RFR #146_MD78SeniorSystemsSecuritySpecialistRFR012926

The Maryland Health Benefit Exchange (MHBE) is requesting resumes for up to two Senior Systems Security Specialist positions under its IT Consulting and Technical Services IDIQ Master Contract, with submissions due February 11, 2026 at 10:00 a.m. EST. Eligibility is restricted to Master Contractors who hold awards under Functional Area 6; each contractor may submit a maximum of one candidate.

The role requires planning, designing, developing, administering, monitoring, and governing security policies, controls, and systems for the Health Benefit Exchange and related systems, including cloud security controls, security assessments, incident response, Identity and Access Management administration, and firewall management. Minimum qualifications include eight years of experience analyzing, defining, deploying, monitoring, and administering security requirements for large mission-critical IT systems; five years of day-to-day security operations experience; four years of hands-on cloud security experience; four years of AWS production experience; and four years of Windows and Linux security administration experience. Candidates must demonstrate experience with Security Incident Response and Forensics evaluation using SIEM tools and working knowledge of specific AWS security features. Preferred qualifications include five years of experience implementing security controls for public-facing systems, five years of specialized ForgeRock and SailPoint IAM product experience, three years of experience with health insurance marketplace security policies, and relevant security certifications such as CISSP, ISO, or CSA STAR Cloud Security Advisor.

The anticipated start date is March 2, 2026, with the base period extending through June 30, 2026. MHBE retains the unilateral option to renew for two additional one-year terms through June 30, 2028. The primary work location is 750 East Pratt Street, 6th Floor, Baltimore, Maryland, though candidates may work on-site or remotely as determined by MHBE. Proposed hourly rates cannot exceed the established Master Contract rate. Evaluation is weighted toward technical factors over financial factors. Questions are due February 5, 2026 at 10:00 a.m. EST. Submissions must be sent to Hix.procurement@maryland.gov in two separate emails — one containing technical and Public Information Act materials and another containing financial information.