Department For Work And Pensions - DevOps/DevSecOps and Developer Support

Tender description

Why the Work is Being Done In order to ensure that this key DWP application is able to support the scaling and security requirements, it is being re-engineered for resilience and to allow it to operate in a commodity cloud hosting environment. In support of this, Agile and adaptable vulnerability management within production, support and development environments is required to support risk management activity. Problem to Be Solved The scaling and security goals for the application have led to a strategy of commodity cloud hosting. There is a need to develop and implement solutions to remediate any identified vulnerabilities. Who Are the Users Universal Credit Claimants will use the the system to mange and progress their claim online. DWP Job Centre and Services Centre Agents will use the system to perform their roles in support of the Universal Credit Applicants. Early Market Engagement Work Already Done Work to deliver a Minimum Viable Product (MVP) is concluding. Existing Team The supplier will be working as a part of a multi-disciplinary team dedicated to the work to migrate the service to a commodity cloud platform. This team consists of internal DevOps, QA, network engineers, Security and delivery / project managers. The team is 10 strong and follows agile processes to prioritise and manage the activities. Current Phase Discovery Work Location Caxton House, London Working Arrangments On-site in London office for the majority of the time with some scope for remote working. The collaborative nature of the team means that face to face interaction and presence at daily stand-ups is essential. Security Clearance SC clearance. Additional T&Cs Additional DWP Terms and Conditions will apply. These can be found at https://dwp.bravosolution.co.uk/web/login.shtml. Skills & Experience Experience designing and implementing secure, resilient, highly available configurations of infrastructure components.- 5% Extensive, demonstrable knowledge of system security vulnerabilities and remediation techniques.- 5% Experience of automation of cloud deployments and developing infrastructure as code using terraform.- 5% Experience creating destructive testing frameworks including the use of Jepsen to simulate failure scenarios.- 4% Experience of cloud migrations for large microservice architectures- 5% Capacity to supply,experienced DevOps, DevSecOps engineer and developer with technical skills (>3 years’ experience) in Terraform, puppet, github, bash, python, java, Mongo, ActiveMQ, jepsen, microservice architectures,commodity cloud environments- 5% Have experience of working within DWP or a comparable organisation within the last 3 years- 5% Nice to Haves Ability to provide technical leadership in multi-supplier team environments- 3% Experience working with AWS- 3% No. of Suppliers to Evaluate 3 Proposal Criteria Please provide details of situations where your resources have delivered DevOps and testing engineering / development capability within the context of vulnerability management using agile methodologies- 7% What experience do you have delivering major cloud migration projects for a comparable customer. Please clarify how your resources added value, delivery focus and technical leadership- 7% Experience of aligning activities with other parallel work streams, ensuring quality standards are maintained- 7% In past assignments,how have you ensured that you gain at pace, a detailed understanding of the service and project requirements to allow rapid, involvement in design and decision activities- 7% Describe your processes for identification of risks and dependencies and the approaches to manage them- 7% Cultural Fit Criteria Describe your processes for identification of risks and dependencies and the approaches to manage them- 5% Payment Approach Capped time and materials Assessment Method Written proposal Work history Presentation Evaluation Weighting Technical competence 75% Cultural fit 5% Price 20% Questions from Suppliers Budget range