Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, October 14 at 2:00 PM EDT

Register Free →

Search

Top

Back to Contracts

DevSecOps Pipeline & Security Engineering

Active

Federal

Response Deadline10/29/2026, 10:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The DevSecOps Pipeline and Security Engineering subcontract supports prime contractors for the Millennium Challenge Corporation by establishing and maintaining secure deployment pipelines. The scope of work focuses on implementing Zero Trust principles, managing vulnerabilities within third-party and open-source libraries, and ensuring strict adherence to NIST and OMB security compliance standards. Key deliverables include the functional secure pipelines, detailed vulnerability reports, and the necessary documentation to achieve Authority to Operate status. This opportunity is categorized under NAICS code 541519 and is based in Washington, DC. Personnel assigned to this project must hold a Moderate Risk Public Trust clearance. Interested parties should note the response deadline of October 29, 2026.

General Info

DevSecOps subcontract for MCC focusing on secure pipelines, NIST compliance, and Zero Trust.

Agency

Millennium Challenge Corporation

NAICS

541519 - Other Computer Related Services

Place of Performance

Washington, DC, 20005, USA

Set-Aside

NONE

Documents

This scope was carved out of 95332427K0001.

The full solicitation package (3 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

MCC Software Development Recompete

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedOct 6

subcontract

Response DeadlineOct 29

Submission deadline

Response Deadline

10/29/2026, 10:00:00 PM UTCin 22 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyMillennium Challenge Corporation

ContactsNo contacts available

OfficeN/A

Organization / AgencyMillennium Challenge Corporation

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Establishes and maintains DevSecOps pipelines for prime contractors on Millennium Challenge Corporation (MCC) projects. Implements Zero Trust principles, manages third-party/open-source library vulnerabilities, and ensures security compliance per NIST and OMB standards. Requires Moderate Risk Public Trust (MRPT). Delivers secure deployment pipelines, vulnerability reports, and ATO documentation.

Similar Contracts

Same NAICS industry code

Golf Range Technology IntegrationThis subcontract opportunity involves the supply and installation of specialized golf tracking and virtual golf technology for prime contractors working on projects at the NSA Monterey facility. The scope of work includes the implementation of a golf range technology system designed for ball flight tracking and interactive virtual golf experiences. The successful contractor will be responsible for delivering a fully operational system along with comprehensive staff training videos. Managed under the Commander Navy Installations Command within the Department of Defense, the project falls under NAICS code 541519. While the work supports the Monterey facility, the place of performance is listed in San Diego. The solicitation was posted on October 7, 2026, with a response deadline of November 10, 2026.

Commander Navy Installations Command

POSTED

about 14 hours ago

DEADLINE

in about 1 month

System & Software AdministrationThis subcontract opportunity with NSWC Dahlgren involves providing technical administration and maintenance of cybersecurity tools for prime contractors supporting NSWCDD E Department projects. The scope of work focuses on general system and software administration to ensure the operational posture of tactical and RDT&E environments, with a primary emphasis on delivering system uptime, high availability, and fully patched software environments. Qualified candidates must possess specific experience with Navy and Department of Defense system administration standards. The solicitation was posted on October 7, 2026, with a response deadline of November 16, 2026. The work is categorized under NAICS code 541519 and will be performed in the 22448 zip code area.

POSTED

about 14 hours ago

DEADLINE

in about 1 month

RTI Basic Support User SubscriptionsThis subcontract through the Department of Defense for the Naval Surface Warfare Center Dahlgren Division focuses on the procurement of technical support subscriptions for prime contractors. The agreement specifically provisions three RTI Basic Support User Subscriptions under part number 869-20-00-00, ensuring the delivery of support services as defined by the RTI Basic Support tier. To be eligible for this contract, providers must maintain SAM registration and hold either OEM status or a formal RTI Letter of Authorization. The project is categorized under NAICS code 541519 and is designated for performance in the 23461 zip code area.

POSTED

about 14 hours ago

DEADLINE

Point of Sale (POS) and IT Infrastructure SetupThis small business set-aside subcontract involves the supply and installation of Point of Sale systems and IT infrastructure for prime contractors supporting business operations at Joint Base Langley-Eustis. The scope of work includes installing POS hardware, configuring merchant accounts for credit card processing, and establishing secure internet connectivity through the deployment of routers and modems. To ensure secure financial transactions, the contractor must maintain strict PCI DSS compliance. The primary objective is to deliver a fully operational POS system and an active internet connection. This opportunity is managed under the Department of Defense, specifically the 633 Cons Pkp, and falls under NAICS code 541519. Interested parties should note the response deadline of October 13, 2026.

FA4800 633 Cons Pkp

POSTED

about 14 hours ago

DEADLINE

IT Support Services Contract (ITSSC) Recompete

Solicitation # 28321326R00000022

The Social Security Administration Office of Acquisition and Grants is soliciting proposals for the IT Support Services Contract (ITSSC) Recompete under solicitation number 28321326R00000022. This effort aims to establish a multiple-award Indefinite-Delivery, Indefinite-Quantity (IDIQ) contract to provide comprehensive IT support services, governed by Federal Acquisition Regulation Parts 12, 15, and 16. The requirement is categorized under NAICS code 541519 and is managed by the agency's office located in Baltimore, Maryland. Recent amendments to the solicitation have addressed offeror inquiries, updated associated attachments, and added travel CLINs. Additionally, the agency has incorporated a Small Business Subcontracting Plan model outline and extended the response deadline to October 15, 2026. Interested parties may coordinate with the primary point of contact, Evan Aston, regarding this procurement opportunity.

SSA Ofc Of Acquisition Grants

POSTED

about 14 hours ago

DEADLINE

Maintenance renewal of Open Software Technologies

Solicitation # 28321327Q00000015

SSA Ofc Of Acquisition Grants

POSTED

about 14 hours ago

DEADLINE

Solicitation Update In reference to the Request for Information (RFI) for Army Enterprise Identity, Credential, and Access Management (E-ICAM) Services Delivery Contract

Solicitation # W15P7T26RICAMSolicitation

POSTED

about 14 hours ago

DEADLINE

Endpoint Security Event Management

Solicitation # 842674854

The Defense Information Systems Agency is seeking industry capabilities and white papers to develop an Endpoint Security Event Management System (ESEMS) supporting the Army's Unified Network Zero Trust Architecture. This initiative focuses on Endpoint Detection and Response, Comply to Connect, and Unified Security Information and Event Management to secure endpoints connected to DOWIN-A. The anticipated requirement is for a single-award IDIQ contract with an estimated ceiling of 850 million dollars. The period of performance is expected to include a base period and multiple option years, with full operational capability required within 180 days of award. Primary performance will be centered at the Global Cyber Center in Fort Huachuca, Arizona, with additional mission locations across Maryland, Georgia, Virginia, and North Carolina. The contractor will be responsible for operating a global endpoint ecosystem, processing telemetry streams up to 50,000 events per second, and maintaining agent health on 85 to 95 percent of active endpoints. Key technical requirements include the use of virtualized Army Cloud environments, normalization of telemetry to ARCYBER-approved schemas, and strict adherence to DOW/Army RMF security controls to maintain an Authority to Operate. The contract mandates compliance with CMMC level requirements, Section 508 accessibility standards, and rigorous supply chain risk management. Administrative requirements include 24/7/365 service desk operations, the submission of quarterly technology innovation briefs, and the implementation of a phased deployment strategy for system validation.

It Contracting Division - PL84

POSTED

about 14 hours ago

DEADLINE

VuWall Software Maintenance RenewalThis subcontract focuses on the provision of software maintenance and support licenses for prime contractors working on information systems projects for the Alabama Department of Corrections. Specifically, the agreement covers maintenance renewal for VuWall proprietary software to guarantee that systems remain current with active updates and technical support. To be eligible, providers must possess the manufacturer's reseller authorization and ensure that all Alabama-based employees are enrolled in E-Verify. The primary deliverable of the contract is the establishment of an active software maintenance and support agreement.

Department Of Corrections, Information Systems

POSTED

DEADLINE

Sole Source - Libera - FY27

Solicitation # SRC0000036978

POSTED

DEADLINE

Cybersecurity Testing & Compliance AuditingThis subcontract for Cybersecurity Testing and Compliance Auditing involves providing independent security testing for prime contractors working on Broward County Risk Management projects. The selected provider will be responsible for conducting comprehensive security scans and penetration testing to ensure full compliance with PCI DSS and the security requirements established by County Enterprise Technology Services. Key deliverables include the submission of detailed security scan test results and the provision of a signed Annual Attestation of Compliance. This engagement is managed under Broward County in Florida and falls under NAICS code 541519.

POSTED

DEADLINE

Secure Data Transmission and Information Security ServicesThe Secure Data Transmission and Information Security Services subcontract for the City of Oshawa focuses on establishing a secure infrastructure for transferring confidential taxpayer data. The project requires the implementation of SFTP protocols, encrypted file transfer systems, and secure servers to ensure data integrity and the protection of sensitive municipal financial information. To maintain high security standards, the contract mandates the use of cybersecurity monitoring tools and the delivery of a fully audited data pipeline. This opportunity is categorized under NAICS code 541519 and was posted on October 6, 2026, with a response deadline of October 28, 2026. Prime contractors are expected to adhere to strict information security standards to facilitate the safe movement of data for City of Oshawa projects.

POSTED

DEADLINE

More opportunities from Millennium Challenge Corporation

Same awarding agency

Specialized Platform Support (ServiceNow & Box.com)This subcontract opportunity for the Millennium Challenge Corporation involves providing specialized development and maintenance services for the ServiceNow and Box.com platforms. The selected provider will be responsible for delivering customized platform modules, managing configurations, and maintaining integrations for these third-party services to support prime contractors on agency projects. The work is performed in Washington, DC, and requires personnel to hold a Moderate Risk Public Trust clearance. Interested parties should note that the response deadline is October 29, 2026, and the requirement falls under NAICS code 541511 for custom computer programming services.

Custom Computer Programming Services

POSTED

DEADLINE

Data Management & Open Data SpecialistThis subcontract opportunity for a Data Management and Open Data Specialist supports the Millennium Challenge Corporation in Washington, DC. The selected provider will perform critical data cleanup and management for prime contractors, specifically focusing on Open Data initiatives for mcc.gov/data. Key responsibilities include executing manual and automated data migrations and managing Open Data catalogs through the use of SQL and specialized migration tools. The project requires the delivery of cleaned datasets and the development of automated import and export scripts. Personnel assigned to this contract must hold a Moderate Risk Public Trust clearance. Interested parties should note the response deadline of October 29, 2026, for this effort categorized under NAICS code 541511.

Custom Computer Programming Services

POSTED

DEADLINE

Cloud Application Administration & Tier 3 SupportThe Cloud Application Administration and Tier 3 Support subcontract focuses on monitoring and managing cloud-based application performance for prime contractors supporting the Millennium Challenge Corporation. The scope of work includes coordinating the triage of performance faults, providing advanced Tier 3 support through ServiceNow and SharePoint, and developing specialized troubleshooting scripts. Key deliverables for this engagement consist of detailed performance monitoring reports and the successful resolution of Tier 3 support tickets. This opportunity is categorized under NAICS code 541512 and is based in Washington, DC. Personnel assigned to this contract must possess a Moderate Risk Public Trust clearance. Interested parties should note that the response deadline is October 29, 2026.

Computer Systems Design Services

POSTED

DEADLINE

UI/UX Design ServicesThis subcontract opportunity for UI/UX Design Services supports prime contractors on projects for the Millennium Challenge Corporation. The selected provider will be responsible for creating intuitive interfaces for digital services, which includes documenting user stories, developing wireframes, and producing design specifications and prototypes using industry tools like Figma or Adobe XD. Performance of these services will take place in Washington, DC. The contract falls under NAICS code 541430 and requires personnel to hold a Moderate Risk Public Trust clearance. Interested parties must submit their responses by October 29, 2026. Key deliverables for the engagement include comprehensive UI/UX design specifications, functional prototypes, and detailed user story hierarchies.

Graphic Design Services

POSTED

DEADLINE

Low-Code/No-Code Development (Power Platform)This subcontract opportunity focuses on the development and maintenance of low-code and no-code applications for prime contractors supporting the Millennium Challenge Corporation. The scope of work involves utilizing the Microsoft Power Platform to build Power Apps, Power Automate flows, and Power BI dashboards designed to meet specific business requirements and deliver automated workflows. The project is based in Washington, DC, and requires personnel to hold a Moderate Risk Public Trust clearance. Interested parties should note that the solicitation was posted on October 6, 2026, with a response deadline of October 29, 2026. The contract falls under NAICS code 541511 for custom computer programming services.

Custom Computer Programming Services

POSTED

DEADLINE

Full-Stack Application Development & Maintenance (.NET/C#)This subcontract focuses on full-stack application development and maintenance for the Millennium Challenge Corporation, specifically supporting prime contractors. The scope of work involves developing new features, performing data loading, testing patches, and managing version control. Technical requirements center on the C# and .NET framework within cloud-based environments, with deliverables including updated source code, system design documents, and comprehensive test plans. The project is based in Washington, DC, and falls under NAICS code 541511. Personnel assigned to this contract must undergo a NACLC background investigation to obtain a Moderate Risk Public Trust clearance. Interested parties should note the response deadline of October 29, 2026.

Custom Computer Programming Services

POSTED

DEADLINE

MCC Software Development Recompete

Solicitation # 95332427K0001

The Millennium Challenge Corporation (MCC) Office of the Chief Information Officer (OCIO) Digital Services Team is seeking a contractor for the MCC Software Development Recompete under solicitation 95332427K0001. The scope of work involves providing comprehensive application engineering, operations and maintenance (O&M), platform customization, configuration, and Tier 3 user support for all enterprise applications. The contractor will be responsible for monitoring cloud-based applications, managing performance faults, and executing new development tasks using Agile and test-driven methodologies. Additional requirements include providing program management, administrative support, and surge capacity to handle fluctuating workloads or special projects. Performance must align with industry best practices, NIST, OMB, and MCC policies, with a strong emphasis on integrating cybersecurity and Zero Trust principles throughout the software lifecycle. The primary place of performance is anticipated to be the contractor's site or via telework, though some work requiring direct network access will occur at MCC headquarters in Washington, D.C. Personnel must undergo a National Agency Checks with Law and Credit (NACLC) background investigation for a Moderate Risk Public Trust (MRPT) position and comply with HSPD-12 identity verification. Deliverables include formal operational, administrative, and training documentation, with product acceptance based on a rapid, repetitive development process in a joint team environment.

Computer Systems Design Services

POSTED

DEADLINE

Sierra Leone - Resettlement for Transmission Design (Design Package 1)

Solicitation # MCASL263015

The Millennium Challenge Account Sierra Leone is seeking consultancy services for Resettlement for Transmission Design (Design Package 1) as part of the Transmission Backbone Project. This initiative is funded by a grant from the United States through the Millennium Challenge Corporation to strengthen Sierra Leone's electricity sector. The assignment consists of an eighteen month base period for project preparation and a six month option period for the implementation of the Resettlement Action Plan. Eligible consulting firms must register online to access the Request for Offers and submit electronic proposals by November 4, 2026, at 14:00 PM GMT. Selection will be based on the Quality and Cost-Based Selection method, requiring a review of qualifications and past performance. A pre-offer conference is scheduled for September 17, 2026, via Microsoft Teams to provide further guidance to interested offerors.

Management, Scientific, and Technical Consulting Services

POSTED

DEADLINE

MOZAMBIQUE - Acquisition, Installation and Commissioning of Basic Technological Infrastructure

Solicitation # MOZ261013

The Millennium Challenge Account-Mozambique is seeking offers for the acquisition, installation, and commissioning of basic technological infrastructure as part of the Promotion of Reforms and Investment in Agriculture Project. Funded by the Millennium Challenge Corporation and appropriated by the U.S. Congress, this procurement is open to all eligible entities through a competitive bidding process. Payments for the resulting contract are typically handled directly by the US-Treasury. Interested offerors must register via the provided Microsoft Forms link and submit their electronic proposals by 15:00 Mozambique time on October 9, 2026. No pre-offer conference will be held, but clarifications may be requested from the procurement agent via email up to fifteen days before the submission deadline. This procurement is not administered under the Federal Acquisition Regulations and the final award will be made in Mozambique.

POSTED

about 1 month ago

DEADLINE

Qualified Fringe Benefits Parking ServicesThis contract involves providing reserved parking spaces for up to 105 employees of the Millennium Challenge Corporation (MCC) at the Franklin Court garage located in Washington, DC. The parking service is designed to comply with IRS Notice 5-B, ensuring that it qualifies as a tax-free fringe benefit for the employees. In addition to the physical parking spaces, the contract requires management of access control to the garage and the administration of monthly billing for the services provided. The contract falls under the NAICS code 561210, which pertains to facilities support services, and is a subcontract issued by the Millennium Challenge Corporation. The contracted services are essential for supporting MCC staff in the Washington area, specifically within the 20005 zip code, by providing convenient, secure, and administratively managed parking that meets federal tax benefit criteria.

Facilities Support Services

POSTED

DEADLINE

Amendment 001 - Responses to questions submitted by due date - Interior Architect Design Services ContractThis is a predicted full-recompete opportunity for interior architect design services with the Millennium Challenge Corporation, currently held by HOK, Inc. under contract 95332424C0062. The current contract is valued at 278,196.96 dollars and is expected to end on August 14, 2027. The upcoming procurement is anticipated to be conducted via full and open competition using a time and materials pricing structure. The selected architect will be responsible for the coordination, completeness, and accuracy of all design documents and drawings, ensuring full compliance with all applicable laws, regulations, and codes. The project is based in Washington, DC, and falls under NAICS code 541310. Points of contact for this opportunity include Merle Phillips and Maxwell Sarpong.

Architectural Services

POSTED

DEADLINE

Vehicle Recompete: Fss GS00F219GAThis Federal Supply Schedule contract, identified as vehicle GS00F219GA, is managed by the General Services Administration under the Gsa/fas/pshc/prof Srvcs Sched-pss contracting office. The contract features an IDV ceiling of 6,000,000 dollars and is classified as a full-recompete with no specific set-aside used. The ordering period for this vehicle is scheduled to conclude on June 14, 2027. The contract falls under NAICS code 541330 and is associated with the Millennium Challenge Corporation. While there are currently no active task orders, historical data shows a significant order for Continuity of Operations and Emergency Management Services valued at 1,055,848.32 dollars awarded to Man-Machine Systems Assessment, Incorporated.

Engineering Services

POSTED

DEADLINE

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS