Identity Management Systems Operations and Maintenance (IDM O&M)

Background
The Centers for Medicare & Medicaid Services (CMS), Center for Medicare (CM), requires Operations and Maintenance (O&M) support services for the CMS Identity Management System (IDM).

IDM provides enterprise authentication, identity proofing, access management, and application integration services supporting more than 800 CMS applications and user communities. This action is an eight-month extension to the existing task order (Contract No. 47QTCA19D00FF / Task Order No. 75FCMC22F0004) to maintain continuity of mission-essential services and support ongoing Identity, Credential, and Access Management (ICAM) modernization initiatives.

Work Details
The O&M tasks include:
- Authentication Services: Okta Identity as a Service (IDaaS) with Multi-Factor Authentication (MFA)
- Identity Proofing: Experian Remote Identity Proofing (RIDP) services
- Infrastructure Management: AWS cloud hosting and CI/CD pipeline operations
- Application Integration: Ongoing onboarding and support for 800+ business applications
- Security Compliance: NIST 800-63, CMS Acceptable Risk Safeguards (ARS), and FISMA requirements.

The extension consists of 17 two-week sprints to continue development work along with a dedicated scrum team supporting ICAM modernization initiatives. The contractor has maintained a high level of performance with a recent CPARS evaluation rating of 'Very Good' in Quality, Schedule, and Management.

Period of Performance
The contract will be performed from September 12, 2026, through May 11, 2027.

Place of Performance
Gainesville, VA

Bidder Requirements
The contractor must have demonstrated experience in providing IDM services, including maintaining system availability at high levels.

Security compliance with NIST standards is essential. The contractor must also have experience operating within an Agile framework.