Cryptographic Security Engineering & Compliance Testing

The contract calls for comprehensive cryptographic security engineering services focused on validating, penetrating, and verifying the compliance of post-quantum cryptography implementations against the National Security Agency’s Commercial National Security Algorithm Suite 2.0, FIPS standards, and Department of Defense Chief Information Officer directives. The work requires expertise in conducting rigorous penetration testing, security validation, and assurance activities to ensure that cryptographic systems are resilient against both classical and emerging quantum threats. All deliverables must align precisely with federal cybersecurity requirements and operational directives governing high-assurance environments. Performance is expected to be carried out at a location in St. James, Maryland with a ZIP code of 20755, and the effort is classified as a subcontract under NAICS code 541690, indicating it falls under other scientific and technical consulting services. The solicitation was posted on June 18, 2026, and is managed by the Department of Defense through its It Contracting Division - PL83. The work demands a deep understanding of evolving cryptographic standards, hands-on experience with real-world implementation vulnerabilities, and the ability to produce actionable compliance documentation that meets DoD stringent security and audit requirements.