Secure Firmware and Embedded Software Development

The contract calls for the development and integration of secure embedded firmware for Vehicle-to-Everything (V2X) On-Board Units, with a focus on implementing a 5G sidelink protocol stack, secure boot mechanisms, and encrypted communications aligned with OWASP, SANS, and US-CERT security standards. The work requires deep expertise in embedded systems, real-time operating environments, and cybersecurity best practices to ensure the firmware resists tampering, maintains integrity during updates, and enables safe, low-latency vehicle-to-infrastructure and vehicle-to-vehicle communications. The solution must be designed for high reliability in mission-critical transportation environments while meeting stringent government security requirements. This is a small business set-aside subcontract under NAICS code 541512, awarded by the CDC Office of Acquisition Services under the Department of Health and Human Services, with performance based in Atlanta, Georgia. The solicitation was posted on August 3, 2026, and responses are due by August 10, 2026. While the agency is part of HHS, the technical scope indicates a focus on connected vehicle technology that supports public health infrastructure, such as emergency vehicle warning systems or traffic safety networks tied to health and safety outcomes. Contractors must demonstrate proven experience in secure firmware for V2X, adherence to federal cybersecurity frameworks, and the ability to deliver scalable, robust solutions under aggressive timelines.