Zero Trust Encryption RFI
Contract Overview
Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.
AI Contract Overview
The contract pertains to the management and maintenance of the Department of Veterans Affairs' enterprise Hardware Security Module (HSM) fleet, a critical component underpinning its Public Key Infrastructure, Key Management Services, digital certificate operations, and various clinical and administrative systems. The existing Government-furnished equipment includes ten network-attached HSM appliances—eight Luna Network HSM T-5000 and two Luna Network HSM T-2000 devices—distributed across four continental U.S. gateway data centers, complete with partition licenses, administration kits, and backup components. The contractor will assume full responsibility for maintaining and managing this hardware in its current configuration following a transition period. This effort supports VA’s broader Zero Trust modernization program, aligning with updated federal security standards, including the National Institute of Standards and Technology’s (NIST) newly established post-quantum cryptographic standards effective August 2024. These standards make it mandatory for all HSM infrastructure to be post-quantum cryptography (PQC) ready. The solicitation, designated as a Service-Disabled Veteran-Owned Small Business (SDVOSBC) set-aside, seeks industry input on the technical approach, staffing and personnel plans, transition strategy, acquisition framework, and pricing to support VA in meeting these evolving cybersecurity requirements. The contract opportunity is managed by the Department of Veterans Affairs Network Contract Office 16, with performance located in Eatontown, New Jersey.
General Info
Agency
NAICS
Place of Performance
Eatontown, NJ, 07724, USASet-Aside
Timeline
Response Deadline
Organization & Contact Information
Full Description
VA Office of Information and Technology, Infrastructure Operations operates one of the largest and most complex information technology environments in the federal government, spanning on-premises data centers, private cloud infrastructure, and public cloud services delivered through the VA Enterprise Cloud (VAEC). At the cryptographic foundation of that environment sits VA's enterprise Hardware Security Module (HSM) fleet, which provides the cryptographic backbone for VA's Public Key Infrastructure (PKI), Key Management Services (KMS), digital certificate operations, and cryptographic processing for a broad portfolio of clinical and administrative systems, including the Veterans Health Information Systems and Technology Architecture (VistA) and VAEC-hosted workloads.
The Government-furnished fleet consists of ten production network-attached HSM appliances, eight Luna Network HSM T-5000 and two Luna Network HSM T-2000, at firmware version 7.11, deployed across four geographically distributed CONUS gateway data centers, together with partition capacity licenses, HSM administration kits, and backup HSM components. The fleet is described at the gateway and metropolitan-area level in the attached sanitized Attachment A; system identifiers, serial numbers, and facility street addresses will be provided with the solicitation. The Contractor would assume full maintenance and managed-service responsibility for this equipment in its as-found configuration upon completion of transition-in.
VA is executing an enterprise Zero Trust modernization program consistent with its Critical Security Controls. Under that program, all HSM operations, including key lifecycle management, partition management, PKI operations, and cryptographic services for VA endpoints and applications, are core components of VA's Zero Trust encryption posture. In August 2024, the National Institute of Standards and Technology (NIST) finalized its first post-quantum cryptographic standards, FIPS 203 (ML-KEM), FIPS 204 (ML-DSA), and FIPS 205 (SLH-DSA), making post-quantum cryptography (PQC) readiness a mandatory enterprise requirement for all HSM infrastructure. The Government is seeking industry feedback on technical approach, the salient characteristics, the staffing and key personnel model, the planned transition to Government operation, acquisition strategy, and pricing to inform its procurement planning.