RFP - Enterprise Identity and Access Management System for Harris County Universal Services

Harris County Universal Services is seeking proposals for an Enterprise Identity and Access Management (IAM) System through a Request for Proposal (RFP) to be implemented across county operations. The procurement seeks a comprehensive IAM solution that addresses critical functional requirements including end-to-end identity lifecycle automation, multi-factor authentication, single sign-on capabilities, privileged access management, and advanced analytics with AI/ML-driven threat detection. The system must be compatible with cloud, hybrid, and on-premises environments and align with multiple compliance frameworks including CJIS, HIPAA, PCI-DSS, GDPR, NIST, FedRAMP, and TX-RAMP standards. Vendors must propose delivery methods including premise-based, Software-as-a-Service (SaaS), or hybrid models, with all work to be performed within the United States. The pre-proposal conference is scheduled for January 6, 2025, at 10:00 a.m. via Microsoft Teams, with proposal submissions due by February 16, 2026, and the contract anticipated to begin May 1, 2026, for an initial one-year term with four optional renewal periods. Evaluation criteria include Scope of Service/System Functionality (30%), Integration and Reporting (25%), Interface Usability (10%), Implementation Services (10%), Project Team Experience (10%), Vendor Presentation (5%), and Pricing (10%).

The RFP includes a strong Minority- and Woman-Owned Business Enterprise (M/WBE) participation requirement, encouraging vendors to meet or exceed established participation goals through certified subcontractors. Harris County will recognize M/WBE certifications from multiple agencies including the City of Houston, State of Texas Comptroller's Office, U.S. Small Business Administration, and various national councils. The current IAM environment consists of approximately 22,000 active users supported by fragmented tools including One Identity suite components, Microsoft products, and homegrown systems, with identified gaps in privileged access management, password self-service, compliance reporting, and key management infrastructure. While specific budget ranges are not explicitly stated, the RFP requires comprehensive pricing covering enterprise IAM system implementation, project management, hardware, installation, configuration, data migration, training, maintenance, and support. Vendors must provide a fixed, all-inclusive fee using the provided BidTable and demonstrate a minimum of five years of experience implementing enterprise IAM systems for government or similar-sized entities, with three relevant public-sector references required.