Ajmal Khan is a government contact. Ajmal is associated with 14 contracts. Activity spans Other Computer Related Services, Computer Systems Design Services, and Office Equipment Merchant Wholesalers.
Person Profile
Contracting officer information and contact details
The Department of Transportation's IT Acquisition Center of Excellence is seeking a five-month extension of cybersecurity management support services under Blanket Purchase Agreement Order 693JJ320A000018_693JJ323F00304N. Awarded to Ernst and Young, the contract focuses on penetration testing activities for the Office of the Secretary to ensure mission-essential cybersecurity services and continued FISMA compliance. This extension will move the current expiration date from September 28, 2026, to February 28, 2027, providing necessary continuity while the Department restructures its IT workforce.
Classified under NAICS code 541519, this action is being processed as a sole source justification and a logical follow-on to a competitively awarded GSA CSIPS BPA order in accordance with FAR 8.401(b). The performance is based in Washington, DC, and is managed by the IT Acquisition Center of Excellence.
The Department of Transportation, through the IT Acquisition Center of Excellence, is extending a contract for cybersecurity management support services. Originally set to expire on August 31, 2026, the agreement is being extended for an additional two months, moving the expiration date to October 31, 2026.
This extension is necessary to maintain current support levels while the department restructures its information technology workforce. During this period, the agency will evaluate whether the required services can be reduced or fully transitioned to federal employees. The contract is managed out of Washington, DC, under NAICS code 541512.
Department Of TransportationDC,
20590,
USA$612Kest.
The Department of Transportation, through its Federal Highway Administration IT Acquisition Center of Excellence, has issued a sole-source contract modification to extend support services for the Elastic Search, Logstash, and Kibana (ELK) Stack through September 30, 2026. This action is justified under FAR 8.401(b) and GSAR 538.7104-3(b)(iii) as a logical follow-on to an existing Blanket Purchase Agreement under the GSA Multiple Award Schedule, with no competitive solicitation conducted due to the need for uninterrupted continuity of operations, preservation of institutional knowledge, and mitigation of mission-critical cybersecurity risks. The contract scope centers on maintaining and enhancing the ELK platform to support centralized logging, real-time monitoring, and compliance with federal cybersecurity standards including NIST SP 800-53, Executive Order 14028, and OMB M-21-31 across more than 150 DOT systems, with ongoing efforts to onboard additional data sources. Performance is to be conducted remotely in support of federal systems, with official place of performance designated as Washington, D.C., and oversight managed by the Office of the Chief Information Officer under the Office of the Secretary of Transportation. The contracting officer, Ajmal Khan, and approving official, Justin Ubert, both based at 1200 New Jersey Avenue SE, are responsible for contract administration, though no Contracting Officer’s Representative or technical representative is formally named. The modification extends a prior order by 3.5 months to avoid service interruption during organizational transitions, and while cost details are not disclosed, the award is predicated on prior competitive pricing established during the original BPA acquisition. No line-item pricing, payment instructions, invoicing method, packaging requirements, or offeror certifications are provided in the documentation, and the absence of formal evaluation factors, clause language, or delivery schedules reflects the non-competitive nature of this procurement under a pre-existing GSA program.
This contract modification extends the existing Blanket Purchase Agreement under GSA Schedule GS-35F-0490T for cybersecurity support services to the Department of Transportation by six months, through December 14, 2026. The action is justified as a sole-source logical follow-on under FAR 8.401(b), emphasizing continuity of operations due to the incumbent contractor’s deep institutional knowledge of DOT’s information systems, past performance in achieving a FY24 FISMA “B” rating, and the critical need to maintain uninterrupted security authorizations and assessments. The scope includes ongoing support for System Authorization Packages, Plan of Action and Milestones tracking, compliance with NIST SP 800-53 controls, and coordination with System Owners and Information System Security Officers to ensure systems remain authorized to operate. Performance is centered in Washington, D.C., with hybrid on-site and remote activities supporting both on-premises infrastructure and FedRAMP-authorized SaaS platforms. The contracting activity is managed by the FHWA IT Acquisition Center of Excellence, with primary point of contact Ajmal Khan and secondary contact Kyle Griggs. No specific pricing details are provided, as costs are governed by existing GSA Schedule and BPA rates, and no line-item pricing or contract value is disclosed. The modification reflects an embedded extension option, with no competitive process conducted due to the necessity of sustaining uninterrupted service during DOT’s internal IT transition. Security clearance levels are not formally mandated, but contractor personnel must possess expertise in federal cybersecurity frameworks and have access to sensitive federal systems. No key personnel are formally named, though the retention of the existing Kingfisher/Crimson Phoenix team is critical to the justification. No packaging, delivery, or inspection requirements beyond technical compliance with FISMA and NIST standards are specified, and no socioeconomic, size, or representation details regarding the contractor are provided.
The Department of Transportation is procuring Oracle Cloud Infrastructure support services under a firm-fixed-price task order issued through the FAA SAVES IDIQ contract, justified exclusively under FAR 16.507-7 due to the unique and non-replaceable capabilities of Oracle Cloud Infrastructure (OCI). The procurement is sole-source, grounded in the necessity to maintain existing Oracle-engineered workloads—specifically for NHTSA’s TRIPRS and PDPS platforms—without re-platforming, as alternative cloud providers like AWS, Azure, and GCP lack native compatibility with Oracle Real Application Clusters, Oracle-specific Security Technical Implementation Guides, and automated patching features critical to mission continuity. Services encompass cloud credits, technical support, and maintenance within a FedRAMP High-authorized OCI Government Cloud region, ensuring alignment with DOT’s Enterprise Infrastructure Solution and the National Airspace Record Management system for performance and latency monitoring. The contract’s place of performance is designated as Washington, D.C., with performance delivered remotely but governed by local oversight from the FHWA IT Acquisition Center of Excellence and DOT’s Office of the Chief Digital & Information Officer.
The delivery schedule includes a one-year base period and four optional 12-month extension periods, enabling a maximum contract duration of five years. The contractor must be an Oracle Authorized Government Reseller to ensure access to official updates, technical expertise, and compliance with federal security standards. Key requirements include autonomous database services, dynamic scaling through OCI APIs, integrated identity and access management, Security Zones for policy enforcement, and seamless SIEM integration via OCI Logging and Streaming Services. Inspection and acceptance are conducted by the government at its Washington, D.C. facility based on compliance with FedRAMP High, Oracle STIGs, and interoperability with DOT’s NARM system. No pricing line items, evaluation factors, or contractor representations are included in the documentation, as this is a brand-name justification rather than a full solicitation or contract. Payment responsibilities lie with the FHWA IT ACE, though remittance details and invoicing procedures are not specified. The contracting activity, technical oversight, and price reasonableness determination were validated by FAA and DOT personnel, but specific COR, COTR, or PCO identifiers are not disclosed.
Department Of TransportationDC,
20590,
USA$10M–$50Mest.
NAICS
541512
Computer Systems Design Services
PSC
R425
Professional, Administrative, and Management Support Services
The contract extends cybersecurity management support services under the existing Blanket Purchase Agreement 693JJ320A000013_693JJ322F00228N, originally set to expire on April 30, 2026, for an additional four months through August 31, 2026. This extension is justified as a sole-source action under FAR 8.401(b) and GSAR 538.7104-3(b)(iii), leveraging the incumbent contractor Deloitte’s deep familiarity with the Department of Transportation’s cybersecurity environment to ensure operational continuity and avoid the inefficiencies associated with onboarding a new vendor. The services encompass maintaining and enhancing the DOT’s cybersecurity posture through support of enterprise tools including Splunk, BigFix, and Tenable, delivering continuous diagnostics and mitigation (CDM) capabilities, enabling automated vulnerability reporting with AI-driven enhancements, conducting patch management and system hardening, and supporting Security Operations Center functions in alignment with FISMA, OMB Memorandum 21-31, and Executive Order 14028. The performance location is 1200 New Jersey Avenue SE, Washington, D.C. 20590, under the oversight of the Federal Highway Administration’s IT ACE and the DOT’s Office of the Chief Information Officer. Pricing is firm-fixed-price under the GSA Schedule GS-35F-0617Y, though specific monetary values are not disclosed. No formal evaluation factors, inspection criteria, or detailed performance metrics are outlined, as the award relies entirely on the unique expertise of the current contractor and the necessity of seamless service transition. The contract modification P00008 formalizes the extension, and while no payment office, contracting officer representative details, or socioeconomic certifications are explicitly provided, the action is administratively grounded in the precedent of prior competitive orders and the critical need to maintain uninterrupted cybersecurity operations within a federal environment subject to stringent compliance mandates.
