RFI No 1 - Cyber Dev Support.pdf

DISTRIBUTION STATEMENT A - Approved for Public Release; Distribution Unlimited.

Request for Information (RFI) For

Air Force Life Cycle Management Center (AFLMC)

Joint Cyber Command and Control (JCC2)

Cyber Development Support

05 April 2023

1. Introduction

Request for Information (RFI) is in accordance with the Federal Acquisition Regulation (FAR) clause 52.215-3 (Request for Information or Solicitation for Planning Purposes – Oct 1997) and is published only to obtain information for use by the Air Force Life Cycle Management

Center (AFLCMC), Joint Cyber Command and Control (JCC2), Joint Base San Antonio –

Lackland AFB, Texas, for planning purposes only.

RFI does not constitute an invitation for Bids, Request for Proposal (RFP), Solicitation, Request for Quote (RFQ) or an indication that the Government will contract for the services provided by submitter. The Government will not reimburse respondents for any costs associated with the preparation or submission of the information requested. Response to this

RFI is strictly voluntary and will not affect any potential offeror's ability to submit an offer should a solicitation be released. Any requests for a solicitation package will be disregarded.

The Government does not intend to award a contract based on this RFI or otherwise pay for the information solicited. No entitlement to payment of direct or indirect costs or charges by the Government will arise as a result of preparing submissions in response to this RFI and the Government's use of such information.

The determination of a procurement strategy based upon the information submitted is solely within the discretion of the Government.

Submittals will not be returned to the sender. Respondents to this RFI may be requested to provide additional information/details based on their initial submittals.

2. Objective

AFLCMC/HNCJ is seeking industry input for advancing a Joint Cyber Command and

Control(C2) capability to ensure an integrated DoD-wide effort to optimize investment, close cyber capability gaps, and ensure delivery of resilient, agile, secure, and effective cyber C2 solutions to the Warfighter. Decision makers, planners, analysts, readiness managers and operators at all Joint Cyber C2 echelons will benefit from this integrated capability. The JCC2 system characteristics will include enhanced interoperability from cloud computing reference architectures, integrated infrastructure, leverage a cross domain solution across security enclaves and containerized solutions. The cloud computing infrastructure, built on enterprise level services, will also include DevSecOps platform services to support Agile software development and production delivery efforts. The Agile development will provide immediate benefit through early delivery of incremental value as opposed to long development cycles experienced through waterfall development efforts.

Using an Agile methodology to develop rapid IT acquisition techniques, JCC2 will expand upon existing technology solutions to integrate with Joint C2 capabilities, USCYBERCOM and Joint commanders have access to fuse information that is delivered at the pace of the operating environment empowering multi- domain decision-making.

3. Requested Information

All respondents are requested to submit a white paper (no more than 10 pages total) that includes the following information:

1. Regarding the overarching technical questions below, the Government would require experience in, but not limited to, the following languages/applications:

Jenkins Angular Puppeteer Artificial Intelligence

Github Enterprise React HP Fortify Machine Learning

GitLab Go Sonarqube EKS

Gitlab CI/CD NodeJS Twistlock ELK

Buildgraph Flake8 Anchore Bitbucket

Jira Webpack EMBER Sypress.io

Confluence Packer Jaguire Openshift

Python Artifactory PostgreSQL Kubernetes

Maven Nexus Luna API – all types

AWS Cross Domain Docker Docker Registry Docker Compose

2. Provide the company’s experience in supporting cloud infrastructure, which includes unclassified development and test, as well as production cloud environments.

Cloud services are not limited to current Government cloud services as future

Government Cloud migration/implementation is imminent. Cloud services must be in support of future Government Cloud services and technologies to include, but not limited to, cross domain solutions for low to high deployment.

3. Describe the company’s past present and future experience in providing scalable enterprise command and control (C2) solutions.

4. Provide the company’s experience with delivering operational capability for Joint cyber operations. Describe the company’s experience using DevSecOps for deploying new capabilities through application development, sustainment, and containerization integration an Agile framework.

5. Describe your company experience with containerization and container orchestration tools that are currently supporting the service cyber community operational needs.

Describe how your company is positioned to support either of these capabilities and provide a detailed explanation of experience (where/when) of?

6. Describe the company’s experience in migrating monolithic applications and/or platforms into a set of micro-services that perform the same and advanced functions as the original applications under a single user interface.

7. Describe the company’s internal methodology with software testing regarding Quality

Assurance, Quality Control and Testing prior to providing a release candidate to operations.

8. Describe the company’s methodology in creating training videos for end-users with the new capabilities for each new release within an Agile Framework.

9. Personnel will be required to obtain specific security clearances depending on required support. Detail your experience filling positions requiring a security clearance at various locations throughout the continental United States

10. The Government is requesting information from vendors of all business sizes including socioeconomic programs such as 8(a), HUBZone, WOSB, etc. Request interested companies submit a brief description of their company’s business size, business status, and any anticipated teaming arrangements. The Government will use this information in determining any small business set-aside decisions.

11. List any existing contract vehicles that would be available to the Government for the procurement of this solution. Describe the ordering/selection process for any GSA

Multiple Award Schedule contracts, Government-wide Acquisition Contracts, Multi-

Agency Contracts, or other contracts vehicles your company would need to use to support this effort.

12. Describe your company’s experience with call center and service desk support

(Tier1/Tier2)?

13. What is your companies experience or capability in acquiring Secured Facility

Procurement

14. Please describe your company's engagement with leading edge technologies from

DARPA, SCO, AFRL, and ARL

4. Responses

We are looking at the following NAICS codes. If you believe there are others that would apply to this effort, please let us know.

518210

541330

541511

541512

541513

541519

This is not a solicitation but a Source Sought for market research purposes only. Interested parties are requested to respond to this RFI with a white paper that is Microsoft Office 2016 suite or PDF compatible. Diagrams should be in either a standard image, PDF, or Microsoft Office

2016 compatible format. White papers are due Noon, CST 26 April 2023, to Both of the POCs in Section 5.

White paper submission. Proprietary information, if any, should be minimal and MUST BE

CLEARLY MARKED. To aid the USG, please segregate proprietary information. Please be advised that all submissions become USG property and will not be returned.

The highest classification of the responses will be no higher than UNCLASSIFIED//

CONTROLLED UNCLASSIFIED INFORMATION (U//CUI)

5. Contracting Points of Contacts (POCs):

Deirdre Blankenship, Supervisory Contracting Officer: deirdre.blankenship@us.af.mil

Benjamin Schaub, Contract Specialist: benjamin.schaub.1@us.af.mil

6.Industry Discussions

JCC2 PMO representatives may, or may not, choose to schedule in person briefings with potential offerors. Such discussions and/or capability demonstrations would only be intended to get further clarification of potential capability to meet current sustainment and new emerging development requirements.

7.Questions

Submit questions for this announcement to POC’s identified in Section 5 via email. Verbal questions will NOT be accepted. The Government does not guarantee any responses to questions received after NOON CST, 26 APRIL 2023.

8. Summary

THIS IS A REQUEST FOR INFORMATION (RFI) ONLY to identify industry sources that can provide JCC2 development and capabilities. The information provided in the RFI is subject to change and is not binding on the Government. The USG has not made a commitment to procure any of the items discussed, and release of this RFI should not be construed as such a commitment or as authorization to incur cost for which reimbursement would be required or sought. All submissions become USG property and will not be returned.

mailto:deirdre.blankenship@us.af.mil mailto:benjamin.schaub.1@us.af.mil