Germany – IT services: consulting, software development, Internet and support – RZ-Beratungsdienstleistungen

The contractor provides the following services for the contracting authority:

1. Scope of services

1.1 System administration and support for the following technical infrastructure

1.1.1 Network infrastructure

- Management of active LAN and WLAN infrastructure, including network access control (IEEE 802.1x)

- Management of BGP routers

- Management of switches, access points, and WAN

- Management of load balancers for high availability

- Management of external DNS servers and DNS security

- Provision and operation of DHCP services

- Provision of Remote Access Points (RAP)

- Provision of site-to-site VPN

- Network monitoring

1.1.2 Network security

- Management of firewalls (including security functions)

- Securing via reverse proxy, web application firewall (WAF), and forward proxy (including antivirus, browser isolation, sandboxing)

- Intrusion and breach detection (SWS)

- User and Entity Behaviour Analytics (UEBA)

- Management of external SSL certificates

- Administration of remote access via SSL-VPN

1.1.3 Microsoft 365 / Cloud services

- Management of M365 tenants and Azure resources

- Management of Azure AD Connect

- Consulting on cloud services (e.g., Intune)

- Coordination of Azure resources and consumption

- Operation of Express Route Azure

- Management/implementation of Azure Landing Zone architecture

- Management/consulting/best practices for Azure Security (e.g., general security, Defender Suite with all components, MFA)

1.1.4 Collaboration & Communication

- Management of Microsoft Teams/optimized Teams management

- Management of Teams telephony/SBC

- HCL Domino

- Management of the email environment (Exchange, Outlook, AntiSpam, AntiVirus, encryption, disclaimer)

- Management of mail gateway (Fortimail) --> Future implementation/alternatives to the status quo

- Operation and management of SharePoint (on-premises and online), including development (Power Platform, Flows)

- Management/operation/experience with Copilot

1.1.5 Directory services & Identity management

- Provision and management of Active Directory (domain controllers, internal DNS, group policies)

- Hardening expertise according to NIS2 / BSI

- Provision and management of RADIUS and PKI services

1.1.6 Client management & Software distribution

- Endpoint management based on baramundi (software packaging, job distribution)

- Patch and vulnerability management (software, drivers, operating systems)

- Provision of operating systems (Windows 10/11), including in-place upgrades

- Management and extension of group policies (devices, Microsoft Office)

1.1.7 Server infrastructure & Operation

- Provision and operation of web servers

- Management of terminal server environments (Citrix, Windows Terminal Services), including Citrix ADC/Netscaler with MFA and Citrix Cloud

- Monitoring of Windows and Linux systems (Checkmk)

- Provision and management of print services (Windows Printing)

1.1.8 Database operation

- Patch management, monitoring, performance tuning, and backup of MS-SQL database servers

- Upgrade, monitoring, performance tuning, backup, and recovery of Oracle, MySQL, and MariaDB

1.1.9 Job scheduling & Automation

- Management, upgrade, and monitoring of the job scheduling system (Redwood RunMyJobs)

- Installation and configuration of OS agents as well as SAP integrations

- Error analysis and scripting