Wireless Network Deployment at SOCNORTH

Performance Work Statement (PWS)

To design, develop, implement, test, and validate a Commercial Solutions for Classified (CSfC) Wireless Local Area Network (WLAN) Capabilities Package (CP) architecture. This architecture will extend both the Secure Internet Protocol Router Network (SIPRNet) and the Non-classified Internet Protocol Router Network (NIPRNet) over a government-controlled network at the SOCNORTH Headquarters building.

• Deliver an NSA-compliant wireless network solution nested within the USSOCOM Enterprise CSfC wireless architecture.

• Provide a greenfield deployment for both CSfC and NIPR wireless capabilities.

• The deployed WLAN will serve as the primary source of work, requiring continuous, high-density, high-capacity sustainment for current and additional personnel.

• Physical deployment is limited to the Western portion of the facility (approx. 60% of ground floor, 40% of second floor). Contractors will not work within the SCIF or Top Secret East side.

• Work will be executed in phased increments governed by Contract Line-Item Numbers (CLINs).

• The contractor shall provide all labor, supervision, management, materials, tools, transportation, equipment, cabling, testing equipment, penetrations, mounting hardware, and incidental services.

• All work must comply with applicable NSA CSfC Capability Packages, USSOCOM Enterprise Wireless requirements, DoD STIGs, NSA Common Criteria requirements, and industry best practices.

• CLIN 0001 – Study and Design (FFP): Conduct pre-onsite assessments (optional), wireless site surveys, evaluate existing infrastructure, assess cybersecurity considerations, develop High-Level Design (HLD) and Low-Level Design (LLD) documentation, develop wireless heat maps, and submit final deliverables for review. Government acceptance of CLIN 0001 is required before NTP for CLIN 0002.

• CLIN 0002 – Equipment Procurement and Installation (NTE FFP): Procure non-Government Furnished Equipment (GFE), provide a 1-year warranty, perform necessary penetrations for cable routing and AP installation, provide mounting hardware and tools, and install, configure, integrate, and validate all WLAN components (including CAT6A cabling, 802.1x NAC, RADIUS/NPS, and WIDS).

• CLIN 0003 – Testing and Validation (NTE FFP): Perform testing and validation activities including end-to-end connectivity, RF coverage, interference and redundancy, configuration, STIG compliance, security checklist verification, and CSfC WLAN implementation validation.

• CLIN 0004 – Final Documentation (NSP): Provide updated wireless heat maps, as-built drawings, final equipment inventories, configuration backups, final testing and validation reports, network integration diagrams, and Site Wireless Security Operating Plan (SOP).

• Period of Performance: Not to exceed 120 calendar days from contract award.

• Place of Performance: SOCNORTH Headquarters building, Peterson Space Force Base, Colorado.

• Performance Standards: Signal Coverage (95% of designated area at -65 dBm RSSI or better), Signal Quality (minimum SNR of 25 dB), Security Compliance (full compliance with NSA CSfC, STIG, and federal standards), Schedule Performance, and WLAN Availability (HA and redundancy).

• Installation Standards: Comply with NSA CSfC Capability Packages, USSOCOM Enterprise CSfC Wireless requirements, NSA supplemental annexes, NSA Common Criteria, DoD STIGs, federal cybersecurity standards, commercial cabling standards, and NIST SP 800-153. Cloud-managed WLAN architecture is not permitted.

• Security Requirements: Vendors must request Visitors Access Request (VAR). The executing contractor must be on the NSA CSfC approved trusted list. Executing company may partner with an entity with high-level technical knowledge and experience with USSOCOM. Executing team requires minimum Secret clearance for installation and TS clearance for configuration. DD254 required. NISPOM is a requirement. USSOCOM and SOCNORTH local security procedures apply. Contractor personnel must possess active Secret clearances at time of award; Government will not sponsor new clearances.

• Existing on-hand equipment (Appendix 1).

• USSOCOM-approved Material Equipment Lists (MELs).

• USSOCOM baseline configurations.

• Gray Network links and encryption device.

• Existing fiber connectivity.

• Government Points of Contact (POCs).

• Site access coordination.

• DD254 required at contract award.

• USSOCOM Enterprise Gray Site Validation Checklist documentation.

• Kickoff Meeting: Within 5 business days of award.

• High-Level Design (HLD): 15 business days after award.

• Low-Level Design (LLD): 30 business days after award.

• Installation Completion: Per approved milestone schedule.

• Testing and Validation Report: Within 5 business days of CLIN 0003 completion.

• As-Built Documentation: Within 15 calendar days of installation completion.

• Site Wireless Security Operating Plan (SOP): Per approved milestone schedule.

• Contractor is responsible for new cabling.

• Cable runs to APs not to exceed 100 meters (exceptions case-by-case).

• Ceiling heights approx. 10-13 feet.

• Contractors provide lift and installation equipment.

• Wireless deployment activities shall not disrupt SOCNORTH missions.

• Government-caused delays considered for extensions.

• Travel costs incorporated into CLIN pricing.

• Site Wireless Security Operating Plan (SOP) required by HQ USSOCOM.

• Contractor responsible for reinstating premise to original standards for aesthetic damage.

• Government responsible for Authority to Operate (ATO) process; contractor must ensure execution to USSOCOM and NSA standards for ATO facilitation.