IT Security & Access Governance

The contract titled IT Security & Access Governance requires the implementation and enforcement of role-based access controls aligned with least privilege principles, ensuring that users are granted only the minimum access necessary to perform their duties. All access management must be tightly integrated with City Active Directory to enable centralized authentication, authorization, and identity lifecycle management. The scope includes establishing formal access review processes to regularly validate user permissions, remove unnecessary entitlements, and maintain compliance with security policies. The solution must provide auditability, reporting, and automated workflows to support ongoing governance and reduce manual oversight. This subcontract is issued by the California Transportation Department under NAICS code 541990 and is open for responses until July 29, 2026. The work is expected to be performed remotely or at unspecified locations under the agency’s jurisdiction, with no set-aside provisions identified. Contractors must possess expertise in identity and access governance frameworks, Active Directory integration, and security compliance standards to deliver a scalable, sustainable solution that strengthens the department’s overall cybersecurity posture. All deliverables must ensure seamless interoperability with existing systems and support future regulatory and operational demands.