SCADA Systems Maintenance

SOURCES SOUGHT NOTICE U.S. International Boundary and Water Commission SCADA Systems Maintenance Notice Number: FY26R1221102 THIS IS A SOURCES SOUGHT ANNOUNCEMENT ONLY. This notice does not constitute a solicitation, request for proposal, request for quote, invitation for bid, or commitment by the Government. No award will be made from this Sources Sought notice. The Government is not requesting pricing at this time. All information submitted in response to this announcement is voluntary. The Government will not pay for any information submitted, nor will it reimburse any respondent for costs incurred in preparing or submitting a response. The United States Section of the International Boundary and Water Commission, USIBWC, is conducting market research to identify qualified firms capable of providing SCADA systems maintenance, cybersecurity support, vulnerability remediation, emergency troubleshooting, and system improvement services for USIBWC SCADA environments. The purpose of this Sources Sought notice is to determine whether capable firms exist to perform the requirement and to assist the Government in determining the appropriate acquisition strategy, including whether the requirement should be set aside for small business or issued using full and open competition. No solicitation is currently available. Interested parties should not request a copy of the solicitation. Any future solicitation will be posted separately, and interested parties will be required to respond separately to that solicitation. Response to this notice is voluntary. However, information received in response to this Sources Sought notice may influence the Government s acquisition strategy. GENERAL INFORMATION NAICS Code: 541512 NAICS Description: Computer Systems Design Services Size Standard: $34.0 M PSC: DJ01 Anticipated Contract Type: Firm Fixed Price Place of Performance: Nogales, Arizona, with optional support at San Ysidro, California, if exercised by the Contracting Officer Anticipated Period of Performance: One base year, with three option years anticipated BACKGROUND USIBWC operates SCADA systems that support critical wastewater treatment operations along the United States and Mexico border. The Nogales SCADA system is independent from the USIBWC Headquarters General Support System and supports mission critical wastewater treatment operations. The required services include SCADA system maintenance, software and firmware patching, vulnerability remediation, software upgrades, replacement of parts and components, cybersecurity control assessment support, Risk Management Framework support, emergency troubleshooting, system documentation, and improvements to system functionality through existing SCADA software platforms. Existing software and systems may include Rockwell RSLogix, Ignition, VMware ESXI, Rockwell ThinManager, FactoryTalk ME, Windows operating systems, Linux operating systems, Cisco network equipment, and related operational technology assets. The Government seeks firms with demonstrated experience supporting SCADA systems in wastewater treatment environments, industrial control systems, cybersecurity compliance, vulnerability management, RMF support, and emergency maintenance for critical infrastructure. SPECIFIC REQUIREMENTS USIBWC requires contractor support for SCADA systems maintenance and improvements. The anticipated work includes, but is not limited to, the following: Provide predictive, preventive, and timely maintenance for SCADA systems. Support SCADA system software, firmware, patching, upgrades, and remediation. Support vulnerability management and provide documented evidence of remediation actions. Support RMF documentation and continuous monitoring activities. Provide monthly vulnerability and patching reports. Provide monthly RMF and cybersecurity status reports. Provide biweekly project status reports. Provide incident response reports within three business days after each incident. Maintain and update network diagrams, asset inventories, configuration baselines, hardware lists, and software lists. Provide remote troubleshooting support within four hours of notification. Provide emergency onsite troubleshooting, upgrades, or repairs within seventy two hours when the issue cannot be resolved remotely. Support SCADA and OT project management initiatives. Review designs, proposals, bills of material, SCADA integration plans, risk assessments, and project documentation. Provide technical recommendations on SCADA standards, system improvements, project planning, and integration strategies. Support annual SCADA and OT system audits and provide findings and recommendations. Address critical, high, moderate, and low vulnerabilities according to required remediation timelines. Support Nogales SCADA requirements as the base requirement. Support San Ysidro SCADA requirements only if the Government formally exercises and funds the optional CLIN. The Contractor shall not make final determinations regarding system authorization, risk acceptance, agency policy, approval of standards, or issuance of an Authorization to Operate. All final decisions remain with the Government. CONTRACTOR CAPABILITY AREAS Interested firms should demonstrate experience and capability in the following areas: SCADA systems within wastewater treatment plants. Wastewater treatment processes and operations. Ignition SCADA software, version Gold 8 or newer, or equivalent current certification. Rockwell systems and Rockwell software support. Cisco network equipment management, configuration, patching, and troubleshooting. VMware vCenter and VMware ESXI administration. Active Directory, DNS, DHCP, PKI, and Group Policy management. Fiber networks, firewall management, VLAN creation, network segmentation, and SCADA network protection. Java, Python, and SQL programming. Legacy PLC migration in wastewater treatment environments. SCADA and OT cybersecurity. FISMA, NIST, CISA, HVA overlays, and RMF support. Vulnerability management, patching, remediation, and evidence documentation. Incident response, emergency troubleshooting, and onsite support. Support for critical infrastructure and industrial control systems. Work involving Controlled Unclassified Information, cybersecurity safeguards, and Federal information security requirements. PERSONNEL AND SECURITY REQUIREMENTS Interested firms must address whether proposed personnel can meet the security requirements needed to access USIBWC facilities, systems, and SCADA components. Personnel requiring administrator privileges to SCADA system components, appliances, hardware, operating systems, or applications must possess a favorably adjudicated Tier 4 suitability level background investigation or equivalent background investigation before award, as required by the Government. Personnel requiring access to programming code or field devices, without administrator privileges, must meet the applicable suitability requirements before performing work. All contractor personnel and subcontractor personnel requiring access to the systems must be United States citizens. SUBMISSION INSTRUCTIONS Interested firms shall submit responses by email to: Suzette Smith Contract Specialist suzette.smith@ibwc.gov [Insert Secondary Point of Contact, if applicable] Subject Line: Sources Sought Response, SCADA Systems Maintenance and Improvements, [Insert Notice Number] Responses are due no later than June 22, 2026 3pm MDT. Late responses may not be considered for market research purposes. Responses shall be submitted by email only. Responses should be complete and sufficiently detailed to allow the Government to assess the firm s capability to perform the full requirement. The Government is not requesting pricing with this Sources Sought response. RESPONSE REQUIREMENTS Interested firms shall provide the following information: Company Information a. Company name. b. Company address. c. Unique Entity Identifier, UEI. d. CAGE Code. e. Point of contact name, title, phone number, and email address. f. Company website, if available. g. SAM.gov registration status. Business Size and Socioeconomic Status Identify the firm s business size and socioeconomic status under the applicable NAICS code. Include all applicable categories: a. Small Business. b. 8(a) Small Business. c. HUBZone Small Business. d. Woman Owned Small Business. e. Economically Disadvantaged Woman Owned Small Business. f. Service Disabled Veteran Owned Small Business. g. Veteran Owned Small Business. h. Small Disadvantaged Business. The business size and socioeconomic status must be consistent with the firm s SAM.gov registration. Relevant Experience Provide at least three examples of projects completed within the past seven years that demonstrate experience with similar work. For each project, include: a. Project title. b. Project location. c. Customer or agency. d. Contract number, if applicable. e. Contract value. f. Period of performance. g. Prime contractor or subcontractor role…