DoD Security Compliance and STIG Implementation

The contract requires configuration and validation of Camunda software to fully comply with Department of Defense Security Technical Implementation Guides and Security Requirements Guides, specifically addressing all identified CAT1 through CAT3 vulnerabilities through remediation efforts. This involves meticulous alignment of the software environment with DoD security standards, ensuring that all technical controls are properly implemented, tested, and documented. Coordination with Information Systems Security Managers is mandatory to validate compliance, facilitate audits, and maintain continuous adherence to federal cybersecurity requirements throughout the lifecycle of the implementation. This subcontract is set aside exclusively for Service-Disabled Veteran-Owned Small Businesses and falls under NAICS code 541690 for other scientific and technical consulting services. The work is performance-based and must be conducted in Indianapolis, with responses due by May 6, 2026, at 5:00 PM. The contract is managed under the Defense Finance and Accounting Service, part of the Department of Defense, with no additional point of contact information provided. The focus is on achieving and sustaining a hardened, compliant Camunda deployment that meets the rigorous standards of DoD cybersecurity posture requirements.