Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, November 11 at 2:00 PM ET

Register Free →

Search

Top

Back to Contracts

FedRAMP Security Assessment and Authorization (A&A) Services

Open

Federal

Response Deadline11/12/2026, 10:00:00 AM EST

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The FedRAMP Security Assessment and Authorization (A&A) Services subcontract is issued by the Department of Veterans Affairs through the Technology Acquisition Center Nj. The selected provider will perform independent security assessments for prime contractors to help them achieve Authority to Operate (ATO) status. This role requires specialized expertise in FedRAMP and FISMA standards, as well as mandatory 3PAO certification. The scope of work involves developing FedRAMP System Security Plans and executing 3PAO Security Assessment Plans. Key deliverables include the production of Security Assessment Reports and POAM reports. Interested parties must note the response deadline of November 12, 2026, for this opportunity categorized under NAICS code 541690.

General Info

VA subcontract for 3PAO certified providers to perform FedRAMP security assessments for ATO.

Agency

Department Of Veterans Affairs → Technology Acquisition Center Nj (36C10B)

NAICS

541690 - Other Scientific and Technical Consulting Services

Place of Performance

NJ

Set-Aside

NONE

Documents

This scope was carved out of 36C10B27Q0107.

The full solicitation package (3 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

R499--New Task Order - Qualtrics FedRAMP Survey Services (VA-26-00082605)

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedNov 5

subcontract

Response DeadlineNov 12

Submission deadline

Response Deadline

11/12/2026, 10:00:00 AM ESTin 6 days

Ready to pursue this opportunity?

Get full access to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyDepartment Of Veterans Affairs → Technology Acquisition Center Nj (36C10B)

ContactsNo contacts available

OfficeN/A

Organization / AgencyDepartment Of Veterans Affairs → Technology Acquisition Center Nj (36C10B)

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Performs independent security assessments for prime contractors on Department of Veterans Affairs (VA) projects to achieve Authority to Operate (ATO). Develops FedRAMP System Security Plans (SSP), executes 3PAO Security Assessment Plans (SAP), and produces Security Assessment Reports (SAR) and POAM reports. Requires 3PAO certification and FedRAMP/FISMA expertise. Delivers SSP, SAP, SAR, and POAM reports.

Similar Contracts

Same NAICS industry code

DBE Subconsultant Opportunity – AARC Consultants

Solicitation # dbe-subconsultant-opportunity-aarc-consultants

AARC Consultants, a certified SBE, WBE, and MBE, is seeking qualified Disadvantaged Business Enterprises and other eligible small businesses for subcontracting opportunities. The project involves providing Business Impact Analysis, Disaster Recovery, and Business Continuity Plan Services for the Inland Empire Utilities Agency under RFP number RFP-VC-26-006. The work will be performed in California and falls under NAICS code 541690. This solicitation is specifically set aside for Small Businesses, including SBA certified Women-Owned Small Businesses, SAM.gov designated Small Disadvantaged Businesses, and Department of Transportation certified Disadvantaged Business Enterprises. Interested parties must respond by November 17, 2026. Primary inquiries should be directed to Jason Richards.

AARC Consultants, LLC

POSTED

about 6 hours ago

DEADLINE

Privacy Impact Assessment (PIA) & Security AuditingThis subcontract involves performing Privacy Impact Assessments and security auditing for prime contractors working on City of Surrey parking projects. The scope of work includes reviewing physical, digital, and administrative safeguards to ensure full compliance with PCI DSS and British Columbia privacy legislation. The selected provider will be responsible for preparing independent attestations and audit reports, ultimately delivering a completed security certification and a Privacy Impact Assessment. This opportunity is associated with the Province of British Columbia and is categorized under NAICS code 541690.

POSTED

about 10 hours ago

DEADLINE

CMMC Level 2 Certification and NIST SP 800-171 Compliance ConsultingThis small business set-aside subcontract involves providing specialized cybersecurity auditing and certification services for prime contractors supporting DLA Weapons Support Maritime Hardware and Electrical projects. The primary objective is to ensure the protection of covered defense information by implementing safeguards in accordance with NIST SP 800-171 standards to achieve CMMC Level 2 certification. The selected provider must hold Third-Party Assessment Organization certification to conduct the necessary audits. Key deliverables for this engagement include the final CMMC Level 2 Certification and detailed Compliance Audit Reports. The opportunity is managed under the Department of Defense for the DDSP New Cumberland Facility.

DDSP NEW CUMBERLAND FACILITY

POSTED

about 17 hours ago

DEADLINE

FTD Safety and Cybersecurity EngineeringThe FTD Safety and Cybersecurity Engineering subcontract involves providing specialized system safety analysis and cybersecurity hardening for prime contractors supporting Army Contracting Command-Aberdeen Proving Ground projects for the Royal Saudi Land Forces. The primary objective is to ensure all training devices are protected through the implementation of rigorous cybersecurity protocols and strict adherence to MIL-STD-882E safety standards. Key deliverables include the production of comprehensive safety assessment reports and necessary cybersecurity certification documentation. Managed under the Department of Defense via the W6QK Acc-Apg-Orlando agency, this effort is categorized under NAICS code 541690. The work is to be performed in Saudi Arabia. Interested parties should note the posting date of November 5, 2026, with a response deadline set for November 18, 2026.

W6QK Acc-Apg-Orlando

POSTED

about 17 hours ago

DEADLINE

Vertical Transportation (Elevator) SpecialistThis subcontract opportunity is for a Vertical Transportation Specialist to provide technical specifications and design requirements for elevator machinery at Department of Veterans Affairs facilities in Central Western Massachusetts. The selected specialist will be responsible for defining system specifications, coordinating with Qualified Elevator Inspectors, and assisting in both pre-final and final acceptance inspections. Expertise in VA elevator standards is required to ensure all installations meet agency mandates. The scope of work includes the delivery of detailed technical specifications and comprehensive commissioning reports. Interested parties must respond by December 7, 2026, for this project managed under NAICS code 541690. The contract is administered by the Department of Veterans Affairs Network Contract Office 01.

241-NETWORK Contract Office 01 (36C241)

POSTED

about 17 hours ago

DEADLINE

in about 1 month

FAA Certified AH-1F Pilot ServicesThis subcontract opportunity with the Department of Defense for the Naval Air Warfare Center Air Division seeks an FAA Certified Commercial Pilot to provide safety pilot services for AH-1F aircraft. The selected contractor will support prime contractors during student and instructor exercises, ensuring the safe execution of flight hours and the maintenance of PIC logs. Primary responsibilities include conducting pre-flight safety briefings and operating aircraft in strict accordance with CNAF-M 3710.T and USNTPS visiting aircraft SOPs. Qualified candidates must possess a current AH-1F rating and maintain up-to-date FAA medical qualifications. The project falls under NAICS code 541690 and is centered in the 20670 zip code area. Interested parties should note the brief response window, with a deadline for submissions set for November 9, 2026.

Naval Air Warfare Center Air Division

POSTED

about 17 hours ago

DEADLINE

2 Senior Advisors Services for the NINDS Blueprint Neurotherapeutic Network for Small Molecules External Oversight Committee (EOC) Subject Matter Expert (SME) Services

Solicitation # 7571PS27Q00021

Solicitation 7571PS27Q00021 is a small business set-aside for a fixed-price purchase order to procure two Senior Advisors to serve as Subject Matter Experts for the NIH Blueprint Neurotherapeutics Network (BPN) External Oversight Committee. These executive-level advisors, specializing in Chemistry and Pharmacology, will provide strategic guidance and technical feedback on small molecule drug discovery and development projects. The scope of work includes attending monthly virtual meetings, participating in ad hoc milestone calls, and attending one annual on-site visit to the NIH campus in Bethesda, Maryland. The anticipated period of performance consists of a one-year base period starting November 2026, with two subsequent one-year option periods. The government expects a workload of 50 labor hours per year per advisor, with annual travel expenses capped at 2,000 dollars per consultant. Awards will be based on best value, with technical personnel qualifications weighted most heavily at 100 points, focusing on professional experience in small molecule drug discovery, advanced degrees, and collaborative team leadership. Price and past performance will also be evaluated for reasonableness and relevance. Quotations must include a key personnel narrative, resumes, letters of commitment, and a completed pricing template in Excel. All offerors must maintain active registration in the System for Award Management.

Omas Strategic Buying Center - Professional Services

POSTED

about 17 hours ago

DEADLINE

Stockton Metropolitan Airport (SCK) Access Control System (ACS) Assessment, Upgrade, Consulting, And Maintenance

Solicitation # 26319

The County of San Joaquin has issued solicitation 26319 for the Stockton Metropolitan Airport (SCK) to secure professional services for the assessment, upgrade, consulting, and maintenance of its Access Control System (ACS) and Video Management System (VMS). The scope of work includes conducting a full diagnosis of hardware and software components, implementing a prioritized repair plan, providing subject matter expertise for terminal and fence replacement projects, and performing ongoing preventative maintenance and emergency repairs. The contractor must ensure all systems remain compliant with TSA regulations and maintain current software support for Lenel, Lenel OnGuard, Milestone, and Crossmatch. The contract is structured for an initial two-year term with three optional one-year extensions, not to exceed five years in total. Qualified bidders must possess California C-7, C-10, and C-28 licenses and meet local preference requirements, including having a business license and a physical office or employees within San Joaquin County. Proposals are due by December 18, 2026, and will be evaluated based on service description, cost, deliverables, experience, and references. Award is contingent upon successful negotiations, and the agreement includes standard Net 30 payment terms and a 30-day notice provision for cancellation without cause.

County Of San Joaquin

POSTED

about 18 hours ago

DEADLINE

in about 1 month

Remote Pilot in Command (RPIC) ServicesThis subcontract for Remote Pilot in Command (RPIC) Services supports the Harbor Department of the Port of Los Angeles. The selected provider will perform remote piloting of unmanned aircraft for prime contractors, specifically staffing the unmanned aircraft console at the Threat Detection Center. Responsibilities include operating sUAS under public-agency COA and BVLOS authorizations, as well as maintaining all necessary aircraft logbooks and maintenance records to deliver operational flight hours. Qualified candidates must hold an FAA Remote Pilot Certificate under Part 107 and possess at least 100 hours of logged PIC time, with specific experience operating in controlled airspace. This opportunity is categorized under NAICS code 541690 and is based in Los Angeles. Interested parties must submit their responses by the deadline of December 9, 2026.

Harbor Department, Port of Los Angeles

POSTED

about 21 hours ago

DEADLINE

in about 1 month

On-Call Professional Economic Consulting Services

Solicitation # 232922

Port of Long Beach

POSTED

about 21 hours ago

DEADLINE

in about 1 month

Drone Operator (Remote PIlot)

Solicitation # 232903

The City of Los Angeles Harbor Department is seeking qualified contractors to provide remote pilots in command to staff the unmanned aircraft console at its Threat Detection Center in Los Angeles, California. Eligible operators must hold a current FAA Remote Pilot Certificate with a small UAS rating under 14 CFR Part 107, have completed recurrent training within the last 24 months, and possess at least 100 hours of logged flight experience. Additionally, operators must be capable of operating under a public-agency COA and BVLOS authorization. The scope of work prohibits operators from performing law enforcement functions or initiating flights without supervisor approval, and they must adhere to strict confidentiality and security protocols regarding criminal justice and Port infrastructure information. Proposals will be evaluated based on firm qualifications and experience, personnel and staffing, and the quality of the proposed work plan and management. To be considered responsive, bidders must submit a cover transmittal letter, a detailed narrative of qualifications with three client references, a technical approach, and an insurance verification letter. Required documentation includes City Ethics Commission Forms 50 and 55, and a Business Tax Registration Certificate. The contract is subject to the Los Angeles City Charter regarding fund appropriation and requires the contractor to maintain an Equal Employment and Affirmative Action Program. Final selection is subject to approval by the Deputy Chief of Public Safety and Emergency Management, the Executive Director of the Harbor Department, and the Board of Harbor Commissioners.

Harbor Department, Port of Los Angeles

POSTED

about 21 hours ago

DEADLINE

in about 1 month

Life Cycle Management and Quality Assurance SupportThis subcontract focuses on providing quality assurance and life cycle management support for prime contractors working on Department of National Defence projects. The selected provider will assist the Quality Assurance Manager in overseeing the manufacturing, repair, and overhaul of military components and systems to ensure strict adherence to the DQA Quality Management System. Due to the nature of the work, all personnel are required to hold Secret security clearance to deliver the necessary quality assurance and life cycle management outputs. The contract is issued by the Government of Canada for performance across several locations, including Ottawa, Gatineau, Montréal, and Montréal-Est within the National Capital Region. Interested parties must respond by November 26, 2026. The project falls under NAICS code 541690, emphasizing professional management and quality oversight for critical defense infrastructure.

Department of National Defence

POSTED

DEADLINE

More opportunities from Department Of Veterans Affairs → Technology Acquisition Center Nj (36C10B)

Same awarding agency

Large Language Model (LLM) Token ProvisioningThis subcontract, managed by the Department of Veterans Affairs Technology Acquisition Center Nj, provides essential computational capacity for AI capabilities to prime contractors. The agreement ensures the delivery of up to one billion OpenAI or equivalent large language model tokens per contract year to support ongoing AI operations. To ensure security and compliance, all services must be delivered within a FedRAMP-authorized boundary. Implementation is contingent upon the provider obtaining FedRAMP Authorization and submitting a signed Statement of Attestation. The opportunity is categorized under NAICS code 518210.

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

POSTED

about 17 hours ago

DEADLINE

Survey Support and Respondent Management ServicesThis subcontract for Survey Support and Respondent Management Services involves providing operational management for survey panels and respondent incentives on Department of Veterans Affairs projects. The selected provider will be responsible for provisioning survey samples, managing the remuneration and redemption tracking for respondents, and extracting survey data in CSV format. Key deliverables include the CSV data files, detailed remuneration reports, and comprehensive monthly survey reports. Due to the nature of the work, the contractor must adhere to strict confidentiality standards regarding medical records as mandated by Title 38 U.S.C. section 5705 and section 7332, alongside rigorous protection of personally identifiable information and protected health information. This opportunity is managed through the Technology Acquisition Center Nj under NAICS code 541910, with a response deadline of November 12, 2026.

Marketing Research and Public Opinion Polling

POSTED

about 17 hours ago

DEADLINE

Virtual Agent and API Integration ServicesThis subcontract for Virtual Agent and API Integration Services involves the technical implementation and integration of Virtual Agents for prime contractors supporting the Department of Veterans Affairs. The scope of work focuses on connecting the Sestek Virtual Agent with the Qualtrics EX platform, VA Orlando designed systems, and various third-party APIs. To ensure security and compatibility, all integrations must utilize VA-approved cryptographic modules and strictly adhere to FedRAMP, FISMA, and VA Technical Reference Model standards. The primary objective is the delivery of a fully integrated operational digital solution accompanied by a detailed VA Implementation Diagram. Managed under the Technology Acquisition Center Nj, this project falls under NAICS code 541512. Interested parties should note the response deadline of November 12, 2026.

Computer Systems Design Services

POSTED

about 17 hours ago

DEADLINE

FedRAMP Authorized Survey and Virtual Agent Software LicensesThis subcontract through the Department of Veterans Affairs Technology Acquisition Center Nj involves the supply and hosting of Qualtrics platform services and Sestek KnowVU Virtual Agent capabilities. The agreement provides software licenses for up to 5,400 users within the Orlando VA HCS, ensuring the delivery of active subscriptions and a secure hosting environment. To maintain security and operational standards, the services must be deployed within a FedRAMP-authorized boundary and adhere to the VA Technical Reference Model. Compliance requirements include FISMA standards and the use of VA-approved cryptographic modules to ensure the integrity and security of the software licenses and hosting infrastructure.

Software Publishers

POSTED

about 17 hours ago

DEADLINE

R499--New Task Order - Qualtrics FedRAMP Survey Services (VA-26-00082605)

Solicitation # 36C10B27Q0107

The Department of Veterans Affairs Technology Acquisition Center is seeking information for a new task order to provide an integrated digital solution featuring Qualtrics FedRAMP survey services and Sestek KnowVU Virtual Agent capabilities. This solution will support up to 5,400 Orlando VA HCS users and employees, encompassing implementation and integration with VA Orlando systems and third-party APIs, survey-related support, and a large language model capacity of up to one billion tokens per contract year. The project is structured with one 12-month base period and four optional 12-month extension periods, with performance conducted remotely within an approved FedRAMP-authorized boundary. Compliance requirements are stringent, requiring adherence to FedRAMP, FISMA, and the VA Technical Reference Model. The contractor must ensure all data is transmitted via VA-approved cryptographic modules and maintain strict confidentiality of medical records under Title 38 U.S.C. § 5705 and § 7332. Key deliverables include a System Security Plan, implementation diagrams, and monthly license reports. Additionally, the contractor must provide a signed Statement of Attestation prior to any AI implementation and utilize tamper-evident packaging for any IT hardware deliveries. This effort is currently in the Request for Information stage for planning purposes, with a focus on identifying capable vendors, particularly certified SDVOSBs.

Other Computer Related Services

POSTED

about 17 hours ago

DEADLINE

Enterprise Software Licensing & MaintenanceThis subcontract opportunity, managed by the Department of Veterans Affairs Technology Acquisition Center Nj, focuses on the supply and management of enterprise software licenses and maintenance for prime contractors supporting VA Financial Services Center projects. The scope of work specifically involves providing yearly enterprise license subscriptions and operation and maintenance subscriptions for the F5 BIG-IP Software Suite, which is critical for supporting AI applications and high-volume data exchange. To be eligible, providers must possess OEM authorization to deliver active software licenses and comprehensive maintenance support contracts. Interested parties should note the response deadline of November 17, 2026, and the classification under NAICS code 541519.

Other Computer Related Services

POSTED

DEADLINE

Network Migration & Configuration ServicesThe Network Migration and Configuration Services subcontract, issued by the Department of Veterans Affairs Technology Acquisition Center Nj, involves the technical migration of load balancer configurations for prime contractors supporting VA Financial Services Center projects. The scope of work focuses on transitioning configurations from BIG-IP i5820-DF platforms running TMOS v17.5.1.x to r5920-DF platforms, with specific requirements for configuring LTM, APM, and FIPS. Additionally, the project mandates the implementation of an IPv6 transition in strict accordance with NIST SP 500-267B and OMB M-21-07 to deliver a fully operational load balancer solution. Successful execution requires deep technical expertise in VA Directive 6500, NIST SP 800-66, and HIPAA compliance standards. This opportunity falls under NAICS code 541512 and was posted on November 4, 2026, with a response deadline of November 17, 2026.

Computer Systems Design Services

POSTED

DEADLINE

F5 Hardware Supplier (OEM Authorized)This subcontract, managed by the Department of Veterans Affairs Technology Acquisition Center Nj, involves the procurement of BIG-IP r5920-DF hardware appliances to support prime contractors on VA Financial Services Center projects. The scope of work includes the provisioning and delivery of standalone and tenant pairs to designated data centers located in Austin, Texas, and Philadelphia, Pennsylvania. All hardware must be delivered FOB Destination following a thorough inspection process. To ensure quality and prevent the acquisition of gray market goods, the supplier must provide an OEM authorization letter. Additionally, all provided equipment must strictly adhere to EPEAT, Energy Star, and FEMP energy efficiency standards. The solicitation was posted on November 4, 2026, with a response deadline of November 17, 2026, under NAICS code 423430.

Computer and Computer Peripheral Equipment and Software Merchant Wholesalers

POSTED

DEADLINE

Oracle Retail Application Development and Ops SupportThis subcontract opportunity involves providing software development and production operations support for prime contractors working on Department of Veterans Affairs Veterans Canteen Service projects. The scope of work focuses on the SIM environment, requiring comprehensive application maintenance, the development of software enhancements, continuous production monitoring, and technical troubleshooting. A critical requirement for this engagement is corporate expertise in Oracle Retail production operations to ensure the delivery of a stable production environment and timely software updates. The project is managed under the Technology Acquisition Center Nj for the Department of Veterans Affairs and falls under NAICS code 541511.

Custom Computer Programming Services

POSTED

DEADLINE

in about 13 hours

Oracle Integration Cloud (OIC) Implementation and IntegrationThis subcontract focuses on the implementation and integration of Oracle Integration Cloud (OIC) to support Department of Veterans Affairs Veterans Canteen Service projects. The selected provider will work with prime contractors to develop and configure integrations within the OIC environment, ensuring seamless data flow between SIM and various other enterprise systems across multiple business domains. The project requires specialized expertise in Oracle Integration Cloud to deliver fully functional system integrations and configured workflows. Managed under the Technology Acquisition Center Nj for the Department of Veterans Affairs, the work falls under NAICS code 541512.

Computer Systems Design Services

POSTED

DEADLINE

in about 13 hours

Oracle Retail and Store Inventory Management (SIM) SaaS LicensingThis subcontract opportunity, managed by the Department of Veterans Affairs Technology Acquisition Center Nj, involves the provision of Oracle Retail and Store Inventory Management SaaS subscriptions. The selected provider will supply software-as-a-service licenses and manage subscription renewals for both base and option periods to support prime contractors working on Veterans Canteen Service projects. To be eligible, candidates must be an Authorized Oracle Distributor or Re-seller and provide an OEM authorization letter. The primary objective is the delivery of active SaaS subscription access and licenses under NAICS code 423430. Responses are due by November 6, 2026.

Computer and Computer Peripheral Equipment and Software Merchant Wholesalers

POSTED

DEADLINE

in about 13 hours

DA10--ORACLE Upgrade SaaS Subscriptions in Support of Veterans Canteen Service (VCS) (VA-27-00010417)

Solicitation # 36C10B27Q0104

The Department of Veterans Affairs Technology Acquisition Center is issuing this Request for Information for Oracle Retail and Store Inventory Management SaaS subscriptions to support the Veterans Canteen Service. This effort focuses on software development and production operations support, including the use of Oracle Integration Cloud to manage business domains such as Point of Sale, Inventory Management, and Price Change Management, as well as supplier and procurement integrations. Oracle Retail Insights Cloud Service is currently designated as an optional task. This RFI is for planning purposes only, and no funds have been authorized or appropriated for the effort at this time. The requirement is a total set-aside for certified Service-Disabled Veteran-Owned Small Businesses under NAICS 541512, with a size standard of 34 million dollars. Interested vendors must provide a capability summary, corporate experience, and a Rough Order of Magnitude for the base and option periods. Responses are limited to 10 pages and must include proof of SBA VetCert verification for VOSBs and SDVOSBs, as well as an OEM authorization letter for Oracle distributors or re-sellers. Submissions are due by November 6, 2026, at 1:00 PM EST via email to the designated contracting officials.

Computer Systems Design Services

POSTED

DEADLINE

in about 13 hours

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS