ITES-10946 - USA (Washington, DC) - Co-Managed Information Technology Services - Deadline September 22,2026

(1) Vendor needs to provide co–managed information technology services to the government authority located in Washington, DC. – Co–managed IT services partner to work alongside internal technology staff — not toreplace them, and not to operate as a hands–off, black–box helpdesk.– The partner provides day–to–day end–user support along with the advanced engineering and security layer, supplementing and extending our internal capacity, while agency’s internal IT remains the day–to–day organization–side owner — retaining context, approvals, prioritization, and certain routine administrative actions, and directing the partner’s work.– As the first phase, the partner will conduct a structured discovery and current–state review and produce a documented configuration baseline across identity (Entra ID), endpoint management (Intune), threat protection (Defender), data governance (Purview), backup, and access controls.– Remote Monitoring & Management (RMM). Continuous monitoring of all endpoints and cloudservices; automated alerting; health/performance dashboards visible to internal IT; proactiveremediation.– Co–Managed Service Desk & End–User Support (Tier 1–3). The partner delivers day–to–day end–user support that supplements and extends internal capacity — ticket intake across channels, troubleshooting, break/fix, software and how–to support, password/account assistance, and Tier 2/3 escalation engineering — operating under internal IT’s direction and prioritization, with internal IT remaining the organization–side owner for context, approvals, and certain routine administrative actions.– Patch & Vulnerability Management. Patch orchestration for OS and third–party applications across a fully remote fleet (via Intune/cloud); patch ring/test strategy; vulnerability scanning and remediation SLAs; reporting cadence.– Cybersecurity (MDR / EDR / Response). 24/7 managed detection and response; endpoint detection and response (Defender or equivalent); email security/anti–phishing; SIEM/log management; security awareness training and phishing simulation; and a defined incident response process with breach notification commitments.– Onboarding / Offboarding Automation. Co–design repeatable, auditable provisioning/deprovisioning workflows — license assignment/removal, group/permission changes, mailbox conversion, data preservation, and timely access revocation. Describe automation you can bring.(2) All the questions must be submitted no later than September 9, 2026.