Arch Systems LLC

Arch Systems LLC, a women-owned, HUBZone-certified, minority-owned small business based in Baltimore, Maryland, operates as a prime contractor (93% of recent awards) and subcontractor delivering enterprise IT services, data quality platforms, AI/ML solutions, and DevSecOps capabilities across 36 distinct federal agencies. The firm is a Subcontinent Asian (Asian-Indian) American-owned entity structured as a limited liability company; recent awards reflect consistent pursuit under Total Small Business, HUBZone, and Woman-Owned Small Business set-asides, with recurring full-and-open vehicle positions on large government-wide acquisition contracts.

Arch Systems' portfolio is anchored by four multi-billion-dollar prime vehicle positions awarded in late 2024 and early 2026: the OASIS+ Total Small Business Set-Aside IDIQ (ceiling $999.999 billion, through December 2029), the OASIS+ Women-Owned Small Business IDIQ (ceiling $999.999 billion, through September 2029), the Polaris GWAC Small Business Pool (ceiling $999.999 billion, through March 2031), and the Polaris GWAC Women-Owned Small Business Pool (ceiling $999.999 billion, through March 2031). Defense-side IDVs include a $151 billion Scalable Homeland Innovative Enterprise Layered Defense (SHIELD) indefinite delivery contract awarded by the Missile Defense Agency (December 2025, through December 2035) and a $4 billion SeaPort Next Generation (SeaPort-NXG) IDC through Naval Sea Systems Command (January 2025, through January 2029). On the civilian side, Arch Systems holds a $12.25 million single-award NIH HBCU Path to Excellence and Innovation IDIQ (October 2024, through September 2029) and a $30 million single-award Health Resources and Services Administration independent testing, verification, and validation BPA (April 2023, through April 2028). The firm also maintains active positions on the Chief Information Officer - Solutions and Partners 3, Small Business (CIO-SP3 SB) GWAC, the Business and Professional Support Services III (BPSS III) IDIQ ($175 million ceiling through August 2026), and the GSA Multiple Award Schedule.

Recent prime task-order awards demonstrate capability depth across health IT, defense systems, and civilian digital modernization. A $20.45 million Air Force delivery order under CIO-SP3 SB (April 2026, through March 2029, time-and-materials) is for the Kessel Run Enterprise Software Toolchain (KREST), an enterprise software platform. A $1.763 million Army definitive contract (April 2026, through April 2028, firm fixed price) covers Hawkeye DQ, an AI data-quality platform for Army human resources and payroll system accuracy and auditability. An $18.936 million USCIS delivery order under CIO-SP3 SB HUBZone set-aside (April 2025, through November 2028) funds Business Architecture Development and Strategic Specification Design (BADSSD) for enterprise architecture documentation and IT infrastructure modernization. A $19.605 million Centers for Medicare and Medicaid Services delivery order under the Provider Enrollment and Oversight IDIQ (November 2025, through November 2030) addresses Medicare and Medicaid fraud, waste, and abuse detection and prevention. A $17.78 million National Oceanic and Atmospheric Administration delivery order under CIO-SP3 SB Competitive 8(a) set-aside (September 2024, through September 2027, time-and-materials) provides support to the National Weather Service Office of Science and Technology Integration Meteorological Development Laboratory. An $18.28 million Head Start monitoring delivery order under the GSA Multiple Award Schedule originally issued by the Department of Interior but transferred to the Department of Health and Human Services (March 2026, through September 2030, time-and-materials) delivers digital services for Administration for Children and Families Office of Head Start monitoring operations. On the defense side, Arch Systems received a $139,955.55 Air Force Research Laboratory purchase order (March 2026, through September 2026, firm fixed price) for TWINTRAP, an AI/ML-enabled digital twin decoy network for advanced cyber deception.

Customer concentration is heavily skewed toward health and human services: the Centers for Medicare and Medicaid Services (9 awards, $2.08 billion combined potential value), the National Institutes of Health Office of Logistics and Acquisition Operations (5 awards, $188.1 million potential value), and the Administration for Children and Families (3 awards, $27.2 million potential value) together account for substantial dollar exposure. By potential value across the full portfolio, the NIH NITAAC Office of Information Technology Acquisition commands $60 billion in ceiling (split across three GWAC positions including OASIS+ and Polaris pools), followed by Naval Sea Systems Command ($4 billion), and the Centers for Medicare and Medicaid Services ($2.08 billion). GSA Federal Acquisition Service (7 awards, $20.9 million potential value) and the Internal Revenue Service (6 awards, $3.6 million potential value) round out the top five by award count. This concentration among health agencies and GSA-managed vehicles reflects a deliberate positioning around civilian IT modernization, health IT governance, and data-driven administrative capability rather than defense prime work — though the newly awarded SHIELD and SeaPort-NXG vehicles position the firm to pursue high-value defense task orders.

On the Chief Information Officer - Solutions and Partners 3, Small Business vehicle, Arch Systems has placed 21 task orders worth $107.9 million combined potential value, spanning customer agencies including FEMA ($14.8 million for Crisis Management System IT operations and maintenance through November 2027), DHS Immigration and Customs Enforcement ($8.824 million for Systems Engineering and Technical Assistance through September 2026), TSA (multiple WebEOC and emergency operations center orders totaling over $2.1 million), IRS (training delivery and IT support), and various civilian agencies. Under the GSA Multiple Award Schedule, the firm has secured 8 task orders valued at $83.2 million combined potential value, concentrated in Head Start monitoring support and related HHS delivery orders. The BPSS III IDIQ carries 3 task orders worth $881 thousand combined potential value to the National Institutes of Health and its Office of Logistics and Acquisition Operations.

Activity trajectory shows growth from 3 awards in 2022 to a peak of 15 in 2024, followed by 12 in 2025 and 5 (partial year through April 2026). Ten awards with ultimate completion dates in the next twenty-four months carry combined potential value of $58.3 million, representing near-term recompete exposure on FEMA Crisis Management System work, NIH BPSS III orders, Head Start monitoring, and smaller IRS and TSA tasks. The $94.1 million in obligated dollars across a $66.72 billion ceiling reflects the portfolio's heavy weighting toward vehicle positions with placeholder ceilings rather than delivered production; the firm's actual invoiced federal services work is substantially smaller.

Service Contract Inventory captures $19.7 million in SCI-reportable invoiced federal services revenue across FY2022–FY2024 (prime contracts only), with FY2024 invoicing $8.4 million across 20.8 FTEs. The SCI dataset shows workforce stability, ranging 15–19 FTEs across the three fiscal years, suggesting core federal IT services delivery of roughly 16–20 personnel. Government-paid hourly rates on SCI-reportable contracts span from $66.72 per hour (help desk and entry-level analyst roles) at the 10th percentile to $376.56 per hour (senior architecture and program leadership) at the 90th percentile, with a median of $136.24 per hour. On GSA Schedule, Arch Systems prices 107 active labor categories from $42.77 per hour (help desk specialist with bachelor's degree and one year experience) to $253.90 per hour (project director), reflecting a full-stack IT services posture spanning help desk, UX/UI, DevSecOps, cloud engineering, data management, and program management. Across SCI-reportable prime contracts, subcontractors performed approximately 25% of total contractor hours (average share), with 21 named subs engaged across the portfolio, indicating that Arch Systems builds significant portions of delivery teams rather than delivering predominantly in-house.

On subcontract side, Arch Systems performs work under Noblis, Inc. on cyber security support (multiple task orders from January 2024 through December 2024) and under Peraton Inc. for data analytics support (March 2025). These relationships anchor the firm's small subcontractor footprint; the limited sub-award activity reflects Arch Systems' primary strategy as a prime rather than feeder to larger primes.

Arch Systems' corporate structure carries a parent-child designation with a related entity at an alternate address (Windsor Mill, Maryland) also certified as women-owned, HUBZone joint venture, self-certified small disadvantaged business, and minority-owned; the shared UEI links indicate operational integration. The award portfolio and labor-rate framing position the firm as a full-service IT modernization shop with deep bench in federal data quality, AI/ML applications, enterprise architecture, emergency operations systems, and health IT governance — capabilities increasingly relevant to both civilian health agency digital transformation and emerging defense AI/autonomy initiatives.