City of Durham - Request for Proposal (RFP) for Privileged Access Management - 27-1101 (2026)
City of DurhamCity · Durham, NC- Due
- Oct 28, 2026
- Deadline passed
- Posted
- Sep 25, 2026
- Primary contact
- Prasanna Ramamoorthy
The 30-second brief
The City of Durham seeks proposals for a comprehensive Privileged Access Management (PAM) system as part of an overall Cyber Security program enhancement project. The work includes credential vaulting and rotation, access control, session management, vendor and contractor remote access, CJIS compliance, monitoring and auditing, and architecture integration. Key requirements include automated discovery, secure vaulting, automatic rotation, multi-factor authentication (MFA), session recording, keystroke logging, and SIEM integration. The submission deadline is October 28, 2026, at 5:00 PM EST, with a pre-bid conference on October 14, 2026, and question deadline on October 21, 2026. Proposals are evaluated based on understanding of the project, methodology, management plan, experience and qualifications, and contract cost.
Privileged Access Management (PAM) Solution, Boss Desk Intake Process Automation, Credential Vaulting & Rotation, Access Control & Session Management, Vendor & Contractor Remote Access, CJIS Compliance & Law Enforcement Security, Monitoring & Auditing, Architecture & Integration
Understanding of the Project 5 points,Methodology Used for the Project 15 points,Management Plan for the Project 15 points,Experience and Qualifications 15 points,Contract Cost 40 points
Hear what Durham plans next before it's posted.
Get alerts freeFree account · 30-second setup · No credit card
Summary
The City of Durham seeks proposals for a comprehensive Privileged Access Management (PAM) system as part of an overall Cyber Security program enhancement project.
The work includes credential vaulting and rotation, access control, session management, vendor and contractor remote access, CJIS compliance, monitoring and auditing, and architecture integration. Key requirements include automated discovery, secure vaulting, automatic rotation, multi-factor authentication (MFA), session recording, keystroke logging, and SIEM integration. The submission deadline is October 28, 2026, at 5:00 PM EST, with a pre-bid conference on October 14, 2026, and question deadline on October 21, 2026. Proposals are evaluated based on understanding of the project, methodology, management plan, experience and qualifications, and contract cost.
EVALUATION CRITERIA
5- Understanding of the Project 5 points
- Methodology Used for the Project 15 points
- Management Plan for the Project 15 points
- Experience and Qualifications 15 points
- Contract Cost 40 points
REQUIRED DELIVERABLES
8- Privileged Access Management (PAM) Solution
- Boss Desk Intake Process Automation
- Credential Vaulting & Rotation
- Access Control & Session Management
- Vendor & Contractor Remote Access
- CJIS Compliance & Law Enforcement Security
- Monitoring & Auditing
- Architecture & Integration
REQUIRED ATTACHMENTS
11- Contact information
- Legal Status of the Candidate and Signers
- Qualifications References and Licenses
- Project Team Location of Work and Subcontracting
- Methods and Procedures
- Compensation
- Assumptions regarding City of Durham Actions and Participation
- Financial Condition Insurance Bonds and Taxes
- Conflict of Interest
- Non-collusion affidavit
- Cover letter
- Submit to
- [email protected]
- Scope location
- Durham, NC
Questions about this RFP
How do I respond to this RFP from City of Durham?
Review the full solicitation document for submission requirements, evaluation criteria, and deadlines. The submission deadline is October 28, 2026. The solicitation specifies required deliverables that must be addressed in your response. Be sure to include all required attachments as outlined in the solicitation. Submissions should be delivered to: [email protected]. For questions, contact Prasanna Ramamoorthy.
Can small businesses or minority-owned firms bid on this RFP?
Most government agencies, including City of Durham in NC, encourage participation from small businesses, minority-owned, women-owned, and disadvantaged business enterprises (MBE/WBE/DBE). Check the full solicitation for any small business participation goals.
What happens after the RFP submission deadline?
After the deadline, the issuing agency reviews all submissions against the stated evaluation criteria. This typically includes a compliance check, technical evaluation, cost analysis, and may involve oral presentations with shortlisted vendors.
Can I ask questions about this solicitation before submitting?
Yes, most solicitations allow vendors to submit questions during a designated period. The primary contact is Prasanna Ramamoorthy. Questions and answers are typically shared with all prospective bidders.
What are the key deliverables?
The solicitation specifies the following deliverables: Privileged Access Management (PAM) Solution, Boss Desk Intake Process Automation, Credential Vaulting & Rotation, Access Control & Session Management, Vendor & Contractor Remote Access, CJIS Compliance & Law Enforcement Security, Monitoring & Auditing, Architecture & Integration. Proposals should clearly address how each deliverable will be met.
Show 4 more questions
What are the evaluation criteria for this solicitation?
This solicitation includes specific evaluation criteria that will be used to score proposals. The criteria include: "Understanding of the Project 5 points,Methodology Used for the Project 15 points,Management Plan for the Project 15 points,Experience and Qualifications 15 points,Contract Cost 40 points" Vendors should carefully align their proposals with each criterion to maximize their score.
Where can I find more RFPs from City of Durham?
All active and historical solicitations from City of Durham are tracked and searchable. As a city agency, City of Durham regularly publishes solicitations. Visit the agency profile to see current open bids, past contracts, vendor relationships, and decision-maker contacts.
What documents are required to bid on this RFP?
Requirements vary by solicitation, but common documents include a technical proposal, cost/price proposal, proof of insurance, relevant certifications, past performance references, and any forms specified in the solicitation. This solicitation specifically requires the following attachments: Contact information,Legal Status of the Candidate and Signers,Qualifications References and Licenses,Project Team Location of Work and Subcontracting,Methods and Procedures,Compensation,Assumptions re. Review the full document from City of Durham for the complete list.
What is the scope of this project?
This solicitation defines a specific project scope. The scope covers the following locations: Durham, NC. Review the full solicitation for detailed scope requirements.