LATEST Unified ICAM Delivery Contract RFI_24Jul25.docx

Title: Request for Information: Unified Identity, Credential, and Access Management (ICAM) Delivery

The Army Contracting Command, Aberdeen Proving Ground (ACC-APG) supporting Project Manager Interoperability, Integration and Services (PM I2S), Product Lead Enterprise Identity, Credential, and Access Management (PdL E-ICAM), is conducting market research to identify interest and request industry’s feedback on solutions for ICAM Sustainment, and ICAM Modernization, as its two principal areas of effort.

The objective of this RFI is to identify the best options using industry standard protocols to sustain and modernize a global integrated ICAM platform. This capability must use Agile methodologies to deliver IT solutions services that govern logical access control for person and non-person entities (NPEs) access to IT resources across cloud, on-premises, and tactical environments (when connected) on all classification levels (i.e., NIPRNet, SIPRNet) using a Zero Trust security model.

This RFI is issued solely for information and planning purposes – it does not constitute a Request for Proposal (RFP) or a promise to issue an RFP in the future. This request for information does not commit the Government to contract for any supply or service whatsoever. The Government is not seeking proposals and will not accept unsolicited proposals. Respondents are advised that the Government will not pay for any information or administrative costs incurred in responding to this RFI; all costs associated with responding to this RFI will be solely at the interested parties’ expense. Proprietary information shall NOT be submitted. The Government shall not be liable for, or suffer, any consequential damages for any improperly identified proprietary information.

Not responding to this RFI does not preclude participation in any future RFP, if issued. If an RFP is released, it will be synopsized on the Sam.gov website. It is the responsibility of the interested party to monitor this site for additional information pertaining to this requirement. All material submitted in response to this RFI must be unclassified.

RFI Responses shall include the following:

Company Profile: Describe your company's core business and include the following: company name, company address, points-of-contact information, including name, phone number, and e-mail address, number of employees, annual revenue history, office location, CAGE code, Unique Entity Identification number, NAICS code and current business size contract status. If your company has not registered in sam.gov, you are encouraged to do so now since you must be registered to receive a contract.

1. The unique Government requirements are:

At this time, PdL E-ICAM does not know of any additional special certifications or requirements.

2. Security Requirements: The contractor will be required to have at a minimum, a Secret Security Clearance for all personnel with the exception to administrative support personnel. The contractor shall also be required to have Secret Facility Clearance (FCL).

Request for Information Questionnaire:

1. ICAM Sustainment Capabilities (Existing State): Please describe your experience (focus on DoD/Federal experience) providing solutions and approaches to support the following ICAM components:

1.1 Sustainment Capabilities

a. Identity Repository: currently using Radiant Logic

b. Multi-Factor Authentication (MFA): currently using a cryptographic hardware token and software

c. Identity Governance and Administration (IGA): currently using SailPoint IdentityIQ

d. Privileged Access Management (PAM): currently utilizing CyberArk Audit Readiness

e. Directed support of Army Internal Control over Financial Reporting (ICOFR) systems during audit for any entity providing business process or system support to a Reporting Entity.

f. Help Desk Support: Tiers 3 and 4

g. System and incident maintenance

h. Compliance

1.2 Audit: System and Organization Controls (SOC) Type I and Type II audit compliance for Financial and Business applications

1.3 Incremental Improvement of Sustainment Capabilities: Describe your experience (Focus on DoD/Federal experience) with making incremental improvements to existing ICAM systems. Examples include:

a. Workflow Optimization

b. Integration with New Systems: Integrating ICAM components with new applications and services, utilizing industry standard protocols (e.g., SAML, OAuth, OIDC).

c. Reporting & Analytics

2. Sustainment Contracting Approach

a. Provide your recommendation for the most effective contracting approach which supports ICAM Sustainment, without a prime integrator, on the tasks listed above, and using the criteria below.

1) Best supports continual support of currently deployed and operational E-ICAM capabilities.

2) Best supports Agile delivery of known incremental improvements across the known capabilities.

3) Integrates and sustains future / new ICAM capabilities after their full deployment

4) Decommissions old / legacy ICAM capabilities after their useful lifecycle is completed

5) Works effectively across multiple Industry Partners

b. Describe your recommendation for a rapidly awardable contracting approach for ICAM Sustainment, with the criteria of 1.1., a., through g above, without a prime integrator.

3. ICAM Modernization Capabilities (Future State):

3.1 Modernization Capabilities: Please describe your experience (focus on DoD/Federal experience) providing solutions and approaches to support: unknown and changing future requirements, to include examples of potential (but not limited to) capabilities such as the following.

a. Emerging Technologies

b. Multi-environment

c. API Integration

d. Agile Development

e. Zero Trust Architecture (e.g., NIST SP 800-207)

f. DevSecOps

3.2 Modernization Contracting Approach

a. Provide your recommendation for the most effective contracting approach which supports ICAM Modernization, without a prime integrator, on the tasks listed above, and applying the criteria below.

1) Best supports continual Agile delivery of unknown future capabilities across multiple unknown future Modernization efforts.

2) Integrating new ICAM components with other new applications and services being developed, utilizing industry standard protocols (e.g., SAML, OAuth, OIDC).

3) Integrating new ICAM components with current applications and services, in Sustainment, utilizing industry standard protocols (e.g., SAML, OAuth, OIDC).

4) Works effectively across multiple Industry Partners

b. Describe your recommendation for a rapidly awardable contracting approach for ICAM Sustainment, with the criteria of 5.1, a.through g above, without a prime integrator.

4. Unified Approach to Execution and Delivery

4.1. Describe how you will ensure all ICAM capabilities (in both the Sustainment and Modernization categories) provide a global integrated platform that leverages authoritative data to grant authorized access to IT resources across the Army Unified Network.

4.2 Describe how, in a multi-industry partner operating environment within ICAM, you will work with other Industry Partners to seamlessly support integrated and interdependent ICAM efforts, and how you will provide recurring objective artifacts showing how you hold yourself accountable and demonstrate zero intra contractor conflict or lack of cooperation.

4.3 It is expected that Army Enterprise and Tactical ICAM offices will combine into a single Army Unified ICAM program office in the near future. Future efforts will need to be able to integrate with Tactical ICAM were practicable, as opposed to only supporting Enterprise – ICAM. Describe how you would ensure Army capabilities are able to support a Unified ICAM program.

5.0 Responses: All industry responses and this request are due no later than 1200 pm, 29 August 2025, to Contract Specialist Kenneth Faulcon, (Kenneth.faulcon2.civ@army.mil) and shall be no longer than 10 pages in length (not inclusive of company information and attached charts).