Lora Zuo

Lora Zuo serves as a key procurement professional within the TTS Office of Acquisition, part of the General Services Administration’s Federal Acquisition Service, where she supports the modernization of federal digital identity infrastructure. Her work centers on acquiring secure, scalable solutions for authentication, identity verification, and source issuer validation—primarily in support of the Login.gov platform. She manages complex acquisitions involving cybersecurity standards, FIDO2 compliance, and NIST-aligned identity frameworks, ensuring that technical requirements align with federal mandates for secure login systems. Her procurement activities are mission-critical to enhancing national digital trust and reducing reliance on legacy authentication methods across federal agencies. Zuo collaborates with a diverse ecosystem of technology vendors specializing in identity and access management, including firms with expertise in public key infrastructure, multi-factor authentication, and decentralized identity protocols. While no single contractor dominates her portfolio, she consistently engages with vendors capable of meeting stringent FedRAMP and FISMA requirements, prioritizing those with proven experience in federal-scale identity systems. Her contracting approach emphasizes performance-based outcomes, open standards, and interoperability across government platforms. Zuo’s procurement pattern reflects a strong preference for full and open competition, with 100% of her acquisitions issued without set-aside designations. This indicates a focus on technical capability and compliance over socioeconomic categories, aligning with the high-security nature of digital identity systems where specialized expertise often outweighs traditional small business preferences. Her primary procurement focus lies under NAICS 813920 (Professional Organizations), reflecting her engagement with specialized technical consortia, standards bodies, and consulting firms delivering advanced digital identity services. She procures solutions in identity federation, credential issuance, attribute verification, and secure token services—domains requiring deep expertise in federal cybersecurity policy and emerging identity standards such as OIDC and SAML 2.0.