Cybersecurity & Authority to Operate (ATO) Compliance Support

This contract supports the achievement and maintenance of Department of Defense Risk Management Framework compliance, with a focus on securing Authority to Operate under DoDI 8510.01 for DRAGEN bioinformatics systems deployed in air-gapped environments. The work requires expert-level cybersecurity services to align system configurations with federal and DoD security standards, including continuous monitoring, documentation updates, vulnerability remediation, and control implementation tailored to high-security, disconnected operational contexts. Success hinges on deep familiarity with DoD cybersecurity policies, RMF processes, and the unique technical challenges of securing genomic analysis platforms in environments where network connectivity is restricted or prohibited. The contract is a subcontract under the Defense Health Agency, with performance centered in Falls Church, Virginia, and a submission deadline of May 29, 2026. It falls under NAICS code 541512, indicating it is for computer systems design and related services, emphasizing technical expertise in cybersecurity architecture and compliance. All deliverables must ensure the DRAGEN systems meet stringent DoD security requirements without relying on external network access, requiring on-site or tightly controlled remote implementation of secure configurations, certification artifacts, and ongoing compliance sustainment activities. The nature of the work demands a strong understanding of both bioinformatics infrastructure and defense-grade cybersecurity protocols.