) and approximate number of current users:

CONUS (West): 50 users OCONUS (USEUCOM): 350 users Approximate number of vCPUs/size of compute: 256 vCPUs Processor Speed (GHz): 2.8 GHz baseline Operating System & Licensing: Enterprise Linux (Transfer Existing) Memory (GB): 1,024 GB RAM Current Payment Arrangement: [X] Pay-as-you-go Storage Type and current size:

☑ Block Storage: 30 TB (SSD, 3,000 IOPS performance) ☑ Object Storage: 40 TB (Standard SSD Performance) Performance tier: [X] Memory Optimized (Processes massive dataset queries in-memory for command coordination) Storage Performance Requirements: [X] SSD Approximate data/internet egress per month: 4 TB Approximate data/internet ingress per month: 6 TB Do you need your current environment to integrate with JWCC UCM Core offerings? (If moving to a new provider) ☑ Yes: Integrates with the unclassified IL5 registry via a secure, certified cross-domain solution to ingest authorized asset logs.

Additional information: Enclave requires strict physical and logical boundary controls in compliance with Secret-level hosting guidelines.

4.0 Performance Requirements

4.1 Task 1 - Objective-Based Requirement

4.1.1 Do you want to optimize or modernize current functions on the JWCC UCM Core environment?

☐ No ☑ Yes Outcomes and Objectives: In accordance with PWS 6.2 Task 2 (Operations)The Contractor shall replicate and rehost the existing containerized logistical tracking application and database schema from the legacy hybrid enclaves into secure, compliant JWCC UCM Core IL5 and IL6 cloud hosting enclaves. Downtime during the transition cutover window must not exceed four (4) consecutive hours and must be scheduled outside active joint theater exercise windows.

Classification Level: [X] IL5 (Accommodates DoD CUI & National Security Systems) and [X] Secret - IL6 (Accommodates DoD Classified Information up to SECRET) Do you anticipate additional growth? [X] Yes (20% capacity growth expected within the next 12 months) Are you looking for a phased approach? [X] No

4.1.2 Do you want to optimize or modernize current functions on the JWCC UCM Core environment ?

☑ No ☐ Yes

4.1.3 Do you need an architectural design solution to address a known problem/use-case?

☐ No ☑ Yes Outcomes and Objectives: In alignment with PWS 6.2.7 (Edge Devices & Services) and PWS 6.2.2 (Availability & Resiliency),,the Contractor shall provide a resilientdata synchronization architecture that enables localized database caching and transaction queuing on Edge Devices deployed at USEUCOM and USPACOM forward bases. The architecture must guarantee that forward-deployed operators can execute local database writes and query assets for up to 96 consecutive hours of disconnected DDIL operation. Upon network reconnection, the system must execute automated, conflict-free database synchronization back to the central regional cloud enclaves.

Identify applicable application(s): LogiSync-Tactical Database Engine Classification Level: [X] IL5 and [X] Secret - IL6 External Factors: Extreme environmental conditions at forward bases (such as high humidity, dust, and localized power grid fluctuations) require physical ruggedization and backup power integration.

4.1.4 Do you want to include a cloud support package?

☐ No ☑ Yes, complete DoW 4.3

4.2 Task 2 - XaaS (Anything as a Service)

Approximate data/internet egress per month: 14 TB (Aggregate) Approximate data/internet ingress per month: 21 TB (Aggregate)

4.2.1 Unclassified - IL5

Location and number of Users: OCONUS (USPACOM – Camp Humphreys, South Korea and Camp Zama, Japan; USEUCOM - Rota, Spain enclaves: 800 total users) Anticipated future needs: Compute and Storage growth of 15% during Option Period 1.

4.2.1.1 Subtask 1 Compute (Unclassified - IL5)

Number of instances: 4 (2 Dev/Test, 2 Production) Operating Environment: [X] Containers (Kubernetes-managed enclaves) OS and licensing: Red Hat Enterprise Linux (Transfer Existing) Compute Specs: 128 vCPUs, 512 GB Memory, Compute Optimized tier Storage Type & Size: Block Storage: 10 TB (SSD, 5,000 IOPS) Statement of Objectives: Natively align with PWS 6.2.1 (Cloud Service Offerings)..Host the core transactional tracking API services and containerized web microservices with 99.9% high-availability clustering across geographically separate enclaves.

4.2.1.2 Subtask 2 Developer Tools and Services (Unclassified - IL5) Required Tools: [X] DevSecOps (Secure container pipeline enclaves) and [X] Cloud Audit/Monitoring Tools (programmatic central logging).

Statement of Objectives: Align with PWS 6.2.4 (Self-Service) and PWS 6.3.2 (Auditing, Logging, and Monitoring).Enable continuous deployment of security patches and compliance monitoring across the containerized cluster.

4.2.1.3 Subtask 3 Applications (Unclassified - IL5)

Required Tools: [X] Platform as a Service (PaaS) Statement of Objectives: Host the container orchestrator control plane and programmatic registry services.

4.2.1.4 Subtask 4 Advanced Technology (Unclassified - IL5)

Required Tools: [X] Data Management and Analytics (natively integrated indexing and query tools).

Statement of Objectives: Align with PWS 6.2.8 (Artificial Intelligence and Advanced Data Analytics). Accelerate massive query executions on shipping and logistics metadata across joint theaters.

4.2.1.5 Subtask 5 Networking (Unclassified - IL5)

Required Tools: [X] Dedicated/Private Connections Quantity & Bandwidth: Two (2) dedicated connections at 1 Gbps bandwidth.

Statement of Objectives: In accordance with PWS 6.2.3 (Globally Accessible)..Establish secure private peering between forward operating bases and the central regional cloud hosting nodes.

4.2.1.6 Subtask 6 Security (Unclassified - IL5)

Required Tools: [X] Secure Cloud Computing Architecture (SCCA) compliant enclaves, [X] Virtual Datacenter Security Stack (VDSS).

Statement of Objectives: Align with PWS 6.3 Task 3 (Fortified Security)..Maintain absolute DoDIN border security compliance for all incoming and outgoing edge data streams.

4.2.1.7 Subtask 7 Database (Unclassified - IL5)

Database Cloud Model: [X] PaaS relational transactional database.

DB Licensing: PostgreSQL-compatible (New license) Compute Specs: 32 vCPUs, 128 GB Memory, High-Performance SSD Storage (10,000 IOPS).

Statement of Objectives: Handle high-write asset transaction volumes with real-time replication to secondary read enclaves.

4.2.1.8 Subtask 8 Storage (Unclassified - IL5)

Required Storage: [X] Object Storage (50 TB SSD Performance) and [X] Archive Storage (100 TB for long-term log retention).

Statement of Objectives: Hold unclassified logistical records and programmatic database backups.

4.2.1.9 Subtask 9 Edge Computing and Tactical Edge (TE) (Unclassified - IL5) Number of instances with similar configurations: 3 units Form Factor: [X] Modular Data Center and [X] Man-portable Edge Devices.

Conditional Flag: [X] Military Hardening (MIL-STD-810H) and [X] Denied, Degraded, Intermittent and Limited (DDIL).

Delivery: [X] Delivery and receipt within CONUS; Government transport/deployment to the identified OCONUS operational locations.

Statement of Objectives: Fully align with PWS 6.2.7 (Edge Devices & Services). Provide the specified first- or third-party Edge Devices and associated first-party Edge Services for IL5 operation in DDIL environments at the identified OCONUS operational locations.

4.2.1.10 Subtask 10 Internet of Things (IoT) (Unclassified - IL5) Required Tools: [X] IoT Edge Statement of Objectives: Ingest local RFID and GPS asset-tracking sensor feeds directly into the edge database cache.

4.2.1.11 Subtask 11 Additional Infrastructure (Unclassified - IL5) Statement of Objectives: N/A

4.2.2 Secret - Impact Level 6 (IL6)

Location and Users: OCONUS (USEUCOM – Sigonella, Italy enclaves: 350 users) Anticipated future needs: Compute and Storage growth of 15% during Option Period 1.

4.2.2.1 Subtask 1 Compute (Secret - IL6)

Number of instances: 2 (1 Dev/Test, 1 Production) Operating Environment: [X] Virtual machines OS and licensing: Red Hat Enterprise Linux (Transfer Existing) Compute Specs: 64 vCPUs, 256 GB Memory, Compute Optimized tier Storage Type & Size: Block Storage: 5 TB (SSD, 3,000 IOPS) Statement of Objectives: Host classified command portal APIs and transaction services with 99.9% high-availability clustering in Secret-level enclaves.

4.2.2.2 Database (Secret - IL6)

Database Cloud Model: [X] PaaS relational database.

DB Licensing: PostgreSQL-compatible (New license) Compute Specs: 16 vCPUs, 64 GB Memory, High-Performance SSD Storage (5,000 IOPS).

Statement of Objectives: Manage Secret-level theater database schemas and coordinate tracking data synchronization.

4.2.2.3 Edge Computing and Tactical Edge (TE) (Secret - IL6)

Number of instances with similar configurations: 2 units Form Factor: [X] Man-portable Edge Devices.

Conditional Flag: [X] Military Hardening (MIL-STD-810H) and [X] Denied, Degraded, Intermittent and Limited (DDIL).

Delivery: [X] Delivery and receipt within CONUS; Government transport/deployment to the identified OCONUS operational locations.

Statement of Objectives: Fully aligned with PWS Subtask 6.2.7. Provide first- or third-party Edge Devices and associated first-party Edge Services for IL6 operation in DDIL environments at the identified OCONUS operational locations.

4.2.3 Cross-Domain Solutions (CDS)

Required CDS: Yes Data Transfer Rate: Data transfer via CDS up to Secret: 500 GB/month.

Projected File Type: Structured XML-based asset synchronization schema.

Statement of Objectives: Aligned with PWS 6.2.6.3 (Cross-Domain Solution). Safely pass approved logistical database updates from the unclassified IL5 enclave to the classified Secret (IL6) theater portal using a Contractor-provided or authorized CDS. The CDS shall comply with the”Cross-Domain Solution Design and Implementation Requirements: 2023 Raise the Bar Baseline Release,” version 5.1 or later if superseded, and applicable DoD ISRMC authorization requirements.

4.3 Task 3 - Cloud Support Packages

4.3.1 Unclassified - IL5

Portability Plan Required: Yes

4.3.1.1 Subtask 1 Advisory and Assistance (Unclassified - IL5) Required: Yes On-Site Access Required: Yes Statement of Objectives: Provide initial configuration, container clustering setup, and specialized database synchronization tuning. (Total estimated effort: 1,200 Support Service Units).

4.3.1.2 Subtask 2 Help Desk Services (Unclassified - IL5)

Required: Yes On-Site Access Required: No Statement of Objectives: Deliver 24/7/365 Tier-3 technical support for the cloud enclaves and localized edge software, with a strict 1-hour response time SLA for critical system-down events.

4.3.1.3 Subtask 3 Training (Unclassified - IL5)

Required: Yes Format: [X] On-site instructor-led - OCONUS (DoD Facility ONLY) Location: Camp Humphreys, South Korea Trainees Count: 25 military and civilian operators.

Statement of Objectives: Deliver localized, hands-on administrative training covering tactical edge setup, database resynchronization, and basic cryptographic media sanitization procedures.

4.3.1.4 Subtask 4 Documentation Support (Unclassified - IL5)

Required: Yes On-Site Access Required: No Statement of Objectives: Author detailed, step-by-step edge hardware setup guides, system configuration charts, and emergency sanitization playbooks.

4.3.1.5 Subtask 5 General Cloud Support (Unclassified - IL5)

Required: Yes On-Site Access Required: No Statement of Objectives: Conduct monthly security vulnerability scans and configuration audit support.

4.3.2 Secret - IL6

Portability Plan Required: Yes

4.3.2.1 Subtask 1 Advisory and Assistance (Secret - IL6)

Required: Yes On-Site Access Required: Yes Statement of Objectives: Provide specialized configuration, secure database replication schema optimization, and security accreditation support for the classified Secret portal. (Total estimated effort: 600 Support Service Units).

4.3.2.2 Subtask 2 Help Desk Services (Secret - IL6)

Required: Yes On-Site Access Required: No Statement of Objectives: Deliver 24/7/365 Tier-3 technical support for the classified cloud enclaves and localized Secret edge database nodes.

4.3.2.3 Subtask 3 Training (Secret - IL6)

Required: Yes Format: [X] On-site instructor-led - OCONUS (DoD Facility ONLY) Location: Sigonella, Italy Trainees Count: 25 military and civilian operators.

Statement of Objectives: Deliver localized, hands-on administrative training covering tactical edge setup, database resynchronization, and basic cryptographic media sanitization procedures.

4.3.2.4 Subtask 4 Documentation Support (Secret - IL6)

Required: Yes On-Site Access Required: No Statement of Objectives: Author detailed, step-by-step edge hardware setup guides, system configuration charts, and emergency sanitization playbooks.

4.3.2.5 Subtask 5 General Cloud Support (Secret - IL6)

Required: Yes On-Site Access Required: No Statement of Objectives: Conduct monthly security vulnerability scans and configuration audit support.

5.0 Contract Data Requirements

The Contractor shall be responsible for delivering all standard and recurring data deliverables as specified in the JWCC UCM Core contract. All applicable Contract Data Requirements Lists (CDRLs) that are relevant to the tasks and scope defined in this Description of Work will be required after Task Order award.

Offerors shall include the effort required to produce these standard data deliverables in their proposed pricing for the relevant CLINs.

6.0 Period of Performance

The period of performance consists of one (1) 12-month base period and two (2) 12-month option periods (OP1 and OP2).

7.0 Security Requirements