Dept of Management Services Florida #GCEC_2026.3

Gulf Coast Electric Cooperative Seeks Turnkey Azure GCC Environment with Managed Cybersecurity and CMMC Level 2 Compliance

Gulf Coast Electric Cooperative, Inc. (GCEC) is seeking a vendor to design, deploy, and manage a secure Microsoft Azure Public Government Community Cloud (GCC) environment with comprehensive managed cybersecurity services and CMMC Level 2 compliance support. - Government Buyer: - Gulf Coast Electric Cooperative, Inc. (GCEC), Florida panhandle utility - OEMs Highlighted: - Microsoft (Azure Public GCC, Microsoft 365 GCC) - Intel (processors specified for virtual desktops and servers) - NVIDIA (GPU for virtual desktops) - Red Hat (Enterprise Linux OS for database server) - Products/Services Requested: - 29 Microsoft 365 GCC licenses for secure CUI/FCI processing - 29 Azure Virtual Desktop endpoints with high-performance specs (Intel Core Ultra 9 275HX, NVIDIA GeForce RTX 5080, 64GB RAM, 1TB SSD, 16" OLED) - File server storage (2TB, 8GB RAM, 4 vCPUs) - SQL server (32/64GB RAM, 8 vCPUs, 1.5TB storage) - Meridian database and application servers (detailed specs, including Red Hat Enterprise Linux 9 and Windows Server 2022) - Managed cybersecurity services: Zero Trust architecture, 24/7/365 SOC monitoring, endpoint security, vulnerability management, incident response, and compliance documentation - Identity and access management, logging/monitoring, and compliance governance consulting - Notable Requirements: - Environment must meet CMMC Level 2 and NIST SP 800-171 standards - Must securely handle Controlled Unclassified Information (CUI) and Federal Contract Information (FCI) - Vendors must detail methodologies, tools, governance, and operational procedures - Emphasis on Zero Trust, continuous monitoring, and evidence-based compliance - Ongoing managed services with annual exercises and continuous improvement

Description

Gulf Coast Electric Cooperative, Inc. (GCEC) is seeking proposals for a turnkey Azure Public Government Community Cloud (GCC) secure environment with integrated cybersecurity, monitoring, governance, and compliance services aligned with Cybersecurity Maturity Model Certification (CMMC) Level 2 requirements. The selected vendor will design, deploy, secure, and operate a fully managed cloud-based environment capable of securely handling Controlled Unclassified Information (CUI) and Federal Contract Information (FCI). The project aims to modernize security architecture using Azure Public GCC while ensuring full alignment with federal cybersecurity frameworks including NIST SP 800-171. The vendor will be responsible for architecture design, implementation, monitoring, documentation, compliance support, and continuous improvement of the cybersecurity posture.

View original listing