DHS gives bidders 55 days, one shot at NOSC 2.0 consolidation
No discussions plus a 55-day sprint means bidders submit their best offer first, or don't submit at all.
TL;DR
DHS released the procurement schedule for its NOSC Network, Cloud, and Cyber Services 2.0 contract Thursday. The timeline runs 55 days from October 1 solicitation to late-November award. No discussions are permitted, so bidders get one shot at Phase 2, where prior experience carries the most weight. The RFP requires agentic AI to automate low-level IT operations across DHS's 22 components. Leidos holds the current NOSC bridge contract; GDIT and Peraton own adjacent legacy pieces being folded into the new vehicle.
The Homeland Security Department dropped a procurement schedule Thursday that amounts to a sprint: 55 days from final solicitation to award for a contract vehicle that will consolidate network security, cloud, and cybersecurity operations across all 22 DHS components.
The timeline is aggressive enough to be a filter in its own right. Final solicitation October 1. Phase 1 proposals due October 6, a five-day window that covers only whether the bidder holds a facility clearance. Phase 2, where the actual technical and price proposals land, closes October 21. DHS anticipates awards in late November. There are no discussions. "Therefore, the offeror's initial offer should contain the offeror's best terms from a price and technical standpoint," the draft RFP states.
That no-discussions clause is the part a contractor's capture manager will circle in red. In a standard procurement, the agency opens discussions, bidders revise weak points, and the field sharpens. Here, DHS is telling bidders to get it right the first time. Combined with the compressed schedule, the structure strongly favors anyone who already understands the department's network operations environment: the incumbents.
Leidos holds the core NOSC support work under a short-term bridge contract, making it the closest thing to the owner's box. General Dynamics IT and Peraton hold pieces of the adjacent legacy contracts that DHS is now folding into this single vehicle.
Then there's the agentic AI requirement. DHS wants the winning contractor to deploy AI that automates low-level IT responses, freeing personnel for higher-value threat detection and analysis. That's a genuine differentiator in the evaluation and another barrier for bidders who haven't already invested in operational AI for infrastructure management.
Phase 2 mechanics
DHS will weigh prior experience and references (Factor 2) most heavily, followed by staffing and management approach (Factor 3). Both are "significantly more important" than price (Factor 4). The emphasis on past performance over cost suggests DHS isn't shopping for a bargain. It's shopping for someone who won't drop the ball on infrastructure that spans 22 components.
For contractors watching the DHS centralization story, this is the follow-through. After Cumulus consolidated cloud buying under four hyperscaler contracts and ECLIPS's earlier attempt at enterprise cloud acquisition stalled out, NOSC 2.0 tackles the operations layer. DHS wants one contractor managing one operational structure over all of its IT infrastructure. The 55-day clock starts October 1.
Published ·Deep Fathom