Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, August 5 at 2:00 PM EDT

Register Free →

Get CLEATUSFree Trial

Get CLEATUSFree Trial

Search

Top

Back to Contracts

Software Bill of Materials (SBOM) Generation and Management

Active

Federal

Response Deadline08/24/2026, 02:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The contract mandates the development, maintenance, and timely delivery of Software Bill of Materials (SBOMs) in standardized formats such as SPDX and CycloneDX, with a strict turnaround requirement of 10 business days from the date of request. The deliverables must include a comprehensive inventory of all software components and seamless integration with existing CI/CD pipelines to ensure continuous visibility and control over software dependencies. This effort supports supply chain transparency and cybersecurity compliance for software systems used by the U.S. Department of State. The contract is classified as a subcontract under NAICS code 541512 and is issued by the U.S. Embassy in Podgorica, with performance required at the embassy’s location in Podgorica, Montenegro, under the zip code 81000. The solicitation was posted on July 24, 2026, and responses must be submitted by August 24, 2026. Although no set-aside classification or point of contact is specified, the scope clearly emphasizes operational readiness, regulatory alignment, and technical precision in managing software composition documentation for federal use.

General Info

Develop and deliver SBOMs in SPDX/CycloneDX format within 10 business days for U.S. Embassy Podgorica.

Agency

Department Of State → US Embassy PodgoricaView Agency

NAICS

541512 - Computer Systems Design ServicesView NAICS

Place of Performance

Podgorica, ME-16, 81000, MNE

Set-Aside

NONE

Documents

(0)

No documents available

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

PostedJul 24

subcontract

Response DeadlineAug 24

Submission deadline

Response Deadline

08/24/2026, 02:00:00 PM UTCin 30 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyDepartment Of State → US Embassy Podgorica

ContactsNo contacts available

OfficeN/A

Organization / Agency

Department Of State → US Embassy Podgorica

View Agency Profile

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Develop, maintain, and deliver SBOMs in standardized formats (e.g., SPDX, CycloneDX) within 10 business days of request, including component inventory and CI/CD integration.

Similar Contracts

Same NAICS industry code

Virtualization Consulting IDIQThe Port of Seattle is seeking a qualified technical services partner to conduct a detailed evaluation of its existing virtualization platform, focusing on performance, security, architecture integrity, and operational reliability. The assessment will examine current configurations to identify vulnerabilities, inefficiencies, and areas for improvement, with the goal of delivering a strategic, prioritized roadmap that aligns with the organization’s business goals, compliance requirements, security standards, and resilience objectives. This engagement is designed to validate the platform’s ability to support critical operations and to recommend actionable enhancements that ensure long-term stability and adaptability. The contract is issued under the Virtualization Consulting IDIQ framework, with the NAICS code 541512 indicating it pertains to computer systems design and related services. The solicitation was posted on July 25, 2026, and is part of the ICT Enterprise Infrastructure Services division. Primary point of contact is Carol Hassard, reachable via email and phone, with Jim Dawson serving as the project manager. The work will be performed at the Port of Seattle’s facilities, though specific location details are not provided. Interested vendors are directed to the official solicitation portal for further information and potential next steps in the procurement process.

ICT Enterprise Infrastructure Services

POSTED

about 5 hours ago

DEADLINE

Azure Consulting IDIQThe Port of Seattle is soliciting qualified cloud services partners to provide consulting support for the adoption, modernization, and optimization of Microsoft Azure cloud and hybrid environments. The primary focus is on evaluating and strengthening the existing Azure architecture, ensuring new service implementations align with organizational standards, operational requirements, and long-term scalability goals. The selected partner will be responsible for enhancing security posture, improving system resiliency, and guiding the design and deployment of cloud services to meet evolving business needs while maintaining compliance and operational efficiency. The engagement is structured as an Indefinite-Delivery/Indefinite-Quantity (IDIQ) contract under NAICS code 541512, indicating ongoing and flexible ordering opportunities over the contract period. Primary point of contact for inquiries is Carol Hassard, with Jim Dawson serving as Project Manager. The solicitation was posted on July 25, 2026, and potential vendors are expected to respond to future task orders issued under this IDIQ framework, with performance expected to support the Port’s ICT Enterprise Infrastructure Services division. No specific set-aside classification is indicated, and the place of performance is not geographically defined, allowing for remote or on-site engagement as needed.

ICT Enterprise Infrastructure Services

POSTED

about 5 hours ago

DEADLINE

FIDS Software ReplacementThe Port of Seattle through its ICT Enterprise Infrastructure Services is forecasting the replacement of its existing Flight Information Display System (FIDS) software to modernize and enhance airport operations. The solicitation targets a vendor capable of delivering a comprehensive software solution that meets current and future operational needs for displaying real-time flight data to passengers and staff across terminal environments. Though the solicitation number is not yet assigned and the set-aside details are unspecified, the NAICS code 541512 indicates this is a software development and custom programming service requiring technical expertise in enterprise-level display systems, data integration, and user interface design. The primary point of contact for this initiative is Farlis Lewis, reachable via phone and email, with Krista Sadler serving as the Project Manager for coordination and technical oversight. The project will be performed at the Port of Seattle's facilities, though the exact location details are not specified in the notice. The posting date of July 25, 2026, suggests this is a forward-looking forecast, allowing potential vendors time to prepare proposals before a formal solicitation is issued. Interested parties are directed to the official portal link provided to monitor updates and access future formal documentation.

ICT Enterprise Infrastructure Services

POSTED

about 5 hours ago

DEADLINE

Procurement of Smart Room Solutions x 3The Government of Jamaica, through its Tax Administration Jamaica, is soliciting proposals for the procurement of three Smart Room Solutions, with the opportunity posted on July 24, 2026, and responses due by August 17, 2026, at 3:00 PM local time. This solicitation, identified by number 1088/416, is categorized as a general procurement without a designated set-aside status or NAICS code, and is open to all qualified vendors regardless of size or organizational structure. The solutions are intended for deployment within Jamaica, though the specific place of performance details are not specified, and all submissions must be directed through the official e-procurement portal linked in the notice. There is no designated point of contact listed for inquiries, so potential respondents are expected to reference the official UI link for further guidance, compliance requirements, and submission protocols.

Tax Administration Jamaica

POSTED

about 22 hours ago

DEADLINE

Mount Rogers Community Services is seeking proposals from qualified provides of financial software services.Mount Rogers Community Services Board is seeking qualified vendors to provide a comprehensive financial information system designed to support its operational and financial management needs. The system must include core functionalities such as general ledger, payroll, accounts payable, purchasing, petty cash, fixed assets, budgeting, credit card management, donation tracking, grant administration, and robust reporting capabilities. In addition to the software, the vendor is required to deliver full installation, testing, training, and ongoing support services to ensure seamless adoption and effective use across the organization. The solicitation is open to providers capable of delivering an integrated solution that meets the agency’s requirements for accuracy, scalability, and compliance with public sector financial standards. Proposals must be submitted by August 10, 2026, at 9:00 PM Eastern Time, and all responses should be directed through the official vendor portal. The contract will be awarded to a vendor able to demonstrate proven experience, technical competence, and a clear plan for successful implementation in a public service environment. All work under this contract is expected to be performed at or in support of the agency’s location in Wytheville, Virginia. The point of contact for questions and submissions is Jessica Money, who can be reached via email at jessica.money@mountrogers.org or by phone at 304-557-9917. The RFP is issued under solicitation number RFP-125015, posted on July 24, 2026, and is available for review through the provided online portal. There is no set-aside classification designated for this procurement, and vendors of all sizes are encouraged to respond if they meet the specified technical and service delivery criteria. The selected vendor will be responsible for ensuring the system aligns with the agency’s current and future operational demands while maintaining data integrity and security across all financial functions.

Mount Rogers Community Services Board

POSTED

DEADLINE

Finance and Human Capital Management (HCM) ERP System ImplementationVirginia Polytechnic Institute and State University is seeking qualified vendors or certified partners to provide implementation services for a Finance and Human Capital Management ERP system through a competitive negotiation process under RFP-125004. Proposals must be submitted by September 19, 2026, and only those that fully meet all minimum requirements outlined in the RFP will be considered for evaluation. Vendors partnering with multiple ERP system providers must submit separate proposals for each platform, and only those tied to the ultimately selected ERP system vendor will proceed. The implementation services are intended to support operations at Virginia Tech’s main campus in Blacksburg, VA, with remote work permitted. All submissions must clearly demonstrate compliance with the specified criteria, and incomplete or non-compliant proposals will be rejected without further review. Inquiries and proposal-related correspondence should be directed to Emma Ruby at emmaru97@vt.edu or 540-231-5278, with additional guidance available through the official portal.

Virginia Polytechnic Institute and State University

POSTED

DEADLINE

in about 2 months

Data Security & Compliance Monitoring (IT Security Services)The contract requires the implementation and ongoing maintenance of robust technical safeguards to protect student and district data, including mandatory encryption standards, retention of all data within U.S.-based servers, and secure remote access exclusively through virtual private network connections. Continuous monitoring and immediate 24-hour incident reporting are required to ensure compliance and rapid response to any potential data breaches or security vulnerabilities. The scope is focused on ensuring adherence to strict data privacy protocols within educational environments, with an emphasis on proactive security measures and accountability. This subcontract, categorized under NAICS code 541512 for computer systems design services, is issued by the state of Utah with a submission deadline of August 13, 2026, and was posted on July 24, 2026. Performance is expected to support Utah’s educational institutions, though specific locations are not defined. The contract demands a high level of technical expertise in cybersecurity infrastructure and compliance, with no set-aside provisions indicating open competition among qualified vendors. All solutions must align with federal and state data protection requirements without reliance on external cloud platforms or international data hosting.

POSTED

DEADLINE

Process Automation System Integration and InstallationMississippi State University is seeking a subcontractor to install, calibrate, and integrate the FluidMechantronix Process Automation System into its chemical engineering laboratory environment. The scope includes full system deployment with wireless Ethernet configuration to ensure seamless data communication and remote monitoring capabilities. The project requires close coordination with existing lab infrastructure and safety protocols, particularly integration with the Lockout-Tagout (LOTO) curriculum to align automation operations with established industrial safety standards. All work must be performed to ensure operational reliability, compliance with lab safety requirements, and compatibility with educational workflows used in chemical engineering instruction. The contract is open for bidding with a response deadline of August 7, 2026, under NAICS code 541512 for computer systems design services.

MISSISSIPPI STATE UNIVERSITY

POSTED

DEADLINE

Landfill SCADA ProjectThe City of Denton is soliciting proposals for the installation and programming of a new SCADA system to monitor and control its landfill’s leachate collection system, under solicitation number 9013 with an estimated budget of $500,000. Proposals must be submitted as sealed hard copies by 2:00 PM CST on August 26, 2026, to the City of Denton Materials Management office, with a required original bid bond bearing a raised seal delivered by the deadline—email submissions are strictly prohibited. An electronic copy of the proposal must be uploaded via the official ionwave.net portal, accompanied by a USB drive containing all documents in PDF or Excel format, including the mandatory Unit Price Proposal form, past experience records, key personnel resumes, safety documentation, and a detailed schedule for project completion. A mandatory pre-proposal meeting and site walkthrough will be held in person on August 4, 2026, at the Solid Waste Administration building, and the public bid opening will occur on August 26, 2026, at the Development Services Building, with a virtual option available. The evaluation process is weighted toward total cost of ownership at 50%, followed by the quality and achievability of the proposed schedule at 25%, with the remaining 25% distributed among key personnel qualifications, past performance reputation, and safety record. The award will be based on best value through trade-off analysis, not lowest price technically acceptable. Offerors must comply with Texas state laws including prevailing wage requirements under Davis-Bacon, submission of performance and payment bonds per Texas Government Code §2253.021, and obtaining sales tax exemptions via Comptroller rulings #95-0.07 and #95-0.09. Contractors must certify they do not boycott Israel, provide lien releases from all subcontractors prior to final payment, and disclose any OSHA violations or safety incidents from the past five years. Key personnel must be identified with resumes demonstrating relevant experience and time allocation commitments. All documentation must be formatted on letter-size paper, not exceed 200 pages in hard copy, and adhere strictly to the required form templates without modification. The work will be performed at the Denton landfill site, and final acceptance is contingent upon the City’s inspection and approval of system functionality, compliance with specifications, and submission of all required compliance documentation.

POSTED

DEADLINE

in about 1 month

Cybersecurity Compliance and CMMC Level 2 AssessmentThis contract is for a third-party cybersecurity assessment and compliance management service focused on handling Covered Defense Information in alignment with the Cybersecurity Maturity Model Certification Level 2 requirements. The subcontractor will be responsible for preparing the prime contractor for an audit by a Certified Third-Party Assessment Organization, ensuring all NIST SP 800-171 controls are properly implemented, documented, and maintained. The scope includes ongoing compliance management, gap analysis, policy development, employee training, and remediation efforts to meet CMMC Level 2 standards, with the ultimate goal of achieving successful certification through the official assessment process. The contract is issued under the Department of Defense’s LAND SUPPLIER OPERATIONS SMSG and falls under NAICS code 541512 for computer systems design services. It is structured as a subcontract with a response deadline of August 23, 2026, and is aimed at organizations with proven expertise in defense cybersecurity frameworks. The place of performance and specific location details are not provided, indicating the work may be performed remotely or at any location where Covered Defense Information is processed or stored. Participation requires a clear understanding of DoD contractual obligations and demonstrated experience with CMMC readiness activities, particularly in supporting entities that handle sensitive federal defense data.

LAND SUPPLIER OPERATIONS SMSG

POSTED

DEADLINE

Cybersecurity Compliance for Covered Contractor SystemsThe contract requires the implementation and ongoing maintenance of cybersecurity controls aligned with NIST SP 800-171 to ensure compliance with DFARS 252.204-7012 for all systems processing, storing, or transmitting Controlled Unclassified Information. This applies specifically to covered contractor systems under the Department of Defense, and the successful bidder must demonstrate the ability to establish, monitor, and sustain a robust security posture that meets federal requirements for protecting sensitive but unclassified data. Continuous compliance verification and documentation are expected throughout the contract period. This is a subcontract opportunity set aside exclusively for Women-Owned Small Businesses, with the North American Industry Classification System code 541512 indicating it targets computer systems design services. The solicitation was posted on July 24, 2026, with a firm response deadline of July 29, 2026. Performance is expected to support the Strategic Acquisition Program Directorate, and the work must be carried out in accordance with all applicable federal cybersecurity mandates without reliance on specific location-based requirements. All activities must be conducted to ensure full audit readiness and adherence to the security standards outlined in the referenced regulations.

STRATEGIC ACQ PROGRAM DIRECTORATE

POSTED

DEADLINE

Cybersecurity Compliance Support (CMMC Level 2)The contract requires comprehensive support for achieving CMMC Level 2 compliance, focusing on conducting a self-assessment, developing and implementing cybersecurity policies, and hardening information systems to meet the requirements of NIST SP 800-171 and DFARS 252.204-7012. This encompasses identifying gaps in current security practices, establishing documented procedures aligned with federal standards, configuring systems to mitigate vulnerabilities, and ensuring ongoing adherence to the framework necessary for handling controlled unclassified information. The effort is designed to enable the contractor to operate securely within the Department of Defense supply chain by fulfilling the mandated cybersecurity controls. This is a total small business set-aside subcontract under NAICS code 541512, intended exclusively for small businesses qualifying under SBA guidelines. The solicitation was posted on July 24, 2026, with responses due by August 1, 2026, and the performance will be carried out under the auspices of the Department of Defense, specifically linked to the Construction & Equipment Manu & Con organization. The contract is accessible through the DIBBS platform, and all work must align with federal cybersecurity obligations without the use of third-party certifications, relying instead on internal implementation and documentation to substantiate compliance.

CONSTRUCTION & EQUIPMENT MANU & CON

POSTED

DEADLINE

More opportunities from Department Of State → US Embassy Podgorica

Same awarding agency

Water Quality Testing and Laboratory ServicesThe contract requires weekly analysis of water samples from potable and HVAC systems with a strict 24-hour turnaround for reporting results and providing corrective recommendations. The contractor must offer both remote diagnostics and on-site testing capabilities to ensure timely and accurate assessments of water quality. Services are to be performed at the US Embassy in Podgorica, with the specified zip code 81000 serving as the place of performance. The work falls under NAICS code 541380, categorizing it as other scientific and technical consulting services. This subcontract, posted on July 24, 2026, has a response deadline of August 17, 2026, and is issued by the US Department of State through the US Embassy Podgorica, reflecting a focus on maintaining safe water standards in a diplomatic facility.

Testing Laboratories and Services

POSTED

DEADLINE

Water Treatment Chemical and Equipment SupplyThe contract entails the supply of all necessary chemicals, testing kits, and specialized equipment required to maintain potable and HVAC water treatment systems at the US Embassy in Podgorica. All items must be pre-approved by the Contracting Officer’s Representative and accompanied by complete documentation to ensure compliance with federal standards and operational requirements. The scope is specifically tailored to support the embassy’s water quality and system integrity, covering both drinking water and heating, ventilation, and air conditioning water treatment needs. The contract is structured as a subcontract under NAICS code 424690 and is set to expire with a response deadline of August 17, 2026. Performance is localized to Podgorica, Montenegro, with a postal code of 81000. The contracting entity is the US Department of State through the US Embassy in Podgorica, and all procurements must align with diplomatic and federal procurement protocols. The solicitation was posted on July 24, 2026, with no set-aside designations applied, and interested vendors must adhere strictly to the approval and documentation processes outlined in the agreement.

Other Chemical and Allied Products Merchant Wholesalers

POSTED

DEADLINE

HVAC Water Treatment System MaintenanceThe contract pertains to the annual maintenance of HVAC water systems at the US Embassy in Podgorica, requiring comprehensive inspection and treatment to manage corrosion, scaling, and microbiological fouling. Services include regular water chemistry analysis, precise chemical dosing to maintain optimal system conditions, and detailed performance reporting to ensure system efficiency and longevity. The work is governed under NAICS code 238220 and is structured as a subcontract, with all activities to be performed on-site at the embassy location in Podgorica, Montenegro, under the jurisdiction of the Department of State. The solicitation was posted on July 24, 2026, and proposals must be submitted by August 17, 2026, at 10:00 AM. The place of performance is specifically designated as Podgorica with a postal code of 81000, and while no point of contact is listed, the contract is linked to the SAM.gov portal for official access to bidding details. The scope emphasizes consistent, high-quality service delivery to sustain the integrity of the embassy’s HVAC infrastructure in alignment with federal operational standards.

Plumbing, Heating, and Air-Conditioning Contractors

POSTED

DEADLINE

Potable Water Treatment System MaintenanceThe contract entails annual on-site inspection, testing, and maintenance of the potable water system at the US Embassy in Podgorica to ensure adherence to health and safety standards, specifically targeting turbidity, chlorine levels, and LSI balance. The work requires comprehensive evaluation and servicing of the water treatment infrastructure to maintain safe drinking water quality for embassy personnel and operations. In addition to technical maintenance, the contract mandates the training of embassy staff on proper system operation and safety protocols, along with the submission of detailed service reports documenting all testing results, corrective actions taken, and compliance verification. The solicitation is classified as a subcontract under NAICS code 221320, and responses are due by August 17, 2026. The work must be performed at the embassy's location in Podgorica, Montenegro, with a postal code of 81000. The contracting entity is the US Embassy Podgorica under the Department of State, and the requirement is positioned to support the ongoing operational readiness and health compliance of the diplomatic mission. No set-aside status is specified, and the opportunity is accessible to qualified subcontractors who can meet the technical, reporting, and training obligations outlined in the scope.

Sewage Treatment Facilities

POSTED

DEADLINE

On-Site Service Coordination and Embassy LiaisonThe contract titled On-Site Service Coordination and Embassy Liaison requires the successful bidder to manage and coordinate all on-site service activities at the US Embassy in Podgorica, ensuring seamless execution of tasks in alignment with embassy-specific protocols. Responsibilities include scheduling services with embassy personnel, securing and managing site access, overseeing subcontractors to maintain performance standards, and guaranteeing full compliance with security, operational, and procedural guidelines unique to the diplomatic compound. The work is inherently tied to the physical location in Podgorica, Montenegro, with the zip code 81000 designated as the place of performance. The solicitation is structured as a subcontract under NAICS code 561110, which classifies it as administrative and support services, and is issued by the US Department of State through the US Embassy Podgorica. The posting date is July 24, 2026, with proposals due by August 17, 2026, at 10:00 AM Eastern Time. While no set-aside designation is specified, the contract demands precise coordination with government personnel and strict adherence to diplomatic site requirements, making experience in embassy environments and familiarity with federal and international operational protocols essential for qualified applicants.

Office Administrative Services

POSTED

DEADLINE

Fuel System Parts and Component SupplyThe contract entails the supply of OEM or approved replacement parts essential for fuel system maintenance, including filters, seals, gaskets, sensors, and pumps, to support operational readiness at the US Embassy in Podgorica, Montenegro. All components must meet stringent quality standards and be delivered with full international logistics coordination, including customs clearance, to ensure timely and compliant delivery to the designated location in Podgorica with a ZIP code of 81000. The solicitation is classified as a subcontract under NAICS code 423830, indicating a focus on automotive parts and supplies wholesaling, and is issued by the Department of State through the US Embassy Podgorica. The opportunity was posted on July 24, 2026, with a firm response deadline of August 17, 2026, at 10:00 AM, and requires proposers to demonstrate proven experience in global supply chain management for critical defense or diplomatic infrastructure maintenance.

Industrial Machinery and Equipment Merchant Wholesalers

POSTED

DEADLINE

Technical Reporting and Compliance DocumentationThe contract requires the preparation and submission of technical check reports, compliance certifications, and performance data related to fuel system maintenance activities, all in strict alignment with U.S. government standards. This work is part of a subcontract under the U.S. Department of State, specifically managed by the U.S. Embassy in Podgorica, and must be performed in Podgorica, Montenegro, with a postal code of 81000. The work is governed by NAICS code 541330, indicating it falls under engineering services, and demands precise documentation to ensure regulatory adherence and operational readiness. All submissions must meet federal requirements for accuracy, timeliness, and consistency, with the contractor expected to maintain rigorous tracking of maintenance outcomes and compliance status. The opportunity was posted on July 24, 2026, and responses are due by August 17, 2026, at 10:00 AM, making it a time-sensitive obligation. Although no specific set-aside designation or point of contact is provided, the contract is explicitly tied to U.S. diplomatic operations abroad, requiring a thorough understanding of international compliance frameworks and the ability to deliver high-standard technical documentation under foreign operational conditions.

Engineering Services

POSTED

DEADLINE

Fuel System Preventive Maintenance ServicesThe contract entails the provision of annual preventive maintenance services for all fuel system components at the U.S. Embassy in Podgorica, including storage tanks, pumps, filters, transfer systems, and associated controls. The work must be performed to ensure the continued safety, operational reliability, and full compliance with manufacturer specifications and environmental regulations, maintaining the integrity of critical fuel infrastructure essential to embassy operations. All maintenance activities are required to meet stringent standards to prevent downtime, mitigate hazards, and uphold federal and host nation compliance requirements. This subcontract opportunity is posted with a response deadline of August 17, 2026, and is categorized under NAICS code 811310 for industrial and commercial machinery and equipment repair and maintenance. The place of performance is firmly established in Podgorica, Montenegro, with the U.S. Department of State’s Embassy serving as the contracting entity. While no set-aside provisions or specific point of contact details are provided, interested parties must submit proposals prior to the stated deadline to be considered for award, with performance expectations centered on precision, regulatory adherence, and uninterrupted system functionality.

Commercial and Industrial Machinery and Equipment (except Automotive and Electronic) Repair and Maintenance

POSTED

DEADLINE

E-Verify and Employment Compliance ServicesThe contract requires the administration of E-Verify checks for all employees engaged under the subcontract, ensuring full compliance with the Federal Acquisition Regulation clause 52.222-54 concerning employment verification. The contractor must implement processes to accurately verify the employment eligibility of every worker, maintain complete and audit-ready documentation throughout the contract term, and remain prepared for federal compliance reviews at any time. All activities must align with U.S. government standards for workforce verification and recordkeeping. This subcontract is issued by the U.S. Embassy in Podgorica under the Department of State, with performance located in Podgorica, Montenegro, at the zip code 81000. The solicitation was posted on July 24, 2026, and responses are due by August 24, 2026. The North American Industry Classification System code 561331 applies, indicating the work falls under employment placement services. The contract is classified as a subcontract without a specific set-aside designation, and the responsible agency has not listed a point of contact.

POSTED

DEADLINE

Identity and Access Management for Contractor PersonnelThe contract requires support for compliance with the Department of State’s Personnel Identity Verification policy by managing end-to-end identity verification, badging, and PIV card issuance for contractor personnel who need access to U.S. government facilities in Podgorica. This includes validating the identity of contractors, ensuring adherence to federal credentials standards, and coordinating the physical and digital processes necessary to issue and maintain secure access credentials. All activities must align with DOS PIC requirements to ensure only authorized individuals gain entry to sensitive government locations. The work is scoped specifically to support the U.S. Embassy in Podgorica under the NAICS code 541612 for management consulting services and is structured as a subcontract. Proposals must be submitted by August 24, 2026, and the performance location is fixed at the embassy facility in Podgorica with a postal code of 81000. The contract does not specify set-aside status or point of contact details, and all responsibilities center on maintaining secure, compliant identity and access management systems tailored to the operational needs of U.S. government personnel and contractors operating within the embassy’s jurisdiction.

Human Resources Consulting Services

POSTED

DEADLINE

Cybersecurity Supply Chain Risk Management (C-SCRM) ConsultingThe contract seeks consulting services to implement Cybersecurity Supply Chain Risk Management (C-SCRM) practices focused on enhancing the security of digital supply chains for the US Embassy in Podgorica. Core responsibilities include conducting comprehensive vendor risk assessments, verifying the provenance of critical hardware and software components, and actively identifying and mitigating risks associated with the use of banned telecommunications equipment. These efforts are aimed at safeguarding sensitive diplomatic operations against supply chain threats by ensuring all third-party technologies meet stringent cybersecurity standards and comply with federal prohibitions on equipment from untrusted vendors. The solicitation is structured as a subcontract under NAICS code 541618, which categorizes it under other scientific and technical consulting services. The response deadline is August 24, 2026, and the work is to be performed in Podgorica, Montenegro, with a postal code of 81000. The contracting entity is the Department of State through the US Embassy in Podgorica, and while no specific set-aside provisions are indicated, the engagement requires specialized expertise in supply chain security and international regulatory compliance. The project underscores the urgency of securing digital infrastructure abroad by enforcing rigorous supply chain controls against evolving cyber threats.

Other Management Consulting Services

POSTED

DEADLINE

Software Attestation and Compliance CertificationThe contract requires the provision of formal software attestations following major system updates, ensuring adherence to secure development practices as defined by the NIST Secure Software Development Framework and applicable federal cybersecurity guidelines. These attestations must be comprehensive, documented, and submitted to verify that all software modifications have been developed, tested, and deployed using validated secure engineering controls, threat modeling, and input validation procedures aligned with federal standards. The work is scoped to support the U.S. Embassy in Podgorica under the Department of State and must be performed primarily in Podgorica, Montenegro, with a zip code of 81000. This is a subcontract opportunity classified under NAICS code 541611 for Computer Systems Design Services, with a response deadline of August 24, 2026, at 2:00 PM. The solicitation was posted on July 24, 2026, and there is no set-aside designation or type specified. The contract demands rigorous compliance documentation and accountability, with no provision for informal or partial attestations. Contractors must demonstrate prior experience in federal software compliance, secure development lifecycle management, and must be prepared to substantiate claims with evidence such as artifact logs, code reviews, and third-party validation where applicable. Participation requires full understanding and implementation of NIST SSDF controls across the entire software supply chain.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE