The Maryland Health Care Commission (MHCC) is seeking a qualified small‑business contractor to provide ongoing website maintenance, cloud‑hosting support, and technical services for its AWS‑based environment. The contractor will manage infrastructure, support Drupal and .NET applications, administer databases, enforce security and compliance (NIST, SOC 2), perform backup and disaster‑recovery operations, handle incident management with 24/7 help‑desk support, and deliver regular status, SLA, and security reports. Deliverables include an integrated project schedule, infrastructure management, application/database support, security plans, backup/DR testing, incident management procedures, documentation, and monthly performance reports. The work is continuous (ongoing/monthly) with a requirement for quarterly status updates and annual SOC 2 audit. The contract is limited to certified small businesses under Maryland’s Small Business Reserve program.
• Maintain and optimize AWS organization, VPCs, security groups, IAM, and monitoring.
• Support Drupal CMS and .NET survey applications, including MariaDB and SQL Server RDS instances.
• Provide 24/7/365 incident response, help‑desk ticketing, and SLA‑based response/resolution times.
• Implement automated backup, retention, and semi‑annual disaster‑recovery testing (RTO 24 hrs, RPO 1 hr).
• Produce monthly SLA performance reports, quarterly status reports, and an annual SOC 2 Type 2 audit report.
• Deliver documentation, knowledge‑transfer materials, and a comprehensive security plan.