WP1453 - GOV.UK Ruby and Rails application dependency upgrades

Tender description

Why the Work is Being Done Supports delivery of critical GOV.UK roadmap by reducing the need for product teams to complete unrelated but essential application upgrades. Problem to Be Solved 30 GOV.UK applications are running on out of date frameworks with a limited support timeline. The vendors will stop supplying security updates in March 2018. The applications must be upgraded to framework versions that will receive longer term support Who Are the Users As a publisher on GOV.UK I want to use applications that are secure So that I can be confident that my sensitive content won't be leaked Early Market Engagement None Work Already Done All applications have good test coverage and are part of a Continuous Integration and Continuous Delivery pipeline Existing Team The existing team of GOV.UK developers will be available to review Pull Requests and answer questions on undocumented application behaviour. They will specify the versions of dependencies to be upgraded at the time the engagement begins. The work will be co-ordinated by a GOV.UK Delivery Manager and overseen by a GOV.UK Senior Technologist. Current Phase Live Work Location The White Chapel Building, 10 Whitechapel High Street, London, E1 8QS Working Arrangments The team should work in the GDS office for an initial period to gain context, but are encouraged to work remotely afterwards. Fortnightly check in meetings on progress are required. Security Clearance SC. Additional T&Cs Cabinet Office (CO) Travel and Subsistence policy will apply. All expenses must be pre-agreed with between the parties and must comply with the CO T&S policy. Skills & Experience 3+ years experience of Ruby, Rails and Sinatra 2+ years experience working in a Continuous Integration environment 2+ years experience working with Git 2+ years experience with Test Driven Development Nice to Haves 5+ years experience of Ruby Experience of managing at least 2 complex Rails projects over multiple major Rails versions Recent experience working with the GOV.UK stack At least one example of experience with non-standard Rails applications that use APIs rather than ActiveRecord At least one example of experience performing long-running Ruby and Rails upgrades while development occurs in parallel At least one example of ability to research and understand from stakeholders issues that arise during upgrades At least one example of experience with changes to assets in Rails 5.1 At least one example of experience working with 12 factor applications No. of Suppliers to Evaluate 3 Proposal Criteria Technical solution Approach and methodology How the approach or solution improves the velocity of GOV.UK developers How the approach or solution meets security needs Estimated timeframes for the work How they’ve identified risks and dependencies and offered approaches to manage them Team structure Value for money How the approach works to minimise the need for similar work in the future Cultural Fit Criteria Evidence of experience working in an Agile environment with Kanban Evidence of experience reporting progress to Senior Management on a regular basis Experience communicating with other developers via Slack or similar tools Demonstrated understanding of the need to ask well defined questions of other developers Examples of sharing learnings with other developers Experience of pair or mob programming and understanding of the benefits Payment Approach Capped time and materials Assessment Method Written proposal Work history Reference Presentation Evaluation Weighting Technical competence 75% Cultural fit 5% Price 20% Questions from Suppliers Budget range £65-70k