DMI_Continuance_Final.pdf

PERFORMANCE WORK STATEMENT (PWS)

DCPAS Network Services

1. Title. Continuation of DCPAS Network Services

2. Background.

The Defense Civilian Personnel Advisory Service (DCPAS) supports the Under Secretary of Defense

(Personnel and Readiness), and the Deputy Under Secretary of Defense (Civilian Personnel Policy) in planning and formulating civilian personnel programs, providing policy support, functional information management and department‐wide civilian personnel administration services for the Military

Departments and Defense agencies.

DCPAS encompasses approximately 500 employees distributed within 14 divisions located in

Alexandria, VA and 11 field offices, and provide civilian personnel policy support, functional information management and civilian personnel administrative services to DoD Components and their activities.

The Department of Defense, DCPAS manages its own network connected to the Unclassified but

Sensitive Internet Protocol (IP) Router Network (NIPRNet). DCPAS requires network services. Current support is provided by one Network Engineer (Lead), one Network Engineer (Intermediate), and one

Senior Systems Administrator. The duties required encompass a broad range of highly technical skills and knowledge.

The Network Engineer (Lead) is responsible for the plan, design, development, configuration, installation, management and maintenance of all networked systems including local area networks

(LANs) and wide area networks (WANs) at the DCPAS Alexandria, VA site and eleven remote locations.

The Network Engineer (Intermediate) oversees a complex networking environment, including directory services partitioning and replication, performance tuning for the network and servers, time synchronization strategies, and internetworking with various versions of network operating systems.

The Network Engineer (Lead) and Network Engineer (intermediate) is responsible for the following:

Assist and advise IT personnel concerning design, utility and risk concerning network issues.

Develops and documents system standards for computer and network devices

Ensure appropriate network back-up solutions for all systems.

Identifying and solving network problems, including problem resolution of frame relay circuits for our remote sites.

Install hardware and software system for network.

Install, configure and manage Microsoft Exchange Server 2010, and 2007.

Interface with hardware and software vendors concerning problem/maintenance issues.

Maintain and configure network appliance such as Bluecoat, Cisco routers, Cisco VPN, etc.

Maintain DoD network security standards. Ability to run network scans including use of Retina, HBSS application and use of the reporting tool Vulnerability Management System (VMS).

Maintaining network system and diverse equipment including routers, switches, firewalls, bridges, UPS’s, etc.

Manage Active Directory policies, users, group certificates, security policies, and update software.

Network security as defined by Defense Information Systems Agency (DISA) and use of Retina for the methodology of Security Technical Implementation Guide (STIG).

Plan and implement new project work for DCPAS.

Recommend and schedule repairs to the LAN/WAN

Supervise and assist junior staff to perform technical responsibilities.

Supervise the performance of the network system.

Support new software & hardware server network requirement as appropriate.

Travel as needed to support eleven DCPAS Remote-Site Locations (New hardware/software installation/configuration/maintenance)

Work closely with other IT departments within DoD and other outside government agencies.

Both the Network Engineer (Lead) and the Network Engineer (Intermediate) must be knowledgeable and experienced with the following:

Software

ArcServe Backup Software v15

Acronis Imaging v8.6.3 or higher

Exchange 2003/ Exchange 2007/Exchange 2010

Symantec Antivirus Corporate Edition

Symantec Endpoint Protection v11.1.4

Symantec Enterprise Vault v9.0

Symantec Exchange 2003/2007 Mailbox Antivirus

GFI LanGuard Bridgehead/SMTP Antivirus

Linux (various editions) – Bind DNS, SendMail, Apache

Windows Server 2003 Std/Ent/DC x86 Edition

Windows Server 2008 Std/Ent/DC x86 and x64 SP1, SP2 and R2 Edition

Windows Active Directory – Smartcard/CAC & Leap

VM Ware ESXi v3.5

VM Ware ESX v4.0

Desktop Authority/ScriptLogic v7.0 – scripting, drive & printer mappings

Desktop Authority/ScriptLogic Port Security

HFNetChK – Patch Deployment

Blackberry Enterprise Server v4.6/5.1

PHP/HTML Programming

SolarWinds Network Tools

BigBrother Network Monitoring

Dell Open Manager Server Administration activePDFDoc Converter

Cisco Secure ACS v4.0 – VPN Authentication

Microsoft Network Print Servers

HBSS Software

Secure FTP – Data Transfer

Eye Retina Network Scanning Software – monthly reporting VMS

Sprint Frame-Relay Management – DISA Direct/TCOSS Circuit Administration

NIC.MIL – domain registration, whitelist new public facing website

ARL (Army Research Laboratory) Network Monitoring

PKI Network Device and Server Certificates

Hardware

Dell PowerEdge Server (1950, 2950, R900)

Dell PowerEdge Blade Servers (1900)

Dell EMC CX300 SANS – Fiber Channel, Storage Arrays, Brocade Switches

Dell EMC CX320 SANS – Fiber Channel, Storage Array’s, McData Switches

Dell PowerVault Tape Libraries

APC UPS (various models)

BlueCoat WebFilter

BlueCoat WebFilter Antivirus

Barracuda SPYWare Firewall Filter

Barracuda SPAM Firewall Filter

Cisco ASA 5500 series (VPN, Firewall)

Cisco 6509 Backbone Catalyst Switch

Cisco Catalyst Switches (2960, 3560, 3506G)

Cisco 2800 Series Routers

PolyCom Video Teleconferencing

ASPECT Phone System

The Senior Systems Administrator is tasked with the daily routines necessary to ensure availability of all network resources and applications. Those resources and applications include but are not limited to administration of the corporate email infrastructure which entails creating new user email accounts, new global distribution email lists, defragmentation of email databases, scheduling and verifying daily backups, as well as administration of the DCPAS server farm consisting of over 80 servers located in

Rosslyn and over 20 servers located throughout the Continental United States (CONUS).

The Senior Systems Administrator will be able to:

Recommend and schedule repairs to the LAN/WAN

Upgrade, install and troubleshoot networks, networking hardware devices and software

Install hardware and software system for network.

Monitor the performance of the network system.

Ensure appropriate network back-up solutions for all systems.

Support new software & hardware server network requirement as appropriate.

Work closely with other IT departments within DoD.

Maintain DoD network security standards. Ability to run network scans including use of Retina, HBSS application and use of the reporting tool Vulnerability Management System (VMS).

Manage network appliances such as Bluecoat, Develop and document system standards for computer and network devices

Recommend and schedule repairs to the LAN/WAN

Interface with hardware and software vendors concerning problem/maintenance issues.

3. Objectives:

The contractor shall provide technical support services for government-furnished telecommunications and computer network environments in accordance with DoD Instructions, organizational procedures, and best industry practices. Under this effort, the contractor shall, as part of an integrated government-contractor team, plan, organize, execute, analyze, and report developmental evaluations of telecommunications and network information operations systems in accordance with DoD Instructions and other applicable government and industry regulations, standards, and best practices.

The contractor shall meet or exceed the overall Technical Support Services objectives by providing highly skilled personnel who have specific training and extensive experience in the configuration, operation, troubleshooting and maintenance of DCPAS network environment equipment.

The contractor shall lead meetings, as appropriate, and provide technical review and recommendations of configuration change requests. The contractor shall be knowledgeable in the networking protocols and transport technologies associated with designing and maintaining voice and data communications infrastructure.

The contractor shall mentor new team members whenever possible to ensure cross training of skills and competencies across all networking and telecommunications areas.

The contractor shall collect, organize, review, maintain, and, upon government concurrence, approve all data and information required to ensure Certification and Accreditation (C&A) requirements are met.

Ensure that DIACAP and DoD security requirement are met within scheduled time frame.

4. Scope.

The objective of this request is to purchase Network Services that manages DCPAS network in a secure, efficient and cost effective manner, adhering to Defense information technology regulations.

5. Performance Requirements.

5.1 Network Engineering

5.1.1 Provide Maintenance of Network and Services

The contractor shall:

a) Perform router management and configuration.

b) Establish routing schemas.

c) Evaluate and define infrastructure requirements.

d) Develop contingency plans to ensure continuous availability and accessibility of network resources in the event of emergencies.

e) Manage Intra/Internet services.

f) Configure and manage LANs, WAN links and hosts.

5.1.2 Provide Systems Development

a) Adapt and implement system diagnostic and maintenance tools to assist in the management and delivery of DCPAS services.

b) Evaluate and recommend selection of new systems diagnostic tools.

c) Develop technical standards and procedures for LAN development, implementation, and management.

d) Lead feasibility studies of new network technologies such as integrating video with data and voice services, VPN, and Voice over IP.

e) Continually test and evaluate new access arrangements and new customer premises equipment prior to deployment.

f) Integrate systems and services brought in from elsewhere.

g) Establish performance management metrics in evaluating overall LAN performance against relevant standards.

h) Redesign network infrastructure in response to changes in network technologies or network requirements.

i) Install, configure and administer Virtual Machine (VM) platforms and Storage Area Network

(SANs).

j) Participate in the on-going development of quality systems and measures.

5.1.3 Provide Fault Management

a) Manage faults either internal or in externally used services (e.g., telecomm links).

b) Review audit logs and trace files to identify, analyze, and isolate potential problem sources.

c) Monitor network performance and troubleshoot problems.

d) Coordinate with DCPAS customers and service providers during and after fault rectification.

5.1.4 Provide Documentation

a) Maintain documentation of installations, configurations, ACLs and modifications made to the network.

b) Prepare detailed trip reports of work performed when visiting remote sites for installation or upgrades.

c) Prepare Disaster Recovery/Contingency Plans for the DCPAS networks.

5.1.5 Provide Customer Relations

a) Report, respond to, resolve, and document customer’s network requests in a manner that minimizes interruptions to the customer’s ability to carry out critical business activities.

b) Participate in departmental project meetings and all staff meetings. Visiting customer sites to install equipment and services.

5.1.6 Provide Network Security

b) Review audit logs and trace files to identify, analyze and isolate potential problem sources.

c) Coordinate with DCPAS customers and service providers during and after fault rectification.

d) Ensure compliance with Defense Information System Agency (DISA) Security Technical

Implementation Guide (STIG) requirements.

e) Maintain RETINA and HBSS scans.

f) Update Vulnerability Management System as required.

g) Interface with Joint Task Force-Global Network Operations (JTF-GNO) and Information

Technology- Army (ITA) for Computer Network Security (CND).

6.1 Systems Administration

6.2.1 Provide Maintenance of servers

a) Optimize server hardware and software.

b) Ensure servers are patched to DIACAP standards.

c) Install server Operating Systems.

d) Install server hardware.

e) Review new system specifications and supply recommended server configurations.

6.2.2 Provide Administration

a) Develop standards and criteria for assessing server performance.

b) Tune operating systems performance parameters including installing patches and drivers to optimize performance.

c) Coordinate the maintenance, upgrade, and support of servers.

d) Schedule maintenance activities.

e) Create, modify, and manage login scripts for mapping of user’s network resources.

f) Create, modify, delete and manage user accounts for access onto the corporate LAN/WAN.

g) Modify and manage Active Directory components for all users of the corporate LAN/WAN.

h) Create, modify, delete and manage user email accounts.

i) Configure, modify, delete and manage user email storage settings.

j) Create, configure, modify, delete and manage group email addresses.

k) Create, configure, modify, delete and manage distribution email addresses.

6.2.3 Provide Fault Management

b) Review audit logs and trace files to identify, analyze, and isolate potential problem sources.

c) Monitor server performance and troubleshoot problems.

d) Coordinate with DCPAS customers and service providers during and after fault rectification.

6.2.4 Provide Documentation

a) Maintain documentation of installations, configurations, and modifications made to the servers by use of change logs/system handbooks for each assigned system that will include all installed software, hardware, and configuration enhancements.

b) Develop server usage policies and procedures.

c) Maintain server drawings that include major components, locations of all taps or end points for all sites, all cables identified and labeled.

d) Prepare detailed trip reports of work performed when visiting remote sites for installation or upgrades.

e) Prepare Disaster Recovery/Contingency Plans for servers.

6.2.5 Provide Customer Relations

a) Report, respond to, resolve, and document customer’s network and server requests in a manner that minimizes interruptions to the customer’s ability to carry out critical business activities.

b) Participate in departmental project meetings and all staff meetings. Visiting customer sites to install equipment and services.

6.2.6 Provide Network Security

b) Review audit logs and trace files to identify, analyze and isolate potential problem sources.

c) Coordinate with DCPAS customers and service providers during and after fault rectification.

d) Ensure compliance with Defense Information System Agency (DISA) Security Technical

Implementation Guide (STIG) requirements.

e) Maintain RETINA and HBSS scans.

f) Update Vulnerability Management System as required.

7. Performance Standards.

Performance Standard Acceptable Quality Level

(AQL)

Method of Surveillance

6.1.1 Maintenance of

Network and Services and

6.2.1 Maintenance of

servers.

Performance occurs with no required re-performance or re-work at least 95% of the time.

Problems that occur are minor and are resolved in a satisfactory manner.

Random Sampling

6.1.2 Systems

Development.

Delivered within specification and on time at least 95%.

Periodic Inspection

6.1.3 Fault Management Performance occurs with no 100 Percent Inspection and 6.2.3 Fault

Management.

required re-performance or re-works at least 95% of the time.

Problems that occur are minor and are resolved in a satisfactory manner

6.1.4 Documentation and

6.2.4 Documentation.

Materials contain required information and are delivered on time at least 95% of the time.

Revisions that occur are minor and are resolved in a satisfactory manner.

100 Percent Inspection

6.1.5 Customer Relations

and 6.2.5 Customer

Relations

Customer feedback is positive at least 95% of the time

Customer Input

6.1.6 Network Security

and 6.2.6 Network

Security

Security instruments report problems that are minor and are resolved in a satisfactory manner by DISA standards within an average of two days of occurrence.

100 Percent Inspection

6.2.2 Administration.

Materials contain required information and are delivered on time at least 95% of the time.

Revisions that occur are minor and are resolved in a satisfactory manner.

Random Sampling

8. Incentives. Failure to meet Acceptable Quality Levels in any task will result in a 2% deduction in the monthly Invoice. No positive incentives are provided.

9. Place of Performance.

The majority of the work will be performed at the Defense Civilian Personnel Advisory Service, 4800

Mark Center Boulevard, Alexandria, VA 22350.

Travel will vary based on need. DCPAS anticipated a minimum of three trips per year, averaging three days. DCPAS have the following locations:

14 Mechanic Street, Box 12, Southbridge, MA 01550

1940 Allbrook Dr, Bldg #1, Rm D21, Post 34E, Wright-Patterson AFB, OH 45433

410 NE Loop 40, San Antonio, TX 78234

3200 Highlands Parkway, Smyrna, GA 30080

2656 San Antonio Ave, Bldg 297, Wright-Patterson AFB, OH 45433

510 Hickam Ave, Bldg 250, Bay A-1, Travis AFB, CA 94535

620 Peacekeeper Way, Robins AFB, GA 31098

801 "I" Street, Sacramento, CA 95814

Charles E. Bennette FOB, 400 West Bay St., Jacksonville, FL 32202

1100 Commerce St. Dallas, TX 75242

909 First St. Seattle, WA 98174

Alternate Place of Performance - Contingency Only. Contractor employees may be required to work at home, another approved activity within the local travel area or at the contractor's facility in cases of unforeseen conditions or contingencies (e.g., pandemic conditions, exercises, etc.). Any equipment such as laptops or phones provided to Contractor personnel shall be returned at the termination of the engagement or at another time mutually agreeable to both parties. Contracting Officer Representative

(COR)/Contract Monitor (CM) approval is required. Contractor shall prepare all deliverables and other contract documentation utilizing contractor resources. To the extent possible, the contractor shall use best efforts to provide the same level of support as stated in the PWS. In the event the services are impacted, reduced, compromised, etc., the Contracting Officer or the contractor may request an equitable adjustment.

10. Period of Performance.

The period of performance will be from June 1, 2014 to August 14, 2014.

11. Delivery Schedule

Deliverable Title Format Number

Calendar

Days After

TO Start

Bi-weekly Official

Time Sheet Microsoft Excel

Electronic Copy

CM

Every 13 th workday

Monthly Status

Report Microsoft Word/Excel

Electronic Copy to

KO andCM;

Monthly, on

7th Workday

12. Security. DoD Secret Clearances are required. See attached DD Form 254.

13. Government-Furnished Equipment (GFE)/Government-Furnished Information (GFI). Government will furnish the following equipment to staff upon arrival at DCPAS:

a. Computers w/monitors, keyboards and mice.

b. Government furnished workspace cubicle consisting of chair, desktop, and overhead bins

c. Common Access Card

14. Other Pertinent Information or Special Considerations.

There may be occasional travel to remote sites and Southbridge, MA. Other trips will be for configuring, updating, and installing hardware/software onto servers located at the other remote sites.

b. Identification of Potential Conflicts of Interest (COI).

c. Identification of Non-Disclosure Requirements.

d. Packaging, Packing and Shipping Instructions.

e. Inspection and Acceptance Criteria.

15. Section 508 Accessibility Standards. The following Section 508 Accessibility Standard(s)

(Technical Standards and Functional Performance Criteria) are applicable (if box is checked) to this acquisition.

Technical Standards

1194.21 - Software Applications and Operating Systems

1194.22 - Web Based Intranet and Internet Information and Applications

1194.23 - Telecommunications Products

1194.24 - Video and Multimedia Products

1194.25 - Self-Contained, Closed Products

1194.26 - Desktop and Portable Computers

1194.41 - Information, Documentation and Support

The Technical Standards above facilitate the assurance that the maximum technical standards are provided to the Offerors. Functional Performance Criteria is the minimally acceptable standards to ensure Section 508 compliance. This block is checked to ensure that the minimally acceptable electronic and information technology (E&IT) products are proposed.

Functional Performance Criteria

1194.31 - Functional Performance Criteria