Sources Sought for Mainframe and Legacy System Modernization

The Defense Information Systems Agency (DISA) is seeking certified 8(a) small businesses to provide mainframe and legacy system modernization services through this Sources Sought Notice (842673639). The procured services encompass a comprehensive suite of modernization capabilities including code modernization, data ecosystem transformation, hybrid cloud integration, API enablement, AI/ML implementation, and DoD security accreditation support. Key contract requirements mandate that all contractor personnel maintain a Secret level security clearance, with some positions potentially requiring Top Secret clearance and 8570 IA certifications, while classified work must be performed at DISA facilities in Mechanicsburg, PA. Respondents must demonstrate seven specific technical capabilities and submit detailed capabilities statements (not exceeding six pages), business information, CAGE codes, facility clearance levels, GSA contract vehicles, commercial price lists, and evidence of compliance with FAR clause 52.219-14 regarding subcontracting limitations. Responses are due by 4:00 PM Central Daylight Time on March 13, 2026, with submissions directed to shaun.m.bright.civ@mail.mil and amber.d.lindauer.civ@mail.mil.

This opportunity is designated as a Competitive 8(a) set-aside, restricting competition to certified small businesses in the SBA's 8(a) Business Development Program. The contract carries an anticipated value of $34 million based on the NAICS 541519 size standard, with a performance period spanning five years from December 1, 2026 through November 30, 2031, featuring individual task orders with their own performance schedules. The scope includes 23 detailed task areas covering project management office support, system assessments, and implementation of modernization strategies across mainframe and legacy platforms. Work may be performed remotely or at DISA locations or strategic partner facilities with Contracting Officer approval, though all classified work must occur at designated DISA facilities with no remote work permitted. The contract requires contractors to propose detailed deliverables with corresponding Contract Data Requirement Lists (CDRLs) and may necessitate purchases of incidental hardware, software tools, supplies, or materials as Other Direct Costs for each task order.