This Sources Sought opportunity from Department Of Veterans Affairs was posted on June 15, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Top

DA01--Health Services DevSecOps, NEW CONTRACT (VA-26-00011357)

Closed

36C10B26Q0163Federal

Submission Closed02/12/2026, 10:00:00 AM EST

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541512

New

SLED

Cybersecurity Maturity Model Certification (CMMC) Program Services

Solicitation # 09112026

The University of Arkansas, Fayetteville (UAF) issued solicitation 09112026 for Cybersecurity Maturity Model Certification (CMMC) Program Services to secure a term contract for two years with two optional renewal years. The objective was to engage a qualified firm to provide cybersecurity advisory, architecture, engineering, and compliance services to mature the university's CMMC program. The scope focused on achieving compliance with CMMC Levels 1, 2, and 3 to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). Key deliverables included a compliance maturity roadmap, the design of a scalable security architecture, a continuous monitoring program, and assessment readiness support. The procurement process included several modifications, such as the addition of a 2 million dollar Professional Liability insurance requirement and extensions to the proposal deadline. Evaluation criteria were weighted toward the technical proposal (40 points), respondent qualifications (30 points), and cost (30 points). However, on October 19, 2026, the University of Arkansas, Fayetteville officially cancelled RFP 09112026 via Addendum 3. This cancellation was prompted by changes in federal guidance that necessitated a reassessment of the procurement scope, with the university intending to issue a new solicitation once requirements are clarified.

University of Arkansas Fayetteville (UAF)

POSTED

DEADLINE

CIT01277069_System Implementation Services

Solicitation # WMATA-0000010968

The Washington Metropolitan Area Transit Authority is seeking proposals for System Implementation Services under solicitation number WMATA-0000010968. This procurement opportunity is categorized under NAICS code 541512, focusing on computer systems design services to support the agency's operational infrastructure. The solicitation was posted on November 13, 2026, and requires all responses to be submitted by the deadline of December 14, 2026, at 5:00 PM. Interested parties can access further details and manage their bids through the official WMATA supplier portal.

Washington Metropolitan Area Transit Authority

POSTED

DEADLINE

South Dakota Immunization Information System (SDIIS)

Solicitation # 26RFP-27-0904002-003

The South Dakota Department of Health, in cooperation with the CDC, is soliciting proposals for software and professional services to implement and support a new internet-based Immunization Information System (SDIIS). The project involves replacing the existing system to provide authorized users with real-time access to input, analyze, and report immunization data. Key functional requirements include the ability to automate client de-duplication, manage vaccine inventory, integrate newborn screening data, and interface with the South Dakota Birth Registry, the Electronic Disease Surveillance System (Maven), and the State Health Information Exchange via HL7 and SOAP wrapped XML standards. Offerors may propose three hosting models: Vendor-Hosted, State-Hosted On-Premises, or State-Hosted Azure PaaS. The project is scheduled to begin on February 1, 2027, with a phased implementation including environment setup by June 1, 2027, interface development by October 29, 2027, and a final go-live and cutover date of March 2, 2028. Proposals are due by November 25, 2026. Award selection will be based on subjective judgment and a comparative assessment of qualified proposals. Contractors must adhere to strict security protocols, including fingerprint-based background checks for staff accessing protected health information, compliance with HIPAA and Federal Tax Information regulations, and the maintenance of at least $1 million in commercial general liability insurance. Acceptance of the final product is contingent upon passing web application vulnerability scans and successful User Acceptance Testing.

South Dakota State Government

POSTED

DEADLINE

Computer Control System ImplementationCambridgeshire County Council is seeking a subcontractor for the implementation of a specialized computer control system designed for prime contractors managing street works coordination projects. The project involves the configuration and delivery of a fully operational system tailored specifically for Traffic Management Center operations, ensuring all technical specifications align with CPV 48151000 and the Authority's operational requirements. The procurement process for this subcontract began on November 13, 2026, with a response deadline set for December 11, 2026. This initiative falls under NAICS code 541512, focusing on the deployment of a robust control infrastructure to streamline the coordination of street works within the council's jurisdiction.

Cambridgeshire County Council

POSTED

DEADLINE

26076 Street Works Co-Ordination and TMC Network Monitoring Platform

Solicitation # CCC/000016

Cambridgeshire County Council is seeking a provider for a Street Works Co-Ordination and TMC Network Monitoring Platform under solicitation CCC/000016. The objective is to replace or upgrade the existing Causeway One Network platform to better align with current operational requirements and ensure value for money. The scope of work includes the implementation of a system to support Traffic Management Centre operations, highway network monitoring, street works and events coordination, and a communication interface for residents, elected Members, and key stakeholders. The estimated contract value is 400,000 GBP excluding VAT, with a projected performance period from April 1, 2027, to March 31, 2028. The procurement process utilizes a price per quality point evaluation methodology, where the most advantageous tender is determined by dividing the total bid price by the total quality score. Quality is assessed through weighted questions detailed in the Invitation to Tender. Interested parties must submit their proposals in English via the In-Tend supplier portal by the deadline of December 11, 2026, at 12:00pm. The primary point of contact for this procurement is Enata George.

Cambridgeshire County Council

POSTED

DEADLINE

Cybersecurity & Information Assurance ServicesThis subcontract for Cybersecurity and Information Assurance Services supports prime contractors on United States Space Force projects. The primary objective is to implement and audit cybersecurity controls to ensure strict compliance with NIST SP 800-171 Rev 2 and DFARS 252.204-7012 for the protection of covered defense information. Key deliverables include the provision of cybersecurity compliance reports and the active management of Supplier Performance Risk System assessment scores utilizing specialized auditing tools. The project is managed under the Department of Defense through the AFRL RJZ agency and will be performed in Albuquerque, New Mexico. Qualified providers must demonstrate CMMC Level 2 readiness or higher. The solicitation was posted on November 13, 2026, with a response deadline of December 1, 2026, falling under NAICS code 541512.

POSTED

DEADLINE

Secure Data Handling and Cybersecurity ComplianceThis small business set-aside subcontract, managed by the Department of Defense through the Dcso Richmond Division #2, focuses on providing and maintaining a secure IT environment for prime contractors working on DCAA OIG investigation projects. The scope of work involves the delivery of certified secure servers, encrypted storage, and secure communication channels, all while ensuring strict adherence to cybersecurity controls outlined in NIST SP 800-171 and DFARS 252.204-7012. Additionally, the contractor must ensure that no covered defense telecommunications equipment is used, in compliance with DFARS 252.204-7018. The project will be performed at Fort Belvoir under NAICS code 541512. Interested parties should note that the solicitation was posted on November 13, 2026, with a response deadline of November 27, 2026. The primary objective is to establish a fully compliant and certified IT infrastructure and software toolset to protect sensitive investigation data.

Dcso Richmond Division #2

POSTED

DEADLINE

VPN and Secure Network Gateway ServicesThis subcontract for VPN and Secure Network Gateway Services, issued by the Department of State Acquisitions Rpso Frankfurt, focuses on providing and managing Virtual Private Network services for prime contractors on International Trade Administration projects. The scope of work involves implementing VPN tunnels and managing secure gateways to ensure encrypted data transmission and the protection of critical software functions. All services must adhere to strict government security standards to prevent unauthorized attacker control and maintain essential trust functions. The project is categorized under NAICS code 541512 and will be performed in China. Interested parties should note that the solicitation was posted on November 13, 2026, with a response deadline of December 23, 2026. The primary objective is the delivery of secure, encrypted network access and the maintenance of robust security gateways to safeguard sensitive information.

Acquisitions - Rpso Frankfurt

POSTED

DEADLINE

Automated Mission Communication Manager Request for Information (RFI)

Solicitation # FA8612_RFI_AMCM_2027_0001

FA8612 Aflcmc C3BM C3

POSTED

DEADLINE

Procurement of a 'Local Authority' Legal Case Management System

Solicitation # OPEN20261679

North Tyneside Borough Council is procuring a fully cloud and browser-based Legal Case Management System to enhance the efficiency of its Legal Services function. The required solution must integrate legal case management, document redaction, court bundling, reporting, and dashboard functionality, while incorporating workflow automation, secure role-based access, and mobile capabilities. The scope of the contract extends beyond software provision to include system implementation, the migration of existing Council case data, comprehensive training, and ongoing support. The contract has an estimated value of 200,000 GBP excluding VAT, with an initial term of three years running from February 22, 2027, to February 21, 2030. There are options to extend the agreement for up to two additional 12-month periods, potentially extending the performance period to February 21, 2032. The procurement process follows a three-stage Competitive Flexible Procedure. Stage One utilizes a pass/fail assessment of mandatory requirements, financial standing, and information security. Stage Two evaluates written tenders based on quality, social value, and price. Suppliers who meet the minimum scoring requirements proceed to Stage Three, which involves structured solution demonstrations against pre-published scenarios. All submissions must be made via the OPEN Portal by the deadline of October 28, 2026.

North Tyneside Borough Council

POSTED

DEADLINE

Asset Tracking System

Solicitation # ocds-h6vhtk-078109

NHS Borders is soliciting competitive tenders from experienced suppliers to implement a comprehensive asset tracking system. The primary objective of this initiative is to enhance the control, traceability, and overall management of clinical and specific non-clinical equipment by replacing outdated manual record-keeping with a sustainable digital tracking and reporting solution. This solicitation, identified by number ocds-h6vhtk-078109, was posted on November 13, 2026. Interested parties can find further details through the official find-tender service portal, with Shona Milne serving as the primary point of contact for the procurement process.

POSTED

DEADLINE

Cloud Services and Cybersecurity ImplementationThis subcontract for Cloud Services and Cybersecurity Implementation involves the setup, migration, and configuration of cloud infrastructure for prime contractors working on Virano Frameworks Ltd education projects. The scope of work includes deploying firewalls, web filtering, cloud storage migration, and server virtualization utilizing AWS, Azure, or GCP platforms to deliver a fully configured cloud environment with an active security perimeter. The opportunity was posted on November 13, 2026, with a response deadline of December 15, 2026. Classified under NAICS code 541512, the project is managed by Virano Frameworks Ltd and focuses on critical infrastructure and security deployment within the education sector.

Virano Frameworks Ltd

POSTED

about 9 hours ago

DEADLINE

in about 1 month

AI Contract Overview

The Department of Veterans Affairs through its Technology Acquisition Center in Eatontown, New Jersey, is seeking industry input for Health Services DevSecOps support under solicitation number 36C10B26Q0163, with the project identifier VA-26-00011357. This is a Request for Information (RFI) intended for planning purposes only and does not constitute a solicitation or a commitment to award a contract. The RFI seeks detailed information from vendors on their experience scaling Agile DevSecOps methodologies to support the modernization and sustainment of veterans' healthcare IT systems, with specific emphasis on expertise in VistA and MUMPS programming, product line management, team structuring, onboarding processes, and the use of low-code/no-code platforms and healthcare AI solutions. Vendors are required to respond within a 10-page limit, excluding recommendations related to Scrum team structure and the Performance Work Statement, and must avoid any marketing materials. The response deadline has been extended to February 12, 2026, at 10:00 a.m. Eastern Time, with submissions due via email to three designated VA addresses or through the ATOMS portal, and must not exceed 5 MB in size. The performance work statement outlines the need for continuous development, testing, deployment, and sustainment of health services applications using DevSecOps and Agile practices aligned with VA and federal standards including FedRAMP, VA Cloud-First Policy, OMB M-24-04, and Section 508 accessibility requirements. Contractors must support full lifecycle activities across VA’s Digital Service Handbook and Enterprise Architecture, deliver specified documentation such as Version Description Documents, Test Plans, and Cloud Usage Reports, and maintain compliance with VA’s Identity and Access Management policies. All personnel must meet designated sensitivity tiers, undergo background investigations per VA Handbook 0710, sign agreements protecting sensitive information, and ensure no organizational conflicts of interest occur. The contract will be awarded to a certified Service-Disabled Veteran-Owned Small Business under a total set-aside as specified in VAAR 852.219-73, with payments to non-certified subcontractors capped at 50% of total contract value. Evaluation will be based on trade-off analysis across technical quality, schedule adherence, staffing expertise, and management capability, with acceptable performance requiring a "Satisfactory or higher" rating across all factors. Security requirements are extensive, including vulnerability scanning

General Info

VA seeks SDVOSB vendors for Health Services DevSecOps support with VistA, MUMPS, AI, and low-code solutions under strict security and accessibility requirements.

Agency

Department Of Veterans Affairs → Technology Acquisition Center Nj (36C10B)

NAICS

541512 - Computer Systems Design Services

Place of Performance

Set-Aside

sdvobs

Documents

3 pages · amendment

High

4 pages · rfi

High

44 pages · pws

High

4 pages · rfi

Low

3 pages · presolicitation

Low

AI Contract Breakdown

Uniform Contract Format

Timeline

2 updates

PhaseClosed

PostedJan 28

Sources Sought

Notice updatedFeb 5

Response deadline changed from Feb 9, 2026 to Feb 12, 2026. The notice description changed.

Response DeadlineFeb 12

Deadline has passed

Notice updatedJun 15

Notice details unchanged. Attachments may have changed.

Submission Closed

02/12/2026, 10:00:00 AM EST

Find active opportunities like this

Get full access to discover similar active contracts, track opportunities, and build proposals with AI assistance.

Organization & Contact Information

AgencyDepartment Of Veterans Affairs → Technology Acquisition Center Nj (36C10B)

Contacts1 person available

OfficeEATONTOWN, NJ, 07724, USA

Organization / AgencyDepartment Of Veterans Affairs → Technology Acquisition Center Nj (36C10B)

Office AddressEATONTOWN, NJ, 07724, USA

Contacts

Daniel SchlissermanContract Specliast

Full Description

The purpose of Amendment 01 is to: Clarify that Scrum team structuring recommendations and PWS recommendations are excluded from the overall 10-page limit.
Extend the Response due date and time to 2/12/26 at 10am Eastern Time.