Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, October 28 at 2:00 PM ET

Register Free →

Search

Top

Back to Contracts

Cloud Security and NIST Compliance Services

Active

State & Local

Response Deadline10/28/2026, 10:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The Cloud Security and NIST Compliance Services subcontract supports prime contractors on projects for the Maryland Health Care Commission within the Department of Health. The primary objective is to enforce security best practices and manage perimeter security through the administration of AWS WAF rules, Web ACLs, IP sets, and encryption utilizing AWS KMS and Secrets Manager. Additionally, the scope includes the application of security patches across operating systems, web servers, and databases to ensure a hardened cloud perimeter. Qualified providers must possess demonstrated experience with NIST, FISMA, or FedRAMP compliance frameworks to deliver required security compliance reports. This opportunity, categorized under NAICS code 541519, was posted on October 8, 2026, with a response deadline of October 28, 2026.

General Info

Cloud security and NIST compliance subcontract for Maryland Health Care Commission AWS infrastructure.

Agency

Maryland → Department of Health - Administration, Boards & Commissions

NAICS

541519 - Other Computer Related Services

Place of Performance

MD, USA

Set-Aside

NONE

Documents

This scope was carved out of BPM059075.

The full solicitation package (14 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

MHCC 27-010 Website Maintenance and Support

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedOct 8

subcontract

Response DeadlineOct 28

Submission deadline

Response Deadline

10/28/2026, 10:00:00 PM UTCin 1 day

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyMaryland → Department of Health - Administration, Boards & Commissions

ContactsNo contacts available

OfficeN/A

Organization / AgencyMaryland → Department of Health - Administration, Boards & Commissions

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Enforces security best practices and manages perimeter security for prime contractors on Maryland Health Care Commission projects. Manages AWS WAF rules, Web ACLs, IP sets, and encryption via AWS KMS and Secrets Manager. Applies security patches across OS, web servers, and databases. Requires experience with NIST, FISMA, or FedRAMP compliance. Delivers security compliance reports and a hardened cloud perimeter.

Similar Contracts

Same NAICS industry code

VC System Configuration and Technical SupportThis subcontract for VC System Configuration and Technical Support involves providing logical configuration and technical assistance for video conferencing systems on Pakistan Telecommunication Company Limited projects. The scope of work includes installing software, configuring user accounts, and optimizing network firewalls to ensure efficient video traffic. Additionally, the contractor is responsible for delivering comprehensive technical documentation and conducting end-user training to ensure personnel are fully equipped to operate the systems. The project is based in Pakistan and falls under NAICS code 541519. Interested parties must note the response deadline of November 3, 2026. The ultimate goal of the engagement is the delivery of a fully configured software environment and a trained workforce capable of maintaining the video conferencing infrastructure.

POSTED

about 5 hours ago

DEADLINE

Historical Case Data Migration ServicesThis subcontract for Historical Case Data Migration Services involves the extraction, transformation, and loading of both active and historical case data for prime contractors supporting San Bernardino County Human Resources projects. The primary objective is to migrate legacy data into a new SaaS platform utilizing specialized ETL software while ensuring strict adherence to security protocols and data integrity validation for sensitive HR information. The scope of work includes the delivery of a fully migrated dataset and the provision of data extraction tools to be used upon contract termination. This project is categorized under NAICS code 541519 and will be performed in San Bernardino, California. Interested parties should note the response deadline of December 15, 2026.

Human Resources

POSTED

about 20 hours ago

DEADLINE

in about 2 months

Waters LCMS Software and Firmware Lifecycle ManagementThe Waters LCMS Software and Firmware Lifecycle Management subcontract involves the supply and installation of software updates, firmware upgrades, and technical patches for prime contractors working on Maryland Department of Health Office of the Chief Medical Examiner projects. The scope of work specifically focuses on applying bug fixes and feature releases for Waters LCMS proprietary software and firmware to ensure all systems are running updated and verified versions. To qualify for this engagement, the provider must be an authorized Waters software provider or a certified technician. This technical service falls under NAICS code 541519 and is managed through the state of Maryland. Interested parties should note the response deadline of October 29, 2026.

Office Of The Chief Medical Examiner

POSTED

about 21 hours ago

DEADLINE

Cohesity DataProtect Service Subscription SupplyThis subcontract, issued by the Comptroller of Maryland, provides Cohesity DataProtect service subscriptions to prime contractors working on State government IT projects. The agreement covers the delivery of active software subscription licenses for 49 units of 1 TB capacity, totaling 49 TB of backup and recovery support for both on-premises and cloud workloads over a three-year term. To be eligible for this contract, providers must hold Master Contractor certification and maintain status as a certified Cohesity partner or reseller. The solicitation was posted on October 26, 2026, with a response deadline of November 2, 2026, falling under NAICS code 541519.

Comptroller of Maryland

POSTED

about 21 hours ago

DEADLINE

Microsoft 365 Education License ProvisioningThis subcontract focuses on the provisioning of Microsoft 365 Education licenses for prime contractors supporting The Spencer Academies Trust. The scope of work includes the delivery of 3,100 M365 A3 Unified Edu subscriptions, 30,000 M365 A3 Student Use Benefit subscriptions, and 30 M365 A5 Unified Edu subscriptions, all of which must be assigned directly to the Trust's tenant. To ensure the continuity and activity of the software subscriptions throughout the contract term, the provider must maintain certified Microsoft Partner status. Interested parties should note that the response deadline for this opportunity is November 23, 2026.

The Spencer Academies Trust

POSTED

about 22 hours ago

DEADLINE

Cybersecurity Audit and ComplianceThe Cybersecurity Audit and Compliance subcontract involves performing critical security assessments for prime contractors working on City of Atlanta projects specifically for the Police and Fire departments. The scope of work includes conducting penetration testing, vulnerability scanning, and comprehensive security audits utilizing specialized scanning software to protect sensitive applicant data. The selected provider must ensure strict adherence to CJIS, SOC 2, or NIST standards, culminating in the delivery of a detailed security audit report and a formal certification of compliance. This opportunity is categorized under NAICS code 541519, with a response deadline set for November 6, 2026.

City of Atlanta

POSTED

about 23 hours ago

DEADLINE

MFCC Web Content AdministratorThe MFCC Web Content Administrator subcontract involves providing website maintenance and update services for prime contractors working on Northern Wasco County PUD projects. The primary responsibilities include managing content uploads through the site CMS and hosting environment, specifically focusing on posting finalized meeting minutes, annual committee reports, and general information to the mcnary.fish website. The selected provider must possess proficiency in basic web content management to ensure the timely delivery of updated website content and annual reports. This opportunity is categorized under NAICS code 541519 and is based in The Dalles, Oregon. Interested parties should note that the solicitation was posted on October 26, 2026, with a response deadline of November 21, 2026.

Northern Wasco County PUD

POSTED

about 23 hours ago

DEADLINE

Application Support ServicesThis subcontract for Application Support Services focuses on providing essential technical support and maintenance for the Examination System Application used by prime contractors on Network Rail Infrastructure Limited projects. The primary objective is to ensure system stability and high performance for over 120 users throughout an eight-year lifecycle, while effectively managing increases in user volume. By delivering consistent system availability and adhering to strict SLA-based technical support, the contract plays a critical role in maintaining the region's examinations compliance with the Office of Rail and Road. The opportunity is categorized under NAICS code 541519 and is managed by Network Rail Infrastructure Limited. Interested parties should note that the response deadline for this requirement is December 11, 2026.

Network Rail Infrastructure Limited

POSTED

DEADLINE

in about 1 month

VISN-Level Reporting Access Administration

Network Contract Office 19 (36C259)

POSTED

DEADLINE

Security Auditing and Access Control ImplementationThe Security Auditing and Access Control Implementation subcontract, issued by the Department of Veterans Affairs through the Technology Acquisition Center Nj, focuses on establishing security auditing and role-based access control for prime contractors on Veterans Health Administration projects. The scope of work includes the implementation of automated audit trails, the configuration of audit alerts, and the design of user roles in strict accordance with the VA Least Privileges policy. To ensure organized oversight, the project will utilize SIEM tools to categorize worklists by site, VISN, and NTP. The primary deliverables for this engagement are a fully configured Security Audit System and a comprehensive Access Control Matrix. This opportunity falls under NAICS code 541519 and was posted on October 26, 2026, with a response deadline of November 10, 2026.

Technology Acquisition Center Nj (36C10B)

POSTED

DEADLINE

Systems Engineering Request for Information

Solicitation # N0003926R0010

Pae Mission Systems

POSTED

DEADLINE

FOIA - Case Management

Solicitation # N31975FIOACMFY27

The Department of the Navy, through the Naval Supply Center Fleet Logistics Center Norfolk, is conducting market research via a sources sought notice to identify industry capabilities for a cloud-based Freedom of Information Act Case Management System. The objective is to replace a legacy platform with a modern, secure, and financially sustainable Software-as-a-Service solution that manages the full FOIA and Privacy Act processing lifecycle, including intake, queuing, redaction, disposition, and automated reporting for Department of Justice and Department of War mandates. The contractor will be responsible for providing the software, hosting, system maintenance, data migration, user training, and help desk operations to support approximately 150 full-time equivalent personnel. The proposed procurement is intended to be a single-award, firm-fixed-price contract under NAICS code 541519. Technical requirements specify that the solution must be unclassified but must adhere to strict security standards, including FedRAMP Moderate or higher, or DoD Impact Level 2 or 4 Authority to Operate. Compliance with DON cybersecurity manuals and regulations regarding Controlled Unclassified Information and HIPAA is mandatory. Interested respondents must provide a capability statement, a rough order of magnitude cost estimate, and evidence of SAM registration, with submissions limited to ten pages and due by November 5, 2026.

Navsup Flt Logistics Ctr Norfolk

POSTED

DEADLINE

More opportunities from Maryland → Department of Health - Administration, Boards & Commissions

Same awarding agency

MHCC 27-010 Website Maintenance and Support

Solicitation # BPM059075

Solicitation BPM059075, also known as MHCC 27-010, is a Small Business Reserve Procurement issued by the Maryland Health Care Commission to secure website maintenance and support services. The selected contractor will be responsible for maintaining the current AWS environment, supporting existing applications, implementing infrastructure improvements, and providing technical guidance for cloud hosting needs. Key technical responsibilities include designing multi-region scaling and high-availability frameworks, planning disaster recovery strategies, and establishing cost-optimization policies. The contract utilizes a hybrid pricing model consisting of firm-fixed prices for core services—such as infrastructure management, security and compliance, and incident management—alongside time and materials for ad-hoc work orders involving specialized roles like Solutions Architects and Systems Engineers. This procurement is strictly limited to certified small businesses recognized by the Governor’s Office of Small, Minority and Women Business Affairs. Eligible offerors must demonstrate at least five years of experience meeting NIST, FISMA, or FedRAMP standards and provide three client references from the past five years. Proposals must be submitted via the eMMA portal by October 28, 2026, using a two-part double envelope format that separates technical and financial volumes. Award decisions will be based on a weighted evaluation where technical qualifications and financial proposals are considered equally. The contractor must also adhere to strict insurance requirements, including one million dollars in cyber security and data breach insurance, and ensure all deliverables comply with ADA and Section 508 accessibility standards.

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

POSTED

about 22 hours ago

DEADLINE

Quest Rapid Recovery Software SupplyThis subcontract opportunity is for the supply of Quest Rapid Recovery COTS software licenses to support prime contractors working on technology projects for the Maryland Health Care Commission. The selected provider will be responsible for delivering valid software licenses and subscriptions, as well as providing Manufacturer's Suggested Retail Price documentation to assist the agency in maintaining its data protection and recovery systems. Eligible bidders must hold status as an authorized Quest Software reseller or partner. The procurement is categorized under NAICS code 423430 and is managed by the Maryland Department of Health Administration, Boards and Commissions. Responses are due by November 11, 2026.

Computer and Computer Peripheral Equipment and Software Merchant Wholesalers

POSTED

DEADLINE

MHCC 27-012 PORFP - Quest Rapid Recovery Renewal

Solicitation # BPM059432

The Maryland Health Care Commission is soliciting proposals for the renewal of Quest Rapid Recovery software, which serves as the primary data protection and recovery system for the agency's technology Business Continuity Plan. This procurement is a secondary competition limited to DOIT Master Contractors awarded under the Commercial Off-the-Shelf Software (COTS 2012) contract 060B2490021. The software must provide centralized management and automated backup processes for physical servers, virtual machines, and cloud workloads. This is a Small Business Reserve procurement, meaning the award is restricted to certified small business vendors meeting the requirements of the GOSBA Small Business Reserve Program and the State Finance and Procurement Article of the Annotated Code of Maryland. Eligible bidders must be authorized resellers for Quest and may be required to provide a Letter of Authorization. Proposals must include a screenshot of the Manufacturer's Suggested Retail Price and be submitted via the eMaryland Marketplace Advantage portal by November 11, 2026. All proposed software must be certified as virus-free, and pricing must remain valid for 90 days following the deadline. Performance will take place in Baltimore, Maryland. Invoicing is handled via email, with specific requirements for one-time pricing to be billed within 30 days of acceptance and annual pricing billed on the anniversary of the first invoice.

Computer and Computer Peripheral Equipment and Software Merchant Wholesalers

POSTED

DEADLINE

Medical Supply ProvisionThis subcontract for Medical Supply Provision supports prime contractors working on Maryland Department of Health OLTSS projects. The selected vendor will be responsible for delivering medical-grade consumables, including first aid supplies, monitoring strips, and incontinence products, directly to care centers to ensure the health and hygiene of participants. To be eligible, vendors must hold the necessary medical supply certifications. The opportunity is categorized under NAICS code 423450 and is managed by the Maryland Department of Health Administration, Boards and Commissions. The response deadline for this procurement is November 5, 2026.

Medical, Dental, and Hospital Equipment and Supplies Merchant Wholesalers

POSTED

DEADLINE

Specialized Dietary Meal SupplyThis subcontract for Specialized Dietary Meal Supply supports prime contractors on Maryland Department of Health OLTSS projects by providing meals and snacks for elderly participants. The scope of work involves the preparation of nutrition-specific meals tailored for individuals with chronic health problems, utilizing commercial kitchen equipment and ensuring daily delivery to the designated center. To qualify, providers must hold valid Health Department food service permits and employ certified nutritionists or dieticians to manage specialized dietary plans. This opportunity falls under NAICS code 722320 and is managed by the Maryland Department of Health Administration, Boards and Commissions, with a response deadline of November 5, 2026.

POSTED

DEADLINE

Participant Transportation ServicesThis subcontract opportunity for Participant Transportation Services supports prime contractors on Maryland Department of Health OLTSS projects. The selected provider will be responsible for the safe, door-to-door transportation of functionally impaired elderly individuals to and from Medical Adult Day Care Centers. To ensure participant safety and regulatory compliance, the contractor must utilize wheelchair-accessible vans or specialized medical transport vehicles and employ drivers holding a Commercial Driver's License with passenger endorsements. The project falls under NAICS code 485991 and is managed through the Maryland Department of Health. Interested parties must submit their responses by the deadline of November 5, 2026. The primary objective of the contract is to maintain high safety standards and reliable vehicle certifications to ensure the seamless delivery of transport services for all participants.

Special Needs Transportation

POSTED

DEADLINE

Medical Adult Day Care Direct Care ServicesThis subcontract opportunity is for the provision of Medical Adult Day Care Direct Care Services supporting prime contractors on Maryland Department of Health OLTSS projects. The selected provider will deliver daily medical and social care to functionally impaired elderly participants aged 55 and older, ensuring a minimum of four Actual Days of Service per day in strict alignment with AERS participant plans of care. Eligible bidders must operate as certified Medical Adult Day Care centers with facilities equipped to host elderly participants and house necessary medical monitoring equipment. The contract requires the delivery of fully documented days of service under NAICS code 624120, with a response deadline set for November 5, 2026.

Services for the Elderly and Persons with Disabilities

POSTED

DEADLINE

MEDICAL ADULT DAY CARE PRIVATE PAY SUBSIDY

Solicitation # BPM058856

The Maryland Department of Health, through the Office of Long Term Services and Supports, is soliciting bids for the Medical Adult Day Care Private Pay Subsidy program. This initiative provides essential care for eligible participants who have an Assessments, Evaluation and Review Services recommendation but cannot afford the full cost of care. The selected contractor must operate a licensed Medical Adult Day Care Center in Maryland with at least three years of experience and be willing to accept payments based on the state's approved Ability to Pay Schedule. Key deliverables include providing actual days of service for a minimum of four hours per billable day and ensuring transportation for requesting participants, with a strict requirement that transit time does not exceed one hour without a rest stop. The contract is awarded based on the lowest total bid price per zip code location. Bidders must be registered on the eMaryland Marketplace Advantage portal and submit their proposals by November 5, 2026. The solicitation includes a Minority Business Enterprise goal of 5.00 percent and requires compliance with HIPAA and state confidentiality laws. Invoicing is conducted electronically on a monthly basis, with payments processed within 30 days of receipt. The state maintains the right to conduct audits and inspections of performance practices to ensure compliance with COMAR standards and contractual obligations.

Services for the Elderly and Persons with Disabilities

POSTED

DEADLINE

AWS FinOps and Cost ManagementThe AWS FinOps and Cost Management subcontract focuses on monitoring cloud expenditures and executing cost-saving strategies for prime contractors supporting the Maryland Health Care Commission under the Department of Health. The scope of work involves utilizing AWS Cost Explorer and AWS Budgets to track resource usage and spending trends, ensuring financial efficiency across cloud operations. To achieve these goals, the contractor will implement technical optimizations including instance right-sizing, Savings Plans, Reserved Instances, and storage lifecycle policies. Key deliverables include the provision of monthly cost optimization reports and the execution of detailed savings plans. This opportunity is categorized under NAICS code 541611, with a response deadline set for October 28, 2026.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

Backup and Disaster Recovery (DR) ServicesThis subcontract opportunity for Backup and Disaster Recovery (DR) Services supports prime contractors working on projects for the Maryland Health Care Commission under the Department of Health. The scope of work focuses on the execution and validation of data backup and recovery strategies, specifically targeting automated backups for S3 storage, EFS file systems, and RDS databases. Key technical requirements include ensuring automated failover and Multi-AZ redundancy for production databases to maintain high availability. The selected provider will be responsible for managing data retention policies and conducting rigorous testing to validate restoration procedures. Final deliverables include comprehensive restoration test logs and a fully validated disaster recovery plan. This procurement falls under NAICS code 541513, with a response deadline set for October 28, 2026.

Computer Facilities Management Services

POSTED

DEADLINE

Drupal, .NET, and RDS Database SupportThis subcontract opportunity focuses on providing specialized maintenance and optimization for application environments and database instances supporting prime contractors on Maryland Health Care Commission projects. The scope of work includes the administration of Drupal and .NET environments, alongside the optimization of MariaDB RDS and SQL Server RDS instances through targeted indexing and query refinement. Additionally, the selected provider will support CI/CD pipelines utilizing AWS CodePipeline and CodeDeploy to ensure stable database operations and high application performance. The project falls under NAICS code 541513 and is associated with the Maryland Department of Health Administration, Boards and Commissions. Interested parties should note that the response deadline is October 28, 2026. This engagement is designed to ensure the technical stability and efficiency of critical health care commission infrastructure through expert cloud and database management.

Computer Facilities Management Services

POSTED

DEADLINE

AWS Cloud Infrastructure & Network OperationsThis subcontract for AWS Cloud Infrastructure and Network Operations supports prime contractors on projects for the Maryland Health Care Commission under the Department of Health. The scope of work involves the ongoing maintenance and optimization of AWS cloud infrastructure, specifically managing the AWS Organization structure, IAM Identity Center permissions, and network components including VPCs, subnets, routing tables, and Security Groups. These services span Production, Staging, and QA environments to ensure a high-performance cloud ecosystem. The contractor is responsible for implementing auto-scaling policies and utilizing CloudWatch and AWS Config to monitor system health, with the ultimate goal of delivering a maintained environment with 24/7 availability. This opportunity falls under NAICS code 541512 and has a response deadline of October 28, 2026.

Computer Systems Design Services

POSTED

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS