RFP for MES SYSTEM INTEGRATION PLATFORM AND SERVICES

The Oregon Health Authority and Oregon Department of Human Services are jointly requesting proposals for Medicaid Enterprise System (MES) System Integration Services, with proposals due August 7, 2026 at 12:00 PM PST and questions due July 17, 2026. No pre-proposal conference will be held. Oregon supplier preferences and recycled materials preferences apply; a mandatory Certified Disadvantaged Business (CDB) Outreach Plan under Oregon Revised Statutes 200.055 (COBID certification) must accompany all proposals, though it is not scored.

Phase 1 encompasses discovery, gap analysis, MMIS technical and business charting, updated system integration requirements, gap assessment, and development of a master integration plan with cost estimates for subsequent phases. The contractor must demonstrate a minimum of five years' experience in system integration services for large-scale public sector programs, with preference for State Medicaid, MMIS, or CMS certification experience, and must have completed at least one similar project within the past five years. Key personnel must include PMP-certified staff and personnel holding relevant cloud or integration platform certifications.

The solution must integrate 127 system interfaces spanning claims management, eligibility processing, pharmacy services, financial transactions, and provider data maintenance, with bidirectional exchanges to CMS, state agencies, federal systems, and commercial vendors. All work products become the property of the Agencies. Offshore resources are prohibited unless exempted by the State Chief Information Officer. Proposers must complete Attachment E Price Proposal Form for Phase 1 work and address integration platform software, architecture and modeling tools, data management strategy, security and compliance tools, testing and quality assurance capabilities, and operations and support tools. Security and compliance mandates include HIPAA, HL7 FHIR, ASC X12, CMS-mandated interoperability standards, AES-256 encryption, SOC 2 Type 2 audit compliance, and NIST Special Publications 800-53, 800-37, and 800-207. Solutions must integrate with Oregon's centralized identity management system and Laserfiche document management platform; no alternative document management systems are permitted without formal exception approval.

Evaluation will be scored on a maximum of 2,000 points: administrative proposal elements (350 points), technical proposal components including solution delivery approach and platform development strategy (1,050 points), value-added services (100 points), and Phase 1 price proposal (600 points). Reference checks will be completed for qualifying proposals. The anticipated contract term is five years with options to renew, subject to funding availability and Executive Steering Committee approval. The selected contractor may be awarded additional phases for platform development and operations and maintenance support under new contracts or amendments.