Private Cloud installation

Description

1. BackgroundWith the success harnessed by the NATO Software Factory (NSF) public cloud DevSecOps platform in recent years, NATO now aims at extending this service to projects and initiatives with higher security classification than that permitted by a service hosted on the internet, enabling data, AI, machine learning, and DevSecOps technology adoption in support of C4ISR information superiority.

To achieve this while leveraging the experience and expertise of the NSF, NATO will acquire an Azure Stack Hub infrastructure capability in disconnected mode (fully disconnected from the internet), as a managed service.

This private cloud will be deployed, set up and operated by the service contractor, enabling the NCI Agency-led teams to be fully dedicated to business specific activities on the infrastructure.

The NCI Agency intends to deploy two main workloads on the Azure Stack Hub infrastructure.This de-coupling of the infrastructure from the platform layer will allow the service contractor to focus on the infrastructure and service management, and the NCI Agency to focus on the DevSecOps and Data Science platforms and activities.

The NCI Agency will retain the Cloud Architect role and Azure Stack Hub User role , which will be responsible for transforming the technical requirements of the private cloud into the architecture and design that the service provider will implement and operate, being the Azure Stack Operator role its responsibility.

The deployment and operation of the hardware assets for the capability will be on NCI Agency premises, disconnected from the internet.

The private cloud capability will be implemented with initial capacity requirements, but it is expected that these increase over time as it services more projects and initiatives.

Following the initial contract period, the private cloud operations contract will be renewed on an annual basis. 

2. Estimated Schedule

• It is expected that the IFB will be released in Q3 2023.
• It is expected that the contract will be awarded in Q4 2023.
• The initial implementation of the hardware and Azure Stack Hub infrastructure and configuration for operation must be completed timely so that the managed service can be operational by the end of Q1 2024.

3. Scope

1. The private cloud solution shall be based on the Microsoft Azure Stack Hub infrastructure in disconnected mode.
2. The service provider shall perform datacenter integration at all required layers (i.e. networking, DNS, identity, PKI, time servers etc.).
3. The hardware and software shall be owned by the service provider and provided as part of the private cloud service to the NCI Agency. Security restrictions will dictate that some parts of the infrastructure (e.g. storage devices) will be provided and owned by the NCI Agency.
4. The service provider shall perform O&M for the Azure Stack Hub infrastructure.
5. The service provider shall perform the Azure Stack Hub Operator role, while the NCI Agency assumes the Azure Stack Hub User role.
6. The service provider shall enable Azure Stack Hub new functionalities as requested by NCI Agency.
7. The service provider shall offer administrative visibility (web-based) on the Azure Stack Hub infrastructure health.3.8 The service provider shall enable Azure Stack Hub infrastructure security features to meet NATO security requirements.
8. The service provider shall provide IT Service Management services in support of the private cloud’s operation.
9. The service provider shall act as the single point of contact for both hardware and software support tickets.
10. The service provider Azure stack hub operators shall hold a COSMIC TOP SECRET security clearance.
11. The service provider shall expand the Azure Stack Hub infrastructure as requested by the NCI Agency.
12. The Service provider shall be responsible for the full system lifecycle of the Azure Stack Hub ensuring the hardware and software products delivered remain fully within vendor support applying relevant updates, preventing any obsolescence.
13. The Azure stack hub shall have the following functionalities enabled:

• Operate on-premises fully disconnected from internet
• Support for virtual machines
• Support for Kubernetes clusters
• Support for PaaS Databases
• Support for Event Hubs
• Support for Key vaults
• Support for storage accounts (container, table, queue)
• Support for App services
• Support for Marketplace items
• Support for graphics processing unit (GPU)
• Integration with Microsoft ADFS
• Ability to deploy all the resources by using infrastructure as code
• Ability to interconnect with the current on-premises infrastructure
• Ability to export logging and auditing data to third-party SIEM system

4. Key Personnel

It is expected that the IFB will include requirements for the following key personnel:

• Project Manager
• Cloud platform architect
• Administrator

Technical Constraints

1. Cloud hardware assets in NCI Agency premises/Class 1: the hardware assets must be deployed in the NATO on-premises datacentre and integrated with the existing IT infrastructure.

2. NATO SECRET environment: the solution will handle information classified up to NATO SECRET.

3. Azure Stack Hub: the solution provided shall be based on the Azure Stack Hub infrastructure.

4. Disconnected mode: Azure Stack Hub must be deployed and operated without internet connectivity, by using the disconnected deployment mode.

5. Flexible capacity: Azure Stack Hub must allow capacity increase based on technical requirements.

REF - IFB-CO-115722-PRVCLD

Opportunity closing date

30 July 2023

Value of contract

£100k-1m

The buyer is happy to talk to

manufacturers, wholesalers, distributors, agents, consultants