Description
The State of Oregon, through its Department of Administrative Services, is seeking a cloud‑delivered Secure Service Edge (SSE) solution and associated professional services to provide Zero Trust Network Access, Secure Web Gateway, CASB, and DLP capabilities for roughly 40,000 state employees and contractors. The contract will be a five‑year Price Agreement with optional extensions, and the vendor must supply design, implementation, migration, training, support, and ongoing management services. The solicitation includes extensive technical, security, accessibility, and small‑business outreach requirements, and the evaluation heavily weights technical compliance and performance.
• Mandatory delivery of a modular SSE platform meeting NIST Moderate controls, TLS 1.3, 99.99 % uptime, ≤ 100 ms latency for 95 % of users, and RTO 30 min / RPO 15 min.
• Full‑life‑cycle services: discovery, architecture, configuration, integration with identity and SIEM systems, PoC, testing, documentation, training, 24×7 support, and monthly performance reporting.
• Vendor must submit extensive certifications (disclosure exemption, proposer certification, reference checks, disadvantaged‑business outreach, responsibility inquiry, accessibility compliance) and demonstrate U.S.‑based delivery, Gov‑RAMP or equivalent security posture, and compliance with Oregon’s Statewide IT Control Standards.