Sources Sought Notice - Enterprise Network and Information Security Enhancement (ENISE) Services

This is a Sources Sought Notice (SSN) for market research purposes only. This SSN is issued solely for information and planning purposes – it does not constitute a Request for Proposal (RFP) or a promise to issue an RFP in the future. This SSN does not commit the IRS to contract for any supply or service. Further, the agency is not at this time seeking proposals and will not accept unsolicited proposals. This SSN is being published to identify potential sources capable of providing support services for the Internal Revenue Service (IRS) Enterprise Network and Information Security Enhancement (ENISE).

Responders are advised that the agency will not pay for any information or administrative costs incurred in response to this SSN; all costs associated with responding to this SSN will be solely at the interested party’s expense. Not responding to this SSN does not preclude participation in any future RFP, if any is issued. It is the responsibility of the potential offerors to monitor the agency sources for additional information.

Background

The IRS has identified cloud technology as a key support enabler: hosting and managing big data and enabling IT operational excellence through use of complex applications and programs. Cloud computing will allow the IRS to efficiently manage, operate and run a very large-scale computing infrastructure that delivers the capacity, availability and performance that will permit nearly 90,000 end users to focus on mission accomplishment while accessing more than 500 applications and programs.

This effort supports the Cybersecurity Information Protection Enhancement Controls (CIPEC) program’s mission to enhance and standardize data protection controls across the enterprise, safeguarding sensitive taxpayer data, and ensuring the integrity and security of the IRS systems.

The IRS seeks contractor support to optimize IRS CIPEC Program’s Data Loss Protection (DLP) Technical team with experienced Cloud Technical, Federal Information Security Management Act (FISMA) Compliance, and Program support Subject Matter Experts (SMEs), who successfully supported the implementation/integration of an “on prem” Enterprise DLP Commercial-Off-The-Shelf (COTS) Solution within an Enterprise Agency’s Hybrid Cloud Ecosystem – primarily utilizing the COTS Cloud product offerings of Microsoft, Skyhigh, Broadcom, Palo Alto etc.

Objective

No decision has yet been finalized regarding the small business strategy for this acquisition.  The purpose of this SSN is to identify interested vendors with capabilities to meet all the Government requirements at a fair market price. The agency anticipates awarding one Contract/Task Order to obtain contractor support services.

The agency anticipates that it will issue an RFP in the second Quarter of FY26. Vendors’ SSN responses shall be sent to Contracting Officer, Michele Evans, at Michele.N.Evans@irs.gov and Contracting Officer, Jessica Camunez, at Jessica.R.Camunez@irs.gov  on or before 14 November 2025, 12PM EST. The agency is not seeking marketing information and will not review it.

Submission Instructions

The North American Industry Classification Systems (NAICS) Code proposed for the requirement is 541512 with a size standard of $34M.

The Government requests that all interested parties submit the information outlined below.

1. Contractor Name
2. Address
3. Point of Contact (POC)
4. POC phone number and e-mail address
5. System for Award Management (SAM) Unique Entity Identifier (UEI)
6. Brief description of the company's business size (i.e., annual gross revenue for the prior three (3) years) to include all Small Business information and any Government Wide Vehicles of which the Contractor is an awardee.
7. Anticipated teaming or subcontracting arrangements (delineate between work accomplished by prime and work accomplished by teaming partners)
8. Provide a statement addressing Section 9.2 Contractor Eligibility, that the Contractor is certified CMMI Level 3 for services and ISO/IEC 2700/2000/9001.
9. No more than three (3) corporate experiences in similar size, scope and complexity to the enclosed PWS scope shall be submitted. The corporate experience shall demonstrate the company’s experience in completing the information as stated in all list Tasks of the draft PWS included in this announcement.  Contractors shall include the contract number, funded dollar value(s), period of performance, and a relevant scope summary.
10. Page limit and formatting requirements: The company's standard format is acceptable; however, the limit for all responses shall be five (5), 11 font size, 8 ½ x 11-inch pages.

It is requested that all responses submitted are clear, concise, and provide accurate detail to provide that the Contractor is both capable and interested in performing the tasks as stated in the draft PWS.

If you have any questions, please contact the Contracting Officers listed above.