Amendment_0004.pdf

AMENDMENT OF SOLICITATION/MODIFICATION OF CONTRACT

Except as provided herein, all terms and conditions of the document referenced in Item 9A or 10A, as heretofore changed, remains unchanged and in full force and effect.

15A. NAME AND TITLE OF SIGNER (Type or print)

30-105-04EXCEPTION TO SF 30

APPROVED BY OIRM 11-84

STANDARD FORM 30 (Rev. 10-83)

Prescribed by GSA

FAR (48 CFR) 53.243

The purpose of this amendment is to:

1. Revise the soliciation (see changes highlighted in yellow ).

2. Update and revise attachments J-1, J-2, J-4 through J-8, and J-28

3. ProjNet Questions and Answ ers

4. The proposal due date remains 20 March 2019 at 2:00 p.m. CST. Acknowledge all amendments.

1. CONTRACT ID CODE PAGE OF PAGES

S 1 56

16A. NAME AND TITLE OF CONTRACTING OFFICER (Type or print)

16C. DATE SIGNED

BY

16B. UNITED STATES OF AMERICA15C. DATE SIGNED15B. CONTRACTOR/OFFEROR

(Signature of Contracting Officer)(Signature of person authorized to sign)

8. NAME AND ADDRESS OF CONTRACTOR (No., Street, County, State and Zip Code) X W912DY-19-R-0001

X 9B. DATED (SEE ITEM 11)

28-Dec-2018

10B. DATED (SEE ITEM 13)

9A. AMENDMENT OF SOLICITATION NO.

11. THIS ITEM ONLY APPLIES TO AMENDMENTS OF SOLICITATIONS

X The above numbered solicitation is amended as set forth in Item 14. The hour and date specified for receipt of Offer is extended, X is not extended.

Offer must acknowledge receipt of this amendment prior to the hour and date specified in the solicitation or as amended by one of the following methods:

(a) By completing Items 8 and 15, and returning 1 copies of the amendment; (b) By acknowledging receipt of this amendment on each copy of the offer submitted;

or (c) By separate letter or telegram which includes a reference to the solicitation and amendment numbers. FAILURE OF YOUR ACKNOWLEDGMENT TO BE

RECEIVED AT THE PLACE DESIGNATED FOR THE RECEIPT OF OFFERS PRIOR TO THE HOUR AND DATE SPECIFIED MAY RESULT IN

REJECTION OF YOUR OFFER. If by virtue of this amendment you desire to change an offer already submitted, such change may be made by telegram or letter, provided each telegram or letter makes reference to the solicitation and this amendment, and is received prior to the opening hour and date specified.

12. ACCOUNTING AND APPROPRIATION DATA (If required)

13. THIS ITEM APPLIES ONLY TO MODIFICATIONS OF CONTRACTS/ORDERS.

IT MODIFIES THE CONTRACT/ORDER NO. AS DESCRIBED IN ITEM 14.

A. THIS CHANGE ORDER IS ISSUED PURSUANT TO: (Specify authority) THE CHANGES SET FORTH IN ITEM 14 ARE MADE IN THE

CONTRACT ORDER NO. IN ITEM 10A.

B. THE ABOVE NUMBERED CONTRACT/ORDER IS MODIFIED TO REFLECT THE ADMINISTRATIVE CHANGES (such as changes in paying office, appropriation date, etc.) SET FORTH IN ITEM 14, PURSUANT TO THE AUTHORITY OF FAR 43.103(B).

C. THIS SUPPLEMENTAL AGREEMENT IS ENTERED INTO PURSUANT TO AUTHORITY OF:

D. OTHER (Specify type of modification and authority)

E. IMPORTANT: Contractor is not, is required to sign this document and return copies to the issuing office.

14. DESCRIPTION OF AMENDMENT/MODIFICATION (Organized by UCF section headings, including solicitation/contract subject matter where feasible.)

10A. MOD. OF CONTRACT/ORDER NO.

2. AMENDMENT/MODIFICATION NO. 5. PROJECT NO.(If applicable)

6. ISSUED BY

3. EFFECTIVE DATE

28-Feb-2019

CODE

US ARMY ENGINEERING & SUPPORT CENTER

HUNTSVILLE ENGINEERING & SUPPORT CENTER

P.O. BOX 1600

HUNTSVILLE AL 35807-4301

W912DY 7. ADMINISTERED BY (If other than item 6)

4. REQUISITION/PURCHASE REQ. NO.

CODE

See Item 6

FACILITY CODECODE

EMAIL:TEL:

W912DY-19-R-0001

SECTION SF 30 BLOCK 14 CONTINUATION PAGE

SUMMARY OF CHANGES

SECTION A - SOLICITATION/CONTRACT FORM

The following have been modified:

EXECUTIVE SUMMARY

A1. Objective: The primary objective of this contract is to provide the High Performance Computing

Modernization Program (HPCMP) with technical and professional support elements required for the operation of the

HPCMP Office (HPCMPO) in all phases of planning and execution of its mission, including: technical and administrative support in all areas of program activity, program management support, meeting facilities and office environment, to include a complete telecommunications and computer systems capability and full logistical services.

A2. Procurement Methodology: It is the intention of the U.S. Army Engineering and Support Center, Huntsville

(CEHNC) to issue a single award task order contract (SATOC) through a total small business set-aside.

A3. This contract will be a hybrid Firm Fixed Price (FFP) and Cost-Plus-Fixed-Fee (CPFF) Contract Line Items, as described in FAR 16.

A4. The base ordering period of performance will be a five year ordering period, no options, with the base period of performance including a 60-day Phase-In period. Task Orders can be a base period of performance with option years.

A.5. Minimum Guarantee. The government’s minimum guarantee is $2500.00 and extends throughout the period of performance under the entire IDC contract. Following payment under task order award(s) during the entire period of performance in an amount meeting/exceeding the minimum guarantee of $2500.00, satisfies the minimum guarantee, and the agency, upon payment of the $2500.00 under said task order(s). During the period of performance for this IDC contract, should the government fail to award task order(s) with an aggregate value meeting or exceeding the minimum guarantee of $2500.00, then, ONLY upon submittal of proof of contract damages from the contractor, the government may pay the contractor up to $2500.00. This is a minimum ordering amount; not a minimum payment.

A.6. Do not complete Section B Supplies or Services and Prices. NOTE - Section B may change per task order.

A.7 Proposals shall be valid until October 31, 2019.

A.8 Service Contract Labor Standards. The Service Contract Labor Standards Requirement for this effort is Wage

Determination Numbers:

Lorton, VA: WD 15-4281 (Rev.-12) was first posted on www.wdol.gov on 01/01/2019

Aberdeen Proving Ground: WD 15-4265 (Rev.-9) was first posted on www.wdol.gov on 01/01/2019

Portsmouth, VA: WD 15-4341 (Rev.-11) was first posted on www.wdol.gov on 01/01/2019

San Diego, CA: WD 15-5635 (Rev.-10) was first posted on www.wdol.gov on 01/01/2019

Adelphi, MD: WD 15-4281 (Rev.-12) was first posted on www.wdol.gov on 01/01/2019

Wright Patterson AFB: WD 15-4731 (Rev.-7) was first posted on www.wdol.gov on 01/01/2019

Stennis, MS: WD 15-5147 (Rev.-7) was first posted on www.wdol.gov on 01/01/2019

Vicksburg, MS: WD 15-5173 (Rev.-11) was first posted on www.wdol.gov on 01/01/2019

Maui, HI: WD 15-5739 (Rev.-8) was first posted on www.wdol.gov on 01/01/2019

SECTION C - DESCRIPTIONS AND SPECIFICATIONS

PERFORMANCE WORK STATEMENT

PERFORMANCE WORK STATEMENT FOR BASE CONTRACT

High Performance Computing Integration Technical Services - Restricted (HITS-R) 2

US Army Corps of Engineers, Huntsville Engineering and Support Center

26 November 2018

February 25, 2019

1.0 INTRODUCTION

1.1. ACRONYMS

The following table is a key of acronyms used throughout this PWS.

ACRONYMS DEFINITIONS

ADC Allocated Distributed Center

AFARS Army Federal Acquisition Regulation Supplement

ARL Army Research Laboratory

AASD Assisted Acquisition Services Division

AQL Acceptable Quality Level

ASC Aeronautical Systems Center

CAP Connection Approval Process

CAP Contractor Acquired Property

C&A Certification and Accreditation

CISSP Certified Information Systems Security Professional

CPCM Certified Professional Contracts Manager

CPSM Certified Professional In Supply Management

CCNP Cisco Certified Network Professional

CARD Cost Analysis Requirements Document

CERT Computer Emergency Response Team

CND Computer Network Defense

CSA Comprehensive Security Assessment

CSSP CyberSecurity Service Provider

COEA Cost and Operational Effectiveness Analysis

COR Contracting Officer’s Representative

CREATE Computational Research and Engineering Acquisition Tools and

Environments

CTA Computational Technology Areas

CTO Command Task Orders

DHPIs Dedicated HPC Investments

DITCO TSR Defense IT Contracting Organization Telecommunications Service Request

DFAR Defense Federal Acquisition Supplement

DNSSec Domain Name System Security Extension

DOD Department of Defense

DREN Defense Research & Engineer Network

DSRC DOD Supercomputing Resource Center

DIACAP DOD Information Assurance Certification & Accreditation Process

DIARMF DOD Information Assurance Risk Management Framework

DTS Defense Transportation System

ERDC Engineer Research Development Center

FAR Federal Acquisition Regulations

FAS Federal Acquisition Service

GEM GEM One Encryptor Manager

HBSS Host Based Security System

HPC High Performance Computing

HPCMP High Performance Computing Modernization Program

HPCMPO High Performance Computing Modernization Program Office

IAM Information Assurance Manager

IMS Integrative Master Schedule

IT Information Technology

ITIL Information Technology Infrastructure Library

IPT Integrated Product Teams

IAVA Information Assurance Vulnerability Alerts

IAVM Information Assurance Vulnerability Management

INFOCON/CYBERCON Information Operations Condition

JPAS Joint Personnel Adjudication System

JFHQ-DODIN Joint Force Headquarters Department of Defense Information Network

PCO Procuring Contracting Officer

LAN Local Area Network

MCSE Microsoft Certified Systems Engineer

MCSD Microsoft Certified Software Developer

MIPR Military Interdepartmental Purchase Request

MOA Memorandum of Agreement

MSRC Major Shared Resource Center

NAVO Naval Oceanographic Office

NETOPS Network Operations

OR Operational Requirements

OSD Office of the Secretary of Defense

PCO Procuring Contracting Officer

POC Point of Contact

PWS Performance Work Statement

PMP Project Management Professional

QAP Quality Assurance Program

QCP Quality Control Plan

R & D Research and Development

RDT&E Research, Development, Test, and Evaluation

S&T Science and Technology

SAR Situational Awareness Report

SAV Site Assistance Visits

SCC Security Compliance Checker

SDREN Secret Defense Research & Engineer Network

SRG Security Requirements Guide

ST&E Security, Test and Evaluations

Security Detection, delay and response

Section 508 Section 508 of the Rehabilitation Act of 1973

SOPs Standard Operating Procedures

Specification Technical characteristics or parameters that describe the operational characteristics of a system or product

T&E Test and Evaluation

Timeliness Within the time specified by the performance objective

UAG User Advisory Group

USCYBERCOM United States Cyber Command

VMS Vulnerability Management System

VPN Virtual Private Network

VS Vulnerability Scanning

WAP or AP Wireless Access Points

WNC Wireless Network Access

1.2 BACKGROUND

The Department of Defense (DoD) High Performance Computing Program (HPCMP) is a technology-led, innovation-focused program committed to extending High Performance Computing (HPC) to address the DoD’s most signification challenges. The HPCMP accomplishes this goal by developing and maintaining an HPCMP ecosystem consisting of DoD Supercomputing Resource Centers (DSRCs) networking and security, and software applications. The objective of this Single Award Task Order Contract (SATOC) under this Performance Work

Statement (PWS) is to provide internal and external support to the DoD HPCMP to achieve mission objectives..

This work will occur at multiple locations within the Continental United States (CONUS). See Section 5.

1.3 PURPOSE

The HPCMP has identified needs within the ecosystem framework related to program management support, DSRC operations, security and infrastructure engineering research and development and operations, network engineering and software applications development. The purpose of this SATOC and PWS is to outline task order requirements to ensure the HPCMP can obtain the support needed.

2.0 GENERAL REQUIREMENTS.

This section describes the general requirements the contractor needs to accomplish. The following sub-sections provide details of various considerations on this effort.

2.1 NON-PERSONAL SERVICES

The Government shall neither supervise contractor employees nor control the method by which the contractor performs the required tasks. Under no circumstances shall the Government assign tasks to, or prepare work schedules for, individual contractor employees. It shall be the responsibility of the contractor to manage its employees and to guard against any actions that are of the nature of personal services, or give the perception of personal services. If the contractor believes that any actions constitute, or are perceived to constitute personal services, it shall be the contractor's responsibility to notify the Procuring Contracting Officer (PCO) immediately.

2.2 BUSINESS RELATIONS

The contractor shall successfully integrate and coordinate all activity needed to execute the requirement. The contractor shall manage the timeliness, completeness, and quality of problem identification. The contractor shall provide corrective action plans, proposal submittals, timely identification and remediation of issues, and effective management of subcontractors. The contractor shall seek to ensure customer satisfaction and professional and ethical behavior of all contractor personnel.

2.3 CONTRACT ADMINISTRATION AND MANAGEMENT

The following subsections specify requirements for contract, management, and personnel administration.

2.3.1 Contract Management. The contractor shall establish clear organizational lines of authority and responsibility to ensure effective management of the resources assigned to the requirement. When operating onsite, the contractor shall maintain continuity between ongoing activities at Vicksburg, MS, Lorton and Alexandria, VA, and the contractor's corporate offices.

2.3.2 Contract Administration. The contractor shall establish processes and assign appropriate resources to effectively administer the requirement. The contractor shall respond to Government requests for contractual actions in a timely fashion. The contractor shall have a single point of contact between the Government and Contractor personnel assigned to support operations under executed this task order. The contractor shall assign work effort and maintain proper and accurate timekeeping records of personnel assigned to work on the requirement.

2.3.3 Personnel Administration. The Contractor(s) shall provide experienced and qualified personnel with all the skills necessary to perform the work identified. Some Contractor(s) personnel must have and maintain certain valid

Licenses and Certifications to perform the work. Various required training, qualifications, licenses, security clearances, or certifications must be obtained prior to commencement of work at Contractor(s) expense.

Contractor(s) employees required to perform tasks must meet certification requirements as defined in Army and

DoD Regulations. All contractor personnel shall be able to read, write, speak, and understand English, shall possess good written and verbal communications skills, and shall have sufficient knowledge of proper English grammar, spelling, capitalization, and punctuation rules to identify errors and make corrections.

2.3.4 The contractor shall provide the following management and support as required. The contractor shall provide for employees during designated Government non-work days or other periods where Government offices are closed due to weather or security conditions. The contractor shall maintain the currency of their employees by providing initial and refresher training as required to meet the PWS requirements. The contractor shall make necessary travel arrangements for employees. The contractor shall provide necessary infrastructure for services performed at the contractor's site(s).

2.4 SUBCONTRACT MANAGEMENT

The contractor shall be responsible for any subcontract management necessary to integrate work performed on this requirement and shall be responsible and accountable for subcontractor performance on this requirement. The prime contractor will manage work distribution to ensure there are no Organizational Conflict of Interest (OCI) considerations. Contractors may request the addition of subcontractors to their team by notifying the PCO

Representative (COR) and with the approval of the PCO. Cross teaming may or may not be permitted.

2.5 CONTRACTOR PERSONNEL, DISCIPLINES, AND SPECIALTIES

The contractor shall accomplish the assigned work by employing and utilizing qualified personnel with appropriate combinations of education, training, and experience. The contractor shall match personnel skills to the work or task with a minimum of under/over employment of resources. The contractor shall ensure the personnel utilized in the performance of this Task Order will be the minimum necessary to accomplish the task. The Contractor shall provide the necessary resources and infrastructure to manage, perform, and administer the task order.

2.5.1 Contractor Employee Conduct. The contractor’s employees shall observe and comply with all applicable departmental and agency regulations, policies, and procedures (e.g., fire, safety, sanitation, environmental protection, security, etc.). The contractor shall ensure that all contractor employees represent a professional appearance at all times, and that their conduct does not reflect discredit on the United States Government.

2.5.2 When contractor employees are working on Government facilities or participating at Government meetings, they shall wear identification badges distinguishing themselves as such. The badges at a minimum must have the employee name and word "contractor” displayed. Ideally, the company name will appear on the badge.

2.5.3 Notwithstanding any other provisions in the PWS, the contractor shall identify themselves as a contractor in meetings, telephone conversations, all written communications and work situations so that their actions cannot be construed as acts of a Government official. The contractor shall take no actions that bind the government to a final decision or results in the exercise of governmental discretion.

2.5.4 Removal of Contractor Employees for Misconduct or Security Reasons. The Government may, at its sole discretion, direct the contractor to remove any contractor employee from Government facilities for misconduct or security reasons. Such removal does not relieve the contractor of the responsibility to provide sufficient qualified personnel for adequate and timely service. The PCO will provide the contractor with an immediate rationale for removal of contractor employee.

2.5.5 Conflict of Interest. Neither the contractor nor its on-site employees shall utilize their knowledge of access to information, sensitive or otherwise, for individual or company gain.

2.6 TASK ORDERS

Task Orders shall be issued by the PCO for all work efforts. For each task order, the contractor shall provide project and business management and analysis support in operational and oversight of each task order utilizing Project

Management Professional (PMP) and Information Technology Infrastructure Library (ITIL) standards and practices.

2.7 KEY PERSONNEL

At no direct cost to the Government the contractor shall provide an overall Program Manager (PM) and Alternate

Program Manager (APM) to ensure technical integration of the entire contract and shall provide general oversight to this effort. The Government has determined that these personnel are key to successful completion of the contract.

These Key Personnel will be designated in the contract and are subject to the provisions of this PWS. Resumes shall be submitted detailing the qualifications and experience of Key Personnel. Prior to the replacement of key personnel, the contractor shall notify the PCO and Contracting Officer Representative (COR) reasonably in advance and shall submit justification (including proposed substitutions) in sufficient detail to permit evaluation of the impact on the program. No substitution shall be made by the contractor without the written consent of the PCO.

These managers will possess at least a Bachelor's degree in computer science, information systems, network engineering, or other related discipline with a minimum of ten (10) years management experience plus a minimum of ten (10) years IT/Networking Engineering experience similar to the size and scope reflected in this PWS. The experience can be Federal or private industry. Qualifications are subject to Government review and concurrence.

The managers shall be available during normal working hours to meet at the HPCMPO with Government personnel designated by the PCO, HPC PM or Contracting Officer's Representative (COR) within two hours of notification.

Additional key personnel may be identified at the task order level.

3 .0 GENERAL SCOPE OF WORK.

This PWS identifies the non-personal Contractor Engineering and Technical Support Services that are needed to support the HPCMP. This is a Single Award Indefinite Delivery and Indefinite Quantity (IDIQ) contract. Specific areas of coverage include 3.1 Program Management, 3.2 HPC Centers Support, 3.3 Security Research and

Development and Infrastructure Engineering Support, 3.4 Network Engineering Support, 3.5 Network Operations

Support, 3.6 IT Support, 3.7 HPCMP CREATE Software Development Support, and 3.8 Government Furnished

Property Logistics, Distribution and Inventory support. The Contractor shall possess one or more of the following credentials; ISO 9001:2000, ISO 9001:2008, CMMI Level II (or higher) – DEV or CMMI Level II (or higher) –

SVC or most current ISO 9001 certification. Note: Only current and relevant standards will be accepted.

3.1 PROGRAM AND PROJECT MANAGEMENT SUPPORT

The contractor shall perform a variety of support duties to support program management activities across the

HPCMP business areas. Program and Project Management Support shall include collecting information and assisting in the preparation of draft planning documents to include draft program budgets, schedules, reports and documentation. The contractor shall also provide meeting management and conferencing support for the HPCMP in all program activities. Task Orders under this PWS can include but are not limited to:

3.1.1 Conduct reviews and analysis on business management aspects of program activities and provide findings to the Associate Director for the respective functional area.

3.1.2 Provide internal and external program management support for program activities.

3.1.3 The contractor shall be cognizant of the many interrelationships between various task orders ensuring any dependencies that arise from the enterprise, if any, are noted and tracked to ensure integration and adherence to schedule.

3.1.4 The contractor shall Performance Management to include verification and measurement to ensure delivery of proposed results, support management and decision-making, facilitate communications, and motivate high performance through use of key performance measures.

3.1.5 Performance Integration. The contractor shall ensure Performance is integrated across all PWS elements and

Task Orders and provide an integrated master schedule (IMS) including task and inter-project, inter-related task order dependencies with resource requirements including labor and materials.

3.1.6 Results management. The contractor shall measure and validate performance accounting for fluctuating workloads and provide a program performance report (PPR) for key measures as defined in the Quality Assurance

Surveillance Plan (QASP) and Service Delivery Summaries in the PWS. The contractor shall conduct a monthly performance review with the COR that includes the IMS and PPR.

3.1.7 Customer Satisfaction. Work with government counterparts to achieve and maintain high customer satisfaction by identifying a customer’s principle needs and interests, managing a customer’s expectations to ensure effective communication, and soliciting feedback and use it constructively to improve customer service.

3.1.8 Use of Government Furnished Property. In the performance of the individual tasks, the contractor shall use, to the maximum extent possible, Government Furnished Property.

3.1.9 Travel. The contractor shall be required to travel to various locations within the Continental limits of the

United States (CONUS) and Hawaii and Alaska to perform the tasks outlined in this SOW. Materials, other direct charges, all travel and subcontractor efforts to support HPCMP shall be approved in advance, by the PCO.

3.1.10 Deliverables. The contractor shall perform work and submit deliverables pursuant to each individual task order. Each task order will identify the specific work to be performed and the deliverables that are due. Typical

Contract Data Requirement List (CDRL) may include but not limited to:

Deliverable CDRL # Transmittal Form and

Quantity

Schedule

Trip reports A001 electronic copy To Government POC NLT 5 day after return and Consolidated

Monthly Consolidated Trip

Report

Briefing Material A002 electronic copy as necessary

Weekly SAR A003 electronic copy Two (2) business days after the end of the reported week

Monthly Status Report A004 electronic copy NLT the 10th day of each month

Trend Analysis Reports A005 electronic copy as necessary

Weekly Financials A006 electronic copy Two (2) business days after the reported week

Comments and Recommendations Base on

Engineering Studies and Assessments

A007 electronic copy As necessary

Configuration management plans A008 electronic copy As necessary

Test & Evaluation Plans, Procedures, and

Test Reports including Data A009 electronic copy As necessary

Risk Management Framework (RMF) A010 electronic copy As necessary

Monthly Inventory A011 electronic copy Five (5) business days after the end of the reported month.

Program Management Plan / Task Order

Management Plan A012 electronic copy Sixty (60) calendar days after task order award.

Thirty (30) calendar days after the start of each exercised option period.

Phase out Plan A013 electronic copy No later than nine (9) months after task order award and updated annually thereafter. Any final reports are due within ten

(10) calendar days after the last month of performance.

Monthly Financial Report A014 electronic copy Ten (10) business days after the end of the reported month.

Initial Kickoff Meeting Minutes A015 electronic copy No later than ten (10) calendar days after the meeting.

Specifications A016 electronic copy As necessary

Concept of Operations A017 electronic copy As necessary

Accreditation Documentation A018 electronic copy As necessary

User Guides A019 electronic copy As necessary

Plans of Action and Milestones A020 electronic copy As requested by the government

POC

Product Evaluation/Study Reports A021 electronic copy As necessary

Prototype ancillary hardware, drawings, and preliminary technical manuals

A022 electronic copy As necessary

Standard Operating Procedures A023 electronic copy As necessary

Network Diagrams A024 electronic copy As necessary

Regression Test Plans and Reports A025 electronic copy As necessary

After Action / Lessons Learned Reports A026 electronic copy As necessary

Annual Maintenance Renewal A027 electronic copy As necessary

ISCM Metric Reports (reporting bug, feature additions and completions) A028 electronic copy Monthly – five (5) business days after end of each month

STIG Metric Reports (reporting bug, feature additions and completions)

A029 electronic copy Monthly – five (5) business days after end of each month

Authentication Services Metric Reports (reporting bug, feature additions and completions)

A030 electronic copy Monthly – five (5) business days after end of each month

Software Assurance Metric Reports

(reporting completions) A031 electronic copy Monthly – five (5) business days after end of each month

3.1.11 Monthly Progress Report. The contractor shall submit a written report which outlines the significant elements of the contract to the COR, on a monthly basis CRDL A004. These elements are:

Price and schedule control to include hours of effort expended and travel accomplished in support of each task.

Technical performance to include a breakout of time expended and associated cost(s) for each functional task, continuing work efforts, and deliverable items produced/delivered during the reporting period.

Identification of pending and planned work efforts including potential problem areas and proposed solutions.

Trip reports for all travel activities.

Changes in contract personnel.

3.2 CENTERS SUPPORT

The contractor shall perform a variety of support duties to include assistance in status reporting, data gathering, data entry, report preparation, support for briefings, funding profiles, task lists, installation or customer meeting logistics, and other administrative support as required. Perform research, documentation and review support of business processes and procedures. Assist in drafting Performance Work Statements (PWS), Statements of Work

(SOW) and assist in providing independent technical reviews. Provide technical assessments and reviews based on

High Performance Computing (HPC) systems engineering analysis. Perform research on various computer software, hardware, and technical services for required services as needed. This may include: evaluation of government performance work statements and independent government estimates; identify technology issues and provide recommendations; serve as the Program technical advisor for IT commodities and technical services contracts;

provide technical recommendations for the ITS team and/or customers; and prepare technical briefings for use by

Government representatives. Provide engineering and technical resources to perform system engineering and integration functions necessary to accomplish project technical goals in services for HPC Centers projects.

Technical activities with projects requiring support include baseline configuration, workload management, data recovery, system administration communities of practice, enterprise systems monitoring, enterprise software management, acting as HPC Centers’ liaison to the HPCMP information assurance manager panel, and other

DSRC technical services project teams, as identified by the Associate Director for HPC Centers.

3.2.1 Support the development and maintenance of goals, high-level strategy, and policy for special projects within and administration of the HPC Centers component of the HPCMP.

3.2.2 Investigate HPC Centers program requirements, perform studies of system performance and submit recommendations for development, upgrades, modifications, or alterations of equipment, policy or configuration as appropriate to improve system performance, operational efficiency and security posture.

3.2.3 Monitor technology trends and determine feasibility of implementation and applicability to address DoD computational requirements via HPC Center services and capabilities. Participate in design reviews, technical reviews and discussions regarding HPCMP supercomputer systems, equipment and programs as directed.

3.2.4 Support Associate Director for HPC Centers in responding to and informing senior DoD leadership on aspects of the HPCMP and HPC technologies. Provide guidance and direction to HPC center leadership under the direction of the Associate Director for Centers concerning HPC services, operating approaches and coordination required with other HPC Centers.

3.2.5 Investigate program requirements, perform studies, analyze system/equipment performance and submit recommendations for development, upgrades, modifications, or alterations of hardware, software, and/or infrastructure as appropriate to improve system operation and enhance security posture in the field environment.

3.2.6 Review engineering and technical documentation such as technical manuals, test procedures, test plans and drawings, as-built, etc., as delivered by other contractor and Government activities and provide comments and recommendations for acceptance, correction or improvements. The contractor will provide engineering and technical expertise for the review of production contract deliverables and drawings, develop and maintain applicable SOPs, develop and maintain deployment and installation documentation (e.g., network diagrams, site surveys.

3.2.7 Provide engineering and technical resources to perform system engineering and integration functions necessary to accomplish project technical goals in services for DSRC projects. Technical activities with projects requiring support may include management of supercomputer support infrastructure, IP- based network architecture, programming of SCADA controls and renewable energy technology.

3.3 SECURITY

Provide security engineering support to the HPCMP, and Defense Research and Engineering Network

(DREN)/Secret Defense Research Engineering Network (SDREN) sites. The contractor shall provide security engineering support for the DREN and SDREN networks for the High Performance Computing Modernization

Program at sites listed in this PWS and other sites as designated by the Government. Task Orders can include, but are not limited to the following:

3.3.1 Security Engineering/Risk Management Framework (RMF) Support. The Contractor shall provide security engineering support to the HPCMP. The contractor shall perform ISSO or ISSM duties in support of HPCMP authorized enclaves. The contractor shall also provide Assess and Authorize (A&A) support by providing security, technical, and administrative resources to as required by the HPCMP in support of the Risk Management

Framework (RMF).

3.3.2 Cybersecurity Software and Technologies Development. The Contractor shall provide software and development support to the HPCMP in support of cybersecurity projects and tools. The contractor shall provide the

HPCMP with software and technologies development in support of network and system security. The contractor shall provide development in support of identification and authentication efforts, risk prioritization efforts, information system continuous monitoring efforts, and/or compliance automation.

3.3.3 Defensive Cyber Operations (DCO). The Contractor shall provide DCO services to the HPCMP and DREN and SDREN subscriber sites. The contractor shall perform DCO services and support in accordance with the NIST

Cybersecurity Framework (CSF) and the DoD Cybersecurity Evaluator Scoring Metrics. Contractor shall also ensure DCO services align with the Chairman of the Joint Chiefs of Staff Manual (CJCSM) 6510.01A.

3.3.4 Cybersecurity Infrastructure Support. The Contractor shall provide server, networking, storage, and endpoint expertise and support for the HPCMP Security suite of tools and services. The contractor shall install, operate and maintain test and production environments to support HPCMP Security tools, services, and capabilities. The contractor shall manage property and inventory, aligning travel and manpower for installation and upgrades with property delivery. The contractor support the overall Security infrastructure in support of HPCMP Security activities.

3.3.5 Cybersecurity Boundary Assessments. The Contractor shall provide boundary assessments of the DREN Area of Operation (AO) to highlight risk associated with the attack surface of the terrain. The contractor shall follow a formal testing methodology and documented procedures to test systems vulnerabilities and misconfigurations, in order to maximize their reliability in the face of a cyber-attack and provide a written report of exploits and recommended remediation with mappings to adversarial Tactics, Techniques, and Procedures (TTPs), Security

Technical Implementation Guide (STIGs), SRGs, or NIST SP 800-53a rev4 controls and CCIs where applicable.

The site information and applicable IP ranges and equipment assessed will be provided by the Program Lead and through analyzing USCYBERCOM, JFHQ-DODIN, and SCC Orders.

3.4 NETWORK ENGINEERING SUPPORT

The contractor will provide engineering and technical resources to perform a board assortment of system engineering and integration functions necessary to accomplish project technical goals such as: system and equipment design analysis and studies, development and verification of design, product, interface, and specifications, technical papers and studies, master test plans and integration, preparation of briefing data, and installation of hardware systems and equipment. The contractor shall provide the requested mix of labor categories, if and to the extent any of these items are exercised, and shall perform the applicable tasks as directed by the Task

Order in support of the HPCMP system engineering requirements. Task Orders can include, but are not limited to the following:

3.4.1 Investigate HPCMP/DREN program requirements, perform studies, analyze system/equipment performance and submit recommendations for development, upgrades, modifications, or alterations of hardware and/or software as appropriate to improve system operation and enhance security posture in the field environment.

3.4.2 Study ORs to determine system performance criteria and to outline functional requirements. When required, performance specification(s) shall be generated/reviewed in order to specify, in detail, system requirements based upon the operational approach and selected alternative. The contractor shall participate in design reviews, technical reviews and discussions regarding HPCMP systems, equipment and programs as directed.

3.4.3 Review engineering and technical documentation such as technical manuals, test procedures, test plans and drawings, as-builts, etc., as delivered by other contractor and Government activities and provide comments and recommendations for acceptance, correction or improvements. The contractor will provide engineering and technical expertise for the review of production contract deliverables and drawings, develop and maintain applicable

Standard Operating Procedures (SOPs), develop and maintain deployment and installation documentation (e.g., network diagrams, site surveys), develop regression testing plans, and perform regression testing to support code upgrades on current and future hardware deployed to support the SDREN Wide Area Network (WAN) and DREN ancillary equipment. Current hardware platforms deployed are Juniper routers, Netscreen and SRX Firewalls, Juniper SSL VPNs as well as all Taclane models.

3.4.4 Conduct R&D based upon HPCMP Technical Directions.

3.4.5 Develop and maintain SDREN/DREN Active Measurement Program (SAMP/DAMP) systems to include producing SAMP/DAMP outputs regarding network performance and utilization analysis data.

3.4.6 Provide Networking/Security Database Development and Maintenance Support. This database provides the central location for all DREN and SDREN data and files, providing the basis for annual service pricing determinations and provides for consistent configuration management of Customer data and serves as the central interface for Networking, Security, CSSP, CSA, Network Operations Center (NOC) personnel. Tasks include:

3.4.7 Database Maintenance and Development to meet latest Networking/Security requirements– especially the

DREN-III database.

Database Account Management

Database information management (Data Entry, Data Import/Export, ODBC connections)

DREN Portal management – data entry and validation for approximately 150 SDPs and 400 Enclave

HPCMPO GAL mail distribution list management (accurate distribution is dependent upon accurate

DREN/SDREN/CSSP POC data)

DREN POCs

DREN NOC POCs (both DREN-II Verizon NOC and DREN-III CenturyLink NOC notification lists)

NID/DJS/SJS alert distribution lists

Recurring semi-annual (every six months) CSSP and Networking communication with DREN and SDREN

Subscribers for updates and validation of Network Diagrams and POC information for compliance with

DISA’s CSSP Evaluator’s Scoring Metrics (ESM)

Manage renewal of ATOs, MOAs (three year validation periods) VII. CSA tracking and Recommendations for ATC.

Outreach Service Agreements

Generate, process and manage Telecommunication Service Requests (TSRs) for DREN-III DITCO orders, and Requests for Service (RFS) for DREN-II orders

Tracking DITCO TSR status and Acceptance Information

Perform statistical analyses and generate statistical reports related to DREN, SDREN, and CSSP XII.

Management of DREN/SDREN maps

Management of the central document repository for 400 Enclaves (including 7 DSA documents/enclave, 6

SDREN CAP document/enclave, 3 CSSP documents/enclave, 1-3 annual bills for each buy-in customer , 5+ CSA documents per CSA site). Maintain approximately 5000 documents in various stages of validity and expiration.

3.4.8 Manage property and property inventory, aligning travel and manpower for installation and upgrades with property delivery, if applicable.

3.4.9 Maintain an up-to-date web-based community knowledge base as a reference for Software Defined

Networking and IPv6 technologies.

3.4.10 Review and report on status of IPv6 implementation at HPCMP supercomputer centers.

3.4.11 Deliverable Products. The contractor may be required to prepare and provide updates to, or initial documentation as required. The deliverable products may include:

Comments and recommendations based on engineering studies and assessments.

Specifications.

Concept of Operations (CONOPS).

Accreditation documentation

Configuration Management Plans.

Test and Evaluation Plans, Procedures and Test Reports including Data.

User guides.

Product Evaluation/Study Reports.

Prototype ancillary hardware, drawings and preliminary technical manuals.

Briefing data and trip reports.

Plan of Action & Milestones (POA&M)s.

Monthly Status Reports.

3.5 NETWORK OPERATIONS SUPPORT

Task Orders under this PWS can include, but are not limited to the following:

3.5.1 Provide engineering and technical resources to perform system engineering and integration functions necessary to accomplish project technical goals in services for the SDREN Network Operations (NETOPS) and deployed

DREN Ancillary (to include Firewalls, Switches, SAMP/DAMPs, Joint Sensors) equipment in the form of deployment and management of all hardware associated with the delivery of SDREN service to a customer location, as well as the SDREN core network itself, and delivery of stateful inspection firewall capabilities at various DREN locations during operating hours with one person on call each week night. This effort shall support efforts at both the Aberdeen Proving Grounds, MD facility and St Julien’s Creek, Portsmouth, VA facility.

3.5.2 Manage SDREN NETOPS team.

3.5.3 Manage Key Management of the SDREN closed partition preplaced and firefly keys for all SDREN node locations and provides technical assistance for the ’ Simple Key loader" (SKL).

3.5.4 Manage the following for SDREN customers on-line:

MRTG Statistics

IAVA, IAVB, IAVT alerts & associated patch files

Symantec, McAfee and Trend Micro software releases and virus definition files

DISA Security Technical Implementation Guide (STIG's)

DISA Security Readiness Review Evaluation Scripts

DISA Security Checklists

RETINA software, keys, update files

Windows update files

Llama/CSA Security Analysis Scripts (Windows, Linux, Solaris, etc.)

NUTTCP tool and literature, iperf, NMAP

WSUS Services

Microsoft Baseline Security Analyzer and associated signature files

Network Performance Self Help Documentation

Build-out, deployment and maintain the HPCMP Joint Sensor and ACAS Scanners

3.5.5 Manage and maintain Communications Security (COMSEC) account for the SDREN Wide Area Network

(WAN)

3.5.6 Be responsible for development and maintenance of SDREN Network Operations Center (NOC) and WAN

Certification and accreditation package.

3.5.7 Support the development and maintenance of policy relevant to DREN/ SDREN security as well as

DREN/SDREN Operations.

3.5.8 Support development of DREN Accreditation documentation in support of DREN/SDREN. Develop and maintain DREN and SDREN accreditation documentation.

3.5.9 Support management of all U.S Cyber Command and Service level CTOs, Service level CERT, HPC CERT and site level firewall block and change requests.

3.5.10 Supports management of the acceptance of all DREN Service Agreements and all SDREN Connection

Approval Packages (includes working with sites individually so a complete agreement or package is on file in accordance with HPCMP policy).

3.5.11 Provide engineering and administration support as well as oversight on HPCMPO and HPC Operations Local

Area Networks (Firewall, SSL VPN, Wireless Access, Backbone switches, servers, Active Directory, Open

Directory, etc.) to include the following:

Configure and maintain Solar winds Orion (or other ) network management tools, and JIRA ticketing system software or other network management tools deployed or as directed

Manage and maintain Domain Name Service on SDREN. This is to include DNSSec

Manage and maintain Email Service for SDREN customers

Manage and maintain SDREN CORE IPv4 and IPv6 addressing plans and allocations

Provide local Network Performance trouble shooting and assistance as directed using GFP and commercial network performance tools

Manage maintain, upgrade the DREN Portal as required

Perform remote management and over the air rekey utilizing Encryptor Management tools (e.g. GEM)

Manage, maintain, upgrade and configure current and future hardware platforms to support the SDREN

WAN and DREN ancillary equipment. Current hardware platforms deployed are Juniper routers, Netscreen and Juniper SRX Firewalls, Juniper SSL VPNs, all encryptor models as well as Brocade switches in an enterprise setting

Must be proficient in all aspects of IPv4 and IPv6 routing, multicast, jumbo frame configuration on all network and firewall platforms

Manage and maintain current and future SAN infrastructure to support near real time data replication and

Continuity of Operations

Ensure all managed systems meet DoD 8500.1 IA requirements

Ensure support personnel meet and maintain DoD 8570 certification requirements commensurate with their abilities and administrative position

Track and maintain vendor maintenance contracts for all hardware deployed in support of SDREN and

DREN Ancillary equipment

COMSEC requirements to support crypto questions, deployment and keying

3.5.12 Deliverable Products. The contractor shall prepare and provide updates to, or initial documentation as required.

The deliverable products may include:

Comments and recommendations based on engineering studies and assessments.

Specifications.

Concept of Operations (CONOPS).

Accreditation documentation

Configuration Management Plans.

Test and Evaluation Plans, Procedures and Test Reports including Data.

User guides.

Product Evaluation/Study Reports.

Prototype ancillary hardware, drawings and preliminary technical manuals.

Briefing data and trip reports.

Plan of Action & Milestones (POA&M)s.

Monthly Status Reports.

3.5.13 Operational Prioritization. Network Operations is critical to HPCMP operations, this government approved set of priorities that has been established in the Network Operations Center to ensure all issues are prioritized and completed with the appropriate level of urgency and effort. The following are a set of possible activities that will have to be addressed in the Network Operations Center.

Network Operation Priorities

Priority Category Activity Examples

1 Security Any security related issue.

2 Trouble

Investigating and isolating problems related to loss of connectivity to management devices, loss of customer connectivity and peering networks, loss of support system or application

3 Maintenance Upgrades to hardware operating system or updates to encryption keys

4 Change Requests to make a rule change in a firewall, updates to encryption device route tables or modify SDREN service delivery router static route tables or BGP filters, DNS updates

5 Installation NetOps support to install new DREN or SDREN hardware

6 Administration

Creation of, or updates to, operating procedures or policy documentation, customer records, network diagrams, review of network, encryptor and server audit logs, updates to the SDREN NOC web site

7 Inquiry Request for information from a site POC or HPCMPO representative

8 Task Development and test of a new design or configuration in preparation for installation of a new device or product in the network

9 Training Participating in a vendor-provided course to increase technical knowledge of new product, appliance, or operating system features

Network Operation Ticket Priorities

Priority Activity

Compromise of NetOps network device or support information system or COMSEC incident

2 Customer classified security incident

3 DoS or DDoS SDREN, NetOps network device or support information system

4 HPCMP CERT Block Request, SJS, DJS restoration

5 IAVM Compliance

6 Security Configuration or Active Directory Group Policy Updates

Network Operations Security Issue Priorities

Priority Examples of Corresponding Events

1. Security

- A compromise of any kind on any DREN or SDREN management system or core component and/or a Denial of Service (DOS) or Distributed DOS (DDOS) attack which impacts a customer’s connectivity to DREN or SDREN, or the functionality of the SDREN itself, or the ability to manage NetOps deployed network devices.

Priority Examples of Corresponding Events

- A compromise of any kind on any server or application or a Denial of Service (DOS) or

Distributed DOS (DDOS) attack which impacts server or application access or performance

2. Critical

- Loss of service to any location listed in Appendix F, Critical Customer Locations or an outage that affects multiple SDREN customers.

- Loss of access to or loss of a server or application listed in Appendix G, Critical Servers and

Applications.

3. High

- Loss of service to a non-Critical DREN or SDREN enclave or severe performance issue at any

DREN or SDREN enclave

- High: Loss of service to a non-Critical server or application

4. Medium

- Network latency or minor throughput performance issues affecting end user applications

- Server performance affecting end user applications, chronic intermittent problems

5. Low

- Minor packet loss

- Minor user complaints

3.6 IT MANAGEMENT

3.6.1 Engineer, implement and maintain Enterprise IT and data services in support of the HPCMP. These services include the management of network servers, printers and other network devices; Wireless Access Points (WAP or

AP); and infrastructure, e.g. network cabling and drops, patch panels, cross-connect cabling, etc.; and…