Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, October 14 at 2:00 PM EDT

Register Free →

Search

Top

Back to Contracts

DevSecOps & Cybersecurity Compliance

Active

Federal

Response Deadline10/28/2026, 06:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

This DevSecOps and Cybersecurity Compliance subcontract supports prime contractors on Defense Health Agency projects by ensuring continuous security compliance and automating software delivery. The scope of work involves implementing CI/CD checks, STIG compliance, and IAVM remediation while maintaining RMF ATO postures through the use of Azure DevOps and Zero Trust Architecture. The primary deliverables include verified CI/CD pipelines and comprehensive ATO documentation. Personnel assigned to this contract must possess a Tier 1-3 Security Clearance and maintain DoD 8570 compliance. The opportunity is categorized under NAICS code 541519 and is associated with the Department of Defense. Interested parties should note the response deadline of October 28, 2026.

General Info

DevSecOps and cybersecurity compliance subcontract for DHA projects; deadline October 28, 2026.

Agency

Department Of Defense → Defense Health Agency

NAICS

541519 - Other Computer Related Services

Place of Performance

0, VA, USA

Set-Aside

NONE

Documents

This scope was carved out of HT003826SC005-AOI0002.

The full solicitation package (2 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

Defense Health Agency (DHA), Program Acquisition Executive, Digital Medical Solutions (PAE DMS), Enterprise Intelligence & Data Solutions (EIDS) Program Management Office (PMO), Data Exchange Services Operations, Modernization, and Development

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedOct 7

subcontract

Response DeadlineOct 28

Submission deadline

Response Deadline

10/28/2026, 06:00:00 PM UTCin 20 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyDepartment Of Defense → Defense Health Agency

ContactsNo contacts available

OfficeN/A

Organization / AgencyDepartment Of Defense → Defense Health Agency

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Ensures continuous security compliance and automates software delivery for prime contractors on Defense Health Agency (DHA) projects. Implements CI/CD checks, STIG compliance, IAVM remediation, and maintains RMF ATO postures using Azure DevOps and Zero Trust Architecture. Requires Tier 1-3 Security Clearance and DoD 8570 compliance. Delivers verified CI/CD pipelines and ATO documentation.

Similar Contracts

Same NAICS industry code

Cybersecurity & Identity Access Management (IAM) Implementation

Government of Yukon

POSTED

about 13 hours ago

DEADLINE

Golf Range Technology IntegrationThis subcontract opportunity involves the supply and installation of specialized golf tracking and virtual golf technology for prime contractors working on projects at the NSA Monterey facility. The scope of work includes the implementation of a golf range technology system designed for ball flight tracking and interactive virtual golf experiences. The successful contractor will be responsible for delivering a fully operational system along with comprehensive staff training videos. Managed under the Commander Navy Installations Command within the Department of Defense, the project falls under NAICS code 541519. While the work supports the Monterey facility, the place of performance is listed in San Diego. The solicitation was posted on October 7, 2026, with a response deadline of November 10, 2026.

Commander Navy Installations Command

POSTED

about 20 hours ago

DEADLINE

in about 1 month

System & Software AdministrationThis subcontract opportunity with NSWC Dahlgren involves providing technical administration and maintenance of cybersecurity tools for prime contractors supporting NSWCDD E Department projects. The scope of work focuses on general system and software administration to ensure the operational posture of tactical and RDT&E environments, with a primary emphasis on delivering system uptime, high availability, and fully patched software environments. Qualified candidates must possess specific experience with Navy and Department of Defense system administration standards. The solicitation was posted on October 7, 2026, with a response deadline of November 16, 2026. The work is categorized under NAICS code 541519 and will be performed in the 22448 zip code area.

POSTED

about 20 hours ago

DEADLINE

in about 1 month

RTI Basic Support User SubscriptionsThis subcontract through the Department of Defense for the Naval Surface Warfare Center Dahlgren Division focuses on the procurement of technical support subscriptions for prime contractors. The agreement specifically provisions three RTI Basic Support User Subscriptions under part number 869-20-00-00, ensuring the delivery of support services as defined by the RTI Basic Support tier. To be eligible for this contract, providers must maintain SAM registration and hold either OEM status or a formal RTI Letter of Authorization. The project is categorized under NAICS code 541519 and is designated for performance in the 23461 zip code area.

POSTED

about 20 hours ago

DEADLINE

Point of Sale (POS) and IT Infrastructure SetupThis small business set-aside subcontract involves the supply and installation of Point of Sale systems and IT infrastructure for prime contractors supporting business operations at Joint Base Langley-Eustis. The scope of work includes installing POS hardware, configuring merchant accounts for credit card processing, and establishing secure internet connectivity through the deployment of routers and modems. To ensure secure financial transactions, the contractor must maintain strict PCI DSS compliance. The primary objective is to deliver a fully operational POS system and an active internet connection. This opportunity is managed under the Department of Defense, specifically the 633 Cons Pkp, and falls under NAICS code 541519. Interested parties should note the response deadline of October 13, 2026.

FA4800 633 Cons Pkp

POSTED

about 20 hours ago

DEADLINE

IT Support Services Contract (ITSSC) Recompete

Solicitation # 28321326R00000022

The Social Security Administration Office of Acquisition and Grants is soliciting proposals for the IT Support Services Contract (ITSSC) Recompete under solicitation number 28321326R00000022. This effort aims to establish a multiple-award Indefinite-Delivery, Indefinite-Quantity (IDIQ) contract to provide comprehensive IT support services, governed by Federal Acquisition Regulation Parts 12, 15, and 16. The requirement is categorized under NAICS code 541519 and is managed by the agency's office located in Baltimore, Maryland. Recent amendments to the solicitation have addressed offeror inquiries, updated associated attachments, and added travel CLINs. Additionally, the agency has incorporated a Small Business Subcontracting Plan model outline and extended the response deadline to October 15, 2026. Interested parties may coordinate with the primary point of contact, Evan Aston, regarding this procurement opportunity.

SSA Ofc Of Acquisition Grants

POSTED

about 20 hours ago

DEADLINE

Maintenance renewal of Open Software Technologies

Solicitation # 28321327Q00000015

SSA Ofc Of Acquisition Grants

POSTED

about 20 hours ago

DEADLINE

Solicitation Update In reference to the Request for Information (RFI) for Army Enterprise Identity, Credential, and Access Management (E-ICAM) Services Delivery Contract

Solicitation # W15P7T26RICAMSolicitation

POSTED

about 20 hours ago

DEADLINE

Endpoint Security Event Management

Solicitation # 842674854

The Defense Information Systems Agency is seeking industry capabilities and white papers to develop an Endpoint Security Event Management System (ESEMS) supporting the Army's Unified Network Zero Trust Architecture. This initiative focuses on Endpoint Detection and Response, Comply to Connect, and Unified Security Information and Event Management to secure endpoints connected to DOWIN-A. The anticipated requirement is for a single-award IDIQ contract with an estimated ceiling of 850 million dollars. The period of performance is expected to include a base period and multiple option years, with full operational capability required within 180 days of award. Primary performance will be centered at the Global Cyber Center in Fort Huachuca, Arizona, with additional mission locations across Maryland, Georgia, Virginia, and North Carolina. The contractor will be responsible for operating a global endpoint ecosystem, processing telemetry streams up to 50,000 events per second, and maintaining agent health on 85 to 95 percent of active endpoints. Key technical requirements include the use of virtualized Army Cloud environments, normalization of telemetry to ARCYBER-approved schemas, and strict adherence to DOW/Army RMF security controls to maintain an Authority to Operate. The contract mandates compliance with CMMC level requirements, Section 508 accessibility standards, and rigorous supply chain risk management. Administrative requirements include 24/7/365 service desk operations, the submission of quarterly technology innovation briefs, and the implementation of a phased deployment strategy for system validation.

It Contracting Division - PL84

POSTED

about 20 hours ago

DEADLINE

DA10--Brand Name Active Navigation or Equivalent Discovery Center VA-27-00000574

Solicitation # 36C10B27R0001

Technology Acquisition Center Nj (36C10B)

POSTED

about 20 hours ago

DEADLINE

6515--Pyxisâ„¢ Subscription and Service

Solicitation # 36C26227Q0015

262-NETWORK Contract Office 22 (36C262)

POSTED

about 20 hours ago

DEADLINE

Cybersecurity services

Solicitation # 9F032-20250160

The Canadian Space Agency is seeking bids from qualified Canadian suppliers to provide specialized cybersecurity professional services for a period of three years. The scope of work focuses on supporting security assessment and authorization activities, as well as Information Technology threat and risk assessments. This procurement is restricted to holders of the Task-Based Informatics Professional Services Supply Arrangement EN578-170432 within the Montreal Metropolitan Area. The agency requires two Level 2 Information Technology security threat and risk assessment and certification and accreditation analysts, with the option to propose one additional resource from either the Level 3 analyst category or the Level 2 or 3 vulnerability analysis specialist categories. Eligibility is limited to Canadian suppliers under the Policy on the Prioritization of Canadian Suppliers in Federal Strategic Procurement, and the process is governed by the Canadian Free Trade Agreement. Minimum security requirements include a corporate clearance of Protected B and a resource clearance of Reliability, though supply arrangement holders are not required to possess these clearances at the time of bid submission. The solicitation process has undergone four amendments to extend bid deadlines, clarify technical evaluation methodologies, amend corporate mandatory technical criteria, and provide responses to industry questions.

Canadian Space Agency

POSTED

DEADLINE

More opportunities from Department Of Defense → Defense Health Agency

Same awarding agency

Genuine Steris OEM Parts and PM Kits SupplyThis subcontract, issued by the Defense Health Agency under the Department of Defense, focuses on the supply of authentic, FDA-approved Original Equipment Manufacturer parts, lubricants, and preventive maintenance kits. The scope specifically covers genuine Steris replacement components for AMSCO 400, Reliance Vision, AMSCO 7052HP, and IWECO5 models to support prime contractors on facility projects located at Offutt AFB. All provided materials must be non-generic and delivered directly to the prime contractor or the facility. The opportunity is designated as a Total Small Business Set Aside under NAICS code 423450. Interested parties should note the response deadline of October 19, 2026. Performance of the contract will take place in zip code 68113.

Medical, Dental, and Hospital Equipment and Supplies Merchant Wholesalers

POSTED

about 20 hours ago

DEADLINE

Steris Sterilizer and Washer Maintenance & Repair ServicesThis small business set-aside subcontract involves providing specialized maintenance and repair services for Steris sterilizers and washers at Offutt Air Force Base for the Defense Health Agency. The scope of work includes performing scheduled annual preventive maintenance, calibrations, safety inspections, and unscheduled corrective repairs. Specifically, the contractor is responsible for quarterly preventive maintenance, annual chamber cleanings, and rapid diagnosis of Steris AMSCO 400, Reliance Vision, and IWECO5 systems. To ensure equipment is delivered in fully serviceable condition, the contractor must possess Steris manufacturer certification and utilize OEM diagnostic software. All work must be documented through detailed service reports. This opportunity is categorized under NAICS code 811219 and is intended for prime contractors managing facility projects at the specified location.

Other Electronic and Precision Equipment Repair and Maintenance

POSTED

about 20 hours ago

DEADLINE

Technical Documentation & Knowledge ManagementThe Technical Documentation and Knowledge Management subcontract supports the Defense Health Agency within the Department of Defense. The primary objective is the creation and maintenance of critical technical blueprints and operational guides for prime contractors, specifically focusing on the development of runbooks, architecture diagrams, and Interface Control Documents to ensure effective platform sustainment. Personnel assigned to this effort must possess a Tier 1-3 Security Clearance to perform the required duties. The contract is categorized under NAICS code 541611, with a response deadline set for October 28, 2026. Success is measured by the delivery of completed technical documentation and architectural assets.

Administrative Management and General Management Consulting Services

POSTED

about 20 hours ago

DEADLINE

AI/ML Data Engineering & AutomationThe AI/ML Data Engineering and Automation subcontract supports prime contractors on Defense Health Agency projects within the Department of Defense. The primary objective is to build robust data foundations and endpoints for AI-driven analytics, which includes establishing standardized data preparation pipelines, creating feature stores, and developing inference endpoints to support natural language processing and automated workflows. Key deliverables for this engagement include the deployment of inference endpoints and the implementation of data preparation pipelines. Due to the nature of the work, personnel are required to hold Tier 1-3 Security Clearances. The opportunity is categorized under NAICS code 541511, with a response deadline set for October 28, 2026.

Custom Computer Programming Services

POSTED

about 20 hours ago

DEADLINE

Real-Time Data Pipeline & Event-Driven ArchitectureThis subcontract opportunity with the Defense Health Agency focuses on the design and implementation of event-driven architectures to facilitate near real-time clinical data exchange. The project requires the establishment of streaming pipelines using technologies such as AWS Kinesis or Kafka to support critical decision-support systems for prime contractors. Qualified candidates must possess Tier 1-3 Security Clearance to perform the work. The primary objective is the delivery of fully functional real-time data streaming pipelines under NAICS code 541511, with a response deadline set for October 28, 2026.

Custom Computer Programming Services

POSTED

about 20 hours ago

DEADLINE

Healthcare Interoperability & Standards IntegrationThe Healthcare Interoperability and Standards Integration subcontract supports the Defense Health Agency by implementing national healthcare data standards. The primary objective is to ensure clinical data interoperability through the development of FHIR R4 compliant APIs and the execution of OMOP Common Data Model transformations. This effort requires personnel to hold Tier 1-3 Security Clearances to handle sensitive information. The successful contractor will be responsible for delivering validated FHIR APIs and completed data transformations under NAICS code 541511, with a response deadline set for October 28, 2026.

Custom Computer Programming Services

POSTED

about 20 hours ago

DEADLINE

API Modernization & Microservices DevelopmentThe API Modernization and Microservices Development subcontract focuses on transitioning legacy data exchange flows to cloud-native architectures for prime contractors supporting the Defense Health Agency. The primary objective is to migrate existing SOAP services to REST by developing containerized microservices and implementing modern API Gateway patterns. Key deliverables include fully functional microservices and updated API specifications. Technical requirements for this effort include deep expertise in Docker and Kubernetes. Due to the nature of the work for the Department of Defense, personnel must possess Tier 1-3 Security Clearances. The opportunity is categorized under NAICS code 541511, with a response deadline set for October 28, 2026.

Custom Computer Programming Services

POSTED

about 20 hours ago

DEADLINE

Cloud Infrastructure & Platform EngineeringThe Cloud Infrastructure and Platform Engineering subcontract supports the Defense Health Agency by administering and optimizing cloud environments for prime contractors. The scope of work focuses on managing AWS GovCloud resources, implementing cost optimization strategies, and supporting both legacy and containerized workloads through the use of Infrastructure as Code. Key deliverables include a fully optimized cloud environment and detailed resource utilization reports. Qualified candidates or firms must possess AWS Certifications and maintain a Tier 1-3 Security Clearance to perform the work. This opportunity falls under NAICS code 541512 and is associated with the Department of Defense. The response deadline for this requirement is October 28, 2026.

Computer Systems Design Services

POSTED

about 20 hours ago

DEADLINE

Legacy System Operations & SustainmentThe Legacy System Operations and Sustainment subcontract focuses on providing continuous 24x7 operational availability, reliability, and performance monitoring for prime contractors supporting the Defense Health Agency. The scope of work includes proactive monitoring, performance tuning, scheduled maintenance, and incident response for DES, CHDR, and ACS-DAL systems hosted within AWS GovCloud. To ensure compliance and quality of service, the contractor is responsible for delivering detailed system uptime reports and SLA compliance logs. Personnel assigned to this project must possess Tier 1-3 Security Clearances and appropriate DoD IT-Level designations. This opportunity falls under NAICS code 541513 and is associated with the Department of Defense. Interested parties should note the response deadline of October 28, 2026.

Computer Facilities Management Services

POSTED

about 20 hours ago

DEADLINE

Defense Health Agency (DHA), Program Acquisition Executive, Digital Medical Solutions (PAE DMS), Enterprise Intelligence & Data Solutions (EIDS) Program Management Office (PMO), Data Exchange Services Operations, Modernization, and Development

Solicitation # HT003826SC005-AOI0002

The Defense Health Agency (DHA), through the Enterprise Information and Data Solutions (EIDS) Program Management Office, is seeking commercial solutions for the operations, modernization, and development of the Data Exchange Platform (DxP). This platform is critical for military health readiness and patient care, facilitating secure, standards-based interoperability and real-time clinical data exchange between the DHA, Department of Veterans Affairs, and other federal healthcare partners. The primary objective is to maintain 24x7 operational availability for legacy systems, including Data Exchange Services, the Clinical Health Data Repository, and the Access Control Services Data Access Layer, while transitioning these services toward a cloud-native, API-driven, and AI/ML-ready architecture utilizing containerized RESTful microservices. This opportunity is published as Area of Interest (AOI) #02 under Commercial Solutions Opening HT003826SC005. The government will utilize a multi-phase assessment process, beginning with a Phase I written technical solution brief, to determine the most appropriate acquisition pathway, which may include a FAR-based contract or a prototype other transaction agreement. The anticipated period of performance includes a 12-month base period with subsequent option periods based on milestone completion. Performance will be conducted at contractor facilities with remote work authorized. Technical requirements emphasize strict adherence to DoD Instruction 8510.01 (RMF), Zero Trust frameworks, and DHA cloud security rules. All contractor personnel must be U.S. citizens with appropriate security clearances (Tier 1, 2, or 3). Interested vendors must submit Phase I responses, including a technical solution brief, a draft SOO crosswalk, a proposed performance-based work statement, and an organizational conflict of interest mitigation plan, to Lacey Lockard by October 28, 2026, at 1400 Eastern Time. Technical and administrative questions are due by October 14, 2026.

Computer Systems Design Services

POSTED

about 20 hours ago

DEADLINE

Steris Sterilizer Maintenance/Service at Offutt AFB, NE

Solicitation # HT940726Q0001

The Defense Health Agency Contracting Activity Central Division is soliciting quotations for a single-award, Firm-Fixed-Price commercial service contract to provide comprehensive maintenance and repair services for Government-owned Steris sterilization and washer equipment. Located at the 55th Medical Group, Ehrling Bergquist Clinic at Offutt Air Force Base, Nebraska, the scope of work includes scheduled preventive maintenance, safety inspections, calibrations, annual chamber cleanings, and unscheduled emergency repairs. Covered equipment consists of three Steris AMSCO 400 Steam Sterilizers, one Steris Reliance Vision Single Chamber Washer Disinfector, two Steris AMSCO 7052HP Single Chamber Washer Disinfectors, and two Steris IWECO5 Ultrasonic Instrument Washers. All services must be performed by certified technicians using genuine Original Equipment Manufacturer parts and software. This procurement is a 100 percent Total Small Business Set-Aside under NAICS codes 811210 and 811211. The anticipated period of performance includes a 12-month base period, four 12-month option periods, and a potential six-month extension, running from November 1, 2026, through April 30, 2032. Award will be determined using the Lowest Price Technically Acceptable method, evaluating the total price across the base, all option years, and the extension. Technical acceptability is based on the contractor's personnel qualifications, OEM access, technical resources, and parts capability. Key performance standards include a 4-hour telephone response time, on-site arrival within 48 business hours for unscheduled repairs, and a minimum monthly equipment uptime of 95 percent.

Electronic and Precision Equipment Repair and Maintenance

POSTED

about 20 hours ago

DEADLINE

Siemens UniPOC License ProvisioningThis subcontract focuses on the provisioning of essential software licenses and activation keys for prime contractors supporting Defense Health Agency projects at William Beaumont Army Medical Center in Fort Bliss. The scope of work includes delivering licenses for a variety of critical medical systems, specifically Siemens UniPOC middleware, Nova StatStrip glucometers, Abbott i-STAT analyzers, Abbott POC DE Modules, and Siemens RAPIDPoint 500e systems. To ensure compliance and system integrity, the contract mandates that the provider obtain official OEM authorization from both Siemens and Abbott. Classified under NAICS code 513210, the opportunity was posted on October 6, 2026, with a response deadline of October 16, 2026.

Software Publishers

POSTED

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS