IdAM Product Managers & Service Transition Partner (ASDT0092)

Tender description

Why the Work is Being Done The Ministry of Defence (MOD) needs an Enterprise Identity and Access Management (IDAM) service for its IT & Digital services; this delivers part of MOD’s 2010 IDAM strategy (available on gov.uk). This service is to provide: 1. Improved compliance with HMG’s Technology Code of Practice, by providing a reusable service and will simplify maintaining compliance with the General Data Protection Regulation (GDPR). 2. A migration path from current IDAM arrangements. 3. Identity related services that meet the Digital Service Standard, particularly for our partner organisations and external users. It is an essential prerequisite for new IT services from Q2 2019. Problem to Be Solved The Product Managers will manage the technical delivery of the Defence Identity & Directories services, including: • Identity & Access Management (IdAM) services (e.g. single-sign-on & advanced authentication); • Directory services (e.g. a master Active Directory and corporate directory). • Exit from the existing contracted services requires transition planning for an in house solution. Initial releases use NetIQ products, focus on IdAM features and OFFICIAL information in the UK. SECRET, overseas, deployed systems and directories are also on the roadmap. Who Are the Users All MOD Personnel/Partners/Contractors requiring IT application & services access. 1. As an IT user, I want single sign on to seamlessly access IT & digital services. 2. As an App or Service Owner, I want simpler, rule based access so appropriate users get quicker access to my service and inappropriate ones are refused access. 3. As a systems administrator, I want to maintain trust relationships between systems, so normal IT operations can continue. 4. As a Security Officer, I want a simpler means of securely providing access to IT so access is quicker, more accurate and can be scrutinised Early Market Engagement Work Already Done An IdAM alpha was conducted during 2016 on the Authority's product of choice the MicroFocus NetIQ product suite. This product was selected after a market competition and evaluation were held. Development work has continued with the onboarded development partner in Sept 18 who are working in an Agile manner to deliver incremental releases of the configured IdAM solution including identity log in for defence gateway and the core network at OFFICIAL. Existing Team The Project Team consists of IT Design Architects, Project Management professionals (both Agile and APM) various contracted parties working on the development of the product and assessment of further work identification across the Identity brokering and directories areas of concern. The team is a blend of Crown Servants and Contractors. Team size is currently 20 with all following SAFe delivery principles. Current Phase Beta Work Location The Project Delivery Team is located at MOD Corsham in Wiltshire (SN13 9NR). Occasional travel to Customers may be required dependent on the need, however this will be kept to a minimum. Working Arrangments The Product Managers will be expected to work full time (220 days per year). The IdAM delivery team works in an Agile Scrum environment under the direction of a Scrum Master and Project Manager. Current expectations are that the Product Owner will be at Corsham at least 4 days per week. Travel and subsistence expenses to attend other sites will be payable from Corsham using current Civil Service T&S practices. Locations such as but not limited to: Andover, Farnborough & Gosport. Security Clearance Potential suppliers will be expected to hold or be in the process of obtaining SC Clearance. The Authority WILL NOT sponsor SC clearance, it must be in place and remain valid for the duration of the contract. Additional T&Cs Additional information will be provided for successful Suppliers following the short-list stage. The successful Supplier must request a Security Aspects Letter and provide a Cyber Essentials Certificate. T&S will be paid on receipted actuals in compliance with MoD policy , no other expenses are permitted. Suppliers must use the Authorities Purchase to Payment Tool called CP&F or be prepared to sign up the tool. Suppliers must adhere to the MOD Corsham working policies. The following Quality Assurance standards will be applicable: Concessions Def Stan 05-61 Part 1 Issue 5 Contractor Working Parties Def Stan 05-61 Part 4 Issue 3 Skills & Experience Proven and demonstrable experience in working within a project or product of similar size and complexity. Proven and demonstrable experience of working with multi-disciplinary teams in an agile development/delivery environment. Proven and demonstrable experience of prioritising agile product and sprint backlogs to provide maximise value returned. Experience setting clear acceptance criteria and working with colleagues to ensure backlog items meet the INVEST criteria. Proven and demonstrable organisational skills. Experience in working in a large scale change programme. Experience in liaising with Industry Partners and contractors. The ability to work under pressure and adhere to challenging timescales. Strong analytical skills. Nice to Haves Experience in working within the MOD. Knowledge of current Defence Identity Access Management systems. Experience of working with remote capabilities. Experience of setting up and developing Directory Services. No. of Suppliers to Evaluate 3 Proposal Criteria How you'll provide the Authority with high-quality team that embodies the required skills; particularly, why you believe the team (as a collective) will be high performing (12%) How you'll balance being responsive and flexible to changing work demands (in terms of skills/capacity) as it progresses with the benefits of a stable and consistent team. (11%) Indicative structure (i.e. people/roles in your proposed team and their main interrelationships), indicative profile (how team size and roles might change over time) and start date. (11%) How you will identify and keep the organisation informed of risks, dependencies, issues and other considerations relevant to planning. (11%) Your proposed approach and methodology for managing the transition planning: particularly how this will inform the backlog entries and prioritisation of the Directories, Core OFFICIAL and SECRET workstreams. (11%) Proposed approach and methodology for achieving security/information assurance accreditation and maintaining through the Agile development, including identifying threats, putting in place controls and engagement with risk owner(s). (11%) How you will ensure the service can meet the relevant digital service standard at various phases of development (e.g. closed beta, open beta, live). (11%) How you'll ensure the service meets the organisation’s policy goals in terms of providing more secure Identity and Access Management/Directories processes, incorporating existing policy. (11%) Your approach to knowledge management, particularly how the Authority and its partners can support and maintain the IdAM/Directories services after they have been developed. (11%) Cultural Fit Criteria Shares knowledge, experience and expertise with the Authority and other team members (11%) Be transparent and collaborative (12%) Evidence of how you foster an inclusive and professional working environment with no place for bullying or discrimination of any form (11%) Evidence that you attract and retain the best talent to create teams that reflect the diversity of the country and can deliver a diversity of thought to the Authority (11%) Evidence of a willingness to take ownership of problems and use initiative to ensure a successful outcome (11%) Evidence of collaborative approach to problem solving with stakeholders from multiple organisations, including Civil Servants, other contractors and vendors (11%) Evidence of working successfully in an Agile manner within an organisation where some units: (particularly in relation to governance and project control processes) retain a big-design-upfront/command-and-control perspective (11%) Evidence of working with organisations and stakeholders with differing levels of technical expertise (11%) Payment Approach Capped time and materials Assessment Method Written proposal Case study Presentation Evaluation Weighting Technical competence 50% Cultural fit 20% Price 30% Questions from Suppliers Budget range £0.9 - £1.25 million (ex vat) contract value includes a limit of liability for t&s of £20k.