Cloud Security Monitoring & Compliance Maintenance

The contract requires ongoing security monitoring, vulnerability management, and compliance reporting to sustain an Authorized To Operate status for a system processing Controlled Unclassified Information in an Amazon Web Services environment. The work is focused on maintaining continuous compliance with federal cybersecurity frameworks and ensuring the system remains secure and auditable throughout its operational lifecycle. Deliverables will include real-time threat detection, remediation of identified weaknesses, and regular reporting to demonstrate adherence to applicable standards. This subcontract is issued under NAICS code 541990 and is performed for the Department of Defense through DISA PL8, with the place of performance located in Key West, Florida. The contract is not subject to any specific set-aside designation and was posted for potential bidding on July 1, 2026. The nature of the work necessitates high levels of technical expertise in cloud security architectures, continuous compliance frameworks, and DoD-specific security requirements to ensure the CUI-processing system remains protected and authorized without interruption.