The Air Force Life Cycle Management Center has issued an RFI for operations, maintenance and continuous modernization of the Multi-X Security (MXS) Platform, a cloud-native environment supporting software development and secure information sharing across multiple security levels.
Developed between 2019 and 2026, MXS provides a security model, data model, reference architecture and reference implementation based on open standards and protocols. The platform is designed to support Protection Level 3 software development by third-party developers in security-constrained environments, including Special Access Programs.
The future contractor would provide 24/7/365 platform operations and lifecycle sustainment across Unclassified, Secret//SAR, Top Secret//SAR and Top Secret//SCI//SAR cloud environments. The scope includes containerized infrastructure such as Kubernetes, service meshes, API gateways, Infrastructure as Code, automated CI/CD pipelines, telemetry and resource monitoring, enterprise ICAM and certificate services, managed databases and API mediation.
The contractor would also deliver continuous platform enhancements, tenant onboarding and integration, and Tier 1-3 technical support. Cybersecurity work includes sustaining existing RMF ATOs, application and container security testing, software dependency assessments, vulnerability remediation and maintenance of security documentation supporting hosted software and systems.
Potential security requirements identified in the RFI include personnel with active Top Secret clearances and the ability to obtain SCI and SAP access, along with accredited SCIF/SAPF facilities required for classified development and operations. The Air Force is also considering an initial pass/fail qualification gate that could evaluate comparable prime-contractor experience, facility clearance/accreditation and baseline cybersecurity qualifications; those requirements have not been finalized.
The RFI should be relevant to classified cloud and DevSecOps contractors, platform engineering firms, cybersecurity companies, ICAM providers and systems integrators with experience operating multi-tenant DoD environments across classified enclaves.
Read more here. Notice ID FA205727Q1001
