N059--VAMC TLS Upgrade (VA-26-00038390)

SOL #: 36C26326Q0427Combined Synopsis/Solicitation

Overview

Buyer

Veterans Affairs

Veterans Affairs, Department Of

NETWORK CONTRACT OFFICE 23 (36C263)

Saint Paul, MN, 55101, United States

Place of Performance

Omaha

NAICS

Security Systems Services (except Locksmiths) (561621)

PSC

Installation Of Equipment: Electrical And Electronic Equipment Components (N059)

Set Aside

Total Small Business Set-Aside (FAR 19.5) (SBA)

Original Source

https://sam.gov/opp/4d73e664310047d4968591e1df0e4724/view

Timeline

Posted

Mar 6, 2026

Last Updated

Mar 11, 2026

Submission Deadline

Mar 16, 2026, 5:00 PM

Qualification Details

Fit reasons

NAICS alignment with historical contract wins in similar service areas.
Scope strongly matches core technical capabilities and delivery model.

Risks

Past performance thresholds may require one additional teaming partner.
Potential clarification needed on staffing minimums before bid/no-bid.

Next steps

Validate eligibility requirements, assign capture owner, and schedule partner outreach to confirm teaming strategy before submission planning.

Quick Summary

The Department of Veterans Affairs (VA), specifically the NETWORK CONTRACT OFFICE 23 (36C263), has issued a Request for Quotes (RFQ), Solicitation Number 36C26326Q0427, for a C CURE 9000 and TLS Encryption Upgrade. This Total Small Business Set-Aside opportunity aims to enhance the Physical Access Control System (PACS) infrastructure at the VA Nebraska-Western Iowa Health Care System in Omaha, NE, and the Grand Island VA Medical Center in Grand Island, NE. Quotes are due by March 13, 2026, at 12:00 PM Central Time.

Scope of Work

This procurement requires the upgrade of the existing Software House C CURE 9000 PACS infrastructure from TLS 1.2 to TLS 1.3 encryption standards. The upgrade is crucial for maintaining system operability, manufacturer support, and cybersecurity compliance. Key tasks include replacing approximately 52 first-generation iSTAR Edge controllers with second-generation hardware, updating firmware on all applicable controllers, and ensuring secure connectivity between controllers and the C CURE 9000 server environment. The scope covers approximately 91 Software House control panels. Deliverables include fully installed and operational TLS 1.3 compliant PACS controllers, updated firmware, system configuration documentation, test and commissioning verification, and operator training.

Contract & Timeline

Contract Type: Firm Fixed Price.
Period of Performance: March 30, 2026, to June 30, 2026 (base year).
Set-Aside: Total Small Business Set-Aside (FAR 19.5).
NAICS Code: 561621 (Security Systems Services) with a size standard of $25 million.
Product Service Code: N059 (Installation Of Equipment: Electrical And Electronic Equipment Components).
Technical Questions Due: March 11, 2026, 10:00 AM Central Time.
Quotes Due: March 13, 2026, 12:00 PM Central Time.
Published Date: March 6, 2026.

Submission & Evaluation

Quotes must be emailed to amanda.patterson-elliott@va.gov in .pdf or .docx format, with "Solicitation 36C26326Q0427" in the subject line. Offerors must be actively registered in the System for Award Management (SAM) at www.sam.gov. The award will be made to the responsible offeror whose quote, conforming to the solicitation, offers the lowest price, does not exceed available funding, and is deemed reasonable. Evaluation factors include price, special experience (TLS encryption and C CURE 9000 server environment), and past performance. FAR provisions 52.212-1, 52.212-2, and FAR clause 52.212-4 apply.

Additional Notes

A Wage Determination (No. 2015-5771, Revision No. 28) for the Service Contract Act is applicable, outlining minimum wage rates and fringe benefits, including health & welfare, paid sick leave, vacation, and holidays. This is crucial for accurate labor cost estimation. The Defense Priorities and Allocations System (DPAS) does not apply to this acquisition.