Federal IT & Cybersecurity Contracts — July 08, 2026

Deloitte secured a $141.7M total value BPA call for HSPD-12 operations, with $86.1M obligated and $65M already outlaid, indicating strong funding and execution. The full-and-open competition win confirms Deloitte's competitive moat in federal identity security.

ESIMPLICITY, a small woman-owned 8(a) firm, won a time-and-materials delivery order with $52.9M already outlaid, providing multi-year revenue visibility through 2027. The contract validates the company's competitive positioning in federal health IT.

TRM LABS, a small business, received a non-competitive $94.7M firm-fixed-price contract for DHS Cyber Disruption Center analytical support. The sole-source nature suggests a unique capability or urgent need, but the fixed-price structure and single-year duration introduce execution risk.

TRM LABS' $94.7M firm-fixed-price contract carries high pricing risk for a small business, as cost overruns are not reimbursable. The single-year duration with no options limits revenue visibility beyond June 2027.

Four of seven contracts (57% by count) are awarded to small businesses (TRM LABS, TISTA, ESIMPLICITY, INSERSO), representing $320.5M (58%) of total obligation. This concentration introduces execution and scalability risk, particularly for TRM LABS and ESIMPLICITY which have limited contract diversification.

Booz Allen Hamilton's $84M CMS delivery order expires in July 2026 with no options, creating a cliff risk for revenue. CMS budget allocations for Marketplace IT systems in future appropriations will determine follow-on work.

HHS/CMS health IT modernization spending is sustained, with $250.2M in awards to Deloitte, Booz Allen, and ESIMPLICITY. Investors should monitor follow-on contracts for Deloitte's HSPD-12 program (options through 2028) and Booz Allen's Marketplace System Integrator re-compete.

TRM LABS' $94.7M sole-source award to DHS ICE Cyber Disruption Center indicates a unique capability in cyber analytics. If TRM LABS performs well, it could win additional sole-source awards or expand into other DHS components.

ESIMPLICITY (woman-owned 8(a)) and INSERSO (small, minority-owned) won contracts through set-aside programs, demonstrating policy-driven demand. Investors should track agency compliance with small business goals and potential re-competes that favor incumbents.

Three contracts totaling $250.2M from HHS/CMS (Deloitte $86.1M, Booz Allen $84M, ESIMPLICITY $80.1M) demonstrate sustained investment in identity management, cloud-based marketplace systems, and Medicaid data systems. This theme is durable due to mandated programs (HSPD-12) and ongoing ACA exchange operations.

Two contracts totaling $159.1M from DHS/ICE (TRM LABS $94.7M, INSERSO $64.5M) highlight growing investment in cyber analytical support and enterprise IT management. The sole-source nature of TRM LABS' award suggests urgent capability needs in cyber disruption response.

{"entity"=>"TRM LABS, INC.", "reason"=>"Awarded $94.7M sole-source DHS contract with high execution risk; performance will determine future DHS cyber awards.", "trigger"=>"Contract performance period ends June 2027; any protests or modifications"}

{"entity"=>"Booz Allen Hamilton Inc", "reason"=>"$84M CMS delivery order expires July 2026 with no options; re-compete risk is immediate.", "trigger"=>"CMS FY2027 budget request; re-compete announcement for Marketplace System Integrator"}

{"entity"=>"ESIMPLICITY Inc", "reason"=>"$80.1M CMS contract provides multi-year revenue through 2027, but concentration risk is high for a small firm.", "trigger"=>"CMS T-MSIS program budget; follow-on contract awards"}

{"entity"=>"Deloitte & Touche LLP", "reason"=>"$86.1M HHS HSPD-12 contract has options through 2028; option exercise will signal sustained demand.", "trigger"=>"Option year exercise decisions beyond 2026"}