Justification for Restricting Competition (JRC) Post-Quantum Cryptography and Federal Identity Management Support Services
Awarded Limited / Sole Source Justification Posted
- Solicitation number
- 47QACB26Q0069
- Agency
-
Office of Administrative Services
General Services Administration
- Set-aside
- No set-aside
Opportunity facts
- Contract number
- 47QACB26C0004 Federal contract award
- Awardee
- Scalar LLC
- NAICS code
- 541519 Other Computer Related Services
- PSC
- R499 Support- Professional: Other
- Place of performance
- Washington, District of Columbia 20405, United States
- Points of contact
Notice details come from SAM.gov. Updated .
About this opportunity
GSA's Office of Administrative Services has awarded a sole-source contract to Scalar, LLC for Post-Quantum Cryptography and Federal Identity Management Support Services on September 24, 2026.
The justification rests on specialized capability requirements at the intersection of federal identity management and post-quantum cryptography. OMB Memorandum M-26-15 mandates agency migration to post-quantum cryptography by December 31, 2030, and directs GSA to establish an interagency ICAM modernization working group and support PQC-ready access system testing for 2027 pilots. Market research covering 52 MRAS RFI respondents and industry discussions found no other vendor combining operational federal FICAM and Federal PKI expertise with practical PQC experimentation experience in federal identity ecosystems. Scalar, an SBA-certified Service-Disabled Veteran-Owned Small Business, demonstrates the required qualifications through prior FICAM policy implementation, PQC readiness assessments, Federal PKI and HSM architecture work, and enterprise identity architecture delivery for the Department of State and Department of Defense.
The contractor must deliver PQC testing and experimentation in isolated environments per NIST standards; quantum-resistant FRTC development for PACS, credentials, FIDO2, mPIV, and derived credentials; governmentwide guidance for IDManagement.gov; and Federal PKI policy and FICAM Architecture updates for PQC readiness. The period of performance runs from September 30, 2026, through June 15, 2027, structured as a Firm-Fixed-Price contract with no option periods. The acquisition is authorized under 41 U.S.C. 1901 and RFO 12.102(b).
Notice text
GSA’s OGP Federal Identity and Cybersecurity Division aligns civilian agency ICAM policy with the FICAM Architecture and manages the FIPS 201 Evaluation Program, which approves PIV and PACS products for the GSA Approved Products List.
OMB M-26-15 directs agencies to migrate to post-quantum cryptography by December 31, 2030, requires GSA to establish an interagency ICAM modernization working group, and tasks the FICAM Office with testing PQC-ready access systems for 2027 pilots.
To support this mandate, the Division requires specialized services in four areas:
- PQC Testing: Plan and document testing of access systems in an isolated contractor environment aligned with NIST standards.
- Quantum-Resistant FRTCs: Develop and update FRTCs for PACS, credentials, FIDO2, mPIV, and derived credentials.
- Governmentwide Guidance: Produce guidance on next-generation digital identity technologies for IDManagement.gov.
- PKI and FICAM SME Support: Support updates to Federal PKI policies and the FICAM Architecture for PQC readiness, including algorithm transition and hybrid cryptography planning.
Awarded contract 47QACB26C0004 to unknown vendor for unknown amount on 2026-09-24.
Files
| File | Type | Posted |
|---|---|---|
| Justification for Restricting Competition (JFRC)1 - SAM-FICAM PQC_Redacted.pdf |
On GovTribe
Work this opportunity
- Track it in your pipeline
- Find teaming partners
- Similar opportunities
- Ask GovTribe AI about this opportunity