LevelUP_AMA_03Oct19.pdf

UNCLASSIFIED

DevSecOps Initiative

Ask Me Anything 03 Oct 2019

Lt Cody Paul Lt Col Richard Lopez

Capt Victoria Wyler Ms. Christina Fernandez

Ms. Dawn Davenport

Agenda

• Opening Remarks

• About the DoD DevSecOps Initiative & LevelUP

• What is a BPA?

• What are we looking for?

• Eligibility Requirements

• What’s next?

• Question & Answer Period

UNCLASSIFIED//FOR OFFICIAL USE ONLY

Opening Remarks Welcome & Administrative Announcements

• During this AMA, post questions to the Q&A Forum, not the chat box

• This session will be recorded & posted to FBO

Notice to Industry Contractors Supporting LevelUP for Technical Evaluations

Federally Funded Research and Development Center

(FFRDC):

• MITRE

LevelUP Establishing an enterprise capability to access DevSecOps services, enterprise licenses and tool chain management and cloud services utilizing this BPA approach.

What is a BPA?

• Blanket Purchase Agreement: a simplified acquisition method that government agencies use to fill anticipated repetitive needs for supplies or services.

• Each BPA has an estimated value of $95M (not a ceiling)

• Each call against a BPA will be IAW thresholds identified in FAR Part 13 -

Simplified Acquisition Procedures and/or any approved agency supplements or deviations for same

• BPAs will include the following contract types: FFP, T&M, LH and Cost (only for travel)

• Approval is still pending for the use of T&M and LH

• BPAs will include price list for labor categories and/or known licenses

• BPAs will be updated to reflect changing technology (tech refresh)

BPAs currently posted:

1) Software DevSecOps Services

2) DevSecOps Pipeline and Platform Integration and Licensing Services

3) Cloud Services

Example 1 BPA Call (Under SAT)

• F-16 SPO has a requirement to build an application supporting its modernization efforts

• F-16 SPOs designated representative reviews the price lists for all 15 BPA holders and sends a request for quote to 3 of the companies to help them develop a plan to best support their requirement

• Once the quotes come back, the Government will place a call to the winning vendor. The BPA holder agrees to the call and 5 DevSecOps engineers and a Scrum Master start work

Example 2 BPA Call (Over SAT)

• F-16 SPO has a requirement to build an application supporting its modernization efforts

• F-16 SPOs designated representative reviews the price lists for all of the 15 BPA holders and sends an RFQ to all of the companies to compete amongst themselves to help them develop a plan to best support their requirement

• Once the call has been competed and the Government determines the most fair and reasonable pricing and the BPA holder agrees to the call, 5 DevSecOps engineers and a Scrum Master start work

What are we looking for (BPA 1)?

Software DevSecOps Services – FA8307-19-R-0133 BPA Scope Summary: Technical services of full-stack DevSecOps engineers, infrastructure engineers, and other key personnel, to include:

Software engineers, programmers, and developers. These services will support the Government in constructing a secure, reliable, resilient, and assured set of software applications on the supporting Government and commercial tools and platforms

What are we looking for (BPA 2)?

DevSecOps Pipeline & Platform Integration & Licensing Services - FA8307-19-R-0134 BPA Scope Summary: The contractor will provide DevSecOps pipeline and platform integration and licensing to help support a wide collection of software and programming tools supporting the continuous integration and delivery (CI/CD) of software products and the LevelUP platform. Software licenses may also include software business tools that enable LevelUP operability. The contractor is NOT being asked to develop an end to end solution, but rather procure the license for and/or support the integration of a new or existing capability within the LevelUP DevSecOps pipeline

What are we looking for (BPA 3)?

Cloud Services - FA8307-19-R-0135 BPA Scope Summary: Provide a set of services via a Cloud Service Provider (CSP) that LevelUP users can leverage to develop and deploy accredited, integrated, and tested code at multiple classification levels and hybrid cloud architectures to include, but not limited to IL5, IL6, and other classification networks via commercial cloud

Eligibility Requirements Who can submit?

Both Large and Small Businesses

MUST BE REGISTERED IN SAM.GOV no later than 1 November 2019 to be eligible for award https://sam.gov/SAM/pages/public/index.jsf

13 November Onboarding Event

Tentative Location: Spire D.C.

• http://spireeventsdc.com/

• 750 First St NE, Washington, DC 20002 http://spireeventsdc.com/

Event Overview Marketing event for the DoD DevSecOps Initiative

• Networking opportunity for both large & small businesses

• DevSecOps initiative Overview

• How other program offices/agencies can participate

• Blanket Purchase Agreements (BPAs) tied to the initiative

• One-on-One pitch sessions with selected companies

• Companies with the highest rated capability documents will be invited to validate their capabilities. Please note these pitches are an extension of the evaluation from the BPA and will only be open to the evaluation team.

• If selected, the company will receive the signed agreement same day.

• Companies selected for the other two BPAs (DevSecOps Tools, Pipeline & Platform Integration & Licensing Blanket Purchase Agreement, and Cloud Services) will be notified of their selection NLT 1 Nov.

What’s Next?

Technical Proposal/Submission Requirements

Events to Award:

16 Oct 19 (noon CDT)- Submissions due

1 Nov 19 - Invitations/Notifications of Non-Selections

TBD Nov 19 – Ask Me Anything Session for Invited Companies

13 Nov 19 – Onboarding Event (D.C.)

UNCLASSIFIED 16

Questions

UNCLASSIFIED 17