CIO Microsoft Sentinel Implementation FY26

Closed Pre-Solicitation Posted

Not the latest version. See the latest solicitation from .

Solicitation number
W91QF026QA015
Agency
Responses due
Set-aside
No set-aside

Opportunity facts

Place of performance
Pennsylvania 17013, United States

Notice details come from SAM.gov. Updated .

About this opportunity

Written by GovTribe AI ·

The Department of the Army Materiel Command Mission and Installation Contracting Command Fort Eustis (MICC Fort Eustis) is soliciting sources for design, implementation, and operationalization of Microsoft Sentinel as a Security Information and Event Management (SIEM) and Security Orchestration, Automation, and Response (SOAR) platform, with a sources-sought statement-of-interest due July 8, 2026. The requirement is for the US Army War College (USAWC) and Army University and carries no set-aside.

All work shall be performed remotely via telework with no on-site presence required. The contractor must comply with NIST SP 800-53 and OMB M-21-31 Event Logging Tier 2 standards, achieve a minimum 98% data ingestion success rate across all targeted data streams, and onboard approximately 350 Intune-managed endpoints. Data sources include Microsoft Entra ID, Intune, Defender for Endpoint, Defender XDR, M365 Audit Logs, Defender for Identity, and Defender for Office 365. The contractor must hold Microsoft Solution Partner status and Tier-1 Direct-Bill Cloud Solution Provider certification, demonstrate DoD and NIST compliance experience, and provide qualified Key Personnel including a Lead Sentinel Architect with minimum five years SIEM/SOAR experience and two years direct Microsoft Sentinel experience; baseline DoD 8570.01-M certification is required.

Scope encompasses discovery and environment assessment, system architecture and design (requiring Government approval of a Solution Design Document before proceeding), platform implementation with analytics rules and incident response automation, and knowledge transfer with comprehensive documentation and operational enablement. The contractor must deliver signed Non-Disclosure Agreements within 10 days prior to commencement and complete OPSEC Level I training within 30 days. An optional Task 5 provides for Managed Services with defined Service Level Agreements exercisable at Government discretion. Payment follows defined contract milestones; Azure consumption is billed monthly on actual usage.

Notice text

This is a SOURCES SOUGHT NOTICE only. Interested vendors may submit a statement of interest & documentation of their capabilities to the provided contact email.

This requirement is for the procurement of highly specialized commercial professional services to design, implement, and operationalize the Microsoft Sentinel platform. These services require intimate and expert-level knowledge of USAWC's specific Microsoft 365 A5 licensing and security configuration.

The critical performance requirements for this acquisition center on the successful implementation of a fully operational security platform. The contractor must design a system that complies with NIST SP 800-53 and OMB M-21-31 event logging mandates. The contractor shall successfully onboard approximately 350 endpoints and all specified M365 data sources, ensuring at least a 98% data ingestion success rate. The contractor must also deliver comprehensive training and "as-built" documentation to ensure Government self-sufficiency.

Please see attached documents for further details.

Files

File Type Posted
CIO_Product_Specs_MS Sentinel Implementation.pdf PDF
PWS MS Sentinel Implementation.docx DOCX document

Notice history

Notice Type Posted
CIO Microsoft Sentinel Implementation FY26 Latest solicitation Solicitation
This notice Original Pre-Solicitation

On GovTribe

Work this opportunity

  • Track it in your pipeline
  • Find teaming partners
  • Similar opportunities
  • Ask GovTribe AI about this opportunity
Try for free Login