This Government Contract opportunity from Department Of Defense was posted on July 17, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Top

Cybersecurity Compliance and Data Safeguarding for Covered Defense Information

Closed

Federal

Submission Closed07/22/2026, 05:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541512

New

SLED

Virtualization Consulting IDIQThe Port of Seattle is seeking a qualified technical services partner to conduct a comprehensive evaluation of its virtualization platform, focusing on performance, security, architecture integrity, and operational reliability. The consultation will analyze the current environment to identify risks, inefficiencies, and opportunities for optimization, delivering a prioritized roadmap that aligns with the organization’s business goals, compliance requirements, security standards, and resiliency needs. The engagement is designed to ensure the platform supports current operations while enabling future scalability and robustness. This procurement is issued under the Virtualization Consulting IDIQ framework, classified under NAICS code 541512 for computer systems design services. The contract is forecasted for release with primary point of contact Carol Hassard and project manager Jim Dawson, both reachable through the Port of Seattle’s ICT Enterprise Infrastructure Services division. The work will be performed remotely or on-site as required, with the exact location not specified, and interested vendors are directed to the official solicitation portal for further details and potential future opportunities under this IDIQ.

ICT Enterprise Infrastructure Services

POSTED

DEADLINE

Azure Consulting IDIQThe Port of Seattle is pursuing a cloud services partnership to advance its use of Microsoft Azure and hybrid cloud environments through an indefinite-delivery, indefinite-quantity (IDIQ) arrangement. The primary objective is to validate and enhance the existing Azure infrastructure, ensuring it meets current operational demands while supporting future growth and innovation. This engagement will involve guiding the design and deployment of new services, strengthening security controls, improving system resiliency, and aligning all cloud solutions with organizational standards and best practices. The contractor will serve as a strategic advisor throughout the modernization journey, helping to optimize cloud architecture for performance, cost-efficiency, and scalability. Work will be performed remotely or on-site at the Port of Seattle’s location, with primary coordination handled by Carol Hassard and Project Manager Jim Dawson. The procurement is classified under NAICS code 541512 for computer systems design services, reflecting the focus on technical consultation and integration support rather than off-the-shelf software sales. While the solicitation number is not yet available, the forecast was posted in July 2026, indicating an upcoming competitive process for qualified vendors with proven expertise in Azure cloud transformation.

ICT Enterprise Infrastructure Services

POSTED

DEADLINE

FIDS Software ReplacementThe Port of Seattle is forecasted to procure new software for the Flight Information Display System (FIDS) under the NAICS code 541512, targeting software development and related services. The contract aims to replace existing FIDS software to enhance the accuracy, reliability, and user experience of flight information displays throughout the airport facilities. While the solicitation number is not yet assigned and the posting date is listed as July 29, 2026, the opportunity is positioned as a forecasted procurement, indicating planning and preparation for a future competitive bid process. The place of performance and specific delivery locations are not yet defined, but the system will support operations at the Port of Seattle’s aviation facilities. Primary point of contact for this initiative is Farlis Lewis, who can be reached via email or phone, with Krista Sadler serving as the Project Manager for technical coordination and oversight. The contracting entity is ICT Enterprise Infrastructure Services, working under the Port of Seattle’s infrastructure and technology modernization objectives. There is no specified set-aside designation, suggesting the opportunity is open to all qualified vendors without gender, minority, or small business preferences. Stakeholders are encouraged to monitor the official portal listed in the document for formal solicitation release, which will include detailed requirements, submission guidelines, and evaluation criteria.

ICT Enterprise Infrastructure Services

POSTED

DEADLINE

Technology Integration & Interoperability SupportThe contract titled Technology Integration & Interoperability Support requires the successful bidder to ensure seamless integration of cloud systems with Utah’s existing state IT infrastructure through standardized APIs, robust identity management protocols, and secure data exchange mechanisms. The focus is on maintaining compatibility and functionality across current and future systems, enabling sustained upgrades and enhancements without disrupting core operations or requiring scope expansion beyond the original objectives. All work must align with Utah’s architectural standards and support long-term scalability within the specified technical boundaries. This subcontract is open for response until August 11, 2026, and is classified under NAICS code 541512 for computer systems design services. It is issued by the Utah state agency, with no specific place of performance or point of contact listed, indicating the work may be performed remotely or across state IT facilities. The solicitation is posted on BonfireHub and is intended for subcontractors seeking to support Utah’s broader technology modernization goals by delivering interoperable, secure, and future-ready cloud solutions that adhere strictly to existing state IT frameworks.

POSTED

DEADLINE

Continuous Monitoring System IntegrationThe contract requires seamless integration with DTS Continuous Monitoring systems within two weeks of award, focusing on the configuration of dashboards, APIs, and reporting tools to enable real-time security monitoring. This effort is critical for maintaining ongoing operational visibility and threat detection capabilities, and success hinges on timely and accurate deployment of the required technical components. The work is classified as a subcontract under NAICS code 541512, indicating it falls under custom computer programming services, and the solicitation remains open until August 25, 2026, with no set-aside provisions specified. The contracting entity is the state of Utah, and performance location details are not provided, though all work must align with the DTS system requirements as defined by the agency.

POSTED

DEADLINE

Cloud Infrastructure Migration & Integration ServicesThe contract seeks a vendor to design and execute the migration of state systems and data into cloud environments managed by Utah’s Division of Technology Services, specifically targeting AWS, Google Cloud Platform, and Microsoft Azure. The scope includes comprehensive integration with identity management solutions and strict adherence to Utah DTS 5000-0002 security policy to ensure compliance with state-mandated standards. The work involves end-to-end planning, data transfer, system validation, and operational handoff to maintain continuity and security throughout the transition. This subcontract opportunity is open to qualified providers with demonstrated expertise in multi-cloud migrations and public sector compliance. The solicitation was posted on July 28, 2026, with proposals due by August 13, 2026, and is classified under NAICS code 541512 for computer systems design services. While the physical place of performance is not specified, the work is directly tied to Utah state systems and must align fully with the agency’s security and operational frameworks. All submissions must address the technical requirements for secure cloud integration and be prepared to demonstrate prior experience with similar statewide migrations.

POSTED

DEADLINE

Cybersecurity Compliance (NIST SP 800-171)The contract entails the implementation and assessment of cybersecurity controls as specified in NIST Special Publication 800-171 for systems that handle controlled unclassified information, ensuring compliance with federal requirements for protecting sensitive but unclassified data. The work is structured as a subcontract and is focused on the NEW CUMBERLAND facility with a ZIP code of 17070-5002, under the oversight of the Department of Defense through its DDSP NEW CUMBERLAND FACILITY. The effort requires a thorough evaluation of existing security postures, configuration of required controls, documentation of implementation, and formal assessment to verify adherence to the NIST framework, with all activities tied to the NAICS code 541512 for computer systems design services. Proposals must be submitted by the deadline of July 31, 2026, with the solicitation posted on July 28, 2026. The performance location is restricted to the specified facility, and while no set-aside provisions are identified, the subcontract nature implies the prime contractor will delegate this specialized cybersecurity compliance task to a qualified third party. There is no designated point of contact provided in the data, and all inquiries must be addressed through the official solicitation link hosted on the DIBBS platform. Successful execution of this contract will ensure that sensitive information processed within the designated system meets DoD cybersecurity standards, reducing risk and enabling continued eligibility for defense-related work involving CUI.

DDSP NEW CUMBERLAND FACILITY

POSTED

DEADLINE

Cybersecurity Compliance for Covered Contractor SystemsThe contract requires the implementation and documentation of cybersecurity controls aligned with NIST SP 800-171 for all systems handling covered defense information, including technical data, delivery schedules, and compliance reports. This effort is critical to ensure the protection of sensitive government information and must be completed according to federal cybersecurity standards. The subcontractor is responsible for fully adhering to the required control families, maintaining accurate documentation, and demonstrating ongoing compliance throughout the contract term. The work is being performed under the auspices of the Defense Logistics Agency within the Department of Defense and falls under NAICS code 541512, indicating it involves computer systems design services. The contract is positioned as a subcontract, and while no specific set-aside designation is provided, performance is expected to meet all applicable federal cybersecurity mandates. Completion of this obligation is essential for maintaining eligibility to handle protected defense information and supporting the broader defense supply chain’s security posture.

Defense Logistics Agency

POSTED

DEADLINE

CMMC Level 2 Compliance & Cybersecurity SupportThis contract supports CMMC Level 2 readiness through comprehensive cybersecurity services tailored to meet DFARS and NIST standards. It encompasses policy development, system hardening, and audit preparation to ensure an organization is fully equipped to achieve and maintain compliance with the Cybersecurity Maturity Model Certification requirements. The scope is designed to bridge gaps in security posture by establishing documented procedures, implementing technical controls, and aligning cybersecurity practices with federal defense contracting obligations. The work is structured as a subcontract under the Department of Defense’s Land Supply Chain initiative, with a NAICS code of 541512 indicating specialized cybersecurity services. The solicitation was posted on July 28, 2026, and responses are due by August 10, 2026. While no set-aside designation or specific performance location is provided, the effort is expected to support DoD supply chain security objectives through actionable, compliant cybersecurity enhancements. All deliverables must be oriented toward successful third-party assessment and certification at CMMC Level 2.

POSTED

DEADLINE

CMMC Level 2 Cybersecurity Compliance SupportThe contract seeks support for achieving CMMC Level 2 compliance, encompassing assistance with either a self-assessment or a third-party audit to meet the required cybersecurity standards. Services include developing and refining cybersecurity policies, implementing system hardening measures, and ensuring full alignment with NIST SP 800-171 controls to protect controlled unclassified information. This effort is targeted at organizations preparing to handle sensitive Department of Defense data and requires proven expertise in defense cybersecurity frameworks. The work is structured as a subcontract under NAICS code 541512, with a response deadline of August 7, 2026, and is sponsored by the Department of Defense under the LAND SUPPLIER OPNS VEHICLE SPT designation. Performance is expected to support defense supply chain integrity, though no specific location or set-aside designation is provided.

LAND SUPPLIER OPNS VEHICLE SPT

POSTED

DEADLINE

Cybersecurity Compliance for Controlled Technical DataThe contract requires implementation of NIST SP 800-171 controls to safeguard covered contractor information systems that process, store, or transmit controlled technical data, including drawings, test reports, and quality certifications. Compliance with these cybersecurity standards is mandatory to ensure the protection of sensitive information in alignment with federal requirements for contractors handling such data under Department of Defense obligations. The scope focuses on establishing and maintaining robust security measures across all relevant systems to mitigate risks associated with unauthorized access, disclosure, or compromise of controlled technical information. This subcontract is open for response until August 10, 2026, with the solicitation posted on July 28, 2026, under NAICS code 541512 for computer systems design services. The contracting activity is led by the Maritime Supply Chain ESOC Buys division within the Department of Defense. The place of performance and point of contact details are not specified, and there is no set-asides designation for small or disadvantaged businesses. Interested parties must access the solicitation via the provided DIBBS link to submit proposals and confirm adherence to all NIST SP 800-171 compliance requirements prior to award.

MARITIME SUPPLY CHAIN ESOC BUYS

POSTED

DEADLINE

Cybersecurity Compliance and CDI ProtectionThe contract requires full implementation of NIST SP 800-171 controls to protect Covered Defense Information, ensuring that all systems and processes handling such data meet federal cybersecurity standards. Compliance includes establishing robust access controls, audit logging, configuration management, and incident response procedures, with immediate reporting of any cybersecurity incidents affecting CDI. The requirement extends to all subcontractors through mandatory flow-down clauses, ensuring third-party entities adhere to the same security protocols and remain accountable for compliance. Work must be performed at the specified location in Alameda, California, with the North American Industry Classification System code 541512 indicating the scope centers on computer systems design and related services. Proposals must be submitted by the deadline of August 10, 2026, with this being a subcontract opportunity under the Department of Defense’s Maritime Supply Chain initiative. While no set-aside type is specified, the solicitation emphasizes stringent security expectations tied to defense information handling, making vendor experience with NIST 800-171 and prior DoD compliance efforts critical for successful bid evaluation. Although no point of contact is listed, all correspondence and submissions must follow the official DIBBS portal process via the provided link.

MARITIME SUPPLY CHAIN

POSTED

about 23 hours ago

DEADLINE

in 12 days

AI Contract Overview

This contract requires the implementation and assessment of NIST SP 800-171 controls to ensure the protection of Controlled Unclassified Information in alignment with DFARS requirements, specifically targeting contractors handling Covered Defense Information. The work must be performed under a Small Business Set-Aside designation, with sole eligibility for small businesses as defined by the SBA, and is NAICS-coded to 541512, indicating it falls under Computer Systems Design Services. The solicitation is issued by the Defense Logistics Agency under the Department of Defense and is structured as a subcontract, emphasizing collaboration within the defense supply chain. All cybersecurity measures must be fully operational and verifiable to meet federal standards for safeguarding sensitive but unclassified data. The response deadline is July 22, 2026, and while the exact location of performance is unspecified, the work is expected to support DoD operations through secure information handling practices. The contract mandates rigorous compliance with NIST SP 800-171, requiring not only the deployment of technical and administrative controls but also formal assessments to validate effectiveness. This includes documentation, continuous monitoring, and evidence of remediation for any identified gaps. The emphasis is on end-to-end protection of CUI throughout its lifecycle, ensuring that all subcontractors and third parties adhere to the same stringent cybersecurity framework as prime contractors. Failure to meet these requirements could result in non-compliance penalties, contract termination, or loss of eligibility for futureDoD work.