Zero Trust Cloud Architecture Design

The contract involves designing and implementing a Zero Trust Architecture that complies with the NIST SP 800-207 framework, focused on developing both Physical Air-Gap and Hybrid Secure Cloud prototypes. The scope includes creating policies related to identity management, device security, network segmentation, and application segmentation to establish a robust security posture. The work is aimed at enhancing cybersecurity measures through rigorous segmentation and control mechanisms aligned with advanced zero trust principles. Issued by the Bureau of Industry and Security under the Department of Commerce, the contract is a subcontract opportunity categorized under NAICS code 541512, which pertains to computer systems design services. The place of performance is located in Norfolk with a ZIP code of 23511. The solicitation was posted on April 29, 2026, with a response deadline set for May 13, 2026. This initiative targets the development of secure, segmented environments both physically isolated and cloud-based, ensuring high levels of security for critical systems.