Zero Trust Cloud Architecture Design

The contract seeks the design and implementation of a Zero Trust Architecture aligned with NIST SP 800-207, targeting both physical air-gapped environments and hybrid secure cloud prototypes. The work requires the establishment of comprehensive segmentation policies covering identity, device, network, and application layers to ensure strict access controls and continuous verification across all system components. The solution must eliminate implicit trust assumptions and enforce least-privilege access, regardless of location or network perimeter, with a focus on securing sensitive data and operations in high-risk environments. This subcontract, issued by the Bureau of Industry and Security under the Department of Commerce, has a response deadline of May 13, 2026, and is categorized under NAICS code 541512 for computer systems design services. Performance is required in Norfolk, Virginia, with a zip code of 23511. The solicitation does not specify a set-aside type or point of contact, and the primary deliverables are architectural templates, policy frameworks, and validated prototypes demonstrating compliance with Zero Trust principles in both isolated and cloud-integrated infrastructures.