HMPO Data Transformation Architecture Service

Tender description

Summary of the work HMPO requires a supplier to provide Architecture and engineering services to complete the design for several key Data Products in HMPO (e.g SOR, Data Sharing), collaborating closely with several Product teams. Expected Contract Length 2 Years Latest start date Wednesday 30 September 2020 Budget Range £3m Why the Work is Being Done HMPO is transforming its IT services, moving to a more agile, product centric, cloud first architecture, and is significantly advanced in the implementation of this transformation. A key element of this is the transformation of how our data is stored, appropriately shared, and utilised. Much of this is predicated on a Serverless architecture with a high degree of automation, and very high security standards. Problem to Be Solved To iterate the existing designs in support of the roadmap for a range of Digital Products focusing on the storage (inc System of Record), manipluation and sharing of Passport Data. These are replacing Legacy systems. Who Are the Users HMPO is creating several data products that share common data and common architecture. HMPO needs a partner to complete the outstanding architecture and detailed design work for the underpinning data platform, which aligns with wider HO Technology Strategy. There is not one specific user for this, it addresses a multitude of needs across HMPO including the SIRO who wants HMPO data to be secure both during transformation and when in operation and the SRO who needs a cost-effective strategic solution to replace legacy services. Early Market Engagement None Work Already Done Capability currenty exists but is largely fulfilled by individual specialists. Current complement - 1 Lead Architect Owner (Enterprise Data), and 4 Technical Leads (AWS Cloud Platform, Data Migration, Data Services, Secure API). Discoveries at a strategic level have been completed for all capabilites and some services are in Alpha. Detailed discoveries (Spikes) still to be completed for some specific capabilities or as and when new capabilities are available on the market. Existing Team HMPO's Transformation is being delivered by a mixture of in-house resources and other suppliers, the successful bidder will need to work with, including Level 1 and Level 2 support, Delivery teams for Digital Products, Technical Design Authorities etc. This team will work in the HMPO TDA and the client for these services is the HMPO CTO. Current Phase Discovery Skills & Experience • Demonstrable experience of successfully designing and implementing sensitive data migration, from Oracle to AWS Public Cloud considering DQ, source and target data models,  and parallel running of legacy & target. • Have demonstrable experience of successfully designing digital solutions that collect and manage personal and/or sensitive information with appropriate controls and protection implemented in AWS Public Cloud. • Have demonstrable experience of successfully designing and delivering migration of legacy databases and data structures to POLE model iteratively. • Have in-depth experience of defining and implementing target and transition architectures for Mission critical legacy transformation projects • Have demonstrable experience of successfully understanding user needs and designing data models to support them. • Have demonstrable hands-on experience of designing and building data migration/transformation using Java, JMS, and Apache Nifi. • Have demonstrable experience in API development (SOAP/REST and GraphQL) and industry standard best practices to develop and secure APIs in AWS public cloud. • Have demonstrable experience of designing and building data storage solutions using AWS Aurora RDS Postgres Cluster, AWS S3. • Have demonstrable experience of designing and building CI/CD solutions, multi account infrastructure automation pipelines using AWS Code Commit, AWS Code Pipeline, AWS CodeDeploy, AWS CodeBuild. • Have demonstrable experience of designing and building AWS Multi account Infrastructure Pipelines using AWS CDK, AWS Secrets Manager. • Have demonstrable experience of designing and building Serverless API solutions using AWS Technologies (Lambda, Amazon API Gateway, STS, CloudWatch, CloudTrail), Apollo GraphQL, TypeScript. • Have in-depth experience of applying security by design in AWS Cloud based architectures, designing the security solution using AWS Config, AWS Macie, AWS Guard Duty, AWS Security Hub. • Have demonstrable experience of designing and building Business Intelligence solution using Microsoft PowerBI (On-premise) and SSIS, SSAS. • Confirmation that your organisation is Cyber Essentials certified. Nice to Haves • Experience of working in Public Sector. • Evidence and experience over a period of 2 or more years of use in the Atlassian toolset (with a focus on LIRA, Confluence). • Evidence of delivering architecture products and design decisions in agile delivery. • Demonstrable experience of working with a wide range of user groups including commissioning organisation business stakeholders, technical design authority, NCSC and other GCHQ agencies. • Confirmation that your organisation is Cyber Essentials Plus certified. Work Location Wesminster, London. Remote working also expected. Working Arrangments Some on-site work may be required but much of the work can be completed remotely. High Level Designs and Migration strategies defined for all Data Products. Detailed designs iterated for each Product (including Systems of Record, Document stores,Public and Private Data Sharing services, Bulk Data Processing) are at varying stages of progress with spikes and prototypes undertaken in support of the Product roadmap. Security Clearance SC clearance as a minimum. Willingness to undertake DV clearance if required. Additional T&Cs Note: Home Office DDaT are applying target rates to all procurements. Although these are not mandated, it will be factored into the pricing evaluation at written proposal stage. Rates as follows: - Architecture: £600(SFIA 3); £750(SFIA 4); £950(SFIA 5) - Data: £550(SFIA 3); £650(SFIA 4); £900(SFIA 5) - Delivery: £500(SFIA 3); £700(SFIA 4); £850(SFIA 5) - Engineering: £450(SFIA 3); £650(SFIA 4); £800(SFIA 5) - IP Ops: £450(SFIA 3); £650(SFIA 4); £800(SFIA 5) - Product: £540(SFIA 3); £680(SFIA 4); £800(SFIA 5) - QAT: £460(SFIA 3); £575(SFIA 4); £800(SFIA 5) - UCD: £425(SFIA 3); £575(SFIA 4); £625(SFIA 5) No. of Suppliers to Evaluate 3 Proposal Criteria • How you would ensure your approach would deliver a solution that meets HMPO needs. • Team structure, capability and knowledge of the technologies required to deliver the services. • Approach to transition & handover from incumbent specialists. • VFM and how it would be maintained or improved. Cultural Fit Criteria • Provide evidence of experience of adopting approaches that enable architecture led delivery in an agile product centric organisation. • Provide evidence of experience of sharing knowledge and experience with other team members. • Provide evidence of experience of being transparent and collaborative with colleagues and Product owners. • Provide evidence of experience of seeking to innovate and improve. Payment Approach Time and materials Assessment Method Presentation Evaluation Weighting Technical competence 60% Cultural fit 15% Price 25% Questions from Suppliers 1. Can the Authority please confirm whether this opportunity is assessed as inside or outside of IR35? This opportunity has been advertised as an outcome based service using an outside IR35 Framework Agreement. Therefore, this opportunity is deemed outside IR35. 2. Can the Authority please confirm how they expect the delivery team to be comprised in terms of SFIA level (i.e. whether they envisage SFIA level 5 resource being required, or level 4)? Shortlisted bidders will be supplied with a requirements document. Bidders will be required to suggest the delivery team SFIA Level and size of team to deliver these services. 3. There is no mention of the expected team size, can you elaborate on this?What is the expected team composition, with SFIA levels? Shortlisted bidders will be supplied with a requirements document. Bidders will be required to suggest the delivery team SFIA Level and size of team to deliver these services. 4. There is no mention of the expected team size, can you elaborate on this?What is the expected team composition, with SFIA levels?Do you expect a need for experience at SFIA levels 3, 4 and 5? The lead roles you describe in the current complement are typically at SFIA level 5 – is this correct? Shortlisted bidders will be supplied with a requirements document. Bidders will be required to suggest the delivery team SFIA Level and size of team to deliver these services. 5. There is no mention of the expected team size, can you elaborate on this?What is the expected team composition, with SFIA levels? Shortlisted bidders will be supplied with a requirements document. Bidders will be required to suggest the delivery team SFIA Level and size of team to deliver these services. 6. Will this work be classified as inside or outside IR35? This opportunity has been advertised as an outcome based service using an outside IR35 Framework Agreement. Therefore, this opportunity is deemed outside IR35. 7. How do you foresee an outcomes-based engagement when you appear to be replacing individual consultants? We are not looking to just replace contractors, we are looking to shift to outcome based service contract in line with current HO policy and HMPO target operating model. This will be managed through clearly defined and measurable deliverables. 8. Please confirm that this question “Evidence and experience over a period of 2 or more years of use in the Atlassian toolset (with a focus on LIRA, Confluence)” refers to JIRA, not LIRA? Correct, it is the Altlasian product suits and refers to Jira 9. Regarding Q1 Nice to have "Evidence and experience over a period of 2 or more years of use in the Atlassian toolset (with a focus on LIRA, Confluence)", please can you confirm whether LIRA is correct, or this should read JIRA? Correct, it is the Altlasian product suits and refers to Jira 10. Who are the existing suppliers providing service? Capability currently exists for most of these services but provided through several individual specialists rather than one service offering 11. Is it acceptable to demonstrate experience of migrations and POLE experience using two separate case studies, since the combination is only relevant if the supplier has specific knowledge of the specific legacy model? It's up to the supplier to determine the evidence to make their case. It is also understood that each supplier has varying experience against each criteria 12. Please can you elaborate on the scope of work to be delivered by the supplier over the 2 year term (or an initial SoW). In particular, we are looking to understand what the full set of products to be designed are (your Roadmap), and the stage/level of maturity of each. This will enable us to determine the team profile we would need to deliver the requirement A SoW can't be provided. However, the expereince describes the kind of things HMPO are after in a supplier. The working arrangments makes reference to "Product (including Systems of Record, Document stores,Public and Private Data Sharing services, Bulk Data Processing) are at varying stages of progress"and the problem to be solved section describes " a range of Digital Products focusing on the storage (inc System of Record), manipluation and sharing of Passport Data" 13. Is the work being procured design only? i.e. Please confirm that there is no engineering delivery or development scope included It requires engineering. Outlined in the summary of work "Architecture and engineering services to complete the design for several key Data Products in HMPO" 14. With reference to the Essential requirement to have " demonstrable experience of designing and building CI/CD solutions, multi account infrastructure automation pipelines using AWS Code Commit, AWS Code Pipeline, AWS CodeDeploy, AWS CodeBuild."; please can you clarify what is meant by multi account? Multiple AWS accounts 15. What do SSIS and SSAS stand for? SQL server Integration ServicesSQL server Analysis services 16. You have stated a Target Rate Card in the advert. Do you have a maximum rate and will this be mandated? Yes - We have a Maximum Rate which will be supplied to the shortlisted bidders. These maximum rates will be mandated and failure to meet this mandatory requirement will lead to disqualification. Ideally suppliers will provide rates at or below the Target Rate parameters already stated in the advert.