RFI - ICAM and AD Services

The Defense Intelligence Agency issued a Request for Information on September 1, 2026 to identify capable contractors for Enterprise Identity, Credential, and Access Management (ICAM) and Active Directory services, with capability statements due by 4:00 PM (EST) on September 15, 2026. This is a market research RFI; responses do not bind the government to award a contract. DIA seeks comprehensive feedback on capabilities, technical approaches, commercial best practices, and lessons learned to refine acquisition strategy and requirement definition.

The anticipated requirement encompasses implementation, integration, operations, sustainment, enhancement, and modernization of ICAM and AD capabilities across multiple secure DoD Intelligence Information Systems networks, including modernization of legacy systems (Microsoft Identity Manager, Quest Active Roles Server, Oracle Identity solutions, ADFS) and deployment of emerging technologies (SailPoint Identity IQ, Radiant Logic VDS, Delinea Secret Server, Ping Federate). Work spans two to five years and is organized across five integrated mission areas: Enterprise ICAM and AD, Zero Trust, cyber security, Risk Management Framework compliance, and technology modernization.

The requirement includes worldwide support with a "follow-the-sun" operational model, requiring minimum 25 percent full-time onsite personnel at CONUS sites (National Capital Region, Colorado Springs, MacDill AFB) and OCONUS sites (Joint Base Pearl Harbor-Hickam, USAG Stuttgart, RAF Molesworth). Key personnel must maintain Top Secret/Sensitive Compartmented Information clearances with counterintelligence polygraph and hold DoD 8570.01-M Information Assurance Technician certification (Level II minimum; Level III for architecture and engineering functions). Contractors must achieve SCIF accreditation per ICD 705 and provide 24/7/365 on-call support with 99.999 percent service availability and greater than 90 percent first-time fix rates.

Capability statements are limited to 20 pages and must include company name, address, point of contact, phone, fax, email, NAICS codes, and business size/status. Unclassified responses go to ~DIA_CFOAC3-Submissions@dodiis.mil; classified responses to ~DIA-CFO-AC2C-OfferSubmissions@coe.ic.gov. The RFI questionnaire addresses five technical competency areas with specific examples required for each: multi-domain ICAM experience, enterprise cybersecurity operations and engineering, Zero Trust design aligned with NIST SP 800-207, technology modernization, and hybrid infrastructure deployment. Funding is subject to FY27–31 availability.