Managed Secure Research Enclave and Compliance Services

Clemson University is seeking a vendor to design, implement, and manage a secure research enclave capable of handling Controlled Unclassified Information (CUI), Controlled Technical Information (CTI), and export‑controlled data (ITAR/EAR). The effort is split into Phase 1 (core secure enclave with Windows and Linux VDI, Microsoft 365 GCC High, identity & access management, and CMMC Level 2 compliance) and an optional Phase 2 (integration of Clemson‑owned on‑premises HPC clusters and large‑scale storage). The contract term is one year with up to four one‑year renewal options. The award will go to the highest‑scoring, responsive offeror; proposals must be submitted electronically by 1:45 PM ET on 11 Oct 2026. • Provide a managed, FedRAMP‑compatible enclave (Windows & Linux VDI) supporting ~50 research users and 27 admin users. • Achieve Final CMMC Level 2 (C3PAO) certification for Phase 1. • Deliver architecture diagrams, responsibility matrix, and compliance documentation. • Optional Phase 2: integrate on‑premises HPC and storage without disrupting Phase 1 operations. • Must meet U.S. citizenship and U.S.–based service requirements for all personnel. • Five‑year pricing summary required; Phase 2 pricing included for evaluation but not mandatory.