Public Key Infrastructure (PKI) Program for Department of Defense (DoD) Public Key Enabling (PKE) Engineering Support

The Defense Information Systems Agency (DISA) is seeking Public Key Infrastructure (PKI) engineering support services for the Department of Defense's Public Key Enabling (PKE) program through a multi-year, multi-task contract. The procurement encompasses comprehensive PKI consultation and engineering support including custom code development and maintenance, requirements analysis, Information Assurance analysis, facilitation of interoperability with external partners, integration of commercial products with DoD PKI, and configuration documentation for both NIPRNet and SIPRNet systems. Contractors must possess an interim or final Secret Facility Clearance and demonstrate capabilities across six specific areas including PKI infrastructure support, custom software development, customer support, commercial product configuration, PKI credential access tools development, and federal partner PKI requirements support. Interested businesses must submit capabilities statements by 8:00 AM CDT on September 2, 2025, addressing these capability requirements. The work will primarily be performed at DISA, Fort Meade, MD and within the National Capital Region.

This opportunity is designated as a Total Small Business set-aside under NAICS code 541512 (Computer Systems Design Services) with a size standard of $34.0 million, targeting small businesses including Small Disadvantaged, 8(a), Service-Disabled Veteran-Owned, HUBZone, and Woman-Owned enterprises. The requirement represents a reestablishment of a previous contract (HC102808D2015/0026) that was previously held by Booz Allen Hamilton, with tasks transitioning from an existing PKI Sustainment contract. The anticipated period of performance spans five years from August 2026 through August 2031, structured as one base year plus four one-year option periods. The contractor will maintain and enhance 15 existing PKI software tools across Windows and Linux platforms, with particular emphasis on updating tools to align with NSA memory safety guidance and post-quantum cryptography requirements. Critical support areas include managing tools like InstallRoot for trust store management, CRLAutoCache for Certificate Revocation List operations, and MailCrypt for email encryption, while supporting DoD's migration to stronger cryptographic algorithms and Zero Trust implementation.