CIO Microsoft Sentinel Implementation FY26

Solicitation W91QF026QA015 is a small business set-aside for the procurement of specialized professional services to design, implement, and operationalize Microsoft Sentinel as the centralized SIEM and SOAR platform for the Army University and US Army War College. The contract period of performance runs from September 15, 2026, to September 14, 2027. The scope includes provisioning Azure resources, onboarding approximately 350 Intune-managed endpoints, and integrating M365 data sources. Key performance requirements include a 98% data ingestion success rate and strict alignment with NIST SP 800-53 and OMB M-21-31 event logging mandates. Deliverables consist of a Solution Design Document, analytics rules, automation playbooks, and comprehensive training to ensure government self-sufficiency. The acquisition is structured with two primary CLINs: one for Azure consumption and licensing, which is subject to a monthly not-to-exceed limit of 4,000 dollars, and one for the implementation services. Award will be based on Low Price Technically Acceptable (LPTA) procedures. Technical evaluation focuses on the offeror's understanding of the PWS, three years of relevant past performance, and key personnel qualifications, including a minimum of five years of SIEM/SOAR experience and two years of direct Microsoft Sentinel expertise. The contractor must be a Tier-1 Direct-Bill CSP, and the project is a greenfield solution with no existing data migration. All invoicing and payment requests must be processed through the Wide Area WorkFlow system.