FINAL_JEFO_DE-DT0005199.pdf

DE-DT0005199 Page 1

JUSTIFICATION FOR AN EXCEPTION TO FAIR OPPORTUNITY

NATIONAL NUCLEAR SECURITY ADMINISTRATION

Office of Information Management and Chief Information Officer

DE-DT0005199

September 15, 2015

I. AGENCY IDENTITY AND CONTRACTING OFFICE

The Office of Information Management and Chief Information Officer (NA-IM) of the U.S.

Department of Energy (DOE), National Nuclear Security Administration (NNSA) plans to contract for additional Infrastructure on Demand (IoD) cloud support services to support Infrastructure as a Service (IaaS) Environment Reconfiguration and additional Operations and Maintenance requirements under existing Task Order DE-DT0005199 with ActioNet, Inc. by using an exception to fair opportunity. The contracting activity is the NNSA Non-M&O Contracting Operations Division, Services Acquisition Branch, Headquarters Program Section

(NA-APM-124.1).

II. NATURE AND/OR DESCRIPTION OF THE ACTION BEING APPROVED

The NNSA awarded Task Order DE-DT0005199 to ActioNet, Inc. on February 1, 2013, pursuant to a fair opportunity competition under the General Service Administration’s (GSA) Alliant Small Business (ASB) Government-Wide Acquisition Contract (GWAC), which was open to all awardees under the ASB GWAC. Task Order DE-DT0005199 has a five-year base period and a current ceiling price of $6,292,725.15.

This action will result in a modification to ActioNet’s Task Order DE-DT0005199 to: 1) increase the ceiling price of Contract Line Item Number (CLIN) 00001 2NV Infrastructure as a Service (IAAS), Cloud model (YOURcloud) to accommodate additional Operations and Maintenance requirements, which is an expansion of work from the original scope of work; 2) add an additional CLIN, CLIN 00005, to accommodate the addition of Requirement 3.4 IAAS Environment Reconfiguration, which is the expansion of work found in the original scope of work; and 3) incorporate a revised Statement of Work (SOW) for the inclusion of additional services within the original scope that are now required. CLIN 00001 is a firm fixed price (FFP) CLIN, and CLIN 00005 will be issued as FFP.

III. DESCRIPTION OF SUPPLIES AND/OR SERVICES

The National Nuclear Security Administration (NNSA) is currently implementing an aggressive Information Technology (IT) transformation strategy that seeks to lower costs, improve security, and enable collaboration solutions that support the OneNNSA and DOE Information Technology Modernization strategy. Enhancing communication capabilities is foundational to the OneNNSA strategy, a core component of the NNSA Network Vision (2NV), and will create a network architecture that allows for the streamlined deployment of future enterprise capabilities (automated security plans, one click procurement, simple lifecycle management, etc.).

To provide this enhanced communications capability, NNSA awarded DE-DT0005199 to ActionNet to provide a fully managed, no Capital Expenditure (CAPEX) Infrastructure as a Service (IaaS), Cloud model. Current work performed by ActioNet includes providing data center facilities, base network, compute, storage capabilities, and provide capacity based on defined increments of compute, storage, and bandwidth, resulting in a fully managed, no Capital Expenditure (CAPEX) Infrastructure as a Service (IaaS), Cloud model.

DE-DT0005199 Page 2

The estimated value of this Task Order modification is $3,341,124.37. The price increases by CLIN are as follows:

CLIN Name Current

Amount Proposed Increase

New Total Price

CLIN 00001 2NV IaaS YourCloud $5,598,795.28 $2,785,212.78 $8,384,008.06

CLIN 00002 Labor $587,369.87 $0.00 $587,369.87 CLIN 00003 Travel $15,100.00 $0.00 $15,100.00 CLIN 00004 ODCs $91,460.00 $0.00 $91,460.00 CLIN 00005 IaaS Environment Reconfiguration $0.00 $555,911.59 $555,911.59

Total Price $6,292,725.15 $3,341,124.37 $9,633,849.52

Objective/Requirements 3.2 Operations and Maintenance Requirements (under CLIN 00001) and 3.4 IAAS Environment Reconfiguration (under CLIN 00005) will be added to Task Order DE-DT0005199 via modification.

The additional Operations and Maintenance Requirements involve eleven sub-requirements which the contractor will perform to support the installed infrastructure hardware and software and maintain the integrity of the operating environment. The sub-requirements include:

• NetApps Hardware support includes: monitoring infrastructure health; monitoring network statistics; monitoring disk space; limiting volume size; monitoring CPU utilization; monitoring disk I/O, verifying system security configuration; reviewing snapshot frequency and retention policies; and testing cluster failover.

• Cisco UCS Server Support includes: changing administrative passwords regularly;

reviewing alert e-mails that contain information which can forewarn problems; reviewing and taking corrective action; and testing hardware high availability features.

• Cisco Nexus Switch Support includes: changing administrative passwords regularly;

reviewing alert e-mails that contain information which can forewarn problems; reviewing and taking corrective action; and testing hardware high availability features.

• Cisco ASA Firewall and IPS Support includes: changing administrative passwords regularly; reviewing alert e-mails that contain information which may indicate problems;

reviewing and taking corrective action; and testing hardware high availability features.

• Citrix NetScaler Maintenance Support includes: changing administrative passwords regularly; running backup appliance configuration quarterly; testing hardware high availability features; verifying subscription status, performing offline health check of the disk on each appliance.

• McAfee 3100 Scanner Maintenance Support includes: changing administrative passwords regularly; and verifying McAfee subscription status.

DE-DT0005199 Page 3

• Apply Patches and Upgrade Software Support includes: assuring that patches and software releases are properly implemented; and making corresponding updates to appropriate documentation.

• Configuration Management Support includes: participating in the change control process and Configuration Control Board (CCB); documenting and updating the physical cabling plant of all devices within the system; documenting and updating the rack elevation diagrams; documenting and updating the WAN diagrams for YOURcloud; documenting and updating the LAN diagrams for YOURcloud; documenting and updating the message and traffic flow diagrams for YOURcloud; documenting, updating, and monitoring IP availability and use; and backing-up any network device configurations not previously specified quarterly and backing-up configuration prior to making any changes and after change is verified.

• Security Support includes: providing security artifacts to validate security controls;

providing technical expertise during security testing and conduct remediation activities relative to the Plan of Action and Milestones (POAM); performing security incident investigation and remediation of identified vulnerabilities; applying and updating device configurations to assure industry and NNSA best practices; participating in specific incident investigations and meetings; providing responsive support for software and alerts; updating ACLs for VPN and SSH traffic; and installing of SSL certificates (Microsoft CA and Entrust).

• Environment Support includes: determining organizational needs to meet changing demand for infrastructure services; providing the government with information regarding the number and type of licenses required in the environment; performing software, firmware, and hardware upgrades to maintain currency; creating enclaves and subnets;

allocating storage and computing and troubleshooting enclave issues; normal support for administrative functions such as password resets, account deletion, VPN, and general access troubleshooting; and physical inventory and audit of devices.

• Incident Response Support includes: responding to incident and notifying all affected stakeholders; assembling diagnostic team to include relevant engineers and program management personnel; performing corrective actions to resolve issue and updating documentation including trouble ticket; and obtaining email verification from each affected entity that the problem has been resolved.

The DOE/NNSA requires the YOURCloud environment be connected to the DOE OCIO’s DOEnet in order to ensure the secure connection and operation to support DOE and NNSA’s cyber security requirements. The contractor shall perform IAAS Environment Reconfiguration by preparing the environment to connect YOURCloud to the enterprise-wide production network, directly linking the two YOURcloud sites (YC-East and YC-West) to the internal DOE departmental network, via a datacenter cross-connect between the equipment cages. This activity will move the YOURcloud infrastructure to within the DOE OCIO boundaries and will require various configurations including:

• Circuits and network connections: the contractor shall remove all existing independent network connections to allow all YOURcloud traffic traverses existing DOE OCIO ingress and egress point to ensure all security standards are met.

DE-DT0005199 Page 4

• Administrator accounts: In order to provide connectivity to administrators via remote-access capabilities, including VDI and VPN, the contractor must obtain DOE user accounts to ensure users are named within the existing DOE OCIO domains and identity, authentication, and authorization management systems in place today.

• Relocation and Rearchitecture of OneNNSA Network infrastructure: Presently, the OneNNSA mesh-network topology is anchored in the YC-East and YC-West datacenters. Once these systems are directly connected internally to DOEnet these core capabilities will need to be moved in front of the OCIO’s TIC infrastructure. The contractor shall coordinate the promotion of the existing DOE OCIO ASR routers, already within DOE OCIO’s boundaries (i.e. Germantown and Albuquerque) and coordinate removal the NNSA ASR’s from the YOURCloud infrastructure.

• Storage: Since the YOURcloud environment hardware will remain non-GFE as contracted in the original FFP agreement, the Government requires the contractor to add an additional 96TB of high-speed storage.

• Environment: In order to simplify the environment, the physical separation between hosted and administrative networks will be collapsed, with separation provided via logical isolation.

• Software: Provide information on current software licensing and support contracts (including Windows, RedHat, Splunk, McAfee, NetScalers, Firewalls, Cisco, NetApp, etc) for the IaaS infrastructure in order for NNSA to issue federally-provided licenses for items.

• Add memory on core cluster blades: Currently the three blades in the Core Cluster have 64 GB of memory while the three blades in the hosted cluster have 256 GB of memory.

With the consolidation of the front channel and back channel all blades should have the same amount of memory. This would lead to an increase of 576 GB of memory or approximately 200 Virtual Machines at each site.

• Create a test environment: A test environment will be created and two blades will be purchased to run as a separate test environment.

IV. EXCEPTION TO FAIR OPPORTUNITY

The authority permitting an exception to fair opportunity as implemented by the Federal Acquisition Regulation (FAR) is Subpart 16.505(b)(2)(i)(B) – Only one source is capable of responding due to the unique or specialized nature of the work.

V. JUSTIFICATION FOR USING THE EXCEPTION

The NNSA awarded Task Order DE-DT0005199 to ActioNet, Inc. on February 1, 2013, pursuant to a fair opportunity competition under the GSA’s ASB GWAC, which was open to all awardees under the ASB GWAC. ActioNet currently provides cloud support services to support IaaS Environment Reconfiguration under this Task Order. NNSA requires a data center cross-connect to connect the YOURcloud environment to the DOE departmental network.

This Task Order provided an entire Cloud Environment without a Capital Expense to the

DE-DT0005199 Page 5 government, which means that the hardware associated with this environment is owned by the contractor. The work to be performed, which includes Operations and Maintenance Requirements Support and IAAS Environment Reconfiguration, requires access to hardware.

However, the contractor is under no obligation to allow another contractor to make changes to the equipment they own.

VI. DETERMINATION OF REASONABLENESS OF COST OR PRICE

The Contracting Officer has determined that the anticipated price is fair and reasonable based on price analysis techniques utilized under FAR 15.404-1(b)(2). In accordance with FAR 15.404-1(b)(2)(C)(v) and FAR 15.404-1(b)(2)(C)(vi), the Government compared ActioNet’s proposed price to the Independent Government Cost Estimate (IGCE) and prices obtained through market research for the same or similar items. Based on this analysis, the Contracting Officer determined that ActioNet’s proposed price of $3,341,124.37 for this modification is fair and reasonable.

VII. OTHER FACTS

Buying the equipment from the contractor would cost the government in excess of $2M and would be counter to guidance from the Office of Management and Budget (OMB) for IT organizations to pursue cloud first solutions. In addition, the government would still need to change the configurations on the equipment, which would cost additional money and time.

Even if the government spent $2M to purchase the equipment and the additional work were independently competed, the OCIO would have to integrate multiple organizations into this single work area, creating an unnecessary complexity of service delivery and cost. Having two contractors perform the same work would be inefficient and economically disadvantageous when one contractor, ActioNet, could provide all of the services required

As the current equipment owners for the cloud environment, ActioNet is intimately familiar with the current environment and has the specialized experience necessary to perform the increase in work without downtime.

VIII. STEPS TO FOSTER COMPETITION

No structural or procedural barriers to competition have been identified. NNSA will continue to review actions on a case-by-case basis with the intent of maximizing competition in accordance with Fair Opportunity and the Competition in Contracting Act.

IX. CERTIFICATIONS

Acquisition Initiator/Technical Representative:

I certify that the facts and representations under my cognizance, which are included in this justification and which form a basis for this justification, are complete and accurate.·

9'-3-JS

Signature Date

Contracting Officer:

I certify that this justification is accurate and complete to the best of my knowledge and belief.

AfMtJl41 ii\, ~ Signature Date

Competition Advocate (if> $650K and ~ $12.5M):

I have reviewed this Justification for an Exception to Fair Opportunity and find it to be accurate and complete to the best of my knowledge and belief. Since this justification does not eed $12.SM, this review serves as approval.

~'>dl-----::9@) r--oite

DE-DT0005199 Page6

I

I I

Attachment #1 DE-DT0005199 SOW MOD 0016 - final