DISA starts to craft $850M Army-focused cyber recompete

Artemis Diana / iStock via Getty Images

Find opportunities — and win them.

The Defense Information Systems Agency wants to hear from companies with experience in large-scale cyber initiatives and Zero Trust architectures.

The Defense Information Systems Agency has started its work to create the recompete of an Army-focused cybersecurity and modernization contract that prioritizes the protection of network endpoints.

DISA is working with the Army on setting up the new contract to support the service branch's unified network and Zero Trust architecture initiatives. The Army is looking to rely on the Microsoft Defender for Endpoint and Elastic Defend products as foundational for its security ecosystem, which will also include hybrid cloud capabilities.

DISA anticipates the new contract to have an $850 million ceiling over up to 10 years and combine requirements from two existing contracts into this single procurement, according to a sources sought notice posted Monday. The period of performance breaks out to an initial two-year base period and up to eight individual option years.

Everforth ECS (formerly ECS Federal) is the incumbent contractor via a pair of task orders, having won the work in 2022. This includes an award through the Alliant 2 vehicle and a separate order won by a bid from Enterprise Resource Performance Inc., which ECS acquired in 2021.

ECS has received roughly $275 million in task order volume to-date ahead of the September 2027 sunset date, according to GovTribe data.

For the new contract, DISA is seeking to hire a company that can manage endpoint detection and response technologies across Army networks that enforce “default-deny” application controls. These protocols kick in when a data packet arrives that does not match an established connection, which results in an immediate traffic drop.

DISA is interested in hearing from contractors with experience in managing large-scale cyber environments and implementing Zero Trust architectures. The agency also wants responses to detail prior work in integrating technologies such as Microsoft Defender, Elastic Stack, Forescout and the Microsoft Azure cloud environment.

Responses to the RFI are due to DISA by 12:30 p.m. Eastern time on June 29.