This Subcontract opportunity from Department Of Defense was posted on August 31, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Top

Cybersecurity Engineering and ATO Support

Closed

Federal

Submission Closed09/30/2026, 02:00:00 PM PDT

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541519

New

SLED

Application Maintenance and Break-Fix SupportThis subcontract for Application Maintenance and Break-Fix Support provides essential technical services for prime contractors working on Ohio Department of Transportation software projects. The scope of work focuses on maintaining system uptime for the OHGO platform through continuous performance monitoring, root cause analysis of system failures, and the deployment of emergency patches and hotfixes utilizing application performance monitoring tools. The opportunity is categorized under NAICS code 541519 and was posted on November 5, 2026, with a response deadline of November 24, 2026. Interested parties can find further details and manage the process through the OhioBuys portal.

Dept Of Transportation

POSTED

DEADLINE

Identity, Credentialing, and Access Management (ICAM) Technical Operations

Bureau Of Fiscal Service

POSTED

DEADLINE

Vulnerability Assessment and POAM Management

Bureau Of Fiscal Service

POSTED

DEADLINE

Umano Medical Bed Software SupportThe Umano Medical Bed Software Support subcontract involves providing periodic software enhancements and updates for Umano Medical OOK SNOW ALL Bed systems. This work supports prime contractors on Department of Veterans Affairs facility projects and includes the delivery of updated and verified system software. Services are performed through the remote or on-site installation of software patches and updates utilizing proprietary Umano Medical deployment tools, which requires authorized access to manufacturer software repositories. The contract is associated with NAICS code 541519 and is managed under the Department of Veterans Affairs Network Contract Office 8.

248-NETWORK Contract Office 8 (36C248)

POSTED

DEADLINE

Cybersecurity Sustainment & ATO ManagementThe Cybersecurity Sustainment and ATO Management subcontract supports prime contractors on Defense Health Agency projects within the Department of Defense. The primary objective is to perform security vulnerability remediation and maintain the Risk Management Framework body of evidence to ensure mobile applications sustain their Authorization to Operate. This work requires remediating vulnerabilities according to DoD policy timelines using government-provided security scanning tools. Key deliverables include updated RMF documentation and detailed vulnerability remediation reports. The opportunity is categorized under NAICS code 541519 and was posted on November 5, 2026, with a response deadline of November 19, 2026.

Defense Health Agency

POSTED

DEADLINE

Cybersecurity & Compliance EngineeringThis subcontract for Cybersecurity and Compliance Engineering supports prime contractors on FBI Enterprise Data Management System projects at Redstone Arsenal. The scope of work focuses on the implementation of critical security measures, including Role-Based Access Control, Multi-Factor Authentication, and automated FISA data minimization marking. The contractor is responsible for developing System Security Plans and Privacy Impact Assessments to facilitate Authority to Operate decisions. The project requires strict adherence to NIST SP 800-53 and FISMA standards to ensure full regulatory compliance. Key deliverables include the provision of security controls and the final attainment of ATO certification. This opportunity falls under NAICS code 541519 and is managed under the Department of Justice.

FBI - Redstone Arsenal

POSTED

DEADLINE

Hand Held Terminals / SOTI Software Requirement

Solicitation # HHT_SOTI

The Defense Commissary Agency (DeCA) is seeking market capabilities through a sources-sought request to establish an end-to-end operational solution for its worldwide enterprise mobile computing fleet. The primary objective is the management of approximately 2,709 Zebra Android Handheld Terminals (HHTs) utilizing the SOTI MobiControl Mobile Device Management (MDM) platform. The scope of work encompasses the provisioning of annual software subscriptions, the deployment and administration of dedicated production and test server environments, and the integration of devices with enterprise retail and warehouse systems. Additionally, the contractor must provide comprehensive depot repair, rapid-exchange warranty administration, and global technical help desk support. Key requirements include the ability to perform turnkey distribution and logistics for all CONUS and OCONUS locations, including secure packaging and customs clearance. The contractor must ensure strict adherence to cybersecurity standards, including Security Technical Implementation Guides (STIG) and Risk Management Framework (RMF) support to maintain the system's Authorization to Operate (ATO), with personnel meeting DoD 8140/8570 certifications. The requirement also includes optional life-of-contract technology refreshes for replacement hardware and accessories as equipment reaches end-of-life or end-of-sale status. Interested respondents must be authorized resellers or integrators of the proposed hardware and software, providing new OEM equipment and submitting a capability statement under NAICS 541519 or 541512 by November 9, 2026.

W6QK Acc-Apg Contr Ctr

POSTED

DEADLINE

Department of the Air Force Business and Enterprise Systems (BES) Commercial Solutions Opening (CSO)

Solicitation # FA8771-26-S-C0001

The Department of the Air Force Program Business and Enterprise Systems (BES) has established a multi-year framework via Commercial Solutions Opening (CSO) FA8771-26-S-C0001 to acquire innovative Commercial-Off-The-Shelf (COTS) IT and business solutions. This umbrella solicitation serves as an administrative framework rather than a direct request for proposals, with specific opportunities to be announced through individual open or closed Calls for Proposals published as amendments until March 2, 2030. Awards may be executed as FAR-based contracts or Other Transaction Agreements (OTAs) under 10 USC 2371b. The scope focuses on several key areas, including artificial intelligence, agile methodology, automation, scalability, security, and the reduction of total lifecycle costs of ownership. Eligible participants include traditional and non-traditional defense contractors, research institutions, and both large and small businesses. All offerors must maintain active registration in the System for Award Management (SAM). Evaluation of proposals will be based on the merit of the proposed concept in addressing specific Areas of Interest, focusing on technical soundness, commercial innovation, and price reasonableness, with funds availability serving as a mandatory pass/fail gate. The framework allows for iterative prototyping and the potential for follow-on production contracts, which may be negotiated with or without further competition. While the general framework is open, specific set-asides for small businesses will be determined at the individual call level.

POSTED

DEADLINE

Cybersecurity Engineering and DoD Risk Management Framework (RMF) Support Services

Solicitation # W91CRB-27-B-A001

Solicitation W91CRB-27-B-A001 is an 8(a) set-aside for Cybersecurity Engineering and DoD Risk Management Framework (RMF) Support Services to benefit the Aberdeen Test Center in Maryland. The contractor will provide all necessary personnel, equipment, and non-personal services to establish and maintain Authority to Operate (ATO) and RMF compliance for several key systems, including the ATC Local Area Network, Logically Isolated Network, Secure Test Environment, and Test and Evaluation Network. The scope includes engineering analysis of hardware and software baselines, configuration management support, and architectural design. The period of performance runs from November 23, 2026, to November 22, 2031, consisting of a base year and four option years, with a possible six-month extension through May 22, 2032. The contract is a sealed bid acquisition requiring firm-fixed pricing based on an estimated 2,040 hours per year per labor category, with no allowance for travel or other direct costs. Bids must be submitted electronically by November 12, 2026. Evaluation is based on a pass/fail responsiveness check, which requires at least five years of RMF lifecycle reporting experience and three years of Top Secret environment documentation for the surge position. Key personnel must include a Senior IT Systems Solutions Architect serving as the Contract Manager. Security requirements are stringent, requiring a Secret clearance for most personnel and a Top Secret clearance for the surge position, with all work performed at Aberdeen Proving Ground. Invoicing must be processed through the Wide Area Workflow application.

POSTED

DEADLINE

PMX-281 IT Strategy, Software Modernization, and Digital Decision Intelligence Advisory Subscriptions

Solicitation # N00019-26-RFPREQ-WPM281-0281

Naval Air Systems Command (NAVAIR), through PMX-281, is conducting market research via a Sources Sought Notice to identify capable providers for IT strategy, software modernization, and digital decision intelligence advisory subscriptions. The government intends to satisfy this requirement through an existing DoD Enterprise Software Initiative (ESI) Blanket Purchase Agreement (BPA) and is specifically evaluating whether there are sufficient small business BPA holders or authorized resellers to support a small business set-aside. The scope of work involves providing software engineering and decision intelligence tools, including digital platforms and benchmark data, alongside objective advisory and consulting services to support AI integration and enterprise software architecture for United States Naval Aviation. Key deliverables include one Team Leader license, five Executive Member licenses, five Advisory Member licenses, and on-demand specialized consulting services. Technical requirements specify that software platforms must meet DoD Cloud Computing Security Requirements Guide impact levels, such as FedRAMP Moderate or DoD IL4/IL5. Additionally, personnel providing advisory services must be eligible for Top Secret (SCI) clearances, and all providers must comply with DD Form 254 industrial security requirements and ITAR/EAR export controls. Interested parties must submit a structured capability statement not exceeding eight pages by November 4, 2026, detailing their BPA status, socioeconomic designations, and technical conformance.

Naval Air Systems Command

POSTED

DEADLINE

Fiber Cables and Various Accessories

Solicitation # 80NSSC27946786Q

The National Aeronautics and Space Administration (NASA) Shared Services Center is soliciting quotes for the procurement of fiber cables and various accessories to support the NASA Marshall Space Flight Center (MSFC). This firm-fixed-price contract, conducted under full and open competition, aims to maintain compliance with MSFC network infrastructure standards, cybersecurity requirements, and SCIF accreditation standards. All provided materials must be included on the NASA OCIO Approved Products List (APL) to ensure compatibility with existing facility infrastructure. Key items requested include various fiber cables, industrial tape, and fiber cleaners, with a required delivery date of November 2, 2026, to Huntsville, Alabama. The contract will be awarded to the responsible offeror with the lowest price technically acceptable (LPTA) offer. Proposals must be submitted to Cody Guidry by November 6, 2026, and must include the company's SAM CAGE code/UEL and two points of contact. Contractors are required to comply with strict U.S. export control laws, including ITAR and EAR, and must adhere to specific packaging and marking requirements for duty-free entry of supplies. Delivery is established as FOB Destination.

NASA Shared Services Center

POSTED

DEADLINE

JFrog Artifactory Subscription Maintenance

Solicitation # CORHQ-26-Q-0382

Solicitation CORHQ-26-Q-0382 is a firm-fixed-price requirement issued by the Federal Deposit Insurance Corporation for JFrog Artifactory and Xray Enterprise X software subscription maintenance. The period of performance is scheduled from December 8, 2026, to December 7, 2027, with performance located in Arlington, Virginia. The procurement is not a small-business set-aside and utilizes the Lowest Price Technically Acceptable evaluation method, where proposals are rated as either acceptable or unacceptable based on minimum technical requirements and price reasonableness. Following several amendments, the final deadline for quotes is November 10, 2026, at 6:00 p.m. EST. To be deemed responsive, offerors must be the Original Equipment Manufacturer or an authorized JFrog reseller and must submit a complete proposal package including the Price Schedule, Section K representations and certifications, and Pre-Award Supply Chain Risk Management information. Deliverables include product keys, activation codes, and digital certificates submitted electronically to the FDIC. The primary point of contact for this acquisition is Contracting Officer Christina V. Brooks.

POSTED

about 16 hours ago

DEADLINE

in 5 days

AI Contract Overview

The Cybersecurity Engineering and ATO Support subcontract focuses on integrating cybersecurity controls for prime contractors on NIWC-PAC projects to ensure full compliance with Risk Management Framework standards. The selected provider will be responsible for developing Security Control Traceability Matrices, creating Plans of Action and Milestones, and preparing all necessary Authority to Operate documentation. This opportunity is managed by the Department of Defense for NIWC Pacific under NAICS code 541519, with performance located in zip code 92152. Due to the sensitive nature of the work, a TS/SCI clearance and specialized RMF expertise are mandatory requirements. The response deadline for this subcontract is September 30, 2026.

General Info

Cybersecurity engineering and ATO support for NIWC-PAC requiring TS/SCI clearance by September 2026.

Agency

Department Of Defense → Niwc Pacific

NAICS

541519 - Other Computer Related Services

Place of Performance

CA, 92152

Set-Aside

NONE

Documents

This scope was carved out of N6600126R3507.

The full solicitation package (23 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

APPLICATION ARSENAL (AA) ENTERPRISE ENGINEERING AND LIFECYCLE SUPPORT _*SEAPORT CONTRACT HOLDERS ONLY

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PhaseClosed

PostedAug 31

subcontract

Response DeadlineSep 30

Deadline has passed

Submission Closed

09/30/2026, 02:00:00 PM PDT

Find active opportunities like this

Get full access to discover similar active contracts, track opportunities, and build proposals with AI assistance.

Organization & Contact Information

AgencyDepartment Of Defense → Niwc Pacific

ContactsNo contacts available

OfficeN/A

Organization / AgencyDepartment Of Defense → Niwc Pacific

Office AddressN/A

ContactsNo contact information available

Full Description

Engineers and integrates cybersecurity controls for prime contractors on NIWC-PAC projects to ensure compliance with Risk Management Framework (RMF) standards. Develops Security Control Traceability Matrices (SCTMs), creates Plans of Action and Milestones (POAMs), and prepares Authority to Operate (ATO) documentation. Requires TS/SCI clearance and RMF expertise. Delivers SCTMs, POAMs, and ATO documentation.