Description
Introduction Consolidated Nuclear Security, LLC (Company) is seeking interested suppliers to provide IT and Cyber resources at the Pantex Plant in Amarillo, TX and the Y-12 Plant in Oak Ridge, TN. Pantex and Y-12 facilities are restricted access sites. Unannounced / unsolicited visitation to the sites is not allowed. It is not envisioned that a site visit nor site access should be required for the purposes of response to this Expression of Interest. Background The Pantex and Y-12 Plants are a Department of Energy (DOE) National Nuclear Security Administration (NNSA) site managed by the Company. Information Solutions & Services (ISS) and Cyber are seeking additional Subject Matter Experts (SME)s in anticipation of meeting current requirements, additional scope in FY23/24 as well as continual expanding scope as directed by NNSA and DOE to assist in completing Operations and Maintenance (O&M), and Development, Modernization and Enhancements (DME). Operations refers to the day-to-day management of an asset in which the asset is in operations production environment and produces the same product or provides a repetitive service. Operations include, but are not limited to, activities that operate data centers, help desks, operational centers, telecommunication centers, information security, and end-user support services. DME planning refers to projects and activities leading to new IT assets/systems, as well as projects and activities that change or modify existing IT assets to substantively improve capability or performance, implement legislative or regulatory requirements, or meet an Agency leadership request. DME activity may occur at any time during a program’s life cycle. General Scope Description The Company is currently maturing the IT Infrastructure and maturing the Cybersecurity Program (CSP) with a focus on security. For the past several years, the Company has experienced higher than normal scope expansion that has made it difficult to keep up with full time employment hiring based on internal staffing requisitions. The anticipated period of performance is estimated at 1-year and 4 option years. It is the preference of the Company to award SME services under a Basic Ordering Agreement (BOA), to a pool of Suppliers with demonstrated capabilities of providing qualified resources quickly. Task Orders will be issued to Awarded Supplier’s with details as to resources required as Company needs arise during the period of performance. Scope of Work Company’s preference is to follow a standard labor category system, such as the NICE Workforce Framework of labor categories. More information can be found at https://niccs.cisa.gov/workforcedevelopment/nice-framework. This link provides examples for reference only and is not intended to be an all-inclusive list. Final details and descriptions will be provided during the RFQ process and may include additional labor categories. Supplier will be required to provide resumes of proposed qualified candidates for each Task Order request. Professional services will be delivered virtually, primarily during normal business hours. Normal business hours are defined as 7:45am to 5:00pm Eastern Standard Time (EST). For SME’s performing certain tasks, after hour professional services will be required on an event basis, based on operation needs (e.g. support during a significant cybersecurity incident of compromise). Work performed on this project could be onsite, remote, or a hybrid of both. While not all Task Orders will require security clearances, all SME’s must be United States Citizens. EOI Process The Company's intent is to use information obtained from this Expression of Interest to generate a list of qualified Suppliers that will be invited to participate in the RFQ process. Work scope information must not be discussed in public (e.g., home, restaurants, stores, theaters) and must not be placed on the internet (e.g., social media, websites, messaging apps, digital photo services), without prior approval. Interested parties should respond to this Expression of Interest request, providing general qualifications to perform these services. This is not a Request for Proposal and responses should be brief. An elaborate company portfolio or qualifications package is not warranted nor expected as a response to this Expression of Interest, however, documentation of your firm’s typical stages of delivery with example figures or tables showing or describing the types and format of typical deliverables for this type of project is essential. A business letter format consisting of a few pages expressing your entity’s interest, outlining the below Qualifications, and containing attachments such as a company brochure or brochures covering these areas of interest will suffice. Your entity’s expression of interest must be provided to Matt James by March 31, 2023. Supplier Qualifications As a basis for qualification, Suppliers must show references that support: Minimum of 5 years’ experience supporting Government Entities or Prime Contractors Minimum of 5 relevant Awards supporting spend >$5M Proven track record of talent deployed in the last 5 years broken down in the categories below. If you qualify based on the above, please also include responses to the following: 1. List of relevant references in the last 5 years a. Experience supporting Government Entities or Prime Contractors b. Minimum of 5 relevant Awards supporting spend >$5M c. Primary area of specialty _______________________________ 2. Number of active contracts supporting the following categories: o How many resources in the various labor categories been deployed in last 3 years? Cyber Workforce Framework for Cybersecurity (NICE Framework) | NICCS (cisa.gov)) Analyze ______ Collect and Operate_____ Investigate _____ Operate and Maintain_____ Oversee and Govern_____ Protect and Defend_____ Securely Provision_____ Operations Enterprise Architecture_____ Identity and Access Management _____ Engineering System administration (Windows, Linux, Network, VMWare, Cloud) _____ System engineering (Windows, Linux, Network, VMWare, Cloud) _____ Applications Application Development _____ Application Architecture _____ Business Operations IT Contracting_____ Governance/Compliance_____ Project Managers _____ Business Analysts _____ IT Service Management Desktop Services _____ Field Support _____ IT Help Desk _____ IT Service Management and COMSEC _____