Cybersecurity Engineering and DoD Risk Management Framework Support Services

The buyer requires cybersecurity engineering and DoD Risk Management Framework (RMF) support services for a government authority in Maryland. The contractor must identify, assess, analyze, document, and audit cybersecurity requirements, participate in DoD cybersecurity awareness training, sign the Army IT user agreement, and support Security Control Assessor visits and assessments. Work is performed onsite or offsite over a base period of one year, with up to four option years evaluated. Eligibility is restricted to onshore 8(a) set-aside USA organizations. Bids must be submitted electronically to [email protected] by November 12, 2026, at 5:00 PM EST. Submissions require a single volume containing a completed and signed SF 1449, completed Pricing Schedule, documentation requested for responsibility, required security assurances, and resumes demonstrating specific minimum personnel experience and certifications. The award will be made using sealed bidding to the lowest-priced, responsive, and responsible bidder based on the Total Evaluated Price across all base and option years.