The U.S. Army is issuing a draft solicitation for a Firm‑Fixed‑Price, sealed‑bid contract to provide comprehensive cybersecurity engineering and DoD Risk Management Framework (RMF) support at the Aberdeen Test Center, Maryland. The contractor will supply all personnel, equipment, and services necessary to execute RMF lifecycle activities, including system architecture, security control implementation, continuous monitoring, and authority‑to‑operate (ATO) maintenance for Secret‑level systems, with a surge capability for Top‑Secret environments. The award will be a base‑year contract (Nov 23 2026 – Nov 22 2027) with four optional one‑year extensions. The solicitation emphasizes strict security clearance requirements, DoD cybersecurity certification compliance, and a no‑travel, labor‑only pricing structure.
• Provide RMF analysis, planning, execution, and continuous monitoring for ATC LAN, LIN, STE, and T&EN networks.
• Staff the effort with a senior IT Systems Solutions Architect (CISSP, ≥10 yr RMF experience) and senior IT Certified Professionals (CASP+ or equivalent), plus two surge‑effort resources (one requiring Top‑Secret clearance).
• Deliver monthly financial reports (funding balance, invoice, reconciliation, spend plan) with ≤ 1 % variance and maintain a Quality Control Program.