Iron Bank Container Team

Background
The Iron Bank Value Stream on Platform One (P1), under the Air Force Life Cycle Management Center (AFLCMC/HNCX), is focused on enhancing cybersecurity within its container infrastructure.

The initiative aims to leverage minimal/distroless images to significantly reduce the attack surface of approximately 1,395 currently available containers. This approach eliminates unnecessary packages and dependencies, thereby minimizing potential vulnerabilities and simplifying security audits, ultimately enhancing the overall security posture.

Work Details
The contractor shall provide comprehensive support for the Iron Bank platform, which includes ongoing operations, capability sustainment, and forward-leaning innovation. Key tasks include:

1) Ongoing technical sustainment of Iron Bank images, including synchronization with upstream releases, vulnerability remediation, and documentation maintenance. Contractors will work in an agile environment following government-established processes to ensure stability, security, and functional interoperability.

2) Maintaining mission relevance by ensuring the platform is scalable, secure, and user-centered to enable rapid software delivery across the Department of Defense.

3) Addressing specific requirements such as creating new container repositories for approximately 50 Iron Bank Core images at an enterprise licensing level and maintaining a 60-day validation period for Big Bang instance deployment proof of concept with minimal images while ensuring compliance with standards like FIPS 140-3.

4) Administering Iron Bank images necessary for Big Bang Value Stream operations while ensuring continuous CVE vulnerability scanning response and updates.

Period of Performance
One base year with two option year periods.