Q25-7678AL- Secrets and Certificate Management

Closed State & local contract opportunity Posted

Solicitation number
2124513
State
New York
Responses due

Opportunity facts

Points of contact

Updated .

About this opportunity

Written by GovTribe AI ·

The New York Power Authority (NYPA) has issued a Request for Proposal (RFP) for a comprehensive Secrets and Certificate Management solution, seeking a centralized, cloud-agnostic tool to manage critical authentication and security information across its enterprise. The proposed system will focus on streamlining the creation, assignment, discovery, rotation, expiry, and auditing of secrets, including API keys, passwords, certificates, SSH keys, and encryption keys. Key objectives include enhancing security, ensuring compliance, and simplifying management of sensitive information within NYPA and Canal IT infrastructure. The solution must automate generation, identify certificate owners, provide continuous monitoring of expiration dates, send timely email alerts, and maintain a centralized repository for certificate management. Vendors are requested to provide software/software licenses (preferably cloud-based), implementation services, professional training, and ongoing software support. The proposal submission deadline is August 7, 2025, at 4:00 PM, with a proposed contract term of three years covering all New York State counties.

The procurement opportunity does not include any specific set-aside designations for service-disabled veteran-owned businesses or minority-owned enterprises, with 0% participation goals for these categories. No incumbent vendors or existing contractors are explicitly mentioned in the RFP. The solicitation is open to business entities that can provide a comprehensive secrets and certificate management solution, with no restrictions on the type of organization that can respond. While specific budget ranges are not detailed, the enterprise-wide scope suggests a potentially significant investment in cybersecurity infrastructure. The contract will cover software licensing, implementation, training, and support services for a three-year period, indicating a comprehensive approach to secrets and certificate management across NYPA's technological ecosystem.

Opportunity text

As posted by the source.

THE NEW YORK POWER AUTHORITY (HEREAFTER, THE "AUTHORITY" OR "NYPA") INVITES YOU TO SUBMIT A PROPOSAL TO FURNISH ALL SUPERVISION, LABOR, MATERIALS AND EQUIPMENT (EXCEPT FOR SERVICES, MATERIALS AND/OR EQUIPMENT TO BE FURNISHED BY OTHERS AS SPECIFICALLY REFERRED TO IN THE CONTRACT DOCUMENTS) FOR THE FOLLOWING PROJECT:

This Request for Proposal (RFP) seeks a new solution for the following:

  1. Tool is agnostic, centralized solution for "secrets" management. In cloud environments, "secrets" are critical pieces of information such as API keys, passwords, certificates, SSH keys (Secure Shell keys), encryption keys and any other keys within NYPA. They act as authentication tokens, granting access to various cloud resources and services. Like a fingerprint, a secret uniquely identifies and secures a particular cloud instance. The proposed system shall streamline the creation, assignment, discovery, rotation, expiry, auditing, of "secrets" and will enforce policies related to "secrets". By implementing this solution, the goal is to enhance security, ensure compliance, and simplify the management of sensitive information across the cloud environment.
  2. Tool offers a comprehensive solution that automates generation, identification of the certificate owners, management, monitoring, notifications and lifecycle handling of cryptographic digital certificates. The proposed system shall offer key benefits such as the tool identifies, catalogs, and manages digital certificates and the owners within NYPA's & Canal IT infrastructure, ensuring network security, compliance, and efficiency. The tool shall continuously monitor expiration dates, send timely email alerts to certificate owners and stakeholders for proactive renewal or replacement, maintain a centralized repository for streamlined management of expiration dates, issuance details, and renewal statuses, reducing overlooked certificates and offers comprehensive insights into certificate statuses, renewal trends, and promote risk areas, aiding in improved planning and decision-making.

NYPA is requesting vendors to provide the following in connection with their proposed solution(s) for (1) Secrets or (2) Certificate and/or both (1) and (2) for Secrets and Certificate Management :

  • Software/Software Licenses preferably in the Cloud
  • Software Implementation & Professional Services
  • Training
  • Software Support/Maintenance

Location of Event: Enterprise wide NYPA and Canals

Please go to NYPA.gov to be invited to this bidding opportunity.

Service-Disabled Veteran-Owned Set Aside: No

Total MWBE Participation Goals: 0%

Service-Disabled Veteran-Owned Business Contracting Goal: 0%

Disadvantaged Owned Sub-Contracting Goal: 0%

Due date:08/08/2025 4:00 PM

Contract term: 3 years

County(ies): All NYS counties

Location: WPO

Business entities awarded an identical or substantially similar procurement contract within the past five years:

None

On GovTribe

Work this opportunity

  • Track it in your pipeline
  • Similar opportunities
  • Ask GovTribe AI about this opportunity
Try for free Login

GovTribe for State & Local Contractors