This Government Contract opportunity from Department Of Defense was posted on July 14, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Top

CMMC Level 2 Assessment and Compliance Support

Closed

Federal

Submission Closed07/27/2026, 05:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541512

New

SLED

Cybersecurity Maturity Model Certification (CMMC) Program Services

Solicitation # 09112026

The University of Arkansas, Fayetteville (UAF) issued solicitation 09112026 for Cybersecurity Maturity Model Certification (CMMC) Program Services to secure a term contract for two years with two optional renewal years. The objective was to engage a qualified firm to provide cybersecurity advisory, architecture, engineering, and compliance services to mature the university's CMMC program. The scope focused on achieving compliance with CMMC Levels 1, 2, and 3 to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). Key deliverables included a compliance maturity roadmap, the design of a scalable security architecture, a continuous monitoring program, and assessment readiness support. The procurement process included several modifications, such as the addition of a 2 million dollar Professional Liability insurance requirement and extensions to the proposal deadline. Evaluation criteria were weighted toward the technical proposal (40 points), respondent qualifications (30 points), and cost (30 points). However, on October 19, 2026, the University of Arkansas, Fayetteville officially cancelled RFP 09112026 via Addendum 3. This cancellation was prompted by changes in federal guidance that necessitated a reassessment of the procurement scope, with the university intending to issue a new solicitation once requirements are clarified.

University of Arkansas Fayetteville (UAF)

POSTED

DEADLINE

Data Migration and IPAWS Integration SpecialistThis subcontract opportunity is for a Data Migration and IPAWS Integration Specialist to support prime contractors on Rhode Island Emergency Management Agency projects. The primary scope of work involves migrating recipient data from fragmented legacy protocols to a unified cloud platform and configuring various levels of effort for IPAWS integration. The selected provider will utilize specialized cloud migration tools and interfaces while maintaining strict adherence to PII and PHI security protocols to ensure the delivery of a functional integration and a migrated database. The project is associated with the State of Rhode Island under NAICS code 541512. Interested parties must submit their responses by the deadline of December 2, 2026. Further details regarding the bidding process can be accessed through the Rhode Island Division of Procurement portal.

State of Rhode Island

POSTED

DEADLINE

CCRI One-Card Solutions

Solicitation # RFP27007117

The Community College of Rhode Island is soliciting proposals for a comprehensive one-card platform solution to enhance the user experience for students, faculty, and staff across its four main campuses in Warwick, Providence, Newport, and Lincoln, as well as satellite locations in Westerly and Woonsocket. The selected vendor will provide all necessary software, licenses, equipment, on-site installation, system integration, and training. Key technical requirements include support for Apple and Google Wallet mobile credentials, ADA-compliant self-service processes, and high-quality card production utilizing barcode, magnetic-stripe, and contactless technologies. The system must integrate with Banner SIS, Papercut, Micros/Aramark, and Barnes and Noble College, while maintaining compliance with FERPA, PCI, and various cybersecurity and data governance standards. Proposals are evaluated using a weighted point system totaling 106 points, covering technical qualifications, a work plan, an interview and demonstration, cost, and bonus points for Minority, Women, and Disability Business Enterprise participation. To advance through the evaluation phases, vendors must meet specific minimum score thresholds for the technical proposal and the combined technical and interview phases. The submission process requires a technical proposal limited to six pages, a detailed cost proposal, and a completed ISBE participation plan. The solicitation was posted on November 4, 2026, with a response deadline of December 4, 2026.

State of Rhode Island

POSTED

DEADLINE

Education Data Coordinator & AnalystThe Education Data Coordinator and Analyst subcontract provides specialized data coordination and management services to prime contractors working on South Dakota Department of Education projects. The scope of work focuses on facilitating data sharing agreements between higher education institutions and state agencies, managing the collection and cleaning of longitudinal data, and monitoring key performance measures related to educator retention. Key deliverables for this engagement include executed data-sharing agreements, cleaned datasets, and the development of performance tracking dashboards. This opportunity is categorized under NAICS code 541512 and is associated with the South Dakota State Government, with a response deadline set for December 2, 2026.

South Dakota State Government

POSTED

DEADLINE

Keyfactor Command Integration ConsultantThis subcontract opportunity is for a Keyfactor Command Integration Consultant to support prime contractors on projects for the California Employment Development Department. The selected consultant must be a Keyfactor certified professional responsible for integrating Keyfactor Command with network infrastructure. Key technical requirements include configuring the Palo Alto Universal Orchestrator extension, implementing KFUtil for automation, and developing and deploying Adoption Sets to streamline workflows. The primary deliverables for this engagement are a fully integrated Palo Alto Orchestrator and the implementation of functional automation workflows. Interested parties should note that the solicitation was posted on November 4, 2026, with a response deadline of November 18, 2026. The project falls under NAICS code 541512 and is managed through the California state procurement system.

California Employment Development Department

POSTED

DEADLINE

PKI/EJBCA Implementation SpecialistThis subcontract opportunity for a PKI/EJBCA Implementation Specialist supports prime contractors working on projects for the California Employment Development Department. The primary objective is the provisioning, validation, and configuration of the EJBCA PKIaaS environment, specifically focusing on the LOBISSCA03 system. The scope of work includes the setup of additional Issuing EJBCA CAs and the configuration of critical enrollment use cases such as SCEP, ACME, EST, and Microsoft Intune SCEP. The successful contractor will be responsible for delivering a fully operational and validated PKI environment. This engagement falls under NAICS code 541512 and is associated with a response deadline of November 18, 2026. The final deliverable is a functional infrastructure that ensures secure and validated certificate enrollment protocols are in place for the agency.

California Employment Development Department

POSTED

DEADLINE

EDD Request for Quote No. 133571 Public Key Infrastructure Digital Certificate Management System Services

Solicitation # 133571

The California Employment Development Department (EDD) is soliciting bids under RFQ No. 133571 for a 12-month deliverables-based contract to maintain and enhance its enterprise certificate lifecycle management and public key infrastructure capabilities. Utilizing Keyfactor Command and EJBCA PKIaaS, the scope includes maintaining the production hosted environment and implementing 2026-2027 enhancements such as Palo Alto Universal Orchestrator integration, SCEP/ACME enrollment use cases, Microsoft Intune SCEP, and workflow automation. The contract requires 99.99% uptime coverage and premium support, with all work performed remotely and a strict prohibition on offshoring. Award will be granted to the lowest responsible bidder based on the net bid price, with specific evaluation incentives available for certified Disabled Veteran Business Enterprises, Small Businesses, Microbusinesses, and Nonprofit Veteran Service Agencies. The contract is structured around defined deliverables rather than time-and-materials, requiring a Deliverable Expectations Document and a signed Deliverable Acceptance Document for each milestone to trigger payment. Invoicing is subject to a 10% state withholding per Public Contract Code 12112. Bidders must submit all required certifications, including those regarding debarment, civil rights, and lobbying, by November 18, 2026.

California Employment Development Department

POSTED

DEADLINE

API Integration Services (SAP & GIS)This subcontract for API Integration Services involves performing technical integration between a Gazetteer SaaS platform and internal enterprise ecosystems for prime contractors working on Cadent Gas Limited projects. The scope of work focuses on developing secure, API-driven integrations to establish fully functional, bidirectional data flows between the platform and key systems, specifically SAP CX, SAP S/4 HANA, and Esri ArcGIS Enterprise. To ensure system security, all developments must adhere to strict token-based authentication protocols. The project is categorized under NAICS code 541512 and is managed by Cadent Gas Limited, with the primary objective of ensuring seamless data synchronization across the organization's SAP and GIS infrastructure.

POSTED

DEADLINE

System Monitoring & Software IntegrationThis subcontract for System Monitoring and Software Integration involves the supply and configuration of remote monitoring platforms for a rooftop solar installation in Bethesda, Maryland. The selected contractor will be responsible for installing the necessary hardware and software to track critical performance metrics, including energy production, capacity factor, and the variance between actual and projected output. Beyond technical installation, the scope of work includes configuring user access and automated notifications for agency personnel to ensure seamless oversight. The project concludes with the delivery of a fully operational monitoring platform and the provision of comprehensive training for staff. This effort is managed through Corporate Procurement Services for the state of Maryland.

Corporate Procurement Services

POSTED

DEADLINE

Scheme Registration and Data Collection ServicesThe Scheme Registration and Data Collection Services subcontract involves managing participant registration and certification data for prime contractors working on projects for The Livestock and Meat Commission for Northern Ireland. The selected provider will implement a specific registration methodology and maintain a secure registry for 11,422 active participants utilizing CRM and database management systems. A primary requirement of the contract is strict adherence to GDPR and general data protection compliance to ensure the security of all participant records. The final deliverables for this engagement include a fully updated registration database and comprehensive records for all participants. Interested parties should note that the response deadline for this opportunity is December 8, 2026. The project falls under NAICS code 541512, focusing on computer systems design services to support the agency's data collection needs.

The Livestock and Meat Commission for Northern Ireland

POSTED

DEADLINE

Corporate Network IntegrationThe Corporate Network Integration subcontract involves providing network configuration and connectivity services for prime contractors working on Pinellas County fleet management projects. The primary scope of work includes establishing corporate network connections and configuring the Blaze Video Server to ensure seamless communication with internal networks or the external internet through the use of network switches and routers. The ultimate deliverable is a fully configured network path that enables reliable server communication. Managed by the Florida Office of Fleet and Asset Management, this opportunity falls under NAICS code 541512. Interested parties must maintain professional liability insurance to be eligible. The solicitation was posted on November 4, 2026, with a response deadline set for November 12, 2026.

OFFICE OF FLEET & ASSET MANAGEMENT

POSTED

DEADLINE

Voting Software and Secure Network ConfigurationThis subcontract, titled Voting Software and Secure Network Configuration, is issued by the Town Administrator's Office in Massachusetts. The project focuses on providing specialized software configuration and security setup for prime contractors working on municipal projects for the Town of Hingham. The primary objective is to deliver a secure and fully configured voting software environment that ensures operational reliability and data protection. Key technical requirements include the configuration of tallying systems to support 30-second reporting and the implementation of VPN encryption for secure inter-room communication. The contractor is responsible for establishing offline operational capabilities, developing vote integrity verification processes, and creating video output displays. Interested parties must respond by December 3, 2026, under NAICS code 541512.

Town Administrator's Office

POSTED

about 9 hours ago

DEADLINE

in 29 days

AI Contract Overview

The contract requires specialized support to achieve CMMC Level 2 compliance for handling controlled technical information, including a comprehensive readiness assessment, detailed gap analysis, and ongoing compliance assistance. The scope is focused on ensuring the contractor meets the cybersecurity requirements outlined in the CMMC framework to protect sensitive federal information, with deliverables tailored to prepare the organization for certification. All services must align with the standards for controlled unclassified information and be delivered in accordance with federal cybersecurity best practices. This is a small business set-aside subcontract under NAICS code 541512, meaning only businesses certified as small by the SBA may respond, and the award will be restricted to such entities. The solicitation was posted on July 14, 2026, with responses due by July 27, 2026, and performance is expected to occur at or near the facility in New Cumberland, Pennsylvania, ZIP 17070-5002. The contracting activity is under the Department of Defense, specifically the Active Devices Division, and interested parties must submit proposals through the DIBBS portal using the specified solicitation number.