Attachment 1 - PWS PR 75-014C-21 2.23.22_final.docx

N00173-22-R-KN01

Attachment (1)

PERFORMANCE WORK STATEMENT

Information Technology and Engineering Technical Support and System Administration Introduction This Performance Work Statement (PWS) describes the professional Information Technology (IT) and Engineering Technical Support and System Administration services required by the Naval Research Laboratory (NRL) Marine Meteorology Division (MMD) to meet its mission objectives. NRL MMD is responsible for conducting a broadly based multidisciplinary program of scientific research and advanced technological development directed toward environment information superiority for the Navy/Marine Corps and DoD.

The specific work to be carried out may be further described in the PWS associated with each task order (TO) issued under this contract.

Background NRL MMD utilizes a variety of IT resources such as computers, storage, and network hardware and software systems to support and meet its diverse research goals. Although many research projects require and acquire dedicated project IT resources, the Division provides the enterprise level local area network, Internet access, email, printing, administrative and financial software applications, high performance computer (HPC) systems, storage, and backup and recovery infrastructure that meets the majority of user needs, in addition to hosting and servicing the dedicated project resources.

NRL MMD operates under the instructions and guidance from headquarters at NRL Washington DC who are responsible for Information Systems (IS) and Security policies, procedures and approvals, including user accounts, system accreditation, visit requests, DoD Common Access Card (CAC), base access, and public release authority.

The NRL MMD unclassified and classified networks are accredited by the Defense Security Service (DSS) Office of the Designated Approving Authority (ODAA) using the DoD Risk Management Framework (RMF) accreditation process for connection to the unclassified Defense Research and Engineering Network (DREN) and classified Secret Internet Protocol Router Network (SIPRNet).

Scope This order will provide highly skilled professional Information Technology Engineering, Technical Support and System Administration experts to support the unclassified and classified enterprise infrastructure and project-specific R&D resources at the Naval Research Laboratory’s Marine Meteorology Division, Monterey, CA.

Objectives This Performance Work Statement (PWS) describes IT engineering, technical support and system administration services defined as follows:

(a) Systems administration of computers, HPC clusters, storage, printing, network, and enterprise IT infrastructure (hereafter referred to collectively as “systems”) including systems software and hardware installation and configuration, maintenance, security scanning and patching, and system deactivation and teardown;

(b) Application software administration, including installation, configuration and patching, and Public Key Infrastructure (PKI) certificate management;

(c) IT security administration including responding to Information Assurance Vulnerability Alerts (IAVA) and Information Assurance Vulnerability Management (IAVM) notifications to mitigate software vulnerabilities, and implementing DoD and NRL IS security guidance and procedures;

(d) User account management and systems access;

(e) Systems engineering including design documentation, racking and cabling, power management, and basic and simple electronic instrument installation, maintenance and teardown;

(f) Systems documentation and accreditation submission;

(g) System performance monitoring and troubleshooting, including network connectivity to the Internet via the DREN, access to DoD HPC sites, and remote access to NRL MMD systems;

(h) Technical guidance on and technical support for NRLfielded systems and software;

(i) NRL-directed fielding of new versions of software and hardware;

(j) Providing telephone and email trouble-ticket technical support including maintaining a Help Desk and Wiki for onsite user training and IT policies, and documentation regarding NRL MMD systems utilization and performance;

(k) Backup and recovery operations, including power outage and disaster recovery procedures;

(l) Asset management for inventory and management functions; and

(m) Subject matter expertise, advising NRL MMD management and users in planning, procuring, and managing IT infrastructure and other IT resources to best meet the current and future needs and requirements of the Division.

(n) Technical guidance on and software engineering/development support of NRL MMD research projects, including management and optimization of continuous integration/continuous delivery (CI/CD) pipelines

Performance Requirements The contractor shall perform IT engineering, technical support and system administration services during NRL MMD’s normal working hours, generally 7:00 am to 5:00 pm Monday through Friday or during other agreedupon hours, except for Federal holidays. Flexible work hours may be used to ensure that some range of technical services are available during the time specified, taking into account the need for maximum support during NRL MMD core work hours and without exceeding eight hours per day or 40 hours per week for any one employee. Deviation from these support hours and any use of telework to meet local technical support requirements shall be proposed to and coordinated by the Contracting Officer’s Representative (COR). NRL MMD may require after hours or weekend efforts, for example but not limited to, support of an exercise or a scheduled outage, or to react to an emergency or security situation. After hours support shall be coordinated between the COR and the local site Contractor Authorized Representative (CAR)/Program Manager (PM). A final Secret clearance is required for after-hours access. The NRL COR shall provide the CAR/PM with advance notification and specific needs if known in advance. Contractor personnel shall also investigate, provide recommendations for remedial action, and pursue corrective action in case of emergency situations.

Scheduled leave of contractor personnel shall be communicated to the NRL COR by the CAR/PM to ensure that the necessary technical support activities are adequately covered. The NRL COR shall be notified promptly of any unscheduled contractor leave.

The contractor shall support on-site emergencies, including computer security compromise, power and air conditioning disruptions, and other acts. The contractor shall inform the NRL COR of all affected internal and external computer/network system outages/failures as soon as they are recognized. During normal work hours, the contractor will also notify all system users of the problems. The contractor shall indicate current systems status, time of outage/failure, overall impact of the outage/failure and estimated time to repair. The contractor shall notify the users when the systems are restored (all clear signal). Outage information shall also be supplied in the monthly status report. For normal system maintenance and upgrades, the contractor shall schedule regular system down time and give users at least 48 hrs specific notice, unless otherwise directed by NRL MMD. For repairs, maintenance, and upgrades requiring extended down time (in excess of 2 hours), the Contractor shall negotiate an appropriate after-hours time to perform the work with the NRL COR, if at all possible.

The contractor personnel shall remain cognizant of NRL and DoD IT Security directives and policies and follow them accordingly. All personnel will remain vigilant in their duties to ensure security of the NRL MMD systems and will immediately report any unusual or suspicious activity on NRL systems to the NRL COR and NRL MMD Information Assurance Officer (IAO).

The contractor shall provide trained and certified system and network administrator personnel. These certifications should be at the level of Red Hat Certified System Administrator (RHCSA), Microsoft Certified IT Professional (MCITP), Microsoft Certified Desktop Support Technician (MCDST), Cisco Certified Network Associate (CCNA), Cisco Certified Network Professional (CCNP), Cisco Certified Security Professional (CCSP), (ISC) Systems Security Certified Practitioner (SSCP), (ISC) Certified Information Systems Security Professional (CISSP), CompTIA LINUX+, CompTIA Security+ levels or equivalent (with the approval of the Government). Contractor personnel who work in NRL MMD’s classified spaces must have at least Comp TIA Security+ certification. The contractor shall ensure that contractor certifications and personnel skills are updated annually with supplementary training to remain current with the skill sets required by this Statement of Work. Any unusual or specialized training that might be required by NRL MMD for more unique and unanticipated hardware or software used within the Division will be paid for by NRL MMD as an additional direct cost upon agreement by the COR.

Contractor personnel assigned to Information Assurance (IA) technical support and performing IA functions on DoD systems must meet the certification requirements established in the DoD 8570.01-M for the category and level of functions in which they are performing.

The contractor shall provide cellular telephones for use by contractor personnel for the purpose of providing user support, coordinating activities, emergency access, and communicating with the Government.

Task Descriptions

1.1 System Administration and User Support

The Contractor shall manage and coordinate contractor staff members, monitor workload performance and interactions with users, provide deep technical knowledge and support for LINUX and Windows system administration issues, and provide hands-on systems administration.

The Contractor is responsible for supporting the full scope of work including, but not limited to: managing workflows including trouble-tickets, user accounts, software patching, projects, accreditation, IT security, configuration management, vendor interaction for support, future procurement advisement, monitoring software and hardware maintenance contract renewals, system performance monitoring, PKI server certificate management, printer deployment/maintenance, system disposal, and documentation. A detailed asset inventory shall be maintained.

The Contractor may be asked to propose, plan, recommend and take action to direct the analysis and solutions of problems, and implement system design and optimization changes needed for system efficiency and improvements related to system settings, file systems, and overall system performance. This may include building / compiling, installing, configuring and troubleshooting software, tape backup and restoration, scripting and process automation as well as proposing, planning, and implementing system improvements, deployments, and maintenance.

The Contractor will provide a positive user experience including training, documentation, troubleshooting, and help desk ticket resolution.

1.2 Network Administration

The Contractor shall be responsible for designing, implementing, and configuring the Ethernet networks, access points, routers, Virtual private networks VPN, Intrusion Detections Systems (IDS), Intrusion Prevention Systems (IPS) and Firewall systems at NRL MMD.

Network duties include but are not limited to: network design, implementation and monitoring, ACL creation and implementation, rule management and system optimization, cabling and labeling, racking equipment, pulling cable including copper and fiber terminations; and hands-on Router and Switch system administration, monitoring, and documentation.

1.3 Information Assurance

The contractor shall be responsible for supporting NRL MMD with system information assurance documentation and cyber security, including RMF accreditation documentation and responding to IAVA and IAVM notifications. The contractor shall provide recommendations, documentation and coordination with system administrators on IT system and software security configurations, issues, policies, and best practices, including Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIG), and coordinate between system administrators, NRL Code 1200 IA Staff, and users to meet government requirements.

This may include government support in the following areas, but is not limited to: assess systems security and perform security scans, alerting system administrators of vulnerabilities. Monitor and report on IAVA and IAVM progress by the specified deadline. Monitor user account authorizations. Coordinate with the NRL Code 1200 and systems administrators to resolve system security incidences, mitigate system security issues, and provide detailed reports to management.

1.4 Research & Development Support

The Contractor may be asked to support DevOps environments by overseeing the code release process and building automation tools for the development and maintenance of continuous integration/continuous delivery (CI/CD) pipelines using container orchestration, configuration management, issue tracking, and source code versioning control.

The contractor may be asked to support research scientists with scientific computing and software development by applying best practices with the development of Fortran and MPI applications, parallel file systems, and parallel schedulers as well as application performance enhancement through the use of debugging and profiling tools.

1.5 Program Management

The contractor shall strategize, implement, and maintain contract team initiatives that adhere to the NRL MMD contract SOW, monitor and evaluate contract team performance, and maintain communication with the NRL MMD COR. The contractor shall conduct semi-annual Program Management Reviews with the NRL MMD COR to review contract team performance, address NRL MMD concerns, and provide recommendations for technical and/or process improvements.

DELIVERABLES

7.1. Monthly Status Report. The contractor shall submit to the government a written status report no later than the tenth work day of the subsequent month. The report shall contain the following information as defined in CDRL A001.

7.2. Cost Breakdown Spreadsheet Report. The Contractor shall provide an itemized spreadsheet delineating how the billed funds were expended with each invoice submitted. All items billed for on the invoice shall be delineated on the spreadsheet including Labor (hours and fully burdened labor rate). The report shall contain the information as defined in CDRL A002.

7.3 Weekly Verbal Status Meeting Minutes. The contractor shall meet with the COR weekly, or more often if required, for a briefing update of the week’s tasks, progress, and issues.

7.4 Awardee On-Site Labor Report. The contractor shall provide an On-Site Labor Report. The report shall contain the information as defined in CDRL A004.

8 SPECIAL CONSIDERATIONS

8.1. SECURITY CLEARANCES

Contractor shall comply with security requirements stipulated in the task order DD254 for the specific work to be completed.

8.2. PLACE OF PERFORMANCE

The Primary Place of Performance shall be at the Naval Research Laboratory, Marine Meteorology Division, Monterey, CA.

A large portion of the scientific research at NRL MMD is accomplished remotely at DoD Supercomputing Resource Center (DSRC) sites. Technical support is required to facilitate remote access to and file transfers from DSRC to NRL MMD.

8.3. GOVERNMENT FURNISHED PROPERTY

8.3.1. Government Furnished Offices. Contractor personnel providing onsite support to NRL MMD provided onsite office space.

8.3.2. Government Furnished Space and Building Services. The government shall provide access to the space into which the IT systems will be installed and maintained.

8.3.3. Government Furnished Equipment (GFE). The government shall provide physical access and log-in access (approved computer accounts for cleared contractors) to the IT equipment for the systems and network. The government shall provide IT equipment, parts, and supplies for the use of the contractor personnel in performing their support tasks.

8.3.4. Government Furnished Software. The Government shall provide all required software for the computer systems and network.

8.4. TRAVEL

The Contractor may be required to travel in support of this PWS, and all such travel will be approved in advance by the COR. Authorized travel shall be in accordance with the DoD Joint Travel Regulations. Travel shall be reported and billed as described above.

8.5. NON GFE MATERIALS

The contractor shall provide all materials needed for the performance of all tasks in this PWS not specifically mentioned above, including cellular telephones for contractor personnel. The contractor is authorized to purchase other materials, in support of the order not to exceed $500 per occurrence without advance written permission from the COR. Such purchases shall be billed as ODCs and described in the Monthly Status Reports. The COR must be informed of all authorized purchases as soon as possible.

9 RESOURCES

9.1 Network:

The network infrastructure at NRL MMD consists of routers, switches, and fabric extenders that support Fast Ethernet to 40 Gigabit Ethernet protocols over both copper and fiber. Computational assets within the Division currently include five LINUX (RedHat) clusters (10 to 80 nodes each) with GPFS and LUSTRE parallel file systems ranging in size from 50TB to 700TB each in addition to several single server NVIDEA GPU Machine Learning LINUX servers, approximately 110 LINUX (RedHat) servers (providing web, backup, archive and restore, LDAP, DNS, FTP, NFS, NTP, and virtualization services), about 14 Windows servers (providing Microsoft Exchange, Active Directory, security updates, web monitoring, vulnerability scanning, backup, and remote VPN access), over 175 office PCs and laptops (Windows), and almost 50 LINUX (RedHat) office workstations. Data storage includes approximately 6 PB of data storage capacity on network accessible disk (NetApp) and storage area networks (SAN), and roughly 1 PB in robotic tape libraries (Spectra utilizing Comvault software). Roughly 150 user accounts have been authorized. Thus, a number of operating systems must be technically supported and administered including RedHat LINUX, Microsoft Windows, Cisco IOS, CatOS, NX-OS, Nexus OS, VMWare vCenter and ESXi, and NetApp C-DOT. A wide variety of licensed software applications are also currently technically supported including Microsoft Outlook, Exchange, Office, and Project; Commvault; Cisco AnyConnect; Cisco ISE, Cisco FirePower, Kerberos and SSH; X-Win32, Veronis, Firemon, Lumeta, Kace and Slunk; and, on the LINUX systems, Intel and PGI compilers; TotalView debugger; Apache and Tomcat web applications; MatLab and various graphical and mathematical software; ACAS/Nessus; and Websense Enterprise Manager. The clusters utilize the ROCKS cluster management system as well as Bright Cluster Manager including PBSPro for workload management. Xerox Phaser color printers are networked, as are several HP LaserJet and DesignJet printers. In addition, there are almost 50 private printers, mostly HP LaserJets, with a few miscellaneous others. Finally, Docker and Singularity Containerization is used for rapid application development and simplified customer deployment of NRL MMD products.