System Migration Partner to Support Azure Platform Landing Zone Uplift

⁠⁠⁠About the Project

The Department is seeking the services of a registered Microsoft Solution Partner to assist the internal technical and project teams to deliver on a program of work to uplift the Azure Platform landing zone remediating the security, performance and operational gaps that have been identified during a recent Microsoft led assessment. The partner is required to build out the application landing zone so that it can be automated and redeployed (migrated) as Infrastructure as Code (IaC) in Terraform or Bicep that meets the ISM, IRAP, Essential 8 requirements.

The initial scope is to rebuild the Security Sensitive Biological Application (SSBA) that is currently on legacy infrastructure within the required timeframe. The future phase is to assess another 10-15 applications and provide a modernisation strategy. This Includes applications within legacy platforms such as Oracle, WebSphere and ColdFusion.

Scope of Work

The Procurement seeks to engage an experienced provider (Migration Partner) who has the capability to provide specialist resources to assist/supplement the existing ITD Project team. The migration Partner is anticipated to provide various levels of resources and or outcomes to support the Department over the following Department led project Phases and outcomes:

Phase 1 – Planning and Design - May 2025 – July 2025 (12 weeks)

It is anticipated that the preferred respondent will commence in early April 2025.

During this period the System Migration Partner will be expected to produce the following Deliverables:

Deliverable 1 (Obtain approval to operate for SSBA):

Develop a delivery Plan to include build out of all the application landing zone including platform related dependencies and transition SSBA from legacy to the new SSBA application on Azure.

Deliverable 2 (Target State Architecture Design):

Develop a platform and application landing zone assessment and improvement plan in compliance with Information Security Manual (ISM) and Protective Security Policy Framework (PSPF) and other frameworks as deemed appropriate by the Department. The Design should also consider cloud networking architecture, subscription/account hierarchy, storage architecture, and backup and disaster recovery architecture.

It is anticipated that this will include the preparation of a Product Backlog.

It is expected that the Migration Partner will provide an outline of the resources required to undertake the above requirement within the timeframe. As such, the Department will be seeking a fixed cost for Phase 1 deliverables as part of this RFQ process.

Phase 2 - July 2025 to December 2025 (6 months)

The final scope of work, required resources, timeframes and subsequent costs for Phase 2 will be subject to the completion and agreement of the Deliverables in Phase 1, however the Department has provided a high-level outline of the anticipated activities and timelines.

a) Development of Delivery Sprints and Program Increments (PIs) including Sprint and PI planning, backlog creation, risk register creation.

b) Deploy the pre-approved IaC solution.

c) Implement the networking requirements identified in the design phase.

d) Deploy and configure the required Azure components to build SSBA cloud native application.

e) Validate deployments and produce functional testing results.

f) Implement the improvement plan produced in Planning phase Internal

g) Build or Integrate to Identity Management solution

h) Complete Test and Migration activities in accordance with the attached Statement of Requirements

The Department anticipates that the following roles will be required to deliver the Phase 2 requirements:

1 x Principal Consultant

2 x Senior Azure DevOps engineers

Estimated start date: Monday, 12 May 2025

Initial contract duration: 8 Months

Extension term: 12 months

Number of extensions: 1

Location of work: ACT

Working arrangements: Hybrid