Radio Frequency Identification (RFID) DHA Balbo Navy Medical Facility

The U.S. Department of Defense, through the USA Engineering Support Center in Redstone Arsenal, Alabama, is seeking industry input for the procurement, installation, maintenance, and service of an integrated Radio Frequency Identification (RFID) Tracking System at the DHA Balboa Navy Medical Facility in San Diego, California. This market research notice, issued under solicitation number PANHES-26-P-029793, targets vendors capable of delivering a comprehensive system including RFID hardware, cabling, surge protection, encrypted backup power with 4-hour UPS support, proper equipment enclosures, and full software integration with existing DoD systems such as DMLSS and LogiCole. The scope demands strict compliance with DoD cybersecurity directives including DISA STIGs, NIST SP 800 series standards, and the Risk Management Framework (RMF), with all systems requiring validation through a System Vulnerability Assessment and Protection Plan (SVAPP), ACAS scans with only informational findings, and completion of rigorous Site Acceptance Testing at the facility’s designated locations. Personnel must meet DoD 8140.01 Work Role ID 521 certifications, possess a minimum of two years of recent experience with similar systems, and maintain a Level 2 Site Safety and Health Officer onsite during all work activities. Contractors are required to adhere to stringent site operational protocols including 72-hour advance notification for work activities, mandatory use of HEPA-filtered carts within medical areas, coordination with infection control teams per the Infection Control Risk Assessment 2.0, strict adherence to EM 385-1-1 safety standards, and daily cleanup and security of materials. All digital deliverables including network diagrams, STIG checklists, encrypted credential lists, and as-built drawings must be submitted in approved formats (JPEG, PDF, AutoCAD) and properly labeled with Controlled Unclassified Information (CUI) markings per Attachment 2. Payment milestones are structured around the delivery and acceptance of key artifacts such as the SVAPP, cybersecurity documentation, installation completion, and final SAT report, with the majority of funding contingent upon successful technical performance rather than fixed pricing. The solicitation explicitly excludes LPTA and does not specify a contract value, indicating the Government will evaluate responses for technical merit, cybersecurity compliance, and operational readiness. Submission is required by July 29, 2026, and must include UEI and CAGE codes, small business status certification, and detailed responses to eleven technical capability questions