Durham Civicplus #27-1101

City of Durham seeks comprehensive Privileged Access Management (PAM) solution

The City of Durham Technology Solutions department is seeking proposals for a comprehensive Privileged Access Management (PAM) solution to strengthen its cybersecurity posture. - Government Buyer: - City of Durham, Technology Solutions - Contact: Prasanna Ramamoorthy - OEMs and Vendors: - No specific OEMs or vendors are named in the solicitation or attachments - Products/Services Requested: - Privileged Access Management (PAM) solution - Centralized control of privileged credentials - Enforcement of least-privilege access - Continuous monitoring and auditing of privileged activities - Integration with Boss Desk for automated access request lifecycle management - Secure credential vaulting and rotation - Advanced access control and session management - Support for vendor and contractor remote access - Compliance with CJIS and law enforcement security standards - Automated validation, approval workflows, just-in-time provisioning, session monitoring, automatic deprovisioning, audit and ticket closure - Automated discovery of privileged accounts - VPN-less access, identity federation, granular asset scoping - Advanced cryptographic and multi-factor authentication controls - Hybrid cloud environment support - Software licensing, configuration, hosting, training, and support - Unique or Notable Requirements: - Strict compliance with NIST and CJIS standards - Integration with existing IT service management tools (Boss Desk) - Advanced security controls for both internal and third-party privileged access - Full operational deployment required by contract deadline - Solution must support hybrid cloud environments - No part numbers or purchase quantities are specified in the solicitation or attachments.

Description

The City of Durham is soliciting proposals for a comprehensive Privileged Access Management (PAM) solution to enhance its cybersecurity posture. The project involves centralizing control over privileged credentials, enforcing least-privilege access, and continuously monitoring privileged activities across the IT environment. The solution should integrate with existing systems such as Boss Desk for automated privileged access request lifecycle management, provide secure credential vaulting and rotation, enforce access control and session management, support vendor and contractor remote access, comply with CJIS and law enforcement security standards, and include monitoring and auditing capabilities. Proposals are due by October 28, 2026, and a pre-bidding conference is scheduled for October 14, 2026.

View original listing