MOJAVE FA3 Follow-on RFI_26June2023.pdf

UNCLASSIFIED

26 June 2023

Request for Information (RFI)

MOJAVE Functional Area 3: Enterprise IT Services Follow-On ID/IQ Contract

Requirements

A. Introduction

The National Geospatial-Intelligence Agency (NGA), in support of the Enterprise Technical

Services Office, is seeking information in the form of a capability statement on the level of interest, capabilities and qualifications of small and large businesses to provide support for the follow-on requirement for NGA’s MOJAVE Functional Area 3 (FA3) Enterprise Information

Technology (IT) services. The information received from this request will be used on a non-attribution basis.

The potential approach of the follow-on contract has yet to be determined. NGA is currently exploring all available contract vehicles with the appropriate resources to fulfill these requirements such as the following:

• GWACs

• GSA Schedules (MAS)

• Stand-alone procurement

This RFI is issued solely for information and planning purposes - it does not constitute an

Invitation for Bid (IFB), Request for Proposal (RFP), Request for Quotation (RFQ) or any indication that the Government will contract for any of the items and/or services contained in the notice (FAR 15.201(e)). NGA will not accept unsolicited proposals. In accordance with FAR

52.215-3 – Request for Information or Solicitation for Planning Purposes (Oct 1997), the

Government will not pay for any information/items submitted in response to this RFI. Data will not be returned.

This RFI does not commit the Government to award a contract. No determination as to the viability of this requirement has been made at this point and there is currently no solicitation for this effort. Any solicitation resulting from this RFI will be announced separately. Based on your response to this RFI, the Government may contact you with follow-up questions and/or for one-on-one sessions. Not responding to this RFI does not preclude participation in a future RFP, if any is issued.

B. Background Information

As a member of the U.S. Intelligence Community (IC) and a Department of Defense (DoD)

Combat Support Agency, NGA produces timely, relevant and accurate Geospatial Intelligence

(GEOINT) to help all levels of users meet their strategic and operational needs in support of national security objectives.

The MOJAVE FA3 program currently supports the accomplishment of the NGA mission by providing a wide variety of Information Technology (IT) & Technical services that enable effective program execution across the agency, with shift work (24-hour support) incorporated as needed. MOJAVE FA3 currently provides over 100 TS/SCI -cleared IT Full-Time Equivalents

(FTEs)in support of six (6) IT task orders. MOJAVE FA3 encompasses several Firm Fixed Price

(FFP) and FFP Level of Effort (FFP/LOE) task orders. All active ESITE Task Orders are anticipated to continue, as the IT requirements supported by expiring MOJAVE FA3 contracts will. Additional IT support requirements from MOJAVE Functional Area 1 (FA1), which otherwise provides administrative support services, are anticipated to be moved to the MOJAVE

FA3 Follow-on.

C. Summary of MOJAVE Follow-on Requirement

The contractor is expected to possess the requisite technical and programmatic expertise to support NGA’s requirements for the MOJAVE FA3 Follow-on.

1. General Services

The MOJAVE FA3 program currently provides services required by the NGA to conduct day to day operations across the enterprise. The contractor must provide services that enable the NGA component organizations to perform management, intelligence, information technology, and security functions. Services provided by MOJAVE are confined within each component organization of the NGA.

• Cybersecurity

Cybersecurity Engineering Office – TSE: TSE manages NGA’s cybersecurity engineering program under the Cybersecurity Directorate (TS); supports the GEOINT processing framework and NGA’s open data services; collects business and data analytics for the enterprise; oversees NGA’s cybersecurity engineering efforts in commercial and On-Premise cloud instantiations; performs cloud cybersecurity architecture and engineering activities for GEOINT. The mission of Cybersecurity

Engineering is to establish the Organization as the trusted partner to enable secure implementation of the Agency's Digital Transformation, by providing the resources and expertise to build security into the NSG at project inception. TSE performs

Engineering and implements Enterprise Security Services for the secure operation and defense of the NSG; provides technical expertise to support program development of secure applications and systems, speeding delivery of capabilities to customers; and, continuously develops and refines the As-Is and To-Be Security Architecture of the

NSG in support of CIO-T Strategic Imperatives.

• Security

Security and Installations Operations Office – SIO: SIO is responsible for the well-being of NGA personnel, as well as the functionality and safety of NGA installations. A part of

SIO is the Facilities Projects Office (SIOF), which supports military construction, safety, and Emergency Management. The Emergency Management (EM) Team supports

NGA’s Chief of Staff (CoS) in maintaining Agency situational awareness and managing emergency preparedness and anti-terrorism planning and response activities. The NGA

Director has delegated Force Protection and EM authorities to the Director of SI who serves as the Agency’s EM Executive Chair. EM’s Emergency Communications program addresses NGA’s emergency communications needs by providing technical solutions to current and future issues. Among these are Land Mobile Radio (LMR), the

Computer Emergency Notification System (CENS), CBRNE Management System

(CMS) support, design and implementation support for NGA new campus West (N2W), and other programs and projects as needs are identified.

The technical support services appropriate to fulfill the aforementioned requirements include, but are not limited to:

• Cybersecurity Engineering and Cybersecurity Architecture support.

• Perform security reviews, identify gaps in security architecture, and develop a security risk management plan.

• Analyze candidate architectures, allocate security services, and select security mechanisms.

• Evaluate security architectures and designs to determine the adequacy of security design and architecture proposed or provided in response to requirements contained in acquisition documents.

• Develop enterprise architecture or system components required to meet user/enterprise needs.

• Coordinate with systems architects and developers to provide oversight in the development of design solutions.

• Support the Cybersecurity Architecture for TSE projects and initiatives, to include information and decision briefing development and presentation in designated forums.

• Conduct administrative duties for the NGA CENS program, such as facilitating upgrades, performing database updates and corrections, and managing accounts for system operators.

• Perform security reviews, identify gaps in security architecture, and develop documentation in support of the certification and accreditation process for systems associated with the NGA CENS program.

• Assist program management and end users in resolving problems related to the functionality and data integrity of the NGA CENS system.

• Assist in the development and execution of operator training for the NGA

CENS program.

The extent of services currently held under MOJAVE FA3 is captured within associated

Labor Categories (LCATs) identified in table 1 below. The MOJAVE FA3 Follow-on is expected to be similar in scope.

Table 1: Current MOJAVE FA3 Labor Categories

Cloud Engineer Software/Web Developer

CyberSecurity Engineer Software Engineer

Database Administrator Storage Administrator

Database Engineer Project Management

Graphics Specialist Systems Administrator

Network Engineer Systems Architect

Tableau Specialist Test Engineer

*Note: These LCATS are subject to change for the follow-on effort.

2. Contract Management

The prime contractor must be capable of managing, directing and controlling the contractor team. The prime will be responsible for the planning, organization, and control of resources to successfully deliver all requested services, complete all tasks, and meet all the objectives of the

Ordering document (i.e. Statement of Work (SOW), Statement of Objective (SOO), or

Performance Work Statement (PWS)). This includes: risk management and mitigation; cost control management and reporting; contractor resource scheduling; close coordination with the

Contracting Officer Representative (COR); and performance of subcontractors or consultant personnel.

3. Security

All personnel are required to possess a Top-Secret Personnel Clearance and be eligible for access to Sensitive Compartmented Information clearance (SCI). Other special accesses may be required to perform work. All proposed personnel assigned an NGA contractor badge are subject to a Counter-Intelligence Polygraph for initial/continued access to NGA and other facilities within the Intelligence Community (IC). All contractor personnel will be subject to

NGA’s Security Financial Disclosure Program (NSFD).

The contractor shall have a Department of Defense (DOD)-issued Top Secret Facility Clearance

(FCL), upon proposal submittal. The contractor must ensure that its proposed personnel adhere to: NGA campus and all other hosting IC partner facilities requirements; specific security policies, directives and instructions for clearance passing and adjudication requirements; site badging (entry/exit); and other access requirements to work locations, sensitive materials, and computer systems.

For reasons of privacy, ethics and “need-to-know”, the contractor and its proposed personnel shall ensure unauthorized release or disclosure of sensitive and classified data/information does not occur. Access or release of information should be contained only to that needed and necessary to satisfactorily perform required administrative tasks, and to meet the requirements of the contract as sanctioned by the cognizant Government office being supported. Failure to comply with this restriction may lead to immediate removal from the contract, revocation of security clearance, and the case referred to NGA’s Office of Inspector General (OIG).

The contractor and its proposed personnel are subject to Intelligence Oversight rules as established in paragraph 6(k) in NGA Instruction (NI) 8900.4R6 for The Intelligence Oversight

Compliance and Awareness Program.

4. Organizational Conflict of Interest

The contractor may be required to submit an OCI plan as part of this potential solicitation in accordance with Federal Acquisition Regulation (FAR) 9.5 or any other special NGA OCI clause. If you are aware of any potential OCI concerns that exist, please include that data as part of your response to this RFI.

5. Period of Performance

The potential contract’s period of performance is expected to have a 12-month base year and four 12-month option periods.

6. Location

The anticipated duty locations will be both Government and Contractor sites in the metropolitan areas of Washington, DC, St. Louis, MO, Arnold, MO, Denver, CO, and possible telework.

Local and long-distance travel is expected. Other duty locations within the Continental United

States (CONUS) and outside the Continental Unites States (OCONUS) are possible.

D. Response Instructions

1. Response to this RFI must be UNCLASSIFIED, submitted/received by the due date and time, and in compliance with the method for submittal specified below without exception in order to be considered.

Response due date and time: All responses to this RFI must be received by 10 July

2023 at 12:00 p.m. (noon) Eastern Standard Time (EST).

2. Method for Submittal: All responses must be submitted via e-mail with the message subject line “MOJAVE FA3 Follow-on RFI Response – [INSERT Business name]”, addressed to all of the following:

(Ms. Erika Kang at Erika.J.Kang@nga.mil)

(Ms. Kebra Beckford at Kebra.L.Beckford@nga.mil)

(Mr. Travarus Davis at Travarus.K.Davis@nga.mil)

To aid in Government review, the total pages for the entire submission shall be limited to no more than 5 pages along with a no more than 2-page corporate overview. Each submission shall be in Microsoft Word. The requested response format for all submissions is 8.5” x 11”, 12 pt.

Times New Roman, with one-inch margins on all sides.

file://///Gold/office/office02/TJ/TCC_Non_Records/Working_Files/TCC_Future_Acquisitions_Restricted/MOJAVE%20FOLLOW-ON/ESITE%20FA3%20Follow%20On/RFI/Erika.J.Kang@nga.mil mailto:Kebra.L.Beckford@nga.mil mailto:Travarus.K.Davis@nga.mil

Responses should not include proprietary information. Any responses that are marked proprietary will not be considered. This document and its attachment are not to be used as sources of derivative classification. Also, no sections of these document(s) shall be pulled from, reassembled, or otherwise used below the document(s) stated overall classification, without the approval from NGA Office of Contract Services. Responses must be marked “Unclassified” at least on the first page of the response.

Information contained in the responses may be reviewed by non-Government consultants/experts supporting NGA and who are bound by the appropriate non-disclosure agreement (NDA). All submissions become Government property and will not be returned.

E. Information Requested

RFI responses shall provide a capabilities statement that first identifies Company name, phone number, DUNS, Cage Code, company website address, and name and email of one designated point-of-contact (POC). A recommended format for this information is provided below.

COMPANY INFORMATION

Company Name:

Phone Number

DUNS

CAGE Code

Website

Address:

Point of Contact:

Business Size:

Socio-Economic Status:

Other:

At a minimum, clearly annotated answers to all of the following questions should be included in your response.

Question 1: The anticipated NAICS Code for this effort is 541519—Other Computer Related

Services. Is there another suggested NAICS code? If yes, please provide and justify.

Question 2: Are you a small or large business under 541519 or similar NAICS Codes?

a. If you are a small business:

i. Why does small business provide a viable solution for this effort?

ii. How are you postured to provide all management and professional support needed to support this large hiring activity, payroll, benefits and employee relationships?

b. If you are a medium or large business:

i. Is this work more suited to a medium or large size business? Why?

ii. How would you recommend carving out a set-aside section of the program if it were released full and open?

Question 3: • Do you hold a Government-Wide Acquisition Contract (e.g., GSA Federal Supply

Schedule (FSS) contract) applicable to the NAICS code(s) identified above? If yes, provide the contract number(s):

Question 4: Does your company have a Timekeeping system?

a. If so, what is it?

b. When was the date of your company’s last audit?

i. Who performed the audit?

Was your system determined to be adequate or inadequate?

Question 5: As a service requirement, resumes are often examined in order to evaluate technical capabilities. What are other methods in which a vendor’s technical competencies can be evaluated?

Question 6: MOJAVE FA3 is currently a primarily FFP-LOE Program under DIA’s ESITE

Multiple-IDIQ contract, with separately competed Task Orders how would the government assess performance under this method?

Question 7: Does your company have a Department of Defense (DoD)-issued TOP SECRET facility security clearance (FCL)?

Question 8: Does your company have the ability to comply with the security requirements listed in Section C.3 above, beginning at contract award and throughout the period of performance

(PoP)?

a. Beyond current capacity, at what level of staffing would your company have to build teaming arrangements?

Question 9: Does your company have the ability to support any or all of the functions and associated labor categories identified in Section C above?

b. If yes, indicate how many personnel, by relevant functional area and skill level, your company currently has employed.

c. How many personnel is your company capable of providing to the MOJAVE FA3

Follow-on with 90 days’ lead-time? (Personnel may be from your current staff or new hires).

Question 10: If you intend to bid as a Prime contractor, is your company capable of supporting the contractor management requirements identified in Section C.2 above? (Otherwise, leave blank.)

a. If yes, please describe your proposed management strategy, your corporate capability to support the program, and if applicable, the subcontracting plan. The Government is interested in the capability of your corporate infrastructure (management, security, facility, finance, recruiting and human resources) to manage multiple MOJAVE FA3

Follow-on task orders ranging in size from 5 to 50 persons.

b. If you intend to bid as a prime as a small business, please discuss how your company will comply with FAR 52.219-14 Limitation on Subcontracting at proposal submission. Also discuss any potential impact of MOJAVE FA3 Follow-on on the growth of your company and how you would manage this growth so you retain your brand and quality of service.

Question 11: Can your company support NGA requirements at all places of performance as listed in Section C.6 above?

a. Please specify your company’s general ability to support OCONUS work.

Question 12: Do you have any relevant past performance experience for the same or similar services from the past three years?

a. If yes, please address past performance in three areas:

i. Services offered to commercial entities or to the general public or to non-governmental entities for purposes other than governmental purposes;

ii. Services offered or made to Government agencies other than NGA; and

iii. Same or similar services offered or made to NGA.

Please also include responses to the following for each effort you identify:

i. What is the name of the supported entity? (The Government agency, commercial entity, etc.)

ii. Were you the prime or subcontractor?

iii. If a Prime, how many subcontractors did you have?

iv. What was the staffing level, size and length of the effort?

v. What services did you provide, and how are they relevant to those under this potential follow-on?

vi. What were the security requirements?