LevelUP_AMA_25Sep19.pdf

UNCLASSIFIED

DevSecOps Initiative

Ask Me Anything 25 Sep 2019

Lt Cody Paul Ms. Christina Fernandez

Ms. Dawn Davenport Mr. Roger DiRocco

Agenda

• Opening Remarks

• About the DoD DevSecOps Initiative & LevelUP

• What is a BPA?

• What are we looking for?

• Eligibility Requirements

• What’s next?

• Question & Answer Period

UNCLASSIFIED//FOR OFFICIAL USE ONLY

Opening Remarks Welcome & Administrative Announcements

• During this AMA, post questions to the Q&A Forum, not the chat box

• This session will be recorded & posted to FBO

Notice to Industry Contractors Supporting LevelUP for Technical Evaluations

Federally Funded Research and Development Center

(FFRDC):

• MITRE

DoD DevSecOps Initiative What is DevSecOps?

The software automated tools, services, and standards that enable programs to develop, secure, deploy, and operate applications in a secure, flexible and interoperable fashion.

What is the DevSecOps Initiative?

Joint Program with OSD A&S, DoD CIO and the DoD Services.

Why should I care?

Software and cybersecurity pervades all aspects of DoD's mission (from business systems to weapons systems to Artificial Intelligence to cybersecurity to space) - establishing DevSecOps capabilities will:

• Deliver applications rapidly and in a secure manner, increasing the warfighters competitive advantage

• Bake-in and enforce cybersecurity functions and policy from inception through operations

• Enhance enterprise visibility of development activities and reduce accreditation timelines

• Ensure seamless application portability across enterprise, Cloud and disconnected, intermittent and classified environments

• Drive DoD transformation to Agile and Lean Software Development and Delivery

Leveraging industry acquisition best practices combined with centralized contract vehicle for DevSecOps tools and services will enable rapid prototyping, real-time deployments and scalability

LevelUP We are a U.S. Air Force software development outfit using agile processes and the latest DevSecOps technology to rapidly deliver capabilities to support a wide range of Air Force and DoD missions.

Based in San Antonio, the LevelUP team of Air Force and industry partners is embracing a startup culture that values innovation -- pushing boundaries to transform the future and protect the security of the United States.

https://www.linkedin.com/company/levelupusaf?trk=public_profile_topcard_curr ent_company https://www.linkedin.com/company/levelupusaf?trk=public_profile_topcard_current_company

What is a BPA?

• Blanket Purchase Agreement: a simplified acquisition method that government agencies use to fill anticipated repetitive needs for supplies or services.

• Each BPA has an estimated value of $95M (not a ceiling)

• Each call against a BPA will be IAW thresholds identified in FAR Part 13 -

Simplified Acquisition Procedures and/or any approved agency supplements or deviations for same

• BPAs will include the following contract types: FFP, T&M, LH and Cost (only for travel)

• Approval is still pending for the use of T&M and LH

• BPAs will include price list for labor categories and/or known licenses

• BPAs will be updated to reflect changing technology (tech refresh)

BPAs currently posted:

1) Software DevSecOps Services

2) DevSecOps Pipeline and Platform Integration and Licensing Services

3) Cloud Services

What are we looking for (BPA 1)?

Software DevSecOps Services – FA8307-19-R-0133 BPA Scope Summary: Technical services of full-stack DevSecOps engineers, infrastructure engineers, and other key personnel, to include:

Software engineers, programmers, and developers. These services will support the Government in constructing a secure, reliable, resilient, and assured set of software applications on the supporting Government and commercial tools and platforms

What are we looking for (BPA 2)?

DevSecOps Pipeline & Platform Integration & Licensing Services - FA8307-19-R-0134 BPA Scope Summary: The contractor will provide DevSecOps pipeline and platform integration and licensing to help support a wide collection of software and programming tools supporting the continuous integration and delivery (CI/CD) of software products and the LevelUP platform. Software licenses may also include software business tools that enable LevelUP operability. The contractor is NOT being asked to develop an end to end solution, but rather procure the license for and/or support the integration of a new or existing capability within the LevelUP DevSecOps pipeline

What are we looking for (BPA 3)?

Cloud Services - FA8307-19-R-0135 BPA Scope Summary: Provide a set of services via a Cloud Service Provider (CSP) that LevelUP users can leverage to develop and deploy accredited, integrated, and tested code at multiple classification levels and hybrid cloud architectures to include, but not limited to IL5, IL6, and other classification networks via commercial cloud

Eligibility Requirements Who can submit?

Both Large and Small Businesses

MUST BE REGISTERED IN SAM.GOV no later than 1 November 2019 to be eligible for award https://sam.gov/SAM/pages/public/index.jsf

What’s Next?

Technical Proposal/Submission Requirements

Events to Award:

17 Sep 19 - RFQ Released

25 Sep 19 - Ask Me Anything Session

3 Oct 19 - Ask Me Anything Session

16 Oct 19 (noon CDT)- Submissions due

1 Nov 19 - Invitations/Notifications of Non-Selections

TBD Nov 19 – Ask Me Anything Session for Invited Companies

13 Nov 19 – Onboarding Event (D.C.)

UNCLASSIFIED 13

Questions

UNCLASSIFIED 14