HCL BigFix Software Maintenance Support

The contract awards sole-source software maintenance and support services for HCL BigFix, a proprietary endpoint management platform used by the Internal Revenue Service (IRS) under the Department of the Treasury. The scope encompasses ongoing support for existing perpetual licenses covering BigFix Inventory, Compliance, and Lifecycle modules across up to 35,885 endpoints, including servers, desktops, and laptops nationwide. Maintenance includes patch deployment using the Known Exploited Vulnerabilities Catalog, automated enforcement of security policies aligned with CIS Benchmarks and DISA STIGs, software license tracking, integration with Splunk and ServiceNow for reporting, and 24/7 support via a vendor ticketing system with defined SLAs. The contract is firmly fixed price and structured with a one-year base period beginning July 14, 2026, and four one-year option periods extending through July 30, 2031, with a total estimated value of $14,502,121.80. All services must be delivered remotely and are critical to IRS operational readiness, particularly during filing season and for the Computer Security Incident Response Center. Compliance with DHS mandates, including BOD 22-01 and the Continuous Diagnostics and Mitigation program, is mandatory, and the system requires continuous network connectivity, specific operating system support, and secure communication over designated ports. The procurement was justified under FAR 16.505(b)(2)(i)(B) and (E) due to the unique and proprietary nature of HCL BigFix, which cannot be replaced without compromising cybersecurity posture, system integration, and compliance reporting. No competitive process was conducted, and no solicitations for alternative vendors were permitted. The Contracting Officer, Fatima Paen, and the Contracting Officer’s Technical Representative, Nicholas Coleman, oversee performance, with acceptance responsibilities retained exclusively by the government. The only identified attachment, referenced in Section 6.b, lacks description, and no packaging, delivery, invoicing, or payment details are provided beyond the agency code 2032H5 and performance location in Lanham, Maryland.