FA830720F0080-P00006 JA REDACTED_Redacted.pdf

Sole Source (Including Brand Name) Justification - Simplified Procedures for Certain Commercial Items

Controlled Unclassified Information

18 Jun 2019 Controlled Unclassified Information Page 2 of 4

I. Contracting Activity.

United States Air Force Nuclear Weapons Center/PZBA 6008 Wardleigh Road Building 1580 Hill Air Force Base, Utah 84056-5825

II. Nature and/or description of the action being processed.

currently utilizes the Government-Owned Fences platform to support the creation of a digital engineering ecosystem built on a cloud infrastructure. The availability and authorization of multi-level Fences environments, which are essential to supporting model-based system engineering (MBSE) and product life-cycle maintenance (PLM) tools and data for the and tied to multiple "shalls" required by the Government. In order to continue the development of the Fences platform and both expand and secure the digital engineering applications available to users through Fences, GBSD requires a dedicated Novetta cloud engineering team to support the development, automation, installation, and configuration of enhancements to the Fences workloads and Fences desktop bundles and their applications on multiple security classification layers. The contract being modified to support this cloud engineering team is FA830720G0044/FA830720F0080, with 3600 funding.

III. Description of supplies/services required to meet agency needs.

The Procuring Contracting Officer (PCO) has determined that the engineering services (listed below) required in this order fall within the scope of the existing Fences contract (FA8307-20-F-0080). The intent is for a six month Period of Performance (PoP) for the following positions, with an estimated value of $778,254.20.

Based on the GLIDE Enhanced Engineering rough order magnitude (ROM), the following Cloud Engineering positions are required for a six month Period of Performance:

a) IT Dev Support Team III - 2.0 FTE

b) DevSecOps Engineer III - 1.0 FTE

c) CyberSecurity Engineer III - 0.5 FTE

d) Network Engineer - 1.0 FTE

e) IT Ops Team II - 0.5 FTE

IV. Statutory authority permitting other than full and open competition.

AFFARS 5313.501 - 10 U.S.C. 2302b, Implementation of Simplified Acquisition Procedures (41 U.S.C. 1901)

V. Demonstration that the contractor's unique qualifications or nature of the acquisition requires the use of the authority cited above (applicability of authority).

Since April 2020, the Fences contract awarded to Novetta has been in place to build, configure, and contribute to the authorization for multi-level Fences environments at IL-5, IL-6, S-SAR, TS-SAR, and TS-SCI SAR levels in a cloud environment. The Fences environments will support a Platform One DevSecOps pipeline, will allow GBSD users to access Digital Engineering Ecosystem applications, and will be the Government Furnished Environment provided to the prime contractor for CDRL delivery, DevSecOps pipelines, and software development.

The development, configuration, and delivery of these Fences cloud environments are a deliverable to the prime contractor, and are part of GBSD's . While environments in the IL-5 and TS-SAR environments have been deployed, additional configuration and updates are still required. Additionally, other environments remaining are still in the initial stages for deployment and require a significant amount of work and are crucial to GBSD's success and its ability to provide the full Government Furnished Environment to the prime contractor. For this reason, GBSD requires additional Novetta manpower to continue the Fences environment development and ensure the environment is ready in time for its Government user base access as well as prime contractor critical path requirements.

Sole Source (Including Brand Name) Justification - Simplified Procedures for Certain Commercial Items

18 Jun 2019 Controlled Unclassified Information Page 3 of 4

Utilizing the existing Fences contract for this manpower would save the Government time and money by reducing the internal Government manpower required to set up a new, separate contract for work that falls within the scope of the original Fences contract. The setup of a new labor contract is estimated to take 60-90 days and would require an additional 0.5 FTE of Program Management manpower in the Development Branch, which would take additional funding and/or would push other contract activities back.

Additionally, a new contract, if competed and awarded to a different contractor, would require a significant amount of additional time and funding to ramp up, authorize, and deploy a separate Fences platform. The code underlying the Fences platform is owned by both Novetta and the Government, and the existing Fences platform configured and deployed by Novetta has been authorized for SAP data. While the Fences platform, as Government-owned code, could be redeployed by another contractor, the timeline for the deployment, configuration, and SAP authorization of the platform would be a multi-year effort, and would significantly delay the remaining planned Fences workload environment configuration and availability for both the prime contractor and the GBSD user base. Set up of the current Fences environment, which leverages the pre-existing Novetta SAP-authorized Fences platform, has required over a year of 7-9 FTE of Cloud Engineers, Architects and Cybersecurity Specialists. It can be expected the setup of a new Fences environment would require the same level of effort for the workload configurations plus additional effort to re-deploy, configure, and authorize the new platform. At a labor rate of $170/hr, for the 8 FTE's, the estimated cost of a new platform set up equates to $5,657,600 for just the labor portion of the development. This would be a 100% duplication of cost and effort to the government to start a new platform and does not take into account the loss of two years of work that would be done on the platform while it was being re-developed, deployed, and configured. It is impossible to quantify not only the dollar value of the estimated two year loss in development, but the loss of time and capability would be crippling to the GBSD critical path and would result in untold dollar amount of loss beyond the labor. Additionally, not providing the prime contractor the GFE in the form of the fully configured environment will result in the government delaying the prime contractor's critical path and possibly resulting in the Government being forced to pay the prime contractor in the event a request for equitable adjustment was received.

Utilizing the existing contracting vehicle for this Novetta labor will shorten the acquisition lead-time for this manpower, allowing the Government to utilize the engineering team as quickly as possible for the Fences platform deployments and configurations already in work. This shortened timeline for additional labor will minimize any impact to GBSD's critical path.

VI. Description of efforts made to ensure that offers are solicited from as many potential sources as practicable.

5.202 (11) The proposed contract action is made under the terms of an existing contract that was previously synopsized in sufficient detail to comply with the requirements of 5.207 with respect to the current proposed contract action.

VII. Determination by the Contracting Officer that the anticipated cost to the Government will be fair and reasonable.

The networking requirements for Novetta require a high level of cloud network engineering experience. Research on GSA/CALC shows Network Engineer III rates averaging $112 and ranging as high as $182 per hour, and Novetta's proposed Network Engineer rates of within that high range (and close to the +1 standard deviation of $141 per hour. Novetta's CyberSecurity Engineer rate of are very close to Cyber Engineer III averages on GSA/CALC of $172 per hour. On both CALC and the BLS websites, there is little to no historical data on any DevSecOps positions and their rates; but the limited data for a Senior DevOps Engineer is $184 per hour, and the Novetta rate for a level III DevSecOps Engineer is slightly under that rate of . Similarly, IT Dev results on CALC have limited data with a wide range of labor rates, with some rates falling over $200 per hour and even one up to $350 per hour. The Novetta requires a level III, and the proposed rates of are just over the standard deviation for IT Dev (not limited to level III) of $168. Finally, for IT Operations Specialists at level II average $123, and Novetta's proposed rates of are very close to that average. The Contracting Officer will further evaluate the rates against the original proposal and other data to make a final determination of whether the price is fair and reasonable.

Sole Source (Including Brand Name) Justification - Simplified Procedures for Certain Commercial Items

18 Jun 2019 Controlled Unclassified Information Page 4 of 4

VIII. Description of the market research conducted and the results, or a statement of the reasons market research was not conducted.

The proposed additional engineering labor falls within the scope of the original Fences contract efforts to deploy workloads on multiple Fences classification levels. Access to this additional labor through the Fences contract would accelerate existing workload deployment efforts by providing Fences cloud engineering expertise in a significantly shorter timeline than the creation of a new contract. Due to the determination that the labor and tasks are within scope of the original contract, the fact that the Fences cloud deployments impact GBSD's critical path, and the follow-on contract will be competed within the next seven months, market research for a separate contract was not conducted.

IX. Any other facts supporting the use of Other Than Full and Open Competition.

N/A

X. List of any sources that expressed, in writing, an interest in the acquisition.

No other sources expressed, in writing, an interest in this acquisition, as other offers have not been solicited. As stated in Section VI above, this action is being made under the terms of an existing contract that was previously synopsized in compliance with the requirements in 5.207.

XI. A statement of the actions, if any, the agency may take to remove or overcome any barriers to competition before making subsequent acquisitions for the supplies or services required.

The Fences environments are currently being developed to support workloads and DevSecOps pipelines for multiple user types at multiple classification levels, to include IL-5, S-Col, S-SAP, and TS-SAP. After the Fences environments have been fully developed, the environment will be ready for day-two operations, which will provide the opportunity for a new, follow-on services contract. A follow-on contract will be required at the end of the current contract in October of 2021. For the future follow-on requirement, the Government intends to compete the Fences follow-on contract among the 40+ DevSecOps BOA vendors.

XII. Certification by the Contracting Officer.

As evidenced by my signature above, I have determined this document to be both accurate and complete to the best of my knowledge and belief.

XIII. Certification by the technical/requirements personnel.

As evidenced by my (our) signature(s) above, I (we) certify that any supporting data contained herein, which is my (our) responsibility, is both accurate and complete.