RFI for OandM for DRAS-M.pdf

Subject: REQUEST FOR INFORMATION OPERATION AND MAINTENACE OF CLOUD ENVIRONMENT

The Defense Finance and Accounting Service is requesting responses to the below Request for Information (RFI). Responses are requested no later than 12:00 PM (noon) Eastern on 10 January 2025. Please limit responses to no more than 10 pages total.

Your participation is voluntary and your participation will not impact the likelihood of receiving any future awards.

1. Purpose: DFAS is Requesting Information on a recommended method and personnel with the skill and experience to conduct Operation & Management (O&M) of an information system’s IL-5 cloud infrastructure.

2. Background: Defense Finance and Accounting Service (DFAS) Defense Retiree and Annuitant Pay System (DRAS) migration from Defense Information System Agency (DISA) mainframe hosting environment to a commercial Cloud Service Provider (CSP). This new information system faces challenges with supporting the human capital required to support the network and virtual infrastructure that replicate the current DISA DECC support of Information Technology (IT) Cyberspace, Cyberspace Enablers and Software Engineering personnel. Government personnel would focus on application operations and development, and database updates.

3. Skills required to support a cloud hosted tenant that:

a. Infrastructure as Code (IaC) implementation of VM workstation and

Containerization

b. Database Application configuration and maintenance

c. Server OS hosting (IaaS and PaaS)

d. Web Servers administration and maintenance

e. Contains 6 virtual networks

I. Development II. Test

III. Customer Acceptance IV. Troubleshooting V. Production

VI. Infrastructure & Security

f. Access Control Configuration Management into and within the different VNET for

1000 authorized users and 150 privileged users daily

g. DoD Zone Firewalls and intra firewalls

h. Web Application Firewalls and Load Balancing

i. DevSecOps with internal hosted code repository

4. RFI Questions Responses shall include the following:

a. What DoDI 8140 defensive cyber workforce roles are required to conduct O&M within the agency IL-5 tenant. specifically, please provide relevant capabilities/staff qualifications your company possesses. Responses shall include the relevant information regarding specific skills, experience, and clearances that its employees, by labor category, currently possess in performing the anticipated services. Will current staff be used for this type of support, or would additional staff need to be hired/trained?

b. Assuming 24/7/365 operations within, with heaviest load on business days, what is the Table of Organization required to conduct O&M within the agency IL-5 tenant.

c. What certifications should be associated with the identified O&M roles.

d. Assuming a cloud environment that is fully deployed but not operational, how much time would be required to familiarize with the environment and can carry out the O&M functions.

e. What NAICS Code(s) and PSC Code(s) would you recommend for this project?

f. Can you provide a Rough Order of Magnitude (ROM) based on the information provided above? If not, what additional details are required?

g. Address any Risks, Issues, Assumptions, Gaps, and prices associated with deploying the O&M your company envisions to meet the need in as much detail as possible.

h. Provide any other areas that the responder believes are relevant to conduct Operation & Management (O&M) of an information system’s IL-5 cloud infrastructure

i. If a Small business, what type.

j. Provide a primary point of contact (POC) including Position Title, E-mail Address, and Phone Number, Firm Name or organization affiliation, CAGE Code.

k. Does your firm have Federal Schedules, GWACs, BPAs, etc. (GSA, NASA SEWP, others) for this type of support? If so, please provide current information.