Application Development Services for Cloud 1. Document Purpose This document describes the G-Cloud J2EE and Application Development Services for Cloud provisioning offering by Vouchcom. 2. J2EE and Java Implementation Service Overview Vouchcom has a track record of delivering solutions that contain high quality software delivery to enable costeffective delivery of both internal and external cloud application development services. Vouchcom delivers projects across a number of different technology stacks, most commonly based on the Java and J2EE platforms. Our design and development teams work closely with business analysis teams, business owners and other stakeholders to ensure high-quality and timely delivery. Keywords for this service: Deployment on Web and Application Servers and ESB (BEA Weblogic, JBoss, Tomcat, Apache, WebSphere Application Server, WebSphere process server, WebSphere Enterprise Service Bus), Databases: (MongoDB, Cassandra, Hadoop, MariaDB, Oracle [versions 7,8,9,10,11], PL-SQL, MySql, MS SQL, Microsoft Access, PostgreSQL), Cloud Application Frameworks: (Amazon EC2, Proxmox, Open Nebula), File Synchronisation Technologies (OwnCloud), Security (Entrust, Sun One Identity Management Platform / Lighthouse Waveset, SAML) Setting Federated trust across multiple application servers (Single Sign On, Identity Management and Provisioning tools), CMS (Joomla, Drupal, Wordpress), Technologies (Java, J2EE, XML, HTML, JQuery, LAMP Stack, MVC Framework, Rational Products [Rational Rose, Clearcase], Eclipse, CruiseControl continuous design and build, IntelliJ, XCode and IOS 7 Development, Together/J, MS Office, MS Project, Hybernate, Apache Hadoop and Big Data, ZK and Zul UI toolset, UML Modelling, Process Modelling, HTML, CSS, XML, XSLT), Methodologies (RUP, extreme Programming (XP), DSDM, Unified Process [Inception, Elaboration, Construction, Transition], TOGAF, Zachman, Unified Modeling Language [UML], Distributed Application Architectures, Open Source Technologies, Infrastructure Architecture and Networks, Applications Level Security and Role Based Access Control [RBAC], Design Patterns, Component Development, Transactional Applications, ERWIN and Data Analysis, LDAP and LDAP Tools, Development life cycle, Iterative, Iterations, Build and release, Pilot, Prototype, Testing, Test, Deployment, Design options, Design solution, Design standards, Functional design, Technical design, Quality assurance (QA), Implementation, Test cases, Test scripts, Test strategy, Regression testing, Performance, Security, Penetration, Technology agnostic, KPI, Virtualisation, KVM, VM Ware, Virtual environment, Specialist cloud services, Technology capabilities, Databases, Data warehouse, Page 1
ETL, SQL, Microsoft, Unix, SOA, Business Intelligence (BI), ecommerce, Analytics, Content management, Automation, Load runner, Scrum, CMS, Senior Project Manager, Change Manager, Project Manager, Junior Project Manager, Project Support Project Administrator, Risk & Issues Manager, Quality Manager, Project Planner, Resource Manager, Stakeholder Manager, Communications Manager, Technical Project Manager, Configuration Manager, Deployment Manager, Technical Implementation Manager, Development Manager, Test Manager. 3. Key Benefits Most of our consultants have more than 15 years of experience in providing high protective marking project implementation with a range of technologies in multi agency environments and in a number of Government and non-government clients. Our consultants have participated in many successful high level Government programmes and projects in a variety of roles, including: Pre-procurement and Procurement Technical Advice Feasibility Study Design Authority Governance Technical Architecture (Enterprise, Integration, Security, Application, Data) Cloud specific experience (Deployment, Open Source Cloud Management Solutions) Design (TOGAF, ITIL, Prince II, SCRUM Master and Product Owner, DSDM, XP, Rational Unified Process) Development (Java, J2EE, PHP, PL/SQL, XCode) Database Development and Administration (MongoDB, Cassandra, MariaDB, Hadoop, Oracle, Sybase, Mysql, MSSQL and Access) Configuration Management and Testing (CruiseControl, Unit Testing) Project Management, Technical Project Management, Configuration Management, Risks and Issues Management, Stakeholder Management, Project Support 4. Service Options Table Option Free/Trial Service: Service Provider: Service Tariff and Pricing Termination Terms Service Levels Service Management Service Constraints Data Restoration and Service Migration Backup, restore and data recovery Provisioning Status Vouchcom Limited Included in the SFIA card offering No exit or termination cost Page 2
Training On-boarding Off-boarding Open Source Software Service management Reporting Helpdesk Protectively Marked Information IL Levels Not Applicable Free initial discussion on the technical requirements the work package at hand (up to 2 hours) will be performed to understand the state of play. Access to source code and database(s) may need to be provided by the client. We will work with you and your new supplier to ensure ease in the transitioning process and provide any relevant required documentation, upon request. Where possible, we work with open source software. This will be assessed and discussed during the onboarding process. Reporting will be provided at the requested level by the client. We shall advise, upon request, the level of required reporting. We can offer SC personnel 5. The Supplier Vouchcom s personnel and partners understanding of architecture covers the business, application / data and infrastructure domains comes with years of experience in small and large Government programmes and projects with a list of high-protective-marking agencies and departments that includes the Department of Social Security, HMRC (Customs and Excise division), ETS/UCAS, UKBA/Home Office and being part of multi agency teams that include Police and SOCA. Non-Government clients include Sun Microsystems, British Petroleum, BSkyB, Barclays Wealth, Detica, British Telecom Laboratories, GHK and Choice One Group. Vouchcom participated in up to 1.2 billion Government programmes offering governance and design authority services and is able to assist with a strong knowledge of risk mitigation, business analysis, governance, procurement and provisioning processes. Vouchcom expertise covers framework and methodologies include secure applications and cloud computing, PRINCE 2, TOGAF, RUP, ITIL, PCI-DSS and DSDM. We have recently introduced a service for building data centers using open source technologies we support and tools and we believe in using best of breed technologies and tools to cover the end to end technical and functional scope of IT system delivery. Vouchcom is a leading information technology company founded in 2007 whose partners have more than 20 years of experience in a variety of roles that include IT strategy, lead solution architecture, design authority, enterprise and security architecture and integration, specializing in Big Data, Oracle, SOA and Web solutions using relational and object-oriented business modeling. Vouchcom provides custom, high value procurement, technical strategy & research and analysis services. Vouchcom has security cleared personnel and partners at minimum SC level who have provided assurance, integration and security services in many high protective marking projects, dealing with multi factor authentication, creation of federated trust domains, labeled security and data compartmentalization, identity Page 3
management and provisioning, definition of security processes and procedures, assurance with penetration testing and the creation of role based access control (RBAC). The company operates with its employees and partners in the fields of management consulting, business architecture and information technology service provisioning. Our people operate in multiple roles, from enterprise architecture and strategy, to the provisioning of specialist expertise in commercial and procurement negotiators, technical design authority, supplier management, multi vendor environment technical assurance, application and infrastructure security, business process re-engineering, cloud infrastructure design and support, technical architecture and implementation services including application transitioning to cloud based environments (with specialisation in security, high protectively marked projects, integration, identity management and provisioning, J2EE,.NET, Ruby, XCode, Oracle and PHP). We offer services for mapping TO-BE and AS-IS architectural landscapes and have confidence in understanding the business needs and requirements and delivering the fully tested technical solution. Where Vouchcom does not directly offer a cloud related product or service that is required from the client, we are happy to advise and assist in determining and procuring such service on behalf of the client from the CloudStore. Vouchcom has their own staff for the provisioning of the services; in some cases, partner agreements exist between Vouchcom and selected partner companies where (a) specialist resources complimentary to Vouchcom offerings but not available directly via Vouchcom are required, or, (b) where Consultants of equal experience to Vouchcom personnel are required to complement Vouchcom s permanent staff. Page 4
6. Pricing for Business Analysis and Business Architecture Service Offerings A Skills For The Information Age (SFIA) Definitions and Rate Card is provided below: Standard Rate Card Strategy & architecture Business change Solution development & implementation Service management Procurement & management support Client interface 1. Follow 350 300 300 300 2. Assist 400 350 350 350 3. Apply 450 400 400 400 4. Enable 500 450 450 450 450 500 5. Ensure/Advise 550 500 500 500 500 550 6. Initiate/Influence 600 550 550 550 550 600 7. Set Strategy/Inspire 650 600 600 600 600 650 Standards for Consultancy Day Rate cards Consultant s Working Day 8 hours exclusive of travel and lunch. Working Week Monday to Friday excluding national holidays Office Hours - 09:00 17:00 Monday to Friday Travel and Subsistence Included in day rate within M25. Payable at department s standard T&S rates outside M25. Page 5
Mileage As above Professional Indemnity Insurance included in day rate. Please note that although most of our consultants are at least SC cleared, for some highly protective marking projects we may need the Government agency or department to sponsor clearance at the required level. 7. Offers and Discounts: 6.1. In certain cases, one additional non chargeable resource may be allocated to a project this will be determined based on skills required on a project by project basis. 6.2. Standard Discount: In engagements of the service that are over 185 days (per consultant, within a calendar year) Vouchcom will offer discounts against the day rate of 10-15%. 6.3. Education Discount: For established Academic and Education institutions we offer an additional 10% education discount over the above. Please contact us for any clarification of the above or if you have any further questions or comments. Page 6