Information Technology Support Services (ITSS) BPA

In this episode, we break down the U.S. Department of State’s $100–$150M IT Support Services (ITSS) Single-BPA opportunity set aside exclusively for 8(a) firms. We unpack what ExecTech is really looking for: secure, mission-critical IT operations, white-glove executive support, cybersecurity, automation, and lifecycle management across classified and unclassified environments. If your firm holds a Top-Secret FCL and delivers high-availability federal IT services, this is an opportunity you can’t afford to ignore.

Tune in now to understand the requirements, assess your fit, and get ready to respond early.

Contact ProposalHelper at sales@proposalhelper.com to find similar opportunities and help you build a realistic and winning pipeline. 

Transcript

A Ticking Two-Week Deadline

SPEAKER_01 0:00

All right. Welcome back to the deep dive. It is Friday, January 30, 2026. And uh, you know, usually when we sit down to look at government documents, it feels like we're we're acting like historians.

SPEAKER_00 0:14

Looking backwards, yeah. Dusting things off.

SPEAKER_01 0:17

Aaron Ross Powell Exactly. We're looking at regulations from five years ago or analyzing reports on things that have already happened. But today, today we are looking at a ticking clock.

SPEAKER_00 0:26

Aaron Powell A very loud, very expensive ticking clock.

SPEAKER_01 0:29

Aaron Powell We have a source that sought notice from the U.S. Department of State right here.

SPEAKER_00 0:32

Yeah.

SPEAKER_01 0:33

And the deadline for responses is February 13, 2026. I mean, that is just two weeks from today. Right. And we aren't talking about a contract for office supplies. This is for something called Exec Tech.

SPEAKER_00 0:45

Which I have to admit sounds a little bit like a villainous corporation in a cyberpunk novel. Trevor Burrus, Jr.

SPEAKER_01 0:49

It really does.

SPEAKER_00 0:50

Trevor Burrus But in reality, it stands for Executive Secretariat Information Technology Support Services.

SPEAKER_01 0:55

Aaron Powell A bit of a mouthful, but it's essentially the nervous system of the State Department.

What Exec Tech Really Means

SPEAKER_00 0:59

Aaron Powell That's a great way to put it. We're looking at a potential blanket purchase agreement, a BPA, with a ceiling estimated somewhere between$100 and$150 million. Wow. And the mission is incredibly specific. Keep the Secretary of State and the Department's top leadership online, secure, and operational. 204-7. Anywhere in the world.

SPEAKER_01 1:22

Aaron Powell And that phrase anywhere in the world, that's doing a lot of heavy lifting here. It's everything. Trevor Burrus Because when most people hear IT support, they think of you know the guy in a polo shirt asking if you've tried turning it off and on again. Trevor Burrus, Jr.

SPEAKER_00 1:33

Right. The standard help desk.

SPEAKER_01 1:35

Aaron Powell But reading through this notice, the scope is it's radically different. This is what the document calls white glove service.

SPEAKER_00 1:42

Aaron Powell That is the key term. White glove in this context acts as this massive filter for who can actually do this job. It implies a zero failure environment. I mean, if you or I have a computer issue, we submit a ticket, we wait, what, maybe four hours, maybe a day. It's annoying, but life goes on.

SPEAKER_01 1:58

Right. But if the Secretary of State is on a secure video call with a foreign premier and that link drops, well, that's not just an annoyance.

White Glove, Zero Failure Support

SPEAKER_00 2:06

That is a diplomatic incident. Yeah. Precisely. And the document explicitly links this IT support to mission execution and executive leadership decision making. The vendor isn't just fixing printers, they are ensuring the continuity of the diplomatic arm of the United States government.

SPEAKER_01 2:25

Aaron Powell That is a unique pressure cooker environment.

SPEAKER_00 2:28

Absolutely.

SPEAKER_01 2:28

So let's define the client here because the State Department is so broad. We're talking about the SES, the Executive Secretariat. Who are they?

SPEAKER_00 2:35

Aaron Powell So think of SES as the coordination hub for the secretary. They manage the paper flow, the schedule, the crisis response. Basically, the information that actually gets to the secretary's desk.

SPEAKER_01 2:45

Aaron Powell They're the gatekeepers.

SPEAKER_00 2:46

They are. So XEC Tech supports them, the deputy secretaries, the undersecretaries. It's a relatively small user base compared to the whole department, but these are the VIPs. Trevor Burrus, Jr.

SPEAKER_01 2:55

The principals, as the document calls them. And the operational tempo here is just it's intense. 24 by 7 by 365 support.

SPEAKER_00 3:03

Aaron Powell And that is not just a figure of speech. They need on-site desk side support. The document even notes that because of security classifications, a lot of this work physically cannot be done remotely.

SPEAKER_01 3:15

You have to be in the room.

SPEAKER_00 3:16

You have to be in the room where it happens. And that brings us to the incumbent. Right now, a company called Improvix Technologies Inc. is doing this work. Their task orders expire in May 2026.

SPEAKER_01 3:29

Aaron Powell So this notice is the government doing its market research.

SPEAKER_00 3:33

Exactly. They're checking the pulse of the industry, asking who else is out there? Who has the capacity to take this over? And it's not just about having smart engineers, it's about handling the just-in-time nature of executive support.

SPEAKER_01 3:44

Aaron Powell Just in time. That's a manufacturing term, right, for supply chains.

SPEAKER_00 3:48

That is. But applying it to IT implies that the technology has to be ready exactly when the principal needs it, not a moment before, not a moment later, and it has to be customized. Trevor Burrus, Jr.

SPEAKER_01 3:58

Right. It mentions support tailored to senior leaders.

Who The SES Principals Are

SPEAKER_00 4:02

Aaron Powell Which requires a level of uh emotional intelligence and situational awareness you just don't find in a standard help desk script. You have to know when to step in, when to step back, and how to fix a problem without derailing a high-level meeting.

SPEAKER_01 4:17

Aaron Powell, let's dig into the actual hardware and software, because this is where it gets really cinematic. I was struck by this section on executive support services, specifically the mention of flyaway kits.

SPEAKER_00 4:28

Oh yeah. That's always the most fascinating part of diplomatic IT.

SPEAKER_01 4:32

Trevor Burrus, it sounds like something out of a spy movie.

SPEAKER_00 4:34

Yeah.

SPEAKER_01 4:34

Mobile and flyaway kit support. Practically, what is in one of those kits?

SPEAKER_00 4:38

Aaron Powell It's basically a portable, self-contained, secure communications node. I mean, think about the use case. The secretary travels to a location where the local infrastructure is either non existent or more likely, completely compromised by hostile intelligence services.

SPEAKER_01 4:54

You can't just hop on the hotel Wi-Fi.

SPEAKER_00 4:56

You absolutely cannot trust the hotel Wi-Fi or the local cell towers. So you bring your own classified internet. These kits have secure laptops, encryption devices, satellite links, secure cellular bridges, everything.

SPEAKER_01 5:07

Aaron Powell And the power systems to run it all.

SPEAKER_00 5:10

Of course. The vendor has to maintain these kits, keep them updated, and guarantee that when that case is open in some hotel room in a crisis zone, it just works. Green lights instantly.

SPEAKER_01 5:21

Aaron Powell And the document connects this directly to global travel and crisis response. So it's as much about logistics as it is about tech.

SPEAKER_00 5:30

Aaron Powell Oh, absolutely. You have to get this gear through customs, keep it physically secure, and make it work in potentially hostile environments.

SPEAKER_01 5:37

Aaron Powell Which ties into the VTC, the video teleconferencing requirements. I mean, we've all become experts in Zoom and teams, but this is this is a different level.

SPEAKER_00 5:46

Aaron Powell A whole different universe. They mention high visibility executive engagements at the top secret level.

SPEAKER_01 5:51

Aaron Powell Top secret video calls.

SPEAKER_00 5:53

Yep. That means managing multiple bridge types, complex encryption keys, and ensuring the audio and video quality is flawless. Again, if the president calls a secretary, you can't have the audio garbling. And the document mentions cross-stakeholder coordination, which is a very polite way of saying you have to get the State Department's tech to talk to the White House's tech or the Pentagon's tech instantly.

SPEAKER_01 6:15

The interoperability nightmare.

SPEAKER_00 6:17

It's the hardest part of federal IT, and this vendor has to troubleshoot it in real time.

SPEAKER_01 6:22

Okay, but for all this specialized, almost bespoke stuff, the document also makes it clear they don't want to be running legacy junk. I was surprised by how modern the engineering requirements are. They're asking for infrastructure as code.

SPEAKER_00 6:37

This is a massive shift we're seeing across government, and it's right here in black and white. They explicitly list Terraform and CloudFormation.

SPEAKER_01 6:45

So for anyone listening who might not be a DevOps engineer, infrastructure as code basically means you're not manually configuring servers anymore, right? Yeah. You're writing code that defines the server.

SPEAKER_00 6:54

Exactly. Instead of an admin clicking buttons, which is slow and prone to human error, you write a script that says, I need a server with these exact specs. You won the script, the cloud provider builds it. If it crashes, you just run the script again and it's back in minutes.

SPEAKER_01 7:08

Which is critical for that continuity of government goal they keep mentioning.

SPEAKER_00 7:12

It's the whole point. It's about operational resilience. They also mention PowerShell for automation. They want to automate the boring stuff so the humans can focus on the crisis stuff.

SPEAKER_01 7:21

And they're not married to one cloud provider, which I found interesting. They list AWS, Azure, and Google Cloud.

SPEAKER_00 7:28

Multi-cloud competency. That is a very, very high bar. Usually an organization just picks one and sticks with it, it's easier. But state is prioritizing redundancy over simplicity.

SPEAKER_01 7:39

It prevents vendor lock-in too.

SPEAKER_00 7:41

It does. But it also triples the complexity for the IT staff. You need engineers who are fluent in the architectures of all three major hyperscalers.

SPEAKER_01 7:51

And finding someone with a top-secret clearance who is also an expert in AWS, Azure, and Google Cloud.

SPEAKER_00 7:57

That's a unicorn.

SPEAKER_01 7:59

A very small talent pool.

Top Secret VTC And Interop

SPEAKER_00 8:00

Tiny. And that's going to be one of the biggest challenges for whoever wins this contract. Staffing. It's not just tech skills, it's tech skills plus clearance plus the personality to handle high stress VIP support.

SPEAKER_01 8:12

We should talk about the software side too. They mentioned things like SPB Cascades, and then in the same breath, Microsoft Power Apps. It feels like a collision of two different eras.

SPEAKER_00 8:22

It is. SPP Cascades is probably some specific legacy departmental application for managing diplomatic cables or something. But then you have Power Apps, which is Microsoft's new low-code platform for building modern apps quickly.

SPEAKER_01 8:37

So the vendor has to keep the old mainframes humming, metaphorically, while also building new agile tools on the fly.

SPEAKER_00 8:43

And patching everything. The document mentions patching, health checks, data backup, all the unglamorous janitorial work of IT. But you miss one patch, and that's how you get hacked.

SPEAKER_01 8:54

Well, speaking of getting hacked, let's pivot to security. This is where the document shifts from difficult to uh paranoid. And for good reason.

SPEAKER_00 9:02

The security requirements are just absolute walls. First, the company itself, the legal entity, has to have a top secret facility clearance level, an FCL.

SPEAKER_01 9:11

Which means you can't just be a startup with a few smart coders. The company has to be vetted.

SPEAKER_00 9:15

Deeply vetted. You need a facility security officer, the infrastructure to handle classified material, and then the people. Pretty much everyone needs a top secret clearance.

SPEAKER_01 9:24

And then there's the compliance regime. You see the usual suspects FISMA, FedRAMP, NIST. But there was one specific tool mentioned that caught my eye: Archangel.

SPEAKER_00 9:34

Yes, Archangel. The document says it's used to support department systems in accordance with NIST, SP 853, revision 5.

SPEAKER_01 9:43

So NIST 853 is that's the Bible of security controls for federal systems, right? It's hundreds and hundreds of rules.

SPEAKER_00 9:50

It is, it's thousands of checkboxes. And Archangel appears to be the State Department's tool for tracking all of them. So the vendor can't just secure the server. They have to prove it's secure inside Archangel to get their authority to operate.

SPEAKER_01 10:03

Which leads to this fascinating conflict they actually mentioned in the text. They have the Bureau of Diplomatic Security, they're the internal watchdogs.

SPEAKER_00 10:09

The red team, basically.

SPEAKER_01 10:11

They find a vulnerability, the vendor has to fix it. But at the same time, the vendor's trying to provide white glove service to a diplomat who just wants their iPad to work.

Modern DevOps In Government

SPEAKER_00 10:19

That is the central tension of this whole contract. The document actually asks for experience advising on technical and governance challenges unique to executive level IT support.

SPEAKER_01 10:30

Aaron Powell They're explicitly calling out that tension.

SPEAKER_00 10:33

They are. They're asking, how do you tell a senior official, no, you can't use that app without getting fired? Or even better, how do you find a secure way to let them do what they need to do?

SPEAKER_01 10:43

It's customer service meets national security.

SPEAKER_00 10:46

Exactly. And the document talks about secure by design. They want security baked in from the start, not bolted on at the end, which you know goes back to that infrastructure as code. If you build it right from the code up, it should be secure by default.

SPEAKER_01 10:58

Okay. So we've established this is a massive, incredibly difficult job,$150 million ceiling, five years. Let's talk about the business opportunity. Who can actually bid on this? The document says it's an 8A set aside.

SPEAKER_00 11:11

This is a crucial detail. The 8A program is a business development program run by the Small Business Administration for socially and economically disadvantaged businesses.

SPEAKER_01 11:21

So a huge defense contractor, like a Lockheed or a Lidos, they can't bid on this directly as the Prime.

SPEAKER_00 11:28

Not as the Prime, no. They could be a subcontractor, but the government wants to award this to an 8A firm. And that narrows the field significantly.

SPEAKER_01 11:38

It's a very specific Venn diagram. You need an 8A company that's sophisticated enough to handle multi-cloud, top secret clearances, and global logistics.

SPEAKER_00 11:48

It is. And the government knows it. That's why they issued this sources sought notice. They're basically asking, do you exist? If so, prove it.

SPEAKER_01 11:55

And the proof requirements are strict. They want tangible evidence.

SPEAKER_00 11:59

I loved that line. Mere assertions of capability are inadequate. You can't just write, we're great at cloud. You have to show a contract number, a dollar value, and a client reference who will actually vouch for you.

SPEAKER_01 12:09

And you have to do it all in 20 pages.

SPEAKER_00 12:10

Which might be the hardest part. Summarizing your entire corporate capability in 20 pages, you have to be absolutely roofless with your editing.

SPEAKER_01 12:17

It forces you to focus on what really matters to the client. And what seems to matter here isn't just technical skill, but also the ability to act as a strategic advisor.

SPEAKER_00 12:28

Yes, the ad hoc advisory services. The document mentions advising on budget cycles and acquisition.

SPEAKER_01 12:35

Which is so interesting. They're not just asking, fix my computer. They're asking, how should we spend our money next year?

SPEAKER_00 12:41

It elevates the vendor from a service provider to a partner. The leadership at state, they're not technologists. They're diplomats. They need someone to translate. If we spend X million on cloud migration now, we save Y million in maintenance later.

SPEAKER_01 12:54

So you have to speak the language of government finance.

SPEAKER_00 12:56

You do. And they also mention surge operations.

SPEAKER_01 13:00

Surge just sounds like code for crisis.

SPEAKER_00 13:02

It is. When a geopolitical crisis hits a war, a pandemic, an embassy evacuation, the demand for secure comms spikes instantly. The vendor needs to be able to rapidly scale staffing.

SPEAKER_01 13:14

Meaning we need 10 more top-secret cleared engineers and we need them yesterday.

SPEAKER_00 13:19

And you can't just find those people on LinkedIn overnight. The vendor needs a deep bench or a very, very strong recruiting pipeline. That surge requirement is probably where a lot of smaller firms might struggle.

SPEAKER_01 13:32

So if you're a listener running an 8A tech firm and you're hearing this on January 30th, you've got until February 13th. What's your next move?

SPEAKER_00 13:41

You rally the team, you look at your past performance. Do you have a project that looks like this? Maybe not at state, but maybe at DHS or DOD. You have to map your experience directly to these functional areas.

SPEAKER_01 13:53

And have your facility clearance paperwork ready to go.

SPEAKER_00 13:55

Oh, if you don't have that clearance already, you're not winning this. That's a hard gate.

SPEAKER_01 13:59

It's just a fascinating document because it strips away all the glamour of diplomacy and shows you the machinery underneath.

SPEAKER_00 14:05

It does.

SPEAKER_01 14:05

We see the Secretary of State on the news, you know, shaking hands, signing treaties. We don't see the engineer in the background making sure the secure VTC bridge doesn't crash.

SPEAKER_00 14:14

Or the person who made sure the flyaway kit had a charged battery. It's the infrastructure of statecraft.

SPEAKER_01 14:21

It reminds me of the requirement for UIUX informed approaches. We kind of skipped over that, but it feels significant. They actually want the user experience to be good.

SPEAKER_00 14:31

Which is rare for government. But it goes back to security. If the secure email system is impossible to use, the diploma will just pull out their personal iPhone and send a text.

SPEAKER_01 14:41

And then you have a security breach.

SPEAKER_00 14:42

And then you have a major security breach. So good design is actually a security feature. In this environment, absolutely. If you make the right path, the easy path, people will take it.

SPEAKER_01 14:51

So to recap, we have uh high stakes, high dollar opportunity for a very specialized small business. The deadline is fast approaching, the mission is critical, and the tech stack is surprisingly cutting edge.

SPEAKER_00 15:06

It's a real challenge to the industry. The State Department is basically saying, we're modernizing. Can you keep up?

SPEAKER_01 15:11

And for those of us not bidding, it's just a reminder of how digital our government has become.

SPEAKER_00 15:16

And it forces you to ask a bigger question about resilience, doesn't it? The State Department is willing to spend up to$150 million to ensure they can operate through any crisis.

Security Walls And Archangel

SPEAKER_01 15:25

It makes you think about your own continuity of government. If your digital life collapsed tomorrow, no cloud, no phone, how the on could you function?

SPEAKER_00 15:34

Most companies and most people, we don't have a flyaway kit. We are surprisingly fragile.

SPEAKER_01 15:41

We just rely on the stability of the grid, of the network. The State Department has to assume the grid and the network will fail and then plan accordingly.

SPEAKER_00 15:49

That's the difference between uptime and resilience.

SPEAKER_01 15:52

Well, that brings us to the end of this deep dive into the Exectech Sources sought notice. We'll be watching to see who eventually wins this contract later in the year.

SPEAKER_00 16:01

It will definitely be a company to watch.

SPEAKER_01 16:02

To our listener, thanks for geeking out with us over government procurement. It really is the hidden engine that keeps the world turning.

SPEAKER_00 16:09

Always a pleasure.

SPEAKER_01 16:10

We'll leave you with this final thought. In the age of digital diplomacy, power isn't just about whose army is bigger or whose economy is stronger. It might just be about who has the better IT support when the crisis hits. Thanks for listening. We'll catch you on the next deep dive.