HHS/ASPR Hybrid Cloud Migration Capability - MRAS

The Department of Health and Human Services, specifically the Administration for Strategic Preparedness and Response (ASPR), is seeking information from private industry respondents for the planning, establishment, and lifecycle sustainment of a Hybrid Cloud Capability (HCC). The purpose of this request is to increase operational agility, innovation, and cost optimization in line with ASPR's strategic goals. The scope of the request includes labor, services, and supervision to plan, build, and sustain the new Hybrid Cloud Capability. ASPR is particularly interested in comments from respondents that are resellers of multiple cloud service providers. The timeframe for the acquisition is Fiscal Year 2023.

The technical objectives include establishing a new Hybrid Cloud Capability comprised of at least three brand-specific hosting environments (Microsoft Azure, Amazon GovCloud, and Oracle Cloud) and interconnecting them with on-premises private cloud. Additionally, a cloud readiness assessment will be conducted to prioritize decommissioning, application modernization/replacement, and data migration. The migration process will involve Agile Project Methodology and the phased approach for migrating applications and data from their current environment to the new Hybrid Cloud Capability. The period of performance is one 12-month base period with four 12-month option periods.

There are several challenges and constraints identified in this opportunity. Technical debt within ASPR's existing information systems needs to be assessed to determine whether they should be migrated or decommissioned. Cloud adoption requires a significant change management effort and specialized talent that may be in high demand. Constraints include ensuring authentication and identity management while balancing the need to share data across organizational boundaries, portability/interoperability for transitioning to different cloud service providers, and access control/protection of sensitive data in a multi-cloud environment.

The place of performance for most activities will be remotely at the contractor's facility or through telework, with periodic in-person meetings at ASPR Headquarters in Washington, D.C. The period of performance is one 12-month base period with four 12-month option periods. Contractor personnel may require Tier 2 or Tier 4 security clearances depending on their roles and responsibilities, and access to IT resources will be provided after obtaining the required clearances. ASPR handles a high volume of sensitive, unclassified information, including privacy act information, personally identifiable information, protected health information, and biomedical trade secret/proprietary information.