DHS Network Operations Security Center (NOSC) Network, Cloud, and Cyber Services (NCCS) 2. 0

The Department of Homeland Security Office of Procurement Operations, on behalf of the DHS Office of the Chief Information Officer, seeks network, cloud, and cybersecurity services under a Department-wide single-award IDIQ with Phase 1 proposals due November 19, 2026 and Phase 2 proposals due December 18, 2026, with anticipated award in late February 2027.

The IDIQ ceiling is $625,996,046 across the entire contract period (one 12-month base ordering period plus four optional 12-month extension periods and an additional six-month extension option under FAR 52.217-8), with a minimum guaranteed order of $10,000. NAICS code 541519 (Other Computer Related Services); PSC DF01 (IT and Telecom—IT Management Support Services).

Place of performance includes DHS facilities in the Washington DC metropolitan area, Stennis, Mississippi, Chandler, Arizona, and other CONUS sites designated in task orders. Contractor personnel must maintain appropriate security clearances up to TS/SCI/SAP and undergo background investigations. The prime contractor and all subcontractors must hold active Top Secret Facility Clearances.

The Statement of Work requires 24x7x365 monitoring and analysis of network infrastructure, cloud platforms, systems, applications, and cybersecurity events across the DHS enterprise spanning multiple classification levels from unclassified through Top Secret/SCI/SAP. Core services include Tier 1 and Tier 2 operational staffing, incident management and response, log management and analysis, vulnerability assessments, threat hunting, penetration testing, cyber forensics and malware analysis, email security, threat intelligence, intrusion defense, and security control assessments. Field engineering support must be provided regionally throughout the CONUS. The contractor must establish a Program Management Office applying ITIL v4, CMMI for Services, and NIST Cybersecurity Framework standards.

The Program Manager requires 10 years of cybersecurity management experience with PMP and CISSP certifications; the Deputy Program Manager requires 5 years of experience with CISSP certification. The solicitation identifies 89 distinct labor categories spanning six task areas with three seniority levels (Junior 0–2.5 years, Mid 2.5–7.5 years, Senior 7.5+ years), with senior-level technical roles requiring a minimum of two relevant technical certifications.

Offerors must demonstrate three examples of relevant prior experience within the last five years on contracts of comparable size, scope, and complexity covering network and systems management, cloud management, and cybersecurity services with geographically dispersed operations. Evaluation follows a two-phase process: Phase 1 is mandatory pass/fail down-select based on facility clearance verification; Phase 2 evaluates non-price factors (demonstrated prior experience, staffing and management approach) and price using best-value trade-off analysis. Pricing is submitted as fully burdened labor rates across three clearance levels (SBU/Secret/Remote, TS/SCI, and SAP) and three geographic locations (Washington DC, Chandler AZ, Stennis MS), with contractors entering percentage escalation and premium multiplier factors.

The solicitation is issued under FAR Part 12 (Commercial Items) with full and open competition. Questions on the final draft solicitation released November 4, 2026 are due at the pre-solicitation conference on November 9, 2026. Contact Contracting Officer Tisha Blue-Warren, Contract Specialists Nicole Belanger (Nicole.Belanger@hq.dhs.gov) or Michael Lipperini (Michael.Lipperini@hq.dhs.gov). As of October 22, 2026, the original schedule (questions due September 22; Phase 1 due October 6; Phase 2 due October 21; award late November 2026) has been superseded by the revised timeline above. A reading room containing For Official Use Only documents is located at TSA Headquarters in Springfield, Virginia, available during Phase 2 with 24-hour advance registration required and access limited to two named vendor representatives per company.