SS Draft - Attachment 4 - Draft PERFORMANCE WORK STATEMENT - OBJECTIVE 3 HPC Support Network Security

DRAFT DOCUMENT

PERFORMANCE WORK STATEMENT

Objective 3: High Performance Computing Support &
Network Security

T

1.0 Background and Scope

AF

The Contractor shall maintain a resilient, proactive defense posture for the NOAA Office of the Chief Information Officer (OCIO) Research and Development High Performance Computing Systems (RDHPCS) program environments and network infrastructure. The computing environment operates 24 hours a day, 365 days a year, requiring continuous security oversight to protect against emerging threats. See Attachment B for a description of RDHPCS Computing and Data Storage Resources.

The scope of this PWS encompasses the program, user support, and defense of computational clusters, the Hierarchical Storage Management Systems (HSMS), High-Performance File Systems (HPFS), HPC production nodes (e.g., Gaea, Hera, Ursa, etc.), and the network conduits that connect them, ensuring authorized researchers have seamless, secure access to computing resources. All security operations must strictly comply with Department of Commerce (DOC) and NOAA IT security policies.

2.0 Specific Task Requirements

2.1 Network Infrastructure Security and Data Protection

The Contractor shall secure the high-speed networks that enable GFDL's scientific mission.

D

R

1.​ Enterprise Network Integration and Defense: The Contractor shall actively secure and support operations across the NOAA N-wave Enterprise Network, which connects geographically dispurse production HPC systems, the HSMS, HPFS, and other infrastructure and service systems across the RDHPCS.
2.​ High-Volume Transfer Security: The Contractor shall ensure that the specialized tools and network pathways used for the reliable transfer of up to 80 Terabytes (TB)/day of data from remote production sites (e.g., ORNL) to storage and analysis systems remain encrypted, monitored, and protected from interception or corruption and shall utilize the specialized software and networking tools to manage continuous, massive data pipelines.
3.​ Access Control: The Contractor shall implement and manage robust identity and access management (IAM) protocols, including multi-factor authentication (MFA) and least-privilege access, for both federal personnel and the approximately 1,000 global collaborators sharing these resources.

2.2 Proactive Threat Mitigation and Vulnerability Management The Contractor shall execute continuous monitoring and rapid incident response protocols.

DRAFT DOCUMENT

AF

T

1.​ Continuous Monitoring: The Contractor shall utilize continuous diagnostic and