United States Holocaust Memorial MuseumIssuing agency·Washington, DC·via the SAM.gov Get Opportunities APIDISCLAIMER / MARKET RESEARCH NOTICE:This Request for Information (RFI) is issued solely for information gathering and planning purposes. It does not constitute a Request for Proposal (RFP), Invitation for Bid (IFB), or an obligation on the part of the United States Holocaust Memorial Museum (USHMM) to acquire any products or services. Responses to this notice are not offers and cannot be accepted by USHMM to form a binding contract. Responders are solely responsible for all expenses associated with responding to this RFI.
The United States Holocaust Memorial Museum (USHMM) is conducting formal market research to evaluate commercial vendor capabilities, industry pricing benchmarks, federal/commercial labor rates, and available contract acquisition vehicles (e.g., GSA MAS SIN 54151HACS, NASA SEWP, CIO-SP3/4, SAM.gov) for re-procuring comprehensive Managed Information Technology (IT) Security, Multi-Cloud/DevSecOps Architecture, Network Engineering, and specialized Managed Security Service Provider (MSSP) operational activities. The primary objective of this market research effort is to evaluate whether competitive commercial marketplace capabilities exist to:
Sustain, support, and execute day-to-day operations across USHMM's existing "As-Is" securityinfrastructure without operational disruption or increased organizational risk.
Perform rigorous security architecture evaluations, threat modeling, gap analyses, and complianceassessments against industry-best security and privacy standards (NIST SP 800-53 r5, FISMA, PCI DSSv4.2.1, CISA Zero Trust Maturity Model, CSF 2.0).
Architect and recommend a modernized, cost-effective "To-Be" security state incorporating ZeroTrust architecture, automated orchestration, tool consolidation, and a Government OwnedContractor Operated (GOCO) Security Operations Center (SOC) framework.
Execute a seamless, structured transition lifecycle from the "As-Is" state to the "To-Be" operationalmodel within strict schedule and budget parameters.
Pricing Benchmarks & Market Rate Expectations
Provide feedback on the commercial feasibility of managing this scope under a Firm-Fixed-Price (FFP)monthly fee structure.
Provide fully burdened hourly commercial labor rates or GSA schedule rates in the Washington, DCMetropolitan Area for equivalent labor categories (CISO, Security Architect, DevSecOps Engineer,Security Analyst, Network/System Engineer).
Submission Instructions & Response Format
Response Deadline: All responses shall be submitted electronically no later than October 30, 2026, at 5:00 PM EDT.
Submission Format: Responses must be submitted in PDF or Microsoft Word format, strictly limited to no more than fifteen (15) pages (excluding cover page and labor rate tables).
Point of Contact: Submissions and any clarifying technical inquiries must be emailed to Mary Green, USHMM Contracting Officer at magreen@ushmm.org with the subject line "RFI Response - USHMM Managed IT Security & MSSP Services".
Sustain, support, and execute day-to-day operations across the As-Is security infrastructure, perform security architecture evaluations, threat modeling, gap analyses, and compliance assessments, architect and recommend a modernized cost-effective To-Be Zero Trust state with automated orchestration, tool consolidation, and a GOCO SOC framework, and execute the structured transition lifecycle. Functional domains include AWS and GCP multi-cloud security with SCPs, IAM, WAF/WAAP tuning, and Terraform IaC, Active Directory lifecycle tracking and PAM with Delinea and JIT elevation, shared-drive ACL auditing and remediation, endpoint and server hardening with Jamf Pro and CIS Benchmarks, and wireless and network fabric management with NGFW, NAC, SASE/ZTNA, and monitoring.
We post new it & software opportunities in Washington, DC as agencies publish them. Get them in one email — free, and unsubscribe whenever.
"20024""Washington""DC""USA""100 Raoul Wallenberg Pl SW""USHMM_RFI Managed IT Security and MSSP Services.pdf"298651"file"".pdf""1""2026-10-05T21:44:53.265+00:00""63eb48fdfa7f4c7db4927a8837b03437""public""0""public""21c915191c654a2fa67d10d78d0a5fb8""0"2"0""USHMM_RFI Managed IT Security and MSSP Services.pdf"298651"file"".pdf""1""2026-10-01T21:30:52.437+00:00""1062994e2ac84b56a23bc9c5a04decb7""private""2026-10-05T21:44:53.265+00:00""1""controlled""26c55c8f205847069c00a1831f97cdb8""1"1"0""2026-10-05T21:44:53.265+00:00"Most Washington, DC work asks for the two below, and the solicitation documents are where it’s stated. One prequalification covers both — on this bid and the next.
A surety’s written statement that it expects to bond you up to a stated amount, subject to final underwriting. It’s what an agency asks to see before they take your bid seriously.
Source: SAM.gov (notice 3109fc67d44c46f998cae0abcb04f779), retrieved via the SAM.gov Get Opportunities API. View the official posting, and always confirm requirements and deadlines with the issuing agency.