Core Technology Infrastructure - Cyber Delivery Partner

Tender description

Summary of the work 3 - 6 month Work Packages will be provided covering aspects of - Infrastructure Design & Build - Networks, Data Centres, Cyber Security (Designers & Engineers) Security Assurance Project Management (Project Managers, PMO, Project Planners) 3rd line Technical Support Expected Contract Length 2 Years. Individual SoWs will be agreed for specific periods and requirements as they arise. Latest start date 22/05/2017 Budget Range - Why the Work is Being Done Core Technology Infrastructure (CTI) design, engineer and deliver critical technology platforms onto which our products, applications and client services are delivered; Our platforms are sourced, integrated or self-built, as appropriate, giving us the ability to source component services or end-to-end solutions as required. We are disaggregating from large mono contracts & building our own internal capability within the organisation. Problem to Be Solved A Partner is required to support the programme team providing the following services: 1) Design and build of complex network and security infrastructures, and 3rd line support of LAN/WLAN & WAN infrastructure 2) Data Centre engineering build and management 3) Development of a single identity platform solution 4) A service providing an improved network forensic capability and enhanced data integrity 5) Project & Programme delivery of CTI projects from Initiation to Closure, following internal governance structures 6) A highly skilled team, supported by a wider organisation that shares best practice, and works together with Home Office to achieve the outcomes Who Are the Users N/A Early Market Engagement None. This requirement is being re-tendered on expiry of the existing contract. Work Already Done A number of Core Technology projects have already been delivered through an existing contract. However, CTI operate an active pipeline where technology capabilities are in high demand. Additionally, management of several services have been taken over from the legacy suppliers. Existing Team The existing programme is a blend of Civil Servants complemented by contract staff and specialist companies. Total team size is in the region of 70. Current Phase Not applicable Skills & Experience • Experience of the following Cyber Security technologies within the last year: Firewalls - Checkpoint, Fortinet, Juniper, Cisco, McAfee IPS SIEM • Recent experience and qualifications in: Cisco ACI Cisco Switches & Routers, Security – Firewalls Cisco ASA/VPNs, Load balancers – F5, Cisco UCS ,Cisco Nexus ,Cisco ASR, CCNA, CCNP, CCIE • Demonstrable experience in the production of the following technical documentation: LLD HLD TIP's RFC's Work Instructions Knowledge Articles Peer Review • Recent experience of the following DC capabilities: Cisco UCS, VMware design & configuration, Windows & Linux VM builds (OS level) EMC VMAX, EMC Networker & Data Domain configuration • Demonstrable experience of providing 3rd line support to Data Centre and Networking Infrastructure components within the last year. • Demonstrable experience of the following Networking technologies and capabilities within the last 12 months: LAN WAN Cisco QoS PS BT MPLS Solarwinds VPLS BGP OSPF • Recent experience of: Design & Implementation of Cisco Network Access Control, Cisco LAN Architecture, preparation for network Lockdown, Cisco ISE design & management ,NAC service transition, TACACS governance • Recent experience of the following: Cisco LAN Architecture – including LAN LLD's, 3rd Line support of Cisco Wired and Wireless, Development of Cisco Campus LAN HLD • Demonstrable experience of the following within the last 12 months: Complete site Cisco LAN and Cisco WLAN commissioning Implementation of new feature and software updates • Recent experience of: 3rd Line support for Core Technology Infrastructure, LAN remediation in preparation for Network Access Control Implementation of OoO Changes Identification of Rogue Wireless and WAN networks. • Recent xperience of the following: User migration activities, Floor walker on-site support prior and after Wireless commissioning, Updating of management Cisco Prime and Solarwinds Management Platform • Recent experience of: PKI based on Microsoft Certificate Authority, including implementation of Hardware Security Modules, Microsoft Direct Access, Microsoft Identity Manager, Active Directory to 3rd line admin • Experience of the following within the last year: Network Security Architecture Infrastructure Security Leadership Security Projects Technical Leadership 3rd line support of firewall infrastructure Internet Gateway Design & Implementation • Demonstrable experience of the following within the last 12 months: 3rd line support of internet gateways & Internet Proxies Mcafee SME Cisco & Checkpoint SME • Successful delivery of recent core infrastructure projects: using project management methodologies, matrix-management, reporting, planning, risk, dependency, financial and change management in a PMO Nice to Haves Experience in skills and knowledge transfer of core infrastructure projects Work Location Westminster initially - although the team will need to be flexible with working at multiple sites within the M25, as there is a likelihood that this team will move to Croydon at some point during FY 17/18. There is also some travel required to the HO data centres. Working Arrangments This will be determined depending on need and timescales, however, the intention is to promote efficient collaboration and team interaction across the varied technology capabilities delivered by CTI. Security Clearance All staff engaged on the programme must be security cleared to SC level (or be prepared to undergo clearance process prior to being engaged). Additional T&Cs Standard DOS Terms and Conditions No. of Suppliers to Evaluate 4 Proposal Criteria • Team skills and experience • Team organization • Service quality management • Mobilisation • Resources - depth & flexibility Cultural Fit Criteria • Work collaboratively with permanent staff and other suppliers. • Be open, honest and transparent • Share knowledge and participate in skills transfer. • Have a committed, proactive and professional approach to work • Be flexible in adapting to meet changing priorities and business requirements. Payment Approach Time and materials Evaluation Weighting Technical competence 60% Cultural fit 10% Price 30% Questions from Suppliers 1. Could we ask what number of roles are anticipated - - Architect - Project Managers - Design Engineers - Developers - Network support engineers? Also any phasing of current SoW/specific projects and or planned projects would be beneficial to allow us to consider the resource planning required for the full duration of the contract. The full requirement will be detailed in the RfP when it's issued. As an indication, the existing resource profile consists of 23 roles at various SFIA levels (datacentre x3, networks x6, project_delivery x6, project support x2, wireless_networks x2, network lockdown x 2, wireless floor_walkers x2). The ongoing projects will involve rapid on-boarding and working with another MSP to deliver key enabling services including Secure_Gateways, Wireless and Data_Centre services. Some flexibility in scaling resources to projects is required and there maybe further SoWs agreed for resources or specific deliverables as requirements arise. All staff are required to be cleared to SC 2. Are we allowed to work alongside other organisations to meet the requirements? We have interpreted this as a question about subcontracting. Please clarify if this is not the point of the question.The contract will be let to a single company signed up to the DOS framework in its own right. There is no restriction on the use of one or more sub-contractors to fulfil various elements of the requirements; however the company awarded the contract will be responsible for their subcontractors performance. Details of significant subcontracting arrangements may be required as part of the commercial process. 3. In answering the questions we may use a number of customer stories which are at an elevated level of security (Tier 2), can we give the detail of the answers without the customer name, but enough detail to allow technical evaluation? Yes, but any context that can be shared would be helpful in understanding the relevance, e.g. industry, nature of business, public /private sector etc. 4. As Monday 17th April is a Bank Holiday, can you clarify the exact closing date and time for this opportunity, and that the portal will be open on Monday 17th as we don't want to fall foul of any maintenance windows or downtime. The closing time for this opportunity will be 23:59 on Monday 17th April.No maintenance or downtime has been notified.