This Justification (J&A) opportunity from Department Of The Treasury was posted on September 10, 2026. The submission period has ended. Browse the details below for market research, or find similar active opportunities.

Top

Firewall Security Management Tool Tufin Support

Awarded

RFQ205AE926Q00116Federal

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

Active Opportunities Like This One

NAICS: 541519

New

SLED

Incident Response and Data Protection ServicesThe Incident Response and Data Protection Services subcontract supports prime contractors on Department of Information Resources projects within the state of Texas. The scope of work focuses on mitigating cyber threats through emergency response, ensuring continuous data availability via backup and replication, and maintaining security through media protection sanitization. Key deliverables include the provision of detailed incident reports and backup verification logs to ensure operational resilience. This opportunity is categorized under NAICS code 541519 and was posted on November 10, 2026. Interested parties must submit their responses by the deadline of February 10, 2027. Further details regarding this procurement can be accessed through the Texas SmartBuy portal.

Department of Information Resources

POSTED

DEADLINE

Software Maintenance and Technical Support for Jurisdiction OnlineThis subcontract focuses on providing software maintenance and technical support for the Jurisdiction Online system, specifically supporting prime contractors on State of Alabama Elevator Inspections projects. The scope of work includes delivering comprehensive computer support services, troubleshooting technical issues, and ensuring continuous system availability in strict accordance with state electronic interface standards. Success is measured by the consistent availability of the system and the timely resolution of support tickets. To be eligible for this opportunity, contractors must be enrolled in E-Verify and registered with the Alabama Secretary of State. The project falls under NAICS code 541519. Interested parties should note the response deadline of November 16, 2026, for this Alabama-based agency requirement.

POSTED

DEADLINE

4010/4015-Jurisdiction Online

Solicitation # SRC0000037643

The State of Alabama, specifically the Elevator Inspections agency, is soliciting computer support for the Inspections Division under the project titled 4010/4015-Jurisdiction Online. This solicitation, numbered SRC0000037643, requires responses to be submitted electronically through the Alabama Buys portal. The resulting contract is limited to a total cost of 25,000 dollars, including any subsequent renewals, and may be renewed annually for a maximum term of five years. All disputes that cannot be resolved through negotiation will be handled in Montgomery, Alabama. The State reserves the right to evaluate bids based on cost realism, price reasonableness, and supplier qualifications, including the request for professional licenses and certificates of insurance. Awardees must comply with strict regulatory requirements, including enrollment in the E-Verify program, registration with the Alabama Secretary of State for out-of-state entities, and certification of tax compliance and non-collusion. Payments are handled via electronic methods such as P-cards or EFT, and the State maintains the right to inspect all products before final acceptance in accordance with the Universal Commerce Code.

POSTED

DEADLINE

Cybersecurity and Compliance ArchitectThis subcontract for a Cybersecurity and Compliance Architect supports the South Dakota Department of Human Services by implementing critical security layers and access controls for prime contractors. The scope of work focuses on the configuration of Multi-Factor Authentication, Single Sign-On, and Role-Based Access Controls to secure system entry. Additionally, the project requires the delivery of a comprehensive security architecture and the implementation of encryption for data both at rest and in transit. To ensure regulatory compliance, the project must adhere to NIST and HIPAA/HITECH standards. Key deliverables include the development of immutable audit logging and the establishment of secure records retention triggers. Interested parties should note the response deadline of January 8, 2027, for this South Dakota State Government initiative categorized under NAICS code 541519.

South Dakota State Government

POSTED

DEADLINE

Cybersecurity Services and Disaster Recovery PlanningThis subcontract for the Sanford Housing Authority in North Carolina focuses on the delivery of cybersecurity and disaster recovery services for prime contractors managing IT projects. The scope of work includes protecting systems from intrusions, managing access codes, and maintaining physical network security. The selected provider will be responsible for developing formal security procedures and a comprehensive Disaster Recovery Plan that adheres to HUD reporting and data security standards. Key deliverables include the submission of written security documentation and a finalized Disaster Recovery Plan. Interested parties should note that the response deadline is December 2, 2026, and the project falls under NAICS code 541519, with performance taking place in Sanford.

Sanford Housing Authority

POSTED

DEADLINE

UMGC RFP #92340 - Managed Security Operations Center (SOC) Services

Solicitation # 92340

The University of Maryland Global Campus (UMGC) is soliciting proposals for a qualified provider to deliver managed Security Operations Center (SOC) services. The selected contractor will provide 24x7x365 security monitoring, threat detection, analysis, incident response, threat intelligence, and related advisory services across the University's SIEM tool, specifically utilizing Exabeam. The scope of work includes the continuous analysis of security events across academic, administrative, cloud, and enterprise systems, while ensuring compliance with frameworks such as NIST CSF, NIST SP 800-171, FERPA, GLBA, PCI DSS, and CMMC. The contract is structured for an initial three-year term with two optional one-year renewals. Proposals must be submitted electronically via the UMGC Bid Locker by November 19, 2026, divided into separate technical and price volumes. Technical evaluations will prioritize service delivery, relevant experience, staffing, and implementation over cost. Mandatory requirements for offerors include maintaining an ISO/IEC 27001 certification or SOC 2 Type II attestation, adhering to Maryland Living Wage requirements, and meeting a 3% Minority Business Enterprise (MBE) participation goal. Additionally, the contractor must maintain specific insurance coverages, including $5 million per occurrence for Cyber Security/Data Breach insurance and $3 million in annual aggregate for Commercial General Liability. Payments will be processed via Electronic Funds Transfer for contracts exceeding $500,000.

POSTED

DEADLINE

CrowdStrike Falcon Elite License SupplyThis subcontract agreement involves the supply of CrowdStrike Falcon Elite Endpoint Detection and Response software license keys and activation codes for prime contractors working on security projects for Triple A S.A. E.S.P. in Colombia. The primary objective is to provide official license codes and digital deliverables to maintain continuous security coverage across the designated projects. To be eligible, providers must hold authorized CrowdStrike reseller or partner status. Required deliverables include the provision of the license codes and a signed Certification of Activation. The solicitation was posted on November 10, 2026, with a response deadline of November 23, 2026.

POSTED

DEADLINE

Послуги із заміни в ЄДЕБО користувача уповноваженого суб’єкта з доступом із використанням динамічних бібліотек

Solicitation # UA-2026-11-10-014187-a

The State University Zhytomyr Polytechnic, located in Zhytomyr, Ukraine, is soliciting bids for specialized services to replace an authorized user within the Unified State Electronic System of Registration of Rights to Real Estate (EDRBO). The scope of work specifically involves managing user access through the use of dynamic libraries to ensure the continuity and security of the institution's digital authorizations. This procurement process, identified by solicitation number UA-2026-11-10-014187-a, strictly prohibits the use of goods or services originating from the Russian Federation, the Republic of Belarus, or the Islamic Republic of Iran. Interested parties may coordinate with the primary point of contact, Olena Vasylivna Vlasyuk, via the provided university legal department contact details.

Державний університет "Житомирська політехніка "

POSTED

DEADLINE

Application Support and Maintenance ProviderThe Application Support and Maintenance Provider subcontract involves providing ongoing technical support and maintenance for prime contractors managing software contracts for the Caerphilly County Borough Council. The scope of work focuses on ensuring system availability and security through the management of software upgrades, patching, and continuous performance monitoring. The provider will utilize help desk and ticketing systems to resolve technical issues and maintain operational standards. This opportunity was posted on November 10, 2026, with a response deadline of December 11, 2026, falling under NAICS code 541519.

Caerphilly County Borough Council

POSTED

DEADLINE

Cybersecurity & Cross-Domain SecurityThis subcontract, managed by the Department of Defense under the FA8819 Sda And Combat Power Szk-La agency, focuses on implementing cybersecurity frameworks and cross-domain solutions for Space Systems Command LEO communications mesh projects. The scope of work involves developing encryption standards, Zero Trust architectures for space environments, and secure gateways for cross-domain data transfer. Technical execution requires the use of Hardware Security Modules, encryption software, and cross-domain guards to deliver robust security architectures and protocols. Performance will take place in El Segundo, California, under NAICS code 541519. Due to the sensitive nature of the space systems involved, personnel must possess Secret, TS, or SCI clearances and ensure strict adherence to NIST SP 800-171 and CMMC compliance standards. The solicitation was posted on November 10, 2026, with a response deadline of November 24, 2026.

FA8819 Sda And Combat Power Szk-La

POSTED

DEADLINE

Asset Tracking and Transponder Integration ServicesThis subcontract for Asset Tracking and Transponder Integration Services supports prime contractors on Army Contracting Command Rock Island projects. The scope of work involves the supply, installation, and management of transponder tracking systems to maintain total visibility of assets. To ensure seamless operations, the contractor must utilize integration software compatible with Department of Defense platforms, specifically mentioning systems such as Loadout or Pangea, to deliver real-time tracking data and comprehensive visibility reports. The project is managed under the Department of Defense and will be performed at Camp Arifjan in Kuwait. Classified under NAICS code 541519, the opportunity was posted on November 10, 2026, with a response deadline of November 17, 2026.

POSTED

DEADLINE

Cybersecurity and Information AssuranceThis Cybersecurity and Information Assurance subcontract supports Washington Headquarters Services and the Department of Defense by providing critical cybersecurity oversight for prime contractors on WHS/DSCA projects. The scope of work focuses on implementing and auditing Risk Management Framework controls, designing Zero Trust architecture, and conducting risk assessments within decentralized environments to ensure the protection of partner nation data. Key deliverables include the production of security audit reports and the delivery of Authority to Operate packages. Qualified personnel must hold a CISSP certification to perform these duties. The opportunity is categorized under NAICS code 541519 and is based in the 22202 zip code area. Interested parties should note the response deadline of December 3, 2026.

Washington Headquarters Services

POSTED

about 17 hours ago

DEADLINE

in 22 days

AI Contract Overview

The Department of the Treasury, specifically the IT Strategy and Modernization office, is procuring the Tufin Enterprise Suite under solicitation RFQ205AE926Q00116 to support the Common Communications Gateway and CSRIC/Cybersecurity teams. This brand-name acquisition, valued at approximately 1,944,315.79, will replace the FireMon Security Manager to streamline firewall policy management, auditing, and change workflows. The procurement is structured as a Firm Fixed Price award via NASA SEWP on a Lowest Price Technically Acceptable basis, featuring a base period and three option years beginning September 30, 2026. The Tufin platform integrates with firewalls, routers, cloud accounts, and SASE services via API and CLI to provide unified mapping of traffic flows and connectivity across hybrid environments. Key capabilities include security policy management, change tracking, policy optimization, and network segmentation. Furthermore, the system integrates with ServiceNow to automate ITSM change management processes, including risk assessment and change request verification, to reduce manual intervention and enhance operational visibility. Performance will be centered in Kearneysville, West Virginia.

General Info

Treasury is procuring Tufin Enterprise Suite for firewall management via NASA SEWP.

Agency

Department Of The Treasury → It Strategy And Modernization

NAICS

541519 - Other Computer Related Services

Place of Performance

Kearneysville, WV, 25430, USA

Set-Aside

NONE

Documents

justification-and-authorization

Low

AI Contract Breakdown

Uniform Contract Format

Contract not broken down yet

CLEATUS splits the solicitation into Uniform Contract Format (UCF) sections: scope, pricing, deliverables, and evaluation criteria.

Timeline

PhaseAwarded

PostedSep 10

Justification (J&A)

AwardedNov 11

Contract was awarded

Find active opportunities like this

Get full access to discover similar active contracts, track opportunities, and build proposals with AI assistance.

Organization & Contact Information

AgencyDepartment Of The Treasury → It Strategy And Modernization

Contacts1 person available

OfficeWashington, DC, 20224, USA

Organization / AgencyDepartment Of The Treasury → It Strategy And Modernization

Office AddressWashington, DC, 20224, USA

Contacts

Fatima Paen

contact@example.gov

+1 (555) 000-0000

Full Description

The primary purpose of this request is to procure the Tufin Enterprise Suite. Tufin will support the Common Communications Gateway (CCG) and CSRIC/Cybersecurity teams in reviewing,analyzing, auditing, and implementing firewall policy changes. It will replace the FireMon Security Manager, streamlining policy management and change workflows.

The platform integrates with enforcement points—including firewalls, routers, cloud accounts, and SASE services—via API and CLI access to retrieve live configurations and routing data. This capability enables Tufin to generate an interactive, unified map that consolidates traffic flows, endpoints, and connectivity paths across hybrid environments.

Tufin provides comprehensive Security Policy Management capabilities, including change tracking, policy optimization and cleanup, device configuration compliance and audit, and network segmentation management. It enhances network visibility through detailed mapping, visualization, and path analysis to support efficient troubleshooting and operational insight. Additionally, Tufin integrates with ServiceNow to support ITSM change management processes. This integration enables automation of key functions such as proactive risk assessment, change request verification, change design and path identification, and target selection, streamlining workflow efficiency and reducing manual intervention.