Federal IT Market Overview
The federal government is one of the world's largest buyers of information technology, spending over $100 billion annually.
Major IT spending areas:
- Cybersecurity and defense
- Cloud computing and infrastructure
- Software development and modernization
- IT services and support
- Hardware and equipment
Key IT buyers:
- DoD — Largest IT buyer
- DHS — Cybersecurity focus
- VA — Healthcare IT
- IRS/Treasury — Financial systems
- All agencies — IT is everywhere
Common NAICS codes:
- 541512 — Computer Systems Design Services
- 541511 — Custom Computer Programming
- 541519 — Other Computer Related Services
- 518210 — Data Processing/Hosting
- 511210 — Software Publishers
Major IT Contract Vehicles
Government-wide Acquisition Contracts (GWACs):
- 8(a) STARS III — 8(a) IT services
- Alliant 2 — Full IT services
- VETS 2 — SDVOSB IT services
- Polaris — Small business IT (GSA)
GSA Schedule:
- IT Schedule 70 (now MAS Category 54151)
- Professional Services (541)
- Software and software services
Agency-specific vehicles:
- CIO-SP4 — NIH IT services
- SEWP V — NASA IT products (transition to VI)
- ENCORE III — DoD IT services
BPAs and task orders:
- BPAs against GSA Schedule
- Task orders under GWACs
- Agency blanket purchase agreements
Cybersecurity Requirements
CMMC (Cybersecurity Maturity Model Certification):
- Required for DoD contracts
- Levels 1-3 based on data sensitivity
- Third-party certification required
- Implementation underway
NIST 800-171:
- Protecting Controlled Unclassified Information (CUI)
- 110 security controls
- Self-attestation currently
- Foundation for CMMC
FedRAMP:
- Cloud security authorization
- Required for cloud services to government
- Standardized security assessment
- Agency ATOs based on FedRAMP
Supply chain security:
- Section 889 compliance (no covered equipment)
- SCRM requirements
- Software Bill of Materials (SBOM)
See: CMMC Guide
Get the Cheat Sheet
Join 5,000+ GovCon professionals. Get weekly insights and free templates.
No spam. Unsubscribe anytime.
Cloud and Software Procurement
Cloud procurement:
- Cloud Smart policy
- FedRAMP authorization required
- IaaS, PaaS, SaaS models
- Security and compliance focus
Cloud contract vehicles:
- AWS, Azure, Google Cloud agreements
- Agency cloud contracts
- GSA cloud offerings
Software licensing:
- Enterprise license agreements
- Government-specific terms
- Volume licensing
- SaaS subscriptions
Agile/DevSecOps:
- Modern software development approaches
- Agile contracts gaining favor
- DevSecOps requirements
- Continuous delivery expectations
Open source:
- Federal Source Code Policy
- Code.gov requirements
- Open source security considerations
FITARA and IT Governance
FITARA (Federal IT Acquisition Reform Act):
- CIO authority over IT spending
- IT acquisition improvements
- Data center consolidation
- Portfolio review
Impact on contractors:
- CIO involvement in IT acquisitions
- Standardization emphasis
- Transparency requirements
- Portfolio-based buying
Technology Business Management (TBM):
- IT cost transparency
- Value demonstration
- Cost allocation requirements
IT Dashboard:
- Public visibility of major IT investments
- Project health ratings
- CIO ratings
MGT Act:
- IT modernization fund
- Working capital funds
- Modernization emphasis
IT Services vs. Products
IT services contracting:
- Staff augmentation
- Managed services
- Systems integration
- Help desk/support
- Development services
Services contract types:
- Time & Materials
- Labor Hour
- Firm Fixed Price (tasks)
- Cost-plus (complex development)
IT products contracting:
- Hardware procurement
- Software licenses
- Commercial off-the-shelf (COTS)
- Subscriptions and maintenance
Product contract types:
- Firm Fixed Price
- BPAs for recurring needs
- Blanket agreements
Combination contracts:
- Products and services together
- Implementation included
- Support and maintenance
Winning IT Contracts
Positioning strategies:
- Get on relevant contract vehicles
- Build agency relationships
- Demonstrate past performance
- Stay current on technology trends
Technical differentiation:
- Leading-edge capabilities
- Proven methodologies
- Security credentials
- Innovation culture
Personnel qualifications:
- Certifications (security, cloud, project management)
- Clearances for cleared work
- Agency experience
- Technical depth
Proposal strategies:
- Understand the mission
- Show relevant experience
- Address security requirements
- Demonstrate innovation
Teaming:
- Large integrator relationships
- Small business teaming
- Technology partnerships
IT Contracting Trends
Current trends:
- Cloud migration — Accelerating to cloud
- Cybersecurity — Zero trust, CMMC
- AI/ML — Growing government interest
- Modernization — Legacy system replacement
- DevSecOps — Modern development practices
Emerging opportunities:
- Zero trust architecture
- AI and automation
- Data analytics
- Customer experience
- 5G and edge computing
Buying behavior changes:
- Commercial solutions preference
- Agile acquisition
- Outcome-based contracting
- Shorter contract cycles
Strategic positioning:
- Invest in emerging capabilities
- Build security credentials
- Develop agency expertise
- Stay flexible and innovative
Frequently Asked Questions
Q:Do I need FedRAMP to sell cloud to the government?
For cloud services that will process, store, or transmit federal information, yes. FedRAMP authorization is typically required. The level (Low, Moderate, High) depends on data sensitivity.
Q:What certifications help win IT contracts?
Key certifications include: CMMC for DoD, FedRAMP for cloud, ISO 27001 for security management, PMP for project management, AWS/Azure/GCP certifications for cloud, and ITIL for service management.
Q:How do I get on a GWAC like Alliant or STARS?
GWACs have periodic on-ramps. Monitor for solicitations, meet qualification requirements (experience, financials, socioeconomic status), and submit a strong proposal. Some GWACs are closed to new entrants.
Q:Is GSA Schedule enough for IT contracting?
GSA Schedule is a good start and provides access to many opportunities. However, GWACs often provide better access to large IT task orders. Having both Schedule and GWAC positions is ideal.
Q:What is Section 889 compliance?
Section 889 prohibits federal agencies from procuring or using covered telecommunications equipment or services from certain Chinese companies (Huawei, ZTE, etc.). Contractors must certify compliance.
Q:Do I need security clearances for IT work?
Depends on the work. Unclassified IT work may not require clearances. Work involving classified systems requires cleared personnel. Many positions require at least a Secret clearance.
Q:How important is Agile experience?
Increasingly important. Many agencies are adopting Agile methodologies for software development. Demonstrate Agile experience, certifications (SAFe, Scrum), and successful Agile project delivery.
Q:What size standards apply to IT?
IT services (NAICS 541512) size standard is $34 million average annual receipts. Software publishing (511210) is 1,250 employees. Check the specific NAICS code for your services.
Win Federal IT Contracts
The federal IT market offers tremendous opportunity for technology companies. Our team helps you navigate requirements, get on vehicles, and win contracts.
Get IT Contracting HelpLand a High-Paying GovCon Role
Jobs that use the skills from this guide