HHS - Secure Access Management Services (SAMS) Support & Ops - MRAS

The Centers for Disease Control and Prevention (CDC) is seeking secure access management services (SAMS) support and operations. SAMS is a complete identity, credentialing, and access management (ICAM) solution that controls user access to select CDC internal IT systems for collaboration and information dissemination. The contractor will provide staffing levels including a project manager, technical architect, subject matter experts, computer programmers, and a database administrator. The period of performance includes a base period from March 1st, 2024 to February 29th, 2025, with four option periods extending through February 29th, 2029. The place of performance is at the CDC headquarters in Atlanta, GA.

The SAMS application operations team has supported several initiatives over the years, including the COVID-19 pandemic response and data modernization initiatives. Some accomplishments include implementing a NIST 800-63 compliant ID proofing solution, deploying a self-service multi-factor authentication issuance portal, integrating required CDC trainings with SAMS for streamlined onboarding, and establishing a secure token service for validation of SAML and OAuth tokens.

SAMS controls access to over 400 CDC integrated IT solutions accessible by approximately 500,000 HHS staff profiles and 200,000 external partner profiles. The solution includes components such as portal login pages, authentication and authorization services, workflows for onboarding and identity verification, API and microservices support, secure data transport capabilities, directory services integration, and plans for modernization using Ping Identity in a cloud environment.

The contractor will provide support in various areas including ICAM functional support for operations and maintenance of SAMS components, hardware/software support for infrastructure maintenance, customer/program support for integrated IT applications, end user support for issue escalations, vulnerability remediation to address security vulnerabilities, support for CDC initiatives related to SAMS functionality changes or enhancements, federated trust and PIV integration support with external partners and HHS AMS, digital identity support for identity proofing processes, ICAM advisory support for industry trends and roadmap planning, and C&A support for SAMS accreditation and compliance.

The contractor will be required to provide deliverables such as a contract management plan, routine communications call notes, monthly status reports, strategic planning process outline and plan, implementation tracking status report, process optimization proposal, issue escalation/ticket report, and other documentation as necessary. The contractor will work during core hours of 8:30 a.m. to 5:00 p.m. Eastern Time, Monday through Friday, with the possibility of telework during facility closures or special circumstances. Access requirements include wearing CDC identification badges and complying with information security protocols.

Overall, this opportunity provides a comprehensive scope of work for the contractor to support the operations and maintenance of the SAMS ICAM solution at CDC. The contractor will play a critical role in ensuring secure access to CDC IT systems and supporting the agency's collaboration efforts with external partners.