DA10--VA Enterprise Cloud Brokerage Service VA-27-00000536

The Department of Veterans Affairs, through its Technology Acquisition Center in Eatontown, New Jersey, is conducting market research via a Request for Information for the VA Enterprise Cloud Brokerage Service, identified by solicitation number 36C10B26Q0492 and NAICS code 518210. This RFI is issued under FAR 15.201 for pre-solicitation market intelligence and does not constitute a commitment to award a contract. The effort seeks industry input to establish a performance-based cloud brokerage platform capable of unifying management across at least two FedRAMP High-authorized cloud service providers, primarily AWS and Microsoft Azure, with additional CSPs to be onboarded within twelve months. The platform must support multi-tenant architecture, role-based access control, integration with ServiceNow, Splunk, SailPoint, and Okta, and ensure a Recovery Time Objective of four hours and Recovery Point Objective of one hour. It must also incorporate automated chargeback and showback workflows, optimize Reserved Instance and Savings Plan procurement, and enforce governance policies aligned with FinOps Foundation and Cloud Security Alliance guidance. The resulting contract, if issued, would have a potential six-and-a-half-year period of performance including a six-month transition period and up to five optional one-year extension periods under FAR 52.217-9. The contractor must maintain FedRAMP High authorization, comply with NIST SP 800-53 Rev. 5 and NIST SP 800-171 Rev. 2, adhere to VA Directive 6500, and ensure all systems meet Section 508 and WCAG 2.1 Level AA accessibility standards. Key operational demands include a strict 6-month timeline for initial AWS and Azure platform deployment, monthly reporting via CDRLs including a Status Report and FinOps Dashboard, and enforceable service credit provisions tied to uptime thresholds of 99.9%, with a 2% rebate per 0.1% below standard. The contractor must identify and retain key personnel including a Program Manager, Cloud Solutions Architect, FinOps Lead, and Cloud Security Engineer, with no more than 15% annual turnover and replacement within 30 days. All personnel require Tier 2 background investigations, PIV credentials, and annual HIPAA and security training, and must comply with VA Handbook 6500.6 Rules of Behavior and report security incidents to the NSOC within one hour. Responses