RFI_DRAFT PWS-I2O Facility_20250325.pdf

DRAFT

No Annex’s or Attachments listed below will be provided at this time.

Performance Work Statement (PWS) For

Identity Intelligence Operations (I2O) Facility

25 March 2025

1. Purpose. Provide approximately 11,000 square foot facility that contains a dedicated Top Secret Sensitive Compartmented Information Facility (SCIF) and separate Secret /Unclassified areas. This facility shall have 106 cubicles to accommodate 145 assigned personnel on four shifts covering 24/7 operations. Six dedicated offices within the TS/SCIF for government personnel assigned to oversee the daily requirements of the mission will be required.

2. Background. The objective of this contract is to provide a facility to support I2O services which include a forensic laboratory, forensic software developers, and a 24/7 data production floor. This task applies to the Intelligence Directorate and Headquarters United States Special Operations Command (USSOCOM). This contract complements and must work in concert with five existing SOCOM contracts: (1) SOFEX for biometric and identity intelligence support, (2) TECHEX development and reporting, (3) DOMEX for forensic examination of documents and media, (4) IOMs consisting of Field Service Representatives and Exploitation Analysis Centers supporting future deployments and current operations world-wide, and (5) I2EC that produces near real-time analytic responses to request for information on biometric and identity intelligence operations to Special Operations Forces world-wide.

3. Scope. This covers the facility to support the USSOCOM enterprise, specifically to identity intelligence (i2)-related applications and subject areas as directed by the government. The contractor shall focus on providing a facility to meet the demands of the complete Identity Intelligence Operations and Exploitation Program. The facility will be a large mission of implementing parts of an integrated suite of USSOCOM enterprise applications to include Non-Secure Internet Protocol Router Network (NIPRNet), Secret Internet Protocol Router Network (SIPRNet), the Joint Worldwide Intelligence Communications System (JWICS), the battlefield information collection & exploitation system (BICES/SOFEX.com/SOFEX-S managed-cloud service instances /.

Additionally, the facility must provide architecture for KENNELNET (Dirty Network), a dedicated commercial network and an eventual mobile data environment.

The contractor shall perform risk assessment and risk mitigation as part of their normal processes, integrated into their overall contract management strategy. Such risk management activities shall conform to standard and consistent technical and managerial practices and methods, subject to government approval.

4. Requirements. All objectives will be accomplished IAW existing USSOCOM directives and established USSOCOM processes (See Annex G, Bibliography-References-Policy).

4.1 Facility Requirements:

a. TS Area: Approximately 5000 Square Feet:

60 - TS-Level Workstations w/3-SIE Network Drops (SOCRATES/SOFNET-S/SOFNET-U), 2-Dirty Net Drops, 1- Commercial Internet Drop, and at least 4-workstation government offices are included in this space / these numbers.

2 - Separate TS-Level Executive Office w/1-workstation, 3-SIE Network Drops (SOCRATES/SOFNET- S/SOFNET-U), 2-Dirty Net Drops, 1- Commercial Internet Drop, 1-Cable TV Drop, 1-full TS-Level VTC Suite w/Large Wall Display

1 - TS-Level Server Room: w/3-SIE Network Servers / Data Storage / Peripheral Hardware

(SOCRATES/SOFNET-S/SOFNET-U

b. SECRET/Collateral Areas: Approximately 4000 Square Feet:

31 - SECRET-Level Workstations w/2-SIE Network Drops (SOFNET-S/SOFNET-U), 2-Dirty Net Drops, 1-Internet Drop, 1-each SVOIP & VOIP Phone drops.

1 - Separate SECRET-level room with 8-Lab Benches & 8 workstations w/2-SIE Network Drops (SOFNET-S/SOFNET-U), 2-Dirty Net Drops, 1-Internet Drop, 1-each SVOIP & VOIP Phone drops. Room must be large enough to accommodate a 300 sq ft Modular Faraday Room which includes: 2-Lab Benches, 2-SIE Network Drops (SOFNET-S/SOFNET-U), 2-Dirty Net Drops, 1-Internet Drop

1 - SECRET-Level Server Room: 2-Dirty Network Servers / Data Storage / Peripheral Hardware 1 - SECRET-Level Conference Room: Approximately 1500 sq ft: 48-theater type seats; 2

Table Workstations w/2-SIE Network Drops (SOFNET-S/SOFNET-U), 2-Dirty Net Drops, 1-Internet Drop; 1-Large 12- seat Conference Table; & Full Secret Level VTC Suite w/two large wall displays.

c. UNCLASSIFIED Small Storage Room: Approximately 500 sq ft.

d. Facility must be within 15 miles of MacDill AFB, zip code 33621. This includes any population center (or two or more neighboring ones) and the surrounding localities from MacDill AFB.

NOTE: Server Rooms and areas require adequate power & HVAC to maintain equipment efficiency.

4.2 IT/COMMS Services: Provide, maintain, or support the following systems:

a. WAN link 10 Gb/s (3-year contract)

b. Iridium Extreme 9575 Satellite Phone (300-Pre-Paid Minutes per year)

c. iL-4 Unclassified Cloud Service, capacity for 100 TB Monthly + currently 10 - VMs

d. Commercial Cloud Cognitive Services

e. il-6 Secret-level cloud service - SOFEX-S Red Net Instance (Annual Service) + currently 4-VMs

f. 12-Month Server O&M with Monitoring (99.95% availability goal)

4.3 Hardware:

a. Four SOCOM SIE Network servers with associated switches, routers, expandable data storage,

b. Two closed Dirty Net servers, one each unclassified and Secret level with associated switches, routers, expandable data storage, & peripheral equipment for KennelNet-U & KennelNet-S.

c. Eight Lab benches each with specialized forensic lab equipment, forensic high-end computers, deployable laptops, & specialty tools.

d. Developer & Examiner workstations w/high end specialty computers & deployable laptops.

e. Joint DOMEX Operations Group Deployable Kits.

f. Printers: 2-each network supported (NIPR, SIPR, SOCRATES, KennelNet-U, KennelNet-S, & Internet).

g. Video Display Wall in TS-Analyst Area with capability to display all networks from at least two control workstations & cable TV.

h. Two Large 100” Displays in Conference room with capability to display all networks up to Secret Level with a full VTC suite & one control workstation. Conference Room must have video cameras and microphone capabilities.

i. Iridium Extreme 9575 Satellite Phone.

NOTE: These equipment requirements are already fielded in an existing off-site contractor facility and require annual Operations and Maintenance (O&M) to be considered / proposed. The Awarded Company shall plan for / propose moving costs as required. When purchasing replacement equipment, obtain the best maintenance price available through multi-year licensing / maintenance agreements.

Propose all these costs as part of the Request for Proposal.

4.4 Cloud Services: Establish and maintain SOFEX-S IL-6 Red Net, DOMEX Dirty Net, and SOFEX.com on a cloud service is a primary objective of this task order and shall be funded / operational immediately upon award.

4.5 Unclassified Network Support: In concert with the SOFEX/DoN-ISIS task order, the Contractor shall provide support for the unclassified “.com” network (SOFEX-U). Background:

The program must receive collected biometric, forensic, and DOMEX data from remote and often austere locations around the world. Often, these locations only have the capability to send and receive data via the Internet, provided through commercial cellular carriers or other international commercially provided network services. Some of these locations block specific Top-Level Domains (TLDs) from other countries. Our “.mil” TLD, for example, is not always accessible from other geopolitical regions (the Balkans and Philippines, for example. The program must provide an avenue for this collected i2 data without associating itself with a .mil TLD. This action is NOT for obfuscation or non-attribution to SOCOM, but to ensure that anyone, from anywhere in the world, is not impeded from sending their biometric, forensic, or DOMEX data to SOCOM, and further being able to access match/response information to their submissions in NRT (near real time). The contractor shall:

4.5.1 Provide, maintain, or support an Internet, globally accessible managed-cloud environment that is not associated with the .mil TLD.

4.5.2 Assist in the provision or support of the following services within the environment:

4.5.2.1 File storage.

4.5.2.2 A database for biometric, Forensic, and DOMEX data storage (including Binary Large Objects- BLOBs.

4.5.2.3 Mechanism to transfer large amounts of data in a single session, greater than 20MB (megabytes) per session. (FTP – file transfer protocol and SFTP – secure file transfer protocol).

4.5.2.4 A user interface to display record data (web application, http and https protocols).

4.5.2.5 Capability to provide a direct response to uploaded data (email, SMTP – simple mail transfer protocol).

4.5.3 Administrative access to the above listed services to provide for application and data enhancements on a routine basis.

4.5.4 Maintain 99.99% availability rate for the above listed services/environment.

4.5.5 Provide protection for transmission/collection of CUI (Controlled Unclassified Information) data, to include SSL (secure socket layer, https) and / or PKI (public key infrastructure) encryption.

5. Security Requirements.

The contractor shall ensure requirements for safeguarding classified information and classified materials, for obtaining and verifying personnel security clearances, for verifying security clearances and indoctrination of visitors, for controlling access to restricted areas, for protecting government property, and for the security of automated and non-automated management information systems and data are fulfilled. The contractor shall ensure the facility meets all Department of Defense, USSOCOM and Defense Intelligence Agency SCIF/SECRET requirements throughout the period of performance. The contractor's management system shall prevent unauthorized disclosure of classified and sensitive unclassified information. The government shall be immediately notified if any security incident or any indication of a potential unauthorized disclosure or compromise of classified or sensitive unclassified information.

The contractor shall provide security management support. Typical efforts include, but are not limited to, performing classified document control functions, classified materials inventories, program access requests, preparing and monitoring personnel indoctrination and debriefing agreements, and maintaining and using security-related databases.

The contractor shall identify specific room numbers for TS-Level & SECRET / Collateral Rooms / Areas in the proposal.

6. Deliverables. The contractor shall provide the following deliverables: Approximately 11,000 square foot facility, in accordance with paragraph 4.1 above. Facility must provide 24-hour secure access and adequate parking for all employees.

7. Material. See attached Annexes for government purchased / government furnished (GPE/GFE) equipment.

8. Hours of Operation. This contract requires 24/7/365 dedicated access to the facility for 4-shifts.