OSD - NBIS Cloud and DevSecOps - MRAS

The Defense Counterintelligence and Security Agency (DCSA), under the umbrella of the Office of the Secretary of Defense (OSD) and facilitated by the General Services Administration (GSA), is seeking to modernize its National Background Investigation Services (NBIS). The NBIS serves as a comprehensive IT system for personnel vetting, covering processes from initiation and application to adjudication and continuous vetting. This modernization effort aims to enhance security, efficiency, and integration within these critical operations.

To achieve these goals, DCSA requires a Managed Service Provider (MSP) to deliver Cloud and DevSecOps services. The scope of work includes several mandatory tasks such as deploying and sustaining a Secure Cloud Landing Zone in AWS GovCloud, which must comply with the Department of Defense's Secure Cloud Computing Architecture standards. Additionally, the MSP will be responsible for developing and maintaining DevSecOps capabilities that support Continuous Integration/Continuous Delivery (CI/CD) pipelines essential for NBIS operations.

The MSP will also manage onboarding processes for cloud users, provide ongoing support, ensure compliance with continuous Authorization to Operate requirements, and procure software necessary for NBIS environments. Furthermore, while software integration services are optional, they involve ensuring compliance with product requirements through testing, release planning, agile execution, user feedback prioritization, baseline management, and training packages.

Overall performance requirements mandate that the MSP must deliver standardized secure cloud services in AWS at DoD Information Impact Level 4. This includes leveraging native tools provided by Cloud Service Providers to maintain a trusted and resilient infrastructure capable of supporting all facets of NBIS operations efficiently. The MSP's responsibilities are detailed further in Appendices B through D of the Performance Work Statement document.