Draft PWS AFRL Access Control BPA.docx

PERFORMANCE WORK STATEMENT (PWS)

Physical Access Control System (PACS) Troubleshooting, Repair, Installation, and Integration Services Air Force Research Laboratory (AFRL) Space Warfare (RJ) and Information & Spectrum Warfare (RF) Directorates Kirtland AFB, New Mexico

1.0 Introduction & Background

The Air Force Research Laboratory (AFRL) Space Warfare (RJ) and Information & Spectrum Warfare (RF) Directorates, located at Kirtland Air Force Base (AFB), New Mexico, require highly specialized physical security infrastructure to safeguard personnel, facilities, assets, and scientific research. The existing Physical Access Control System (PACS) infrastructure utilizes Hirsch (Identiv) security platforms, including Velocity software, controller panels, ScramblePads, and associated hardware.

To ensure continuous, reliable protection, the Government is establishing a Blanket Purchase Agreement (BPA) to secure physical access control troubleshooting, corrective repair, new equipment installation, system expansion, and software sustainment support.

1.1 Scope of Work

The Contractor shall provide all management, labor, tools, equipment, materials, and specialized technical expertise required to perform comprehensive diagnostics, troubleshooting, testing, corrective repair, new equipment installation, expansion, and integration of the PACS across all AFRL RJ and RF facilities situated exclusively on-site at Kirtland AFB.

The scope of this BPA includes, but is not limited to:

· Quick-response troubleshooting and fault isolation of system alarms, communication errors, and hardware failures.

· Corrective repair and replacement of faulty controller panels, terminal boards, readers, ScramblePads, lock hardware, and power supplies.

· Installation of new access control-related equipment, infrastructure, and peripheral devices for new workspaces, secure enclaves, or facility retrofits.

· Seamless expansion and integration of Hirsch (Identiv) compliant hardware to support building modifications or security updates.

· Procurement and sustainment of Software Support Agreements (SSAs) to ensure access to critical patch deployments, system updates, and Tier-3 OEM support.

· Complete integration of Common Access Card (CAC) reading capabilities in accordance with federal security mandates.

To preserve prior capital investments and ensure seamless interoperability, the Contractor must be an authorized partner of Hirsch (Identiv). All physical installations, hardware programming, and software configuration must be performed exclusively by certified Hirsch technicians.

This contract is strictly for troubleshooting, repair, diagnostics, new installations, and system expansion. Regular preventative maintenance services are excluded from this scope.

2.0 General Requirements

2.1 Non-Personal Services

The Contractor shall provide services under this BPA as an independent contractor. Contractor personnel shall not be subject to the supervision or control of Government personnel. The Contractor shall be responsible for managing, supervising, and directing its workforce to meet the performance thresholds established herein.

2.2 Operating Hours

The Contractor shall perform regular, non-emergency services (such as planned new equipment installations or scheduled troubleshooting) during normal base operating hours, typically Monday through Friday, 0730 to 1530 hours Mountain Time, excluding Federal Holidays. However, the Contractor must maintain operational readiness to support emergency, high-priority troubleshooting and corrective repairs outside of normal operating hours (24/7/365) in accordance with the priority response standards defined in Section 3.1.2.

2.3 Quality Control Plan (QCP)

The Contractor shall develop, implement, and maintain a comprehensive Quality Control Plan to ensure all troubleshooting, diagnostics, hardware installations, and repairs are performed in accordance with standard commercial practices, building safety codes, and OEM guidelines. The QCP shall focus on ensuring rapid fault isolation, clean physical installation techniques, minimizing system downtime, and preventing repeat failures.

2.4 Government-Furnished Property, Equipment, and Services

The Government will provide the Contractor with reasonable access to physical facilities, existing PACS software interfaces, technical documentation, and electrical utilities necessary to perform the required tasks. Additionally, the Government will provide escorts for Contractor personnel when performing work in restricted, controlled, or classified areas. The Government will not provide tools, vehicles, or diagnostic equipment to the Contractor.

2.5 Safety and Environmental Compliance

The Contractor shall comply with all local, state, federal, and military safety and environmental regulations, including Occupational Safety and Health Administration (OSHA) standards. The Contractor shall immediately report any safety hazards, workplace injuries, or environmental concerns to the COR.

2.6 Contract Management

2.6.1 Program Manager (PM)

The Contractor shall designate a primary Program Manager (PM) who shall serve as the central point of contact for the Government. The PM shall have the authority to act on behalf of the Contractor on all matters relating to the execution of this BPA and individual BPA calls.

2.6.2 Personnel Roster and Continuity of Services

The Contractor shall maintain a current, written roster of certified Hirsch technicians assigned to this contract, including copies of their active individual OEM certifications. The Contractor shall ensure rapid personnel replacement (backfill) within five (5) business days in the event of staff departures to prevent gaps in response capability.

2.6.3 Invoicing and Wide Area Work Flow (WAWF) Support

In accordance with DFARS clause 252.232-7006 (Wide Area Workflow Payment Instructions), the Contractor shall electronically submit all invoices, billing vouchers, and supporting documentation through the WAWF module within the Procurement Integrated Enterprise Environment (PIEE).

· Each invoice must correspond to a specific, approved BPA call.

· Invoices must be accompanied by detailed service tickets signed by the COR, itemizing the labor hours expended, tasks accomplished (e.g., specific repairs or completed new equipment installations), and any parts installed.

· For troubleshooting and corrective repair dispatches, the Contractor shall only charge a single, one-time travel fee per calendar day of travel, regardless of the number of separate dispatches, site visits, or service technicians deployed on that day.

2.7 Business Relations

The Contractor shall maintain professional, cooperative, and collaborative working relationships with all AFRL stakeholders, Kirtland AFB security personnel, and other on-site contractors. The Contractor shall ensure open lines of communication, provide prompt notification of any technical or scheduling challenges, and manage customer interactions with a high degree of professionalism. Any customer satisfaction issues or coordination conflicts shall be proactively resolved by the Contractor’s Program Manager in coordination with the COR.

3.0 Specific Performance Requirements (Tasks)

3.1 Task 1: Corrective Repair and Troubleshooting

3.1.1 General Troubleshooting and Diagnostics

The Contractor shall perform rapid troubleshooting, diagnostic testing, and physical repair of the PACS when system anomalies, communication disruptions, or component failures occur. The Contractor shall identify root-cause failures, isolate faults to the hardware, wiring, panel, or software level, and execute required repairs or component replacements.

3.1.2 Service Call Response Priority Levels

Authorized Requestors: To prevent unauthorized work and maintain strict operational control, the contractor shall only accept, process, and act upon service call requests initiated by personnel officially designated in writing by the Contracting Officer's Representative (COR). Any service requests received from non-authorized individuals shall be immediately referred to the COR for validation before any action is taken.

· Priority 1: Critical (Emergency)

· Definition/Description: Total access control system failure, critical system alarms, or a critical hardware, panel, or software malfunction that prevents the arming or disarming of facility security zones.

· Response Requirements: Certified technicians must arrive on-site within four (4) hours of the call. All labor associated with Priority 1 responses will be charged at the pre-approved rate established under the BPA.

· Priority 2: Urgent

· Definition/Description: Partial system degradation or localized hardware, panel, or software failure that does not immediately compromise overall facility security but impairs operational efficiency or affects secondary access points.

· Response Requirements: Certified technicians must arrive on-site within eight (8) hours of the call.

· Priority 3: Routine

· Definition/Description: Minor system anomalies, cosmetic defects, or scheduled repair/troubleshooting requests that do not impact daily security operations or the overall integrity of the ACS panels or equipment.

· Response Requirements: The contractor must respond and schedule the necessary service within twenty-four (24) hours of the call, with work to begin at a time coordinated with and approved by the COR.

3.2 Task 2: New Equipment Installation, System Expansion, and Integration The Contractor shall support physical expansions and completely new installations of PACS and access control-related equipment as required by the Government. This includes the physical mounting, low-voltage wiring, power integration, programming, and testing of completely new system footprints, as well as expansions to existing system topologies.

Specific installation and expansion activities include, but are not limited to:

· Controller Panels & Enclosures: Installing, mounting, and wiring new Hirsch controller panels, input/output boards, and secure enclosures.

· Peripherals & Readers: Installing ScramblePads, card readers, biometric scanners, and secondary enrollment stations.

· Locking & Exit Hardware: Mounting and integrating electronic lock hardware (magnetic locks, electric strikes, electrified crash bars), request-to-exit (REX) sensors, and emergency door release (EDR) switches.

· Power Systems: Installing dedicated, battery-backed power distribution units (PDUs) to support the physical hardware and locks.

· Low-Voltage Cabling: Pulling, routing, securing, and terminating specialized security cabling through designated raceways, drop ceilings, or conduit from devices back to the controller panels.

All newly integrated hardware must be fully Hirsch (Identiv) compliant and configured to communicate seamlessly with the central Velocity software platform. The Contractor shall update system drawings, physical panel labels, and software database maps upon completion of any installation or expansion task.

3.3 Task 3: Common Access Card (CAC) Integration Support

The Contractor shall configure and sustain PACS hardware and software interfaces to support secure Common Access Card (CAC) authentication. The Contractor shall ensure reader technologies and controller panel firmware align with Federal Information Processing Standards (FIPS) 201-3 and Homeland Security Presidential Directive 12 (HSPD-12) requirements, enabling secure, card-based physical access.

3.4 Task 4: Software Diagnostics and Technical Support

The Contractor shall provide specialized software diagnostics and technical support for the central Velocity software platform.

· 3.4.1 Software Support Agreements (SSAs): The Contractor shall procure and sustain active OEM-backed SSAs for the Hirsch Velocity system. This sustainment must guarantee the Government's direct access to manufacturer software patches, hotfixes, firmware revisions, and Tier-3 technical engineering support.

· 3.4.2 Software Patching and Database Integrity: The Contractor shall perform software troubleshooting, backup database restorations, and assist in applying critical security patches to ensure database integrity is preserved and system downtime is minimized.

4.0 Security, Compliance, and Training

4.1 Base Access and Screenings

All Contractor personnel assigned to perform work on-site at Kirtland AFB must successfully pass background checks and security screenings necessary to obtain military base credentials (e.g., Defense Biometric Identification System - DBIDS). The Contractor shall ensure all personnel maintain active, valid base access throughout the period of performance.

Common Access Card (CAC) Exemption: Contractor personnel are not required to possess, obtain, or maintain a Common Access Card (CAC) to perform services under this BPA. Physical base access will be facilitated exclusively through DBIDS, and logical/network access to the official government network is not required for local PACS panel and software troubleshooting.

4.2 Security Clearance Exemption & Escort Procedures

Contractor personnel are not required to possess or maintain a corporate Facility Security Clearance (FCL) or individual Personnel Security Clearance (PCL) to perform work under this BPA.

· All work performed by the Contractor shall be conducted strictly at the unclassified level.

· Contractor personnel shall not have access to classified information or classified systems.

· Contractor personnel shall be escorted into classified areas by appropriately cleared Government-provided personnel whenever work (such as troubleshooting, physical installation, or repair) must be conducted within classified enclaves.

4.3 Cybersecurity Compliance

All software, hardware, and panel solutions proposed, integrated, or configured under this BPA must comply with all relevant Department of Defense (DoD) cybersecurity regulations, directives, and instructions. The Contractor shall assist the Government in ensuring that the PACS maintains its active Authority to Operate (ATO) under the Risk Management Framework (RMF).

Contractor employees shall not attach personal computer hardware, personally owned devices (PODs), unauthorized test/diagnostic gear, or any external unapproved media to Government networks or associated Physical Access Control System interfaces. No unapproved software utilities, diagnostics tools, or hardware components shall be connected to the system.

4.4 Protection of Government Information

The Contractor shall not release, disclose, publish, or remove any Government-owned information, system configurations, technical data, database backups, or schematics obtained or generated during the performance of this contract without prior written approval from the Contracting Officer (CO) and the COR. All information processed, system logs, and network configurations are the exclusive property of the Government and must be protected against unauthorized access, removal, or dissemination.

5.0 Period and Place of Performance

5.1 Place of Performance

All work performed under this BPA shall be conducted strictly on-site at AFRL Space Warfare (RJ) and Information & Spectrum Warfare (RF) Directorate facilities located on Kirtland AFB, New Mexico. Performance of duties at off-site contractor facilities, commercial workspaces, or via remote/telework environments is not authorized under this agreement.

5.2 Period of Performance

The Period of Performance shall consist of a five-year ordering period from the date of agreement establishment.

5.3 Local Presence Requirement

To ensure reliable compliance with the critical and urgent response timelines defined in Section 3.1.2—specifically the strict four (4) hour physical on-site arrival requirement for Priority 1 (Emergency) service calls—the Contractor shall maintain a continuous local presence. This local presence is defined as maintaining an active office, branch location, or a dedicated cadre of locally based, OEM-certified technicians residing within the Albuquerque, New Mexico metropolitan area.

6.0 Deliverables

The Contractor shall provide the deliverables listed below in accordance with the established schedule:

7.0 Performance Requirements Summary (PRS)