Cloud Security & Compliance Management

The contract requires full compliance with federal Controlled Unclassified Information (CUI) standards and the deployment of Google Cloud Platform-native security tools including Cloud IAM for granular access control, Security Command Center for continuous threat detection and security posture management, and VPC Service Controls to enforce data boundaries and prevent data exfiltration. The work is focused on securing cloud environments to meet Department of Defense protocols, with performance centered in Reston, Virginia, under a NAICS code associated with computer systems design services. This is a subcontract solicitation issued by DCSO Philadelphia, and it mandates the integration of GCP security capabilities to ensure end-to-end protection of sensitive data without reliance on third-party or non-GCP native solutions.