ICAM and AD Services - SOR.pdf

This is a Draft Statement of Work (SOW) dated July 23, 2026, for Enterprise Identity Credential and Access Management (ICAM) and Active Directory Services to be provided to the Defense Intelligence Agency (DIA) Chief Information Office.

The contractor shall provide comprehensive lifecycle management of entity identities from creation to revocation, including identity management services, PKI-based management, and interaction monitoring. The scope encompasses engineering, operations support, and technical refresh services across multiple secured networks to support DoD Intelligence Information Systems (DoDIIS). Services are designed for continuous operations support and rapid deployment of additional infrastructure to meet surge demands. The contract spans two to five years and serves as the foundation for ongoing service improvements and integration of transformative IT initiatives. Operations and Maintenance (O&M) is a core responsibility, with daily support, security updates, and modernization of IT services. The contractor must implement a common architecture, consolidate operations, support technology refresh, and deploy virtual and cloud environments to improve efficiencies.

Key requirements include: providing a three-tiered services structure with repeatable processes; establishing program management with detailed planning, Integrated Master Schedule (IMS), and monthly Program Management Reviews; performing system and security engineering including development and deployment of ICAM and AD solutions leveraging specific products (SailPoint Identity IQ, Radiant Logic VDS, Delinea Secret Server, Ping Federate, and others); replacing legacy systems (Microsoft Identity Manager, Quest Active Roles Server, Oracle Identity solutions, and ADFS); developing APIs and connectors for enterprise integration; conducting rigorous security testing; and producing comprehensive documentation. The contractor must provide 24/7/365 on-call support with Mean Time to Restore Service (MTRS) targets ranging from less than 30 minutes for critical services to less than 4 hours for low-priority items, achieving 99.999% service availability and greater than 90% first-time fix rate. Key personnel include a Program Manager, Senior Systems Architect, Lead Senior Systems Engineer, two Information Systems Security Engineers, Lead Information System Security Officer, and Lead Operations, Maintenance & Sustainment, all requiring minimum five years of relevant experience and appropriate certifications (DoD 8570.01-M IAT Level II minimum, with higher levels for Tier III functions). All personnel must maintain Top Secret/Sensitive Compartmented Information (TS/SCI) clearances with Counterintelligence polygraph. Primary place of performance is CONUS with additional locations at Colorado Springs CO, MacDill AFB FL, JBPHH HI, USAG Stuttgart Germany, and RAF Molesworth England, with minimum 25% of personnel onsite; System Administrator and Engineer labor categories must be exclusively filled by full-time onsite personnel. Contract requires Sensitive Compartmented Information Facility (SCIF) accreditation per ICD 705 and compliance with DIA security policies. Core operational hours are standard business hours with 24/7/365 on-call support for emergencies; extended hours require advance COR approval. Deliverables include Program Management Plan, IMS, Weekly Activity Reports, Program Risk Register, Knowledge Management Portal updates, Program Management Reviews, Standard Operating Procedures, Asset Inventory List, O&M Briefs, After Action Reports, and ICAM Service Availability metrics, submitted in various formats through the Knowledge Management Portal. All contractor personnel must obtain DoD 8570.01-M Information Assurance Technician certification (Level II minimum, Level III for architecture/engineering functions, with IASAE Level III for Tier III ICAM and AD Architecture). Training must be provided to end users, system administrators, and new team members using a mixture of online and instructor-led courses.