Amendment 2 GTPaaS PWS.pdf

Amendment 2

Global Transport Platform-as-a-Service

Performance Work Statement

9 April 2024

Headquarters Air Mobility Command (HQ AMC)

Directorate of Intelligence, Surveillance, and Reconnaissance (AMC/A2)

ISR Requirements Branch (AMC/A2YR)

1. Background

Air Mobility Command Directorate of Intelligence, Surveillance, and Reconnaissance (AMC/A2) Systems Requirements Branch (AMC/A2YR) manages the development, acquisition, fielding, rapid deployment, and maintenance lifecycle of various assets in support of the deployed intelligence warfighter.

AMC/A2 seeks to provide a “one-stop-shop” platform for mission support to rapidly consolidate, integrate, acquire, and/or divest of unique solutions and by utilizing commercial “best practices” while providing “cradle-to-grave” management for the duration of required capabilities.

AMC/A2 has identified an emerging requirement for a Platform-as-a-Service (PaaS) to support a collaborative environment at multiple classification levels. In response to the ever-growing dependency on complex and adaptable technologies, AMC/A2YR is taking an approach to provide peer-to-peer communication at the tactical edge through rapid acquisition and development of new capabilities. However, traditional DoD and acquisition pitfalls have remained and hinder the performance of this capability acceleration. Non-traditional defense vendors, users, and external entities are regularly hindered in their ability to collaborate effectively in an innovative way. While cross department workspaces exist from which to bring vendors, users, and the program management offices together, they lack the dedicated infrastructure to enable real collaboration. AMC can leverage an approved strategy providing flexibility and accelerates technology adoption. To truly flourish, AMC/A2 intends to establish a globally connected network solution providing its deployed users multiple transport paths to effectively communicate with stakeholders leveraging industry best hardware and software in classified and unclassified environments.

2. Objectives

The AMC/A2 portfolio of technologies intends to interconnect with a variety of edge systems and users. The Global Transport Platform as-a-Service (GTPaaS) will provide the environment and network infrastructure needed to streamline the integration of AMC/A2 transport assets with non-traditional defense vendors, AMC users, and external DoD entities.

AMC/A2 will utilize edge infrastructure (i.e., Joint Expeditionary Forward Flyaway Kit (JEFF- K)), with the Global Transport Platform placed in front, to connect their users to a managed Secure Entry Point (SEP) allowing AMC/A2 intelligence analysts to move forward with no required changes to existing networking gear. Users will achieve Automated Primary, Alternate, Contingency, and Emergency (PACE) and Edge to Edge communications in disrupted, disconnected, intermittent, and low-bandwidth (DDIL) environments.

The overarching goals of the Global Transport capability are to:

• Accelerate integration of technologies as required due to new intelligence requirements.

• Reduce integration time and costs using preconfigured technologies and vendor provided environment to provide operational ready capabilities to AMC/A2 personnel.

• Continually evaluate the integration of Original Equipment Manufacturer (OEM) developed technologies into a government owned platform.

• Provide a trusted collaboration architecture built on leading edge technology in an open modular configuration with supporting documentation.

• Provide AMC/A2 Intelligence Analysts the capability to analyze, integrate, view, test, and train on a dedicated TOP SECRET/Sensitive Compartmented Information (TS/SCI) level with access to the Air Force Joint Worldwide Intelligence Communication System (AF JWICS) and at the SECRET classified level with access to Secret Internet Protocol Router Network (SIPRNet).

3. Scope

The GTPaaS will allow forward deployed users, to connect their edge infrastructure (i.e. JEFF- K), using their desired transport path (SATCOM, 4G/5G, LTE, Wi-Fi, etc.) to quickly and dynamically access their applications and data inside a dedicated Non-Secure Internet Protocol Router Network (NIPRNet), SIPRNet, and JWICS gateway. See Appendix B: SEP Block Diagram.

The unique environment of the AMC/A2 entity requires various levels of network access including Commercial, Unclassified, and Secret. This is a key separation from most other hardware and software integration and development acquisition environments creating barriers to integrating the best into AMC/A2 programs. The Systems Requirements Branch is seeking a GTPaaS with global network access to NIPRNet, SIPRNet, and TS JWICS through industry best backhaul and transport backbones.

4. Requirements

4.1. General

The contractor shall provide dedicated access from JEFF-Ks to Commercial, UNCLASSIFIED and CLASSIFIED (SIPRNet & AF JWICS) networks for a standardized multi-layered edge connectivity architecture. Additionally, this platform shall provide the hardware required to provide a global enterprise network for deployed AMC/A2 users. The contractor shall design, install, configure, test, operate, maintain, administer, and manage the dedicated NIPRNet, SIPRNet, and JWICS network infrastructure and services, including all associated hardware and software permitting the transmission and sharing of data supporting the security of the information and information systems.

4.2. Hardware

4.2.1. SATCOM

The contractor will acquire, field and support portable Starlink/Starshield satellite communications (SATCOM) terminals, and provide commercial Starlink/Starshield service subscriptions for up to twenty-five JEFF-Ks.

Standard Service requirements:

• Maximum information rate (MIR) of up to 250x30 Mbps.

• 60-250 Mbps/10-30 Mbps down/return.

• 5 TB / Month priority data.

• Global Coverage.

Additionally, the contractor shall deliver 25GB/month with up to 20Mbps of expected download and up to 3Mbps in upload for the five Tampa 95cm satellite antennas AMC/A2 currently owns.

4.2.2 Software-defined Wide Area Network (SD-WAN)

The contractor shall acquire, field and support SD-WAN hardware capable of providing each JEFF-K with multipath routing and failsafe delivery.

4.3. Programmatic and Administrative Support

The contractor shall coordinate JEFF-K requirements, configuration, and delivery to AMC/A2 designated users.

4.3.1. Program Manager

The contractor shall identify a Program Manager (PM), by name, who will serve as the contractor’s primary point of contact for the Government. The contractor PM will be responsible for the overall management, direction, administration, quality control, and leadership of the execution of this effort. The contractor PM shall coordinate, communicate, integrate, and monitor all project activities to ensure successful delivery of the GTPaaS and support services in accordance with the contract and PWS requirements.

4.3.2. Configuration Management

The contractor shall, in coordination with the Government, provide configuration, change, and release management (including, but not limited to, configuration identification, control, verification and audit activities) for the JEFF-K. The contractor must be completely familiar with the design, equipment components, and configuration characteristics of the JEFF-K.

Additionally, the contractor shall:

• Manage and apply configuration control to all JEFF-K hardware, software, and documentation developed and delivered under this PWS, and maintain records to account for configuration changes from the baseline configuration.

• Provide a JEFF-K infrastructure automation tool to enable agile combat employment (ACE) capabilities for non-traditional IT users who require the ability to quickly establish communications while deployed forward.

• Provide and maintain system design documentation and diagrams.

• Management of deployable network IP ranges.

• Verify and validate that changes are properly processed and approved prior to modification; ensure changes to configurations are be made only if approved by the AMC/A2 Program Management Office (PMO).

• Develop, maintain, and implement JEFF-K hardware and software configuration management policies, and assist the Government with developing requirements and project scope.

• Complete monthly Configuration and Traceability Reports, and Configuration Management Reports.

• Participate in operations assessment of current and future AMC/A2 requirements relating to impacts on mission system network infrastructure and communications-computer systems.

4.3.3. Subject Matter Expert (SME) Support

The contractor shall provide SME services as required to function as a front door integration with AMC/A2. These services will include network access, scheduling, and providing technical support for integration. Subject Matter Expert support is anticipated to require technical in-depth knowledge of AMC/A2 programs and applications to provide proper facilitation to vendors and entities requiring access to and integration with AMC/A2 programs.

4.3.4. Asset Management and Logistics

The contractor shall provide logistics and asset management for GTPaaS. Additionally, the contractor shall:

• Store, distribute, manage, and account for all JEFF-K hardware including associated SD- WAN equipment, licenses, and subscriptions.

• Store, distribute, manage, and account for all SATCOM hardware including all subscriptions.

• Conduct and provide quarterly hardware/software inventories.

• Provide just-in-time logistics support of request deployment communications kits and associated services.

• Coordinate and conduct pre-deployment readiness checks to ensure equipment is mission ready prior to shipment.

• Coordinate delivery of hardware to customer sites based on the agreed schedule and/or at the request of the Government.

• Package, handle, store, transport, and ship materials using best commercial practices to ensure effective use of space for packaging, handling, and transportation.

4.3.5. Training

The contractor shall provide familiarization and technical training on the JEFF-K and GTPaaS capability and associated infrastructure to end-users, operators, and maintainers, in accordance with commercial best practices and industry standards. The depth and breadth of training and associated materials provided shall be to a level sufficient to enable the customer staff to effectively and efficiently set-up, administer, operate, maintain and use the JEFF-K and GTPaaS capability. Additionally, the contractor shall:

• Provide user, operator and maintainer training at customer site (continental United States (CONUS)) in conjunction with initial JEFF-K deployments, and with each major update or release, when requested by the Government.

• Provide each student a training manual specifying objectives for use during the training class. Provide each student a training certificate and provide the Government a list of students trained.

• Perform one on-site training per calendar year at each active-duty Air Mobility Command Base for a duration of three days at each respective location. Contractor travel and expenses to support these trainings will be at cost to the contractor.

• Contractor will support training at the contractor facility upon request by the Government when necessary. Travel to the contractor facility by the Government will be at the discretion and expense to the Government.

• Develop and make supplemental training available to the customer remotely online (e.g., via virtual course, webinar, computer-based lessons, video teleconference).

• Provide a Training Catalog outlining initial JEFF-K and familiarization GTPaaS training.

• Provide training materials (e.g., operating manuals, user guides, quick reference guides, and job aids).

• Develop operator checklist for inclusion in each JEFF-K.

4.4. Secure Entry Point (SEP) Network Infrastructure

4.4.1. SEP Dedicated Circuits/Gateways

The contractor shall design, install, configure, test, operate, maintain, administer, and manage the dedicated NIPRNet, SIPRNet and TS JWICS connections and network infrastructure, including all associated hardware and software permitting the transmission and sharing of data supporting the security of the information and systems. The Government will provide approvals and sponsorship required to establish the GTPaaS network infrastructure in accordance with a Final

DD254.

The contractor shall provide and maintain a highly resilient networking and communication path from the edge (JEFF-K) to customer resources in NIPRNet, SIPRNet and AF JWICS enclaves.

The contractor shall manage the ingress points used for accessing the commercial backbone, the egress points to the data center, network support and security to the connections. This capability is to deliver a session smart routing capability which will natively allow users to find the most efficient path across a dynamic backbone back to the data center.

Upper data limits for the Secure Entry Point are as follows and will support up to thirty-two

JEFF-K:

• Egress/Ingress – 40hrs/ week utilization.

• Data Transfer – 5TB per month.

• GovCloudVPC – 10TB down – 5TB up per month.

• Up to four network interfaces; three ingress and one egress.

4.5. Government Furnished Equipment (GFE)

The Government will provide the contractor with JEFF-K’s and encryption devices as required to fulfill the obligations under this PWS. The Government will provide authorized contractor personnel access to unclassified and classified network services (e.g., e-mail, Internet) and support, and provision access to shared resources required in performance of this PWS. All Government furnished property or equipment incidentals to the performance under this PWS will remain property of the Government and be accountable under Government internal controls.

Tasks shall be determined jointly (Government/contractor) via monthly schedule Task/Technical Update Meetings. These meetings shall be hosted on a set schedule as mutually agreed upon by the Government and the contractor and be conducted at Scott AFB, at the contractor’s facility, or virtually. Meeting minutes shall be documented and utilized as the basis of determining tasking priorities/deliverables/schedule.

5. Contract Type/Period of Performance

5.1. Firm Fixed Price

This contract will include a one-year base period with four one-year option periods, and a six-month Extension of Services period.

6. Place of Performance

The primary place of performance will be the contractor’s facility and/or at contractor designated location(s) required to provide and sustain this capability platform. Individual task or delivery orders may require performance of duties at other or multiple locations. Contractor shall submit visitor access requests (VAR) as needed for visits to AMC/A2 at Scott AFB, or for ad hoc visits to AMC site locations. Updates to the contract DD254 shall be made per order as required for the inclusion of these locations. The contractor must have a facility within two Nautical miles of an Air Mobility Command base.

7. Security

Security will be in accordance with an attached DD254. Contractor team individual(s) supporting this task will be cleared at the TS/SCI level at the start of the task. Contractors will require access to Communications Security (COMSEC), Sensitive Compartmented Information (SCI) material/information in performance of this PWS. Contractor will not require access to government computer systems. Contractor is authorized to courier classified material/information up to the TOP SECRET level in performance of official duties upon approval of a designation by the contracting officer representative (COR). Courier authorization includes TOP SECRET COMSEC such as encryption devices, electronic key, and key loading support equipment as required to support the platform JWICS and SIPRNet capability.

The Government will be responsible for obtaining security certification for all equipment/systems processing classified information. The Government will identify security certification requirements to the contractor during review of the initial site survey. The contractor shall ensure its Operations and Maintenance (O&M) procedures comply with those regulations identified within the DD254, Contract Security Classification Specification, which is a part of this contract.

The contractor shall require access to COMSEC information. All security requirements for this task are defined in the attached DD254.

Contractor must possess a TS/SCI Facility Clearance to perform on this contract.

7.1. The contractor shall insure requirements for safeguarding classified information and classified materials, for obtaining and verifying personnel security clearances, for verifying security clearances and indoctrination of visitors, for controlling access to restricted areas, for protecting government property, and for the security of automated and non-automated management information systems and data are fulfilled. The contractor’s management system shall prevent unauthorized disclosure of classified and sensitive unclassified information. The government shall be immediately notified if any security incident or any indication of a potential unauthorized disclosure or compromise of classified or sensitive unclassified information occurs.

7.2. The contractor shall provide security management support. Typical effort includes performing classified document control functions, classified materials inventories, program access requests, preparing and monitoring personnel indoctrination and debriefing agreements, and maintaining and using security-related databases.

7.3 Industrial Security Requirements. Contractor shall comply with DoDM 5220.22M, Volume

2_AFMAN 16-1406 Volume 2 and, DoDM 5200.01, Volume 1_DAFMAN 16-1404 Volume 1, DoDM 5200.01, Volume 2_DAFMAN 16-1404 Volume 2, and DoDM 5200.01, Volume 3_DAFMAN 16-1404 Volume 3. Facility and employee security clearances are obtained according to DoDM 5220.22M, Volume 2_AFMAN 16-1406 Volume 2. This manual includes specific requirements for the handling of classified information, security clearance, control of areas, visitor control procedures, Sub-Contractors, vendors and suppliers, consultants, parent-subsidiary and multiple facility organizations, sensitive compartmented and Communications Security (COMSEC) information, overseas operations, security requirements for automated information systems, and operations security (OPSEC). This includes clearance procedures, visitors, and inspections.

7.3.1 All personnel shall complete Derivative Classification/Marking Classifications Training as required per DoDM 5200.01, Volume 2_DAFMAN AFI 16-1404, Volume 2 Information Security Program Marking of Classified Information. All Air Force personnel (military, civilian, and on-site contractors with access to classified information systems are considered derivative classifiers and any other person designated by the commander or director. SIPR users are required to receive initial training and refresher training every two years.

7.3.2 The Classified Marking CBT can be found at Marking Classified Information http://cdsetrain.dtic.mil/markings/dss_mark_fy12/launchPage.htm. If page is unavailable, contact the COR.

http://cdsetrain.dtic.mil/markings/dss_mark_fy12/launchPage.htm

7.3.3 The Initial Derivative Classification CBT can be found at Derivative Classification http://cdsetrain.dtic.mil/derivative/index.htm. If page is unavailable, contact the COR.

8. Government Furnished Equipment (GFE)

8.1. The Government will provide all necessary equipment and High Assurance Internet

Protocol Encryptor (HAIPE) equipment in the performance of this PWS. The contractor shall maintain asset records for government equipment housed at/in their worksite in accordance with all applicable Government regulations. All equipment and services shall be used only in the performance of this PWS and/or individual task order PWSs. The COR shall determine the type, quality, quantity, responsibility, and location of all Government furnished items and services. The use (or non-use) of Government furnished items and services will be subject to the Government’s current and evolving schedules, policies, and procedures. The Government will provide maintenance or funding to acquire all furnished equipment under this contract. The Government will be responsible for replacing equipment that is deemed required and is no longer serviceable.

9. Accounting and Appropriation Data

9.1. The subject line of the contractor email invoice submission shall contain the contract number, contract line-item number, the order number, if applicable, and the number of invoices. The contractor shall submit monthly invoices in Wide Area Workflow (WAWF).

9.2. Invoices shall be submitted in accordance with the contract terms, (i.e., payment schedule, progress payments, partial payments, deliverables, etc.)

9.3. All questions concerning contract payments shall be directed to the Contracting Officer (KO) and/or COR.

10. Other Pertinent Information or Special Considerations

The contractor hereby understands and agrees if work to be performed under this contract requires access to proprietary data of other companies, the contractor shall protect such data from unauthorized use or disclosure so long as it remains proprietary. Further, the contractor agrees it will not utilize data obtained from other companies in performing additional studies in the same field, which are obtained competitively. The contractor shall notify the Government of any potential or actual conflict of interest situation that arises. The contractor must provide access to any directed government, military, or contractor personnel required to service Government equipment that will be evaluated or operational within the Global Transport Platform. The contractor is responsible for providing and maintaining Non- Disclosure Agreements (NDAs) with applicable contractor personnel providing support to the platform as required to maintain mutual understanding and safeguarding of proprietary information. Contractors shall complete the customer-provided Intelligence Oversight training as required by customer requirements and will report any Questionable Intelligence Activity (QIA), Significant/Highly Sensitive Matter (S/HSM), and/or Federal Crimes IA W procedures established in DoD Directive 5148.13, Intelligence Oversight, and AFI 14-104, Intelligence Oversight. For contracts involving cryptographic matters in addition to DoDD and AFI reference, USSID 18, Legal Compliance and US. Persons Minimization Procedures.

11. Special Contracting Requirements

11.1. The contractor agrees not to release or disclose, verbally or in writing, information pertaining to the discovery of Government requirements, results, or findings of work (including data collection, analyses, draft or final papers and reports) for the period of this contract without first notifying and gaining expressed permission from the Contracting Officer and/or COR in writing at least 21 calendar days prior to release or disclosure.

11.2. The contractor must provide notification (minimum 21 calendar days prior to release) and in writing, specifying: who or what is generating the request for advance information; when and how project results/information would be released; and what information would be released.

12. Data Deliverables

All deliverables shall meet professional standards and meet the requirements set forth in contractual documentation. Products and documentation delivered under this PWS become the property of the Government.

Table 1 – Data Deliverables

The following deliverables shall be provided in accordance with (IAW) Exhibits A:

Data Item Number PWS Para. Deliverable Description

A001 4.3.2 Configuration and Traceability Report

A002 4.3.2 Configuration Management Report

A003 4.5 Monthly Task/Technical Update Meeting Minutes

A004 4.3.5 GTPaas Training Catalog

A005 4.3.4 Asset Management and Logistics Inventory List

A006 4.3.5 Training Materials

13. Services Summary

The Services Summary table below summarizes the most important performance objectives and performance thresholds (specific standards) as identified within the body of the PWS. The absence of any performance objective and threshold from this Services Summary shall not detract from its enforceability nor limit the rights or remedies of the Government under any provision of the contract. Metrics shall be calculated monthly unless otherwise specified.

Table 2 – Services Summary

Performance Objective PWS Para. Performance Threshold

Field and support portable Starlink/Starshield satellite communications (SATCOM) terminals and service.

4.2.1, 4.2.2, 4.4.1

Service Support team resolves terminal and service connectivity issues in the field no less than 95% of the time.

Provide 25GB/month with up to 20Mbps of expected download and up to 3Mbps in upload for the five Tampa 95cm satellite antennas AMC/A2 currently owns.

4.2.1

Service Support team resolves terminal and service connectivity issues no less than 95% of the time.

Acquire, field, and support SD-WAN hardware capable of providing each JEFF-K with multipath routing and failsafe delivery.

4.2.2 Validate field support request is complied with within established resolution timeframe 95% of the time.

Coordinate JEFF-K requirements, configuration, and delivery to AMC/A2 designated users.

4.3, 4.3.1, 4.3.2, 4.3.3

Service Support team resolves terminal and service connectivity issues in the field no less than 95% of the time.

Provide logistics and asset management for GTPaaS. 4.3.4

Service Support team resolves terminal and service connectivity issues in the field no less than 95% of the time.

Provide familiarization and technical training on the GTPaaS and associated infrastructure to end-users, operators, and maintainers in accordance with commercial best practices and industry best standards.

4.3.5 Validate field technical training support request complied with within established resolution timeframe 95% of the time.

Design, install, configure, test, operate, maintain, administer, and manage the dedicated NIPRNet, SIPRNet and TS JWICS connections and network infrastructure, including all associated hardware and software permitting the transmission and sharing of data supporting the security of the information and systems.

4.4.1 Provide uptime and throughputs of the system as required via scheduled visits virtually and in-person.

Participate in Monthly Task/Technical Update Meetings. 4.5

No more than two cancelled monthly meetings/technical update meetings within the performance period per year.

GTPaaS Environment 6, 7, 7.1, 7.2

Environment to be prepared at contractor designated facility to store and house assets in support of service capability.

On-going mission support from contractor facility to include physical security, compute, networking, storage, facilities and connectivity to the government network as needed. 60 Days after contract award and continuous for duration of contract.

Secure Entry Point (SEP). 4.4, 4.4.1

Government and Contractor to confirm SEP location, contractor requirements and Government requirements to provide SEP service capability within 120 days after contract award.

Provide JEFF-K Configuration Management/Automation.

4.3.2

Contractor shall implement operational plan for JEFF-K automation within 45 days after contract award.

JEFF-K Risk Management Framework (RMF). 4.3, 4.3.2

Contractor to perform RMF on the JEFF- K. Government to provide GFE JEFF-K for the RMF service within 270-365 days.

Government will provide requirements needed for AF JWICS service.

JWICS Equipment Tracking system. 4.3.4, 4.4.1.

Government and contractor will collaborate and agree on best approach to implementing a tracking system for deployable AF JWICS within 365 days after contract award.

AF JWICS approvals. 4.3.4, 4.4.1., 7, 10

As directed by Government sponsorship at contractor designated facility. GTPaaS to receive proper approval authorities to support AF JWICS service capability.

May take longer than 365 days because of the approving authorities.

APPENDIX A: ACRONYM DEFINITIONS

ACRONYM DEFINITION

AF JWICS Air Force Joint Worldwide Intelligence Communication System COMSEC Communications Security CONUS Continental United States COR Contracting Officer's Representative DDIL Disrupted, Disconnected, Intermittent, and Low-Bandwidth GFE Government Furnished Equipment GTPaaS Global Transport Platform as a Service HAIPE High Assurance Internet Protocol Encryptor JEFF-K Joint Expeditionary Forward Flyaway Kit KO Contracting Officer Mbps Megabits Per Second MIR Maximum Information Rate NIPRNet Non-Secure Internet Protocol Router Network PACE Primary, Alternate, Contingency, and Emergency PM Program Manager PWS Performance Work Statement SATCOM Satellite Communications SD-WAN Software-defined Wide Area Network SEP Security Entry Point SIPRNet Secret Internet Protocol Router Network SME Subject Matter Expert TS/SCI TOP SECRET/Sensitive Compartmented Information

APPENDIX B: SEP BLOCK DIAGRAM