Draft RFP M0026425R0013.pdf

SEE ADDENDUM

(No Collect Calls)

M0026425R0013 01-Jul-2025

b. TELEPHONE NUMBER

(703) 432-1084

8. OFFER DUE DATE/LOCAL TIME

12:00 PM 31 Jul 2025

5. SOLICITATION NUMBER 6. SOLICITATION ISSUE DATE

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

STANDARD FORM 1449 (REV. 2/2012)

Prescribed by GSA – FAR (48 CFR) 53.212

(TYPE OR PRINT)

(SIGNATURE OF CONTRACTING OFFICER)

ADDENDA ARE

26. TOTAL AWARD AMOUNT (For Gov t. Use Only )

23.

CODE 10. THIS ACQUISITION IS

SUCH ADDRESS IN OFFER

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT

BELOW IS CHECKED

TELEPHONE NO.

M002649. ISSUED BY

18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a. UNLESS BLOCK

7. FOR SOLICITATION

INFORMATION CALL:

a. NAME

CYNTHIA A. GUTHRIDGE

2. CONTRACT NO. 3. AWARD/EFFECTIVE DATE 4. ORDER NUMBER

(TYPE OR PRINT)

30b. NAME AND TITLE OF SIGNER 30c. DATE SIGNED 31b. NAME OF CONTRACTING OFFICER

30a. SIGNATURE OF OFFEROR/CONTRACTOR 31a.UNITED STATES OF AMERICA

0 27a. SOLICITATION INCORPORATES BY REFERENCE FAR 52.212-1. 52.212-4. FAR 52.212-3. 52.212-5 ARE ATTACHED.

25. ACCOUNTING AND APPROPRIATION DATA

1. REQUISITION NUMBER

20.

ADDITIONAL SHEETS SUBJECT TO THE TERMS AND CONDITIONS SPECIFIED.

OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, AND 30

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS

ARE NOT ATTACHED

27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212-5 IS ATTACHED. ADDENDA ARE ARE NOT ATTACHED

(BLOCK 5), INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE

SET FORTH HEREIN, IS ACCEPTED AS TO ITEMS:

. YOUR OFFER ON SOLICITATION

28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN

% FOR:SET ASIDE:UNRESTRICTED OR X

SMALL BUSINESSX

17a.CONTRACTOR/ CODE FACILITY

OFFEROR CODE

MCINCR - RCO

2010 HENDERSON RD

CYNTHIA GUTHRIDGE

QUANTICO VA 22134

18a. PAYMENT WILL BE MADE BY CODE

RATED ORDER UNDER

DPAS (15 CFR 700)

13a. THIS CONTRACT IS A

13b. RATING

CODE15. DELIVER TO CODE M00089 16. ADMINISTERED BY

12. DISCOUNT TERMS11. DELIVERY FOR FOB DESTINA-

TION UNLESS BLOCK IS

MARKED

SEE SCHEDULE

14. METHOD OF SOLICITATION

RFQ IFB RFPX

M00089

BLDG 27410 HOT PATCH ROAD

QUANTICO VA 22134-5046

MARIEL NOGUEZ

TEL: 703-432-6908 FAX:

(703) 784-3592FAX:

TEL: (703) 432-1084 SERVICE-DISABLED

VETERAN-OWNED

SMALL BUSINESS

8(A)

HUBZONE SMALL

BUSINESS

SIZE STANDARD:

$34,000,000

NAICS:

541519

X

OFFER DATED

29. AWARD OF CONTRACT: REF.

DELIVER ALL ITEMS SET FORTH OR OTHERWISE IDENTIFIED ABOVE AND ON ANY

COPIES TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH AND

EMAIL:

TEL:

31c. DATE SIGNED

SEE SCHEDULE

SCHEDULE OF SUPPLIES/ SERVICESITEM NO. QUANTITY UNIT UNIT PRICE AMOUNT

24.22.21.19.

WOMEN-OWNED SMALL BUSINESS (WOSB)

ELIGIBLE UNDER THE WOMEN-OWNED

SMALL BUSINESS PROGRAM

EDWOSB

32g. E-MAIL OF AUTHORIZED GOVERNMENT REPRESENTATIVE

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS

(CONTINUED)

PAGE 2 OF105

ACCEPTED, AND CONFORMS TO THE CONTRACT, EXCEPT AS NOTED: ______________________________________________________

32a. QUANTITY IN COLUMN 21 HAS BEEN

RECEIVED INSPECTED

32b. SIGNATURE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32c. DATE 32d. PRINTED NAME AND TITLE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32e. MAILING ADDRESS OF AUTHORIZED GOVERNMENT REPRESENTATIVE 32f . TELEPHONE NUMBER OF AUTHORIZED GOVERNMENT REPRESENTATIVE

37. CHECK NUMBER

FINALPARTIALCOMPLETE

36. PAYMENT35. AMOUNT VERIFIED

CORRECT FOR

34. VOUCHER NUMBER

FINAL

33. SHIP NUMBER

PARTIAL

38. S/R ACCOUNT NUMBER 39. S/R VOUCHER NUMBER 40. PAID BY

41a. I CERTIFY THIS ACCOUNT IS CORRECT AND PROPER FOR PAYMENT

41b. SIGNATURE AND TITLE OF CERTIFYING OFFICER 41c. DATE

42a. RECEIVED BY (Print)

42b. RECEIVED AT (Location)

42c. DATE REC'D (YY/MM/DD) 42d. TOTAL CONTAINERS

STANDARD FORM 1449 (REV. 2/2012) BACK

Prescribed by GSA – FAR (48 CFR) 53.212

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

SEE SCHEDULE

20.

SCHEDULE OF SUPPLIES/ SERVICES

21.

QUANTITY UNIT

22. 23.

UNIT PRICE

24.

AMOUNT

19.

ITEM NO.

Section SF 1449 - CONTINUATION SHEET

ITEM NO SUPPLIES/SERVICES MAX

QUANTITY

UNIT UNIT PRICE MAX AMOUNT

0001 UNDEFINED Each PKI Support Operations

FFP

PKI Support Operations in accordance with PWS Task: 4.1, 4.2, 4.3, 4.4, 4.5, 4.6, and 5.0. NOTE: Due to system limitations, "each" means "Dollars." The individual services are identified as a their own seperate cost. Task orders will be priced out so that each service is FFP. Each Task Order will provide a qty for which services will be provided at the unit prices proposed in the Price Matrix in RFP Attachment 4.

FOB: Destination

PSC CD: DG01

MAX

NET AMT

UNIT UNIT PRICE MAX AMOUNT

0002 UNDEFINED

Travel

COST

Travel and other travel related expenses in accordance with PWS 10.0.

MAX COST

UNIT UNIT PRICE MAX AMOUNT

0002AA UNDEFINED Each Travel

COST

Travel in accordance with PWS 10.0. Travel cost shall be in accordance with FAR 31.205-46. Contractor shall provide a breakout of the travel expenses in accordance with FAR 31.205-46. The established travel handling factor proposed at solicitation and incorporated at award shall be used. The handling factor encompasses handling and indirect expenses the contractor may account for when processing travel cost. No additional indirect rates are applicable since there is a negotiated fixed price handling factor in the contract. Fee is strictly prohibited on travel costs. NOTE: Due to system limitations, "each" means "dollars."

UNIT UNIT PRICE MAX AMOUNT

0002AB UNDEFINED Each Other Travel Related Expenses

COST

Other travel related expenses in accordance with PWS 10.0. Travel cost shall be in accordance with FAR 31. Contractor shall provide a breakout of the travel expenses in accordance with FAR 31. The established travel handling factor proposed at solicitation and incorporated at award shall be used. The handling factor encompasses handling and indirect expenses the contractor may account for when processing travel cost. No additional indirect rates are applicable since there is a negotiated fixed price handling factor in the contract. Fee is strictly prohibited on travel costs. NOTE: Due to system limitations, "each" means "dollars."

Use of this line item is specific to only those expenses as a result of OCONUS performance (HOLA/COLA/DoDDS).

UNIT UNIT PRICE MAX AMOUNT

0003 UNDEFINED Each Commercial Solutions for Classified Supp

FFP

Commercial Solutions for Classified (CSfC) Support in accordance with PWS

4.7. NOTE: Due to system limitations, "each" means "Dollars." The individual services are identified as a monthly cost. Task orders will be priced out so that each month is FFP per service. Each Task Order will provide a qty of months for which services will be provided at the unit prices proposed in the Price Matrix in RFP Attachment 4.

MAX

NET AMT

CONTRACT MINIMUM/MAXIMUM QUANTITY AND CONTRACT VALUE

The minimum quantity and contract value for all orders issued against this contract shall not be less than the minimum quantity and contract value stated in the following table. The maximum quantity and contract value for all orders issued against this contract shall not exceed the maximum quantity and contract value stated in the following table.

MINIMUM

QUANTITY

MINIMUM

AMOUNT

MAXIMUM

QUANTITY

MAXIMUM

AMOUNT

$49,615,750.00

CLIN DELIVERY/TASK ORDER MINIMUM/MAXIMUM QUANTITY AND CLIN ORDER VALUE

The minimum quantity and order value for the given Delivery/Task Order issued for this CLIN shall not be less than the minimum quantity and order value stated in the following table. The maximum quantity and order value for the given Delivery/Task Order issued for this CLIN shall not exceed the maximum quantity and order value stated in the following table.

CLIN

MINIMUM

QUANTITY

MINIMUM

AMOUNT

MAXIMUM

QUANTITY

MAXIMUM

AMOUNT

0002AA

0002AB

PERFORMANCE WORK STATEMENT

PERFORMANCE WORK STATEMENT

Marine Corps Public Key Infrastructure (PKI) Support Services

United States Marine Corps

M0026425R0013

SCOPE

This Performance Work Statement (PWS) describes the technical support services required of the Marine Corps Public Key Infrastructure and provides descriptions of Public Key Infrastructure (PKI) technical requirements definition, operations, and sustainment support for authorized systems and personnel located at United States Marine Corps (USMC) installations worldwide.

Required support includes sustainment of the USMC portion of the established Department of Defense (DoD) Information Network (DoDIN): Non-classified Internet Protocol Router Network (NIPRNET) Public Key Infrastructure (PKI), National Security Systems (NSS) Secret Internet Protocol Router Network (SIPRNET) PKI, and Defense Information Systems Agency (DISA) Gray PKI.

BACKGROUND

The mission of the Marine Corps PKI Program is to provide the resources, manpower, and equipment (hardware and software) dedicated to the management (i.e.: generation, production, distribution, control, accounting, and destruction) of keys and certificates used by public key-based security services to include Non-classified Internet Protocol Router Network (NIPRNet) and SIPRNet both garrison and deployed. The PKI program operates the USMC Certificate Validation Infrastructure (CVI) and USMC organizational Certificate Authorities (CA) necessary to ensure that only authorized users and server-based applications can operate on the MCEN. These services are required for user access to all information system components on the MCEN including network accounts, applications, and web sites. PKI must be operable in garrison and tactical/deployed environments. Marine Corps PKI is operationally attached to the MCCOG aboard Marine Corps Base Quantico, VA and sponsored by Headquarters Marine Corps Deputy Commandant, Information (HQMC DC I) as a USMC Representative to DoD PKI.

GENERAL INFORMATION

Marine Corps PKI requires support for operations, management, and sustainment of the Marine Corps Component to DoD and NSS PKI, USMC Only-Locally-Trusted PKI, and related programs. Extensive knowledge of DoD/NSS PKI is required. Contractor support shall include PKI registration support for authorized systems and personnel located at USMC installations worldwide. The contractor shall sustain the USMC portion of the established DoD PKI to include USMC Only-Locally-Trusted (OLT) PKI and USMC internal Certificate Validation Infrastructure.

Objective

The objective of this PWS is to achieve effective, reliable, and secure PKI capability across the Marine Corps Information Environment (MCIE).

Achieving the objective requires the following:

Staff augmentation is maintained with the required qualifications, skill sets, and certifications such that services are effectively delivered.

Contractor personnel must have expert knowledge in both the technical aspects of PKI and how PKI is employed within the Department of Defense and National Security System Networks.

All contractor personnel are fully compliant with DoD Cyber Security Work Force certification standards.

Personnel shall continuously maintain annual DoD training requirements.

Projects and tasks are delivered on time and within cost controls.

Synopsis of general Marine Corps PKI Program Operational Support:

Post-deployment applications software PKI support Certificate generation and issuance in support of Zero Trust Operate and maintain Marine Corps Only Locally Trusted (OLT) PKIs on the Marine Corps portion of the

DoDIN

Operate and maintain Marine Corps Commercial Solutions for Classified PKIs DoD/NSS/Gray Certificate Validation support DISA DoD/NSS/Gray Registration Authority operations Integration Support for fielded systems Field technical support

Place of Performance

The contractor shall provide support for the Marine Corps PKI section at the following locations:

MCB Quantico, Virginia – Primary Site (All tasks except LRA) Camp Foster, Okinawa, Japan – Local Registration Authority (LRA) task only Camp Pendleton, California – Secondary site (for network operations redundancy purposes), LRA task only Camp Lejeune, North Carolina - LRA task only Commandant of the Marine Corps, HQ USMC, Washington, DC - LRA task only

Hours of Operation

The Government’s normal workday is Monday – Friday 0600 – 1800 local time. These hours denote when the designated Government facility is normally open for business and does not specify a required contractor work schedule. Contractor personnel may be required on weekends. Personnel are subject to recall for high critical incidents. Performance may require 10 – 12 hour workdays. The contractor shall coordinate and maintain an adequate work force for the uninterrupted performance of all tasks defined within this PWS. Adjustments to contractor work schedules shall not constitute overtime.

Personnel Qualifications

All contractor personnel working this effort must meet the minimum qualifications listed at PWS Section 18 upon contract award. Personnel who do not meet or maintain the minimum qualifications throughout the duration of the contract are considered unqualified and will not have access to facilities and systems.

Available Workstation Space

Government on-site workspaces are limited by location and task as follows:

Location PWS Task Available On-Site

Workspaces

MCCOG – Quantico, VA

Program Management (0) 1 Registration Authority Operations (0) 6 (includes 1 Lead) PKI Network Operations (0) 8 (includes 1 Lead) Implementation and Planning (0) 3 PKI Cyber Security (0) 1 Lead Knowledge Management (0) 1

I MEF – Camp Pendleton, CA Local Registration Authority (0) 1 II MEF – Camp Lejeune, NC Local Registration Authority (0) 1 III MEF – Camp Foster Okinawa, Japan

Local Registration Authority (0) 1

HQMC – Pentagon, Arlington, VA

Local Registration Authority (0)

3.7 Compliance with Defense Federal Acquisition Regulation Supplement (DFARS) 252.239-7001

The contractor shall ensure that personnel accessing information systems have the proper and current IA certification to perform IA functions in accordance with DFARS 252.239-7001. All personnel performing tasks under this contract shall be United States citizens. No foreign nationals shall be provided access to any Items any way associated with the effort under this contract regardless of the security classification of such Items.

PKI TASK REQUIREMENTS

The tasks identified below, when integrated and supported with the contractor’s direct DoD/NSS PKI experience shall achieve the PWS objective. These tasks enable the Marine Corps PKI to fulfill its role within the DoD’s operational hierarchy, quickly adapting to near-term changes and continuously evolving to meet long-range technology trends.

The Contactor shall provide PKI support services under the following major tasks and its subtasks.

Program Management

The contractor shall identify a Program Manager (PM), by name, who shall provide management, technical oversight, direction and guidance, administration, quality assurance, and leadership for all contractor personnel effort in the execution of this contract. The PM shall schedule meetings and provide deliverables. The PM shall serve as the Government’s primary point-of-contact, maintaining regular communication with Marine Corps PKI and keeping Marine Corps PKI apprised of all contract issues and status.

The contractor shall apply and maintain proven and successful program management practices throughout the life of this contract.

Kick-off Meeting

The contractor shall attend a Kick-off Meeting at a location determined by the Government no later than five (5) business days after contract award. The meeting will provide an introduction between key contractor personnel and relevant Government personnel who will be involved with the effort. The purpose of the Kick-off Meeting is to achieve a clear and mutual understanding of all contract requirements and identify and resolve potential problems.

During the Kick-off Meeting, the contractor shall be prepared to discuss its management approach, staffing, and any plans submitted in response to the solicitation that will be implemented under this contract. Other topics of discussion may include contract deliverables, sub-contracting plan compliance (as applicable), government furnished equipment, travel procedures, and other topics as warranted. The contractor shall deliver Meeting Minutes in accordance with PWS Section 0.

In-Progress Review (IPR)

The contractor shall host, by the 15th of each month, a monthly IPR with the Government’s Technical Point of Contact (TPOC), COR, contracting officer, and other vital Government stakeholders. The purpose of this meeting is to ensure all stakeholders are informed of the previous month’s activity, provide opportunities to identify other activities and establish priorities, and coordinate resolution of identified problems or opportunities. The contractor shall provide an agenda no later than one day prior to the meeting, with written minutes of the meeting, including attendance, issues discussed, decisions made, and action items assigned in accordance with PWS Section 0. (The first IPR will be jointly determined by the Government and the contractor.)

Minimum IPR content shall include the following:

Activities during reporting period, i.e. previous month, by task (include on-going activities, new activities, activities completed; progress to date on all above-mentioned activities). Start each section with a brief description of the task.

Problems and corrective actions taken. Also include issues or concerns and proposed resolutions to address them.

Contract status which will include task leads information and staffing update/changes (vacant, transition in/out, gains, losses).

Security clearance status or issues.

Government actions required.

Financial Status of non-firm fixed price line items up to the previous month and projected cost for the current month.

Any recommendation or issues regarding the contract.

Project Management Plan (PMP)

The contractor shall document all support requirements in a PMP. The PMP provides the Government insight into the contractor’s process and methods of ensuring PWS objectives are satisfactorily achieved throughout the life of the contract. The PMP is subject to changes pending Government comments and recommendations. (See PWS Section 0)

The PMP is an evolutionary document that shall be updated as required. The contractor shall work from the latest Government-reviewed version of the PMP.

Minimum PMP content shall include:

Proposed management approach to ensure successful execution of all tasks, to include its staffing matrix.

SOPs for all tasks.

Milestones, tasks, and subtasks.

Provide for an overall Work Breakdown Structure (WBS) and associated responsibilities and partnerships between or among Government organizations.

Transition-Out Plan

The transition-out period, if required, shall commence 60 days prior to the end of the contract. The Transition-Out Plan is due 90 days before the end of the contract to allow for the exchange of Government comments and questions and contractor revisions as necessary prior to submission of the final plan. The final plan is due 60 days before the end of the contract. The contractor shall maintain full personnel staffing up to the contract end date. The Plan shall facilitate a seamless transition from the current contractor to the incoming contractor and identify how it will transfer the following:

Project management processes Points of contact Location of technical and project management documentation Status of ongoing technical initiatives Transition of Key Personnel, if applicable Schedules and milestones Actions required of the Government Submit a “turnover binder” for each functional area which shall include, but is not limited to, passwords, permissions, SOPs, documentation, etc.

The current contractor shall establish and maintain effective communication with the incoming contractor and Government personnel for the period of the transition via weekly status meetings.

The contractor shall also complete or perform transfer of all tangible and intangible (intellectual) property and licenses prior to the end of the contract.

Quarterly Meeting

The contractor shall plan and conduct a quarterly contract status meeting. The primary purpose of these meetings is to review contract performance status and address contract-related issues. These meetings are expected to last no longer than one (1) hour. At a minimum, the meeting will include appropriate contractor representative(s), the contracting officer, the COR, and Government technical personnel, as appropriate; however, the contracting officer may choose to include other Government attendees. The meeting will be held virtually, via a phone conference call, or at a location determined by the contracting officer.

Each meeting will cover the following topics, as appropriate:

Contract Performance Status (interim draft CPARS rating) Status of contract deliverables/tasks (updates since last meeting) Performance issues encountered or expected (e.g., potential delays) Required Government actions (e.g., delivery of Government Furnished Information and/or Property) Compliance with staffing (See Sections 11 and 12) Discussion on contractor performance against QASP metrics CLIN-related issues.

Address new or in process modifications, requests for out-of-scope work, requests for equitable adjustment, claims, or disputes Clause compliance (e.g., FAR 52.245-1, Government Furnished Property; FAR 52.219-9, Small Business

Subcontracting Plan) Invoice submission and payment status Continuous improvement ideas for current contract and/or future contract

Registration Authority (RA) Operations

The contractor shall provide PKI RA support for the implementation, maintenance and upkeep of the DoD/NSS/Marine Corps PKI to include, as an example the below broad elements. The contractor shall assign a RA Operations single point of contact who will provide technical oversight and guidance specific to the PKI RA Operations contractor support staff and will be the Government’s touch point for all PKI RA Operations management tasks.

Creation and removal of Local Registration Authorities (LRAs) Issuance and revocation of Role Based, Code Signing, End user, administrator and server certificates Alternate token issuance NIPR/SIPR key recovery SIPRNet Token and Common Access Card (CAC) PIN resets Manage the production and issuance of USMC Alternate Tokens using the NIPRNet Enterprise Alternate Token

System (NEATs) Manage the production and issuance of the DoD/NSS SIPRNet tokens using the Token Management System

(TMS)

Will provide USMC LRA audit support as required. A valid passport is required.

PKI RA Ops Enterprise Help Desk

The PKI RA section is a fast-paced work environment and serves as the only PKI Enterprise help desk in the USMC providing professional and courteous support to customers located throughout the world to include tactical environments. Help Desk support provides Tier I support and will route support requriemetns to Network Ops Tier III (PWS 4.4.6) as necessary. The contractor shall use DoD/NSS PKI RA skills to enhance the network security through the utilization of PKI while working with internal MCCOG divisions, external USMC organizations, various other DoD organizations, and a myriad of Government and civilian organizations.

Tasks include:

Certificate Issuance/Revocation PKI Help Desk Support Level 1 (required incident handling matrix at Attachment 1) PIN Reset Support Purebred/Mobile Device PKI certificate support PKI Key Recovery New/Emerging technologies testing support Serve as RAs and Key Recovery Agents Maintain support for creation and removal of LRAs.

Issue end user certificates.

Coordinate installation of DoD certificates on to Mobile devices.

Execute certificate revocation within 12 hours of notification.

Download, format, and install PKI certificates.

Resolve customer issues related to PKI certificate use and system configuration.

Serve as the Liaison between the MCCOG and the field LRA staff for the resolution of issues elevated to the MCCOG call center.

Submit and update Remedy tickets in accordance with established metrics. (Attachment 1) Execute certificate disposition for USMC casualties.

Assist in the execution of LRA, Trusted Agent and end user PKI training.

Manage the production and issuance of DoD SIPR Tokens using a TMS and peripherals provided by the

Government.

Manage the production and issuance of USMC Alternate PKI Tokens using NEATs.

Maintain and sustain the central repository of PKI records specified by the Government, to include records required to establish the validity of a signature and the proper operation of the PKI as specified in the DoD PKI Certificate Policy.

Perform ah-hoc metric collection and reporting (deliverable 0009) on selected activities directed by the Government. Shall maintain a daily log of user assistance calls, SIPR token and Alternate token certificate issuance, revocations, and server certificate issuance

Shall maintain a daily physical logbook consisting of all RA certificate activities as specified in the DoD RA LRA Certificate Practice Statements (CPS)/NSS RPS.

Maintain and update required PKI certificate issuance, revocation, and key recovery actions in appropriate existing or future SharePoint lists/Databases.

Provide data as required by the Government for future SharePoint lists/databases for issuance activities from new DoD capabilities.

Direct calls from customers of the DoD and Marine Corps PKI to appropriate MCCOG sections.

Provide both internal and external Marine Corps PKI customers with knowledgeable, problem-solving resolutions, in the shortest time possible to minimize any customer downtime or work stoppage.

Assist Program of Record (POR) application owners with integration of current Marine Corps PKI enabling technologies.

Provide general administrative support tasks to the execution of PKI logistics activities such as controlled distribution of SIPR Tokens, ALT Tokens, and PKI peripherals.

Provide input for operational metrics and analysis to improve the enterprise PKI related customer experience and reduce Help Desk calls.

Provide desktop and network support.

Perform operational testing of beta tokens, new certificate types and Token Management Testing along with operational capability testing of all new versions of PKI certificate and systems.

PKI RA Training and Outreach

Contractor personnel expertise under the RA task will be utilized from time to time to assist in developing and presenting PKI training along with participating in outreach activities in support of Marine Corps PKI initiatives for garrison and tactical networks. Training shall be in conformance to IA policy.

Tasks may include:

Assist in developing PKI Training Plans.

Assist in developing and maintaining PKI Outreach Materials to support PKI training and customer awareness as related to constant changing of PKI environment.

Assist in developing and providing PKI Briefs for conferences or working group meetings regarding PKI projects, plans, and initiatives as directed.

Assist in developing and providing targeted computer/hands-on training specific to LRA, TA, System

Administrators, and end-users within USMC.

Assist in developing and providing PKI Instructor Materials such as course outlines, background material, and training aids in support of targeted training.

Assist in developing and providing PKI student course materials such as workbooks, handouts, completion certificates, and course critique forms for onsite hands-on training.

Train PKI LRAs in accordance with the USMC, DISA, and National Security Agency IA policy and procedures via formal classroom courses, and hands-on workshops as required.

Coordinate dates of training and classroom facilities for local (Quantico area) training requirements Provide PKI end-user training on certificate utilization within the Desktop environment, at the LRA level.

Local Registration Authority (LRA) Audit

The contractor shall provide LRA Audit support as directed by the Government for the development, updating and execution of comprehensive audit procedures and reports for all LRA field operations.

Develop, modify, and execute comprehensive audit procedures for all LRA field operations Conduct and ensure performance of field LRA operations audits are in accordance with the most current

DoD RA/LRA CPS, NSS RPS, CNSS Certificate Policy (CP) the USMC Training User’s Guide, and USMC RA guidance

Maintain all procedures, reports, and Automated Message Handling System (AMHS) messages to ensure the USMC RA maintains a prepared state for the successful completion of the LRA audits directed by the DoD CPS and NSS RPS

Draft and submit LRA Audit reports within 10 business days of audit completion for signature and delivery to audited Command (deliverable 0006)

Recommend improvements to procedures and processes related to the audits to PKI Leadership (deliverable 0006)

Existing Registration Authority personnel performing under the RA Operations task shall conduct the audits. Audits typically take one week to complete and occur a minimum of once every two years, although out-of-cycle audits may be directed by the Government as necessary. Audits are required at the following locations:

Camp Lejeune, NC Camp Pendleton, CA Okinawa, Japan HQMC, Arlington, VA

Local Registration Authorities

The contractor shall provide LRA support at each Marine Expeditionary Force (MEF) location listed below, and HQMC to assist in Communications General Staff (G6) PKI missions. The contractor LRA shall assist in all PKI implementations, server builds and installs in conjunction with the Local G6’s.

Tasks include:

Provide LRA support to ensure the PKI Server Certificates are requested, approved, and installed in accordance with PKI Policy.

Execute PKI certificate registration, management and revocation requests to ensure all requested activities are properly documented within the ticket management system

Maintain and perform CAC PIN Reset operations for end-user needs in area of responsibility.

Archive PKI data as directed and in compliance with the CPS/Registration Practice Statement.

Plan, coordinate, and implement, at the local level with the local G6, evolving PKI initiatives as directed by the

USMC RA.

Develop, update, and submit Monthly status reports providing token issuance numbers, trouble calls processed and any current issues to the USMC RA.

Local Registration Authorities shall be located at:

I MEF – Camp Pendleton, CA II MEF – Camp Lejeune, NC III MEF – Camp Foster Okinawa, Japan HQMC – Pentagon, Arlington, VA

PKI Network Operations

PKI Network Operations provides technical expertise related to the support of concept exploration, functional and technical requirements generation, development, implementation, and enhancement of DoD PKI for the USMC.

This technical support includes the maintenance and sustainment of a technically resilient certificate issuance and revocation status checking infrastructure for all MCEN networks, as well as meeting the requirements of HSPD-12.

It ensures that Marine Corps PKI implementation requirements are identified and made part of the development, implementation, and support of future DoD PKI architecture. Marine Corps PKI provides support for assessments of USMC impacts from actions associated with DoD PKI PMO development and implementation activities, to include use of DoD PKI with mobile devices and DoD provided non-person entity issuance capabilities. Marine Corps PKI provides support to address issues related to certificates, tokens, token issuance, and infrastructure services. This task provides technical requirement support to directory service providers and recommendations for USMC action to change DoD implementation and software releases. Marine Corps PKI recommendations shall also include the impact of planned changes to registration software and hardware upon USMC users.

The contractor shall assign a PKI Network Operations Network single point of contact who will provide technical oversight and guidance specific to the PKI Network Operations contractor support staff and will be the Government’s touch point for all PKI Network Operations system management tasks.

Performance under this major task may include PKI Network Operations equipment maintenance and tactical support; please see PWS Section 9.

Network Ops Training and Outreach

Contractor personnel expertise under the Network Operations task will be utilized from time to time to assist in developing and presenting training along with participating in outreach activities in support of Marine Corps PKI initiatives for garrison and tactical networks. Training shall be in conformance to IA policy.

Tasks may include:

Develop and maintain PKI Tactical Training Plans and training materials.

Configure, operate, and maintain the PKI Tactical training suite leveraging most current hypervisor technology thereby allowing resetting classroom virtual environment back to baseline configuration for servers and workstations for hands on training and ease of administration.

Coordinate dates of training and onsite support with requesting MEFs, Marine Expeditionary Units, and Reserve Commands.

Provide PKI support staff to present PKI Tactical Training course to deploying Marines consisting of but not limited to:

- PKI 101

- CVI

- Cryptographic Logon

- PKI Administration and Troubleshooting

- Hands-on-lab

- Practical application and written testing

Certificate Authority (CA) Support

The contractor shall provide technical support for Microsoft Active Directory, DoD PKI, Unix and Windows software, Microsoft Active Directory Certificate Services (ADCS), Keyfactor EJBCA, Information Services Corporation (ISC) CertAgent, Red Hat CA software certificate services, and other Certificate Authority Services Technologies that may arise due to new technologies developed which the government may choose to implement in future years

Tasks include:

Develop, plan, deploy, and configure new Certificate Authorities as directed by the Government in accordance DoD security standards and best practices, to include new versions and technology refresh.

Conduct infrastructure checks twice daily and create status report using SharePoint List for Government leadership.

Maintain the overall health of technologies associated with the CA infrastructure.

Monitor the health of CA infrastructure with MCCOG provided event management tools. Report any discrepancies to Government leadership and record using incident ticketing system.

Publish and issue Certificate Revocation Lists on a weekly basis from Root and Sub CAs.

Provide Tier III troubleshooting and support for incidents related to CAs and document resolution using incident ticketing system.

Implement and monitor CA thresholds and conduct proactive event remediation per Government guidance.

Develop, test, and maintain CA Infrastructure disaster recovery plans using SharePoint Document Library.

Develop, test, and maintain CA Infrastructure COOP plans using SharePoint Document Library.

Escalate issues to third party product vendors as required and track the progress of vendor support.

Certificate Validation Infrastructure (CVI) Support

The contractor shall provide CVI support for PKI, Windows Software, Axway Validation Authority Suite software to include but not limited to Online Certificate Status Protocol (OCSP), Desktop Validator, Enterprise Validation Authority, and Compact CRLs, and Keyfactor EJBCA Validation Authority.

Configure and deploy new Certificate Validation (Responder/Repeater) software as needed or directed by Government leadership.

Develop, deploy and maintain desktop validator configurations for use by all systems and applications residing on all USMC networks.

Conduct infrastructure checks twice daily and create status report using SharePoint List for Government leadership.

Maintain the overall health of technologies associated with the CVI.

Monitor the health of CVI with MCCOG provided event management tools. Report any discrepancies to

Government leadership and record using incident ticketing system.

Ensure validation information, downloaded from DISA, is current and accessible by CVI servers.

Provide Tier III troubleshooting and support for incidents related to CVI and document resolution using incident ticketing system.

Configure and deploy new versions of CVI software as needed or when directed by Government leadership.

Develop, test, and maintain CVI disaster recovery plans using SharePoint Document Library.

Develop, test, and maintain CVI COOP plans using SharePoint Document Library.

Hardware Security Module (HSM) Support

The contractor shall provide HSM support for SafeNet/Thales and nCipher hardware PKI key management.

Configure and deploy new HSMs as required or directed.

Maintain the overall health of the HSMs. Provide Tier III troubleshooting and support for incidents related to HSMs and document resolution using incident ticketing system.

Develop, test, and maintain HSM disaster recovery plans using SharePoint Document Library.

Public Key Enabling Support

The contractor shall provide Public Key Enabling support to Marine organizations requiring Marine Corps Enterprise PKI support/services.

Research and understand new technologies that require PK Enablement.

Coordinate PKI technical support, when required.

Create courses of action and document recommendations for PK Enabling noncompliant systems. Note:

POR/Application owners are responsible for Cryptographic Enablement.

Tier III PKI Advanced Support

The contractor shall provide Tier III advanced troubleshooting support in accordance with the Information Technology Infrastructure Library (ITIL).

Perform PKI Tier III troubleshooting on MCEN systems relating to PKI specific incidents to include but not limited to cryptographic logon, certificate validation, and domain controller certificates.

Participate and provide PKI subject matter expertise in resolving issues within all USMC Networks in collaboration with other MCEN service providers.

Configuration Management Support

The contractor shall provide Configuration Management of all PKI related middleware and applications supporting smartcard authentication and certificate validation.

Maintain and deploy Desktop Validator and Middleware Configurations supporting the MCEN using SharePoint Document Library.

Maintain and deploy Server Validator Configurations supporting the MCEN using SharePoint Document Library.

Maintain baseline configurations for all PKI software and enterprise hardware using SharePoint Document Library.

Plan, develop, and test, new configurations for PKI software and hardware. Provide after action reports of test results and recommendations for site/region/enterprise implementation.

PKI System Infrastructure Support

The Contractor shall provide hardware and software technical support to operate, troubleshoot, and scale three separate forests with separate infrastructure and services. Each environment requires isolated access, patching, and security postures. The uptime of all PKI enterprise services is 99.97%, not including system maintenance as measured using Marine Corps Enterprise Monitoring Tools provided by MCCOG C2 Systems and Marine Corps Enterprise Information Technology Services Management (E-ITSM/Remedy).

All patching and Information Assurance Vulnerability Alert compliancy shall be accomplished, with or without a patching solution, on all PKI Enterprise services in accordance with the Marine Corps Vulnerability Management Policies and MCCOG VMT provided Assured Compliance Assessment System (ACAS). All security vulnerabilities shall be remediated and completed within the assigned deadline from subtask

(Vulnerability Management) in accordance with Marine Corps E-ITSM change management policies. For vulnerabilities that are technically unable to be remediated, PKI System Infrastructure Tech will assist subtask 4.7.3 (Vulnerability Management) in creating POA&M.

Virtual Infrastructure (VI) Support

The contractor shall configure all aspects of the VI in support of the PKI Enterprise Services on USMC operated networks. The contractor shall use VMware to deploy and maintain complex VMware environments to provide Virtual Machine and Virtual Desktop services.

Maintain the overall health of technologies associated with the VI to include both Virtual Servers and Virtual Desktop Environments

Implement monitoring tool thresholds and conduct proactive event remediation as directed by Government leadership.

Monitor the health of VI with MCCOG provided event management tools. Report any discrepancies to Government leadership and record using incident ticketing system.

Provide Tier III troubleshooting and support for incidents related to VI and document resolution using incident ticketing system.

Configure and deploy new versions of VI as needed or when directed by Government leadership.

Develop, test, and maintain VI disaster recovery plans using SharePoint Document Library.

Leverage emerging VI technologies to support additional PKI implementation and support items.

Storage Area Network (SAN) Support

The contractor shall configure all aspects of the SAN hardware and software supporting PKI Enterprise Services.

The contractor shall use NetApp Storage devices to include snapshots, storage provisioning, management software, recovery procedures, hardware installation and security of Logical Unit Numbers (LUNS), and access to each to provide PKI SAN support.

Maintain the overall health of technologies associated with the SAN.

Implement monitoring tool thresholds and conduct proactive event remediation as directed by Government leadership.

Monitor the health of SAN with MCCOG provided event management tools. Report any discrepancies to

Government leadership and record using incident ticketing system.

Provide Tier III troubleshooting and support for incidents related to SAN and document resolution using incident ticketing system.

Configure and deploy new versions of SAN as needed or when directed by Government leadership.

Develop, test, and maintain SAN disaster recovery plans using SharePoint Document Library.

Server Management Support

Maintain the overall health of technologies associated with the Server Management Implement monitoring tool thresholds and conduct proactive event remediation as directed by Government leadership.

Monitor the health of Server Management with MCCOG provided event management tools. Report any discrepancies to Government leadership and record using incident ticketing system.

Provide Tier III Server support and troubleshooting for incidents related to Server Management and document resolution using incident ticketing system.

Configure and deploy new versions of Server Management as needed or when directed by Government leadership.

Develop, test, and maintain Server Management disaster recovery plans using SharePoint Document

Library.

Event Management Support

Resolve all PKI related Event Management tickets and provide an Event Management Status Report on weekly basis for all Event Management incidents.

Submit and execute Event Management related Request for Change (RFC) tasks, when required, with approval of Government leadership.

Maintain the overall health of technologies associated with Event Management tools installed within PKI Enterprise servers.

Coordinate and collaborate with other MCCOG sections on Event Management issues Participate in and brief PKI Change Request tasks, related to event management, to the Change Review

Board. Implement monitoring tool thresholds, analyze, and conduct proactive event remediation as needed.

PKI Application/Software Support

Marine Corps PKI utilizes multiple customized tools and scripts that provide streamlined business processes and technical monitoring for Marine Corps PKI Enterprise services. Requests for new tools and scripts, which support the Marine Corps PKI overall service to the user community, occur frequently. The contractor shall provide support via automation of manual processes through PowerShell or other scripting languages the contractor staff may be proficient.

Tasks include:

Develop, test, and implement new script capabilities as directed.

Maintain, validate, and ensure compatibility of existing custom scripts.

Implementation and Planning

The contractor shall provide implementation and planning support in the development and writing of project plans and implementation documentation as required in support of Marine Corps PKI initiatives. This also includes updating existing specific PKI plans and procedures to comply with changing DoD PKI initiatives. The development of plans for the employment and support of PKI tools in all network environments, including tactical ones, which provide PKI procedures for concept of operations (CONOPS) and plan of actions and milestones (POA&M) to ensure successful execution is required.

Existing Implementation and Planning personnel performing under this task will participate in the LRA audits (see

PWS 4.2.1).

Knowledge Management

The contractor shall provide Knowledge Management support using expertise in SharePoint Administration, Application Development, and Management in accordance with DoD PKI initiatives.

Marine Corps PKI manages and maintains an internal and external SharePoint site which provides internal collaboration and external customer support services. Internal support services include, but are not limited to, document libraries, task tracking, calendar, database, and list services. External customer support services include, but are not limited to, PK Enabling documentation, Service Support/Informational Dashboard Software configurations, and downloads.

Tasks include:

Create, maintain, and sustain document libraries and lists Create, maintain, and sustain views for libraries and lists Create, maintain, and sustain WebParts and other SharePoint services as necessary Create, maintain, and sustain templates for assisting PKI personnel with individual document libraries Create, maintain, and manage both internal and external facing SharePoint services Create and maintain Microsoft SharePoint List and Database in support of RA Operation requirements in tracking token and certificate lifecycle.

Create and manage of all RA SharePoint lists and databases in support of disaster recovery efforts.

Develop new enhancements to current SharePoint list database capabilities.

Program of Record (POR) PKE Waiver Review

The contractor shall provide implementation and planning support for reviewing USMC POR Application waiver forms for compliance/noncompliance with existing DoD PKI directives. Due to technical limitations, some systems are unable to implement PKI and therefore require a waiver form to justify non- compliance with PKI directives.

Review and submit waiver forms with recommendation for approval/disapproval to the USMC Designated Accrediting Authority /Authorizing Official (AO)

Create, submit, and track Remedy trouble ticket for waiver requests Track all waiver forms using SharePoint and notify the POR requestor of waiver status Coordinate directly with the Marine Corps PKI Network Operations for technical guidance to verify requested waiver system is capable or incapable of PK enablement Develop, maintain, and provide briefings to Government leadership depicting current status of waived systems/PORs

Purebred/Government Furnished Commercial Mobile Device (CMD) Support

The contractor shall provide Implementation and Planning support for updating and configuration of Purebred for Government Furnished Commercial Mobile Devices (CMD) utilizing DoD derived credential solution which delivers credentials to the CMD for use with secure email and access to network resources requiring a DoD PKI credential.

The contractor shall provide the following PKI implementation planning support:

Enroll and Manage USMC Purebred Limited Registration Agents within the DISA Purebred Web Application

Coordinate with other MCCOG sections for proper configuration of CMD Purebred Client Applications.

Provide Tier-3 Purebred troubleshooting of signing and encrypting emails.

Provide Purebred desktop manager support.

Establish and execute SOPs and training guides to ensure version control and adherence to sound configuration management practices for all documentation.

Submit/update/close trouble tickets.

Concept of Operations/Operational Directives/Advisories (OPDIR/OPAD) Development, Tracking, and Reporting

The contractor shall:

Perform technical writing, analysis, and editing of all PKI CONOPS with Government guidance.

Develop, review, and release OPDIR/OPAD in accordance with Government guidance for release of operational requirements and advisories. Provide reporting guidance and/or templates as required.

USMC and DoD PKI Document/Meeting Review

The contractor shall support the following meetings as needed:

DoD PKI Program Management Office (DoD PKI PMO) Program Information Exchange (PIE)/Program Status Review (PSR) meeting

DoD PKI Summits Identity Protection and Management Senior Coordinating Group (IPMSCG) meeting and meetings of IPMSCG sub-groups Weekly Working Integrated Product Team and various conference calls CAC PIN Reset Users Group (CUG) meeting Remedy Queue Managers meeting DoD PKI Certificate Practice Management Working Group (CPMWG) meeting Developer Configuration Control Board (DCCB) meeting PKI PMO Functional Managers meeting DoD PKI Technical Interchange meeting Marine Corps PKI and Identity Management programs Other meetings as required

Using input from these meetings, the contractor shall provide the PKI implementation planning support to:

Develop Marine Corps PKI Plans and Implementation Documentation for new DoD / USMC projects, tasks, and initiatives. Review and provide comments on plans and procedures of changes to existing DoD and Marine Corps PKI programs and update USMC-specific Plans and Procedures to comply with approved changes to DoD PKI initiatives.

Develop PKI Tactical Plans for the deployment and support of PKI in tactical environments which shall include CONOPS, Continuity of Operations Plans (COOP), and SOPs.

Develop and maintain all PKI Architecture and Migration Plans (to include, but not limited to, technical, certificate authority, certificate validation, and registration authority) for future releases of DoD

PKI

Provide analysis, planning, implementation support to assist PKI Section with tasks and requirements levied by United States Cyber Command (USCYBERCOM), Joint Task Force – Department of Defense Information Networks (JTF-DoDIN), and Marine Corps Forces Cyberspace Command