Professional Services and Temporary Personnel for Information Technology Consulting/ Contractual Services

June 8, 2026
RFP Number: 1083.7
Due Date: July 27, 2026
Open Time: 2:00 pm
To: Prospective Respondents:
The purpose of this Request for Proposal (RFP) is seeking to establish a list of pre-qualified Vendors with
proven competencies and expertise in specific areas of needs to provide information technology,
professional services and temporary personnel to address needs outlined in this RFP.
Questions regarding the RFP must be submitted by the close of business, 4:00 p.m., on June 22, 2026.
The contractor must submit their offer per the instructions under the RFP, Section 8.0, Format of Response
and 9.0, Mandatory Submissions. The submission must be signed by an official having authority to
contract with MCPS. The firm and official's name shall be used. This solicitation does not commit the
district to pay any costs incurred in the submission of proposals or guarantee that an award will be made.
In the event of emergency closing of the MCPS Board of Education offices, this RFP will open at the
same time on the next regular working day.
Sincerely,
Angela McIntosh Davis, Director
Department of Procurement
AMD: se
Copy to:
RFP File

Division of Financial Management
MONTGOMERY COUNTY PUBLIC SCHOOLS
Department of Procurement, Suite 3100
45 West Gude Drive
Rockville, Maryland 20850
Request for Proposal #1083.7
Professional Services and Temporary Personnel for Information Technology
Consulting/Contractual Services
1.0 INTENT AND PROGRAM BACKGROUND
The intent of this Request for Proposal (RFP) is to establish a comprehensive, competitively solicited
and awarded Master Agreement to provide professional IT services, technical solutions, and temporary
personnel to Montgomery County Public Schools (MCPS). This Master Agreement serves as the
primary contractual vehicle for MCPS to acquire expert human capital and specialized infrastructure
while ensuring consistent terms and conditions across the enterprise.
In alignment with MCPS strategic priorities, this vehicle ensures that IT solutions support equitable
access to high-quality technical resources.
The purpose of this RFP is to establish a list of pre-qualified technical partners capable of providing a
full-spectrum portfolio of Professional IT Services and Temporary Personnel. This solicitation creates
a flexible procurement vehicle for the MCPS Division of Technology Services (DTS) and other
administrative offices to acquire expert human capital required for custom development, system
integration, and staff augmentation.
This vehicle is designed to support the full System Development Life Cycle (SDLC), ranging from
strategic planning and modernization to physical infrastructure maintenance. By combining these
requirements into a single competitive process, MCPS ensures that departments can issue specialized
Statements of Work (SOW) or Requests for Resumes (RFR) as specific operational needs emerge. To
remain current with emerging technologies and industry best practices, MCPS reserves the right to
open Expansion Windows at three-year intervals. This allows new vendors to enter the program and
existing contractors to add new functional areas, ensuring MCPS maintains access to the latest
software engineering, intelligent automation, and data science expertise.
2.0 INTRODUCTION
Montgomery County Public Schools (MCPS) is the 17th largest school system in the United States,
and the largest in the state of Maryland. During the 2023-2024 school year, MCPS served more than
159,000 students from 150 countries speaking 162 languages. With a Fiscal Year (FY) 2025 Operating
Budget of approximately $3.3 billion, MCPS employs more than 25,800 employees. Among the 211
schools that MCPS operates, 42 are National Blue-Ribbon schools. US News & World Report ranked
all 25 of MCPS's high schools in the 2025 "Best High Schools" list. Four were in the top 500 nationally,
and eight were in the top 25 in Maryland. The student demographics of MCPS in 2024-2025 were as
follows:

2 RFP 1083.7
Hispanic/Latino: 35.2%
White: 23.9%
Black or African American: 21.6%
Asian: 13.7%
Two or more races: 5.3%
American Indian or Alaskan Native: 0.2%
Native Hawaiian or other Pacific Islander: 0.1%
Students receiving free & reduced-price meals (FARMS): 44.2%
English for Speakers of Other Languages (ESOL): 19.8%
Students receiving special education services: 13.7%
In alignment with our strategic priorities, MCPS believes that each student matters; outcomes should
not be predictable by race, ethnicity, or socioeconomic status; equity demands the elimination of all
gaps; and creating and maximizing future opportunities for students and staff is necessary. Therefore,
MCPS holds high expectations for all students and staff; distributes resources as necessary to provide
extra support and interventions so all students can achieve; identifies and eliminates any institutional
barriers to students' success; and ensures that equitable practices are used in all classrooms and
workplace.
3.0 SCOPE OF SERVICES
This Master Agreement supports the full System Development Life Cycle (SDLC), ranging from
strategic planning and custom development to physical infrastructure maintenance. Services will be
procured through secondary competition via Statements of Work (SOW) or Requests for Resumes
(RFR). Services requested include the following:
3.1 Integrated Functional Areas
This section defines the primary technical domains under which MCPS may request services.
Offerors must clearly identify the specific competency areas proposed and provide verifiable
evidence of expertise.
1. Enterprise Cloud and Application Support
Includes configuration, implementation, and operational support for enterprise platforms such as
Oracle Fusion Cloud (HCM, ERP, and EPM), Infor Lawson, and Student Information Systems.
* Example Tasks: Module configuration, system upgrades/patching, data conversion, role-
based security setup, and executing HDL/HSDL uploads.
2. Engineering and Modernization
Addresses the full development lifecycle for custom applications using industry best practices and
emerging technologies.
* Example Tasks: Modernization of legacy systems, microservices/API design, CI/CD
pipeline implementation, and deployment using Agile/Scrum and DevOps methodologies
(e.g., Python, Java, .NET).
3. Intelligent Automation and Business Intelligence

3 RFP 1083.7
Supports data-driven decision-making through automated workflows and advanced reporting
tools.
* Example Tasks: Designing Power BI dashboards, implementing workflows via
Microsoft Power Automate, and piloting AI-enabled tools like Microsoft Copilot.
4. Data Science and GIS
Integrates, stores, and analyzes spatially-referenced data to support planning and resource allocation.
* Example Tasks: GIS data collection, spatial database design, map/visualization
development using ArcGIS Server, and predictive statistical modeling.
5. Specialized Infrastructure and Data Center Operations
Provides technical support for MCPS physical environments and high-availability data center
facilities.
* Example Tasks: Data center system monitoring, hardware refresh planning,
backup/disaster recovery support, and telecommunications tower site activities.
6. IT Management and Financial Consulting
Provides strategic governance, oversight, and independent third-party analysis of IT investments.
* Example Tasks: IT strategic roadmapping, Total Cost of Ownership (TCO) analysis,
independent IT auditing, risk management, and project management aligned with PMBOK
standards.
7. Information System Security
Strategic defense of hardware, software, and networking resources against adversaries and security
vulnerabilities.
* Example Tasks: Vulnerability assessments, penetration testing, intrusion detection system
(IDS) monitoring, endpoint security, and identity management.
8. Web and Internet Systems
Design and maintenance of secure, accessible web portals and applications for business processes.
* Example Tasks: Single Sign-On (SSO) integration, application firewalls, public key
infrastructure (PKI), and web graphics/content management.
9. Electronic Document Management
Establishing and maintaining electronic document imaging and automated document workflows.
* Example Tasks: Workflow analysis for systems like DocuWare, document indexing,
records retention/archiving, and document conversion.
10. Media, Training, and Documentation
Professional development of curricula and technical documentation to improve job performance and
system usability.
* Example Tasks: Instructional Systems Design (ISD), development of Standard Operating
Procedures (SOPs), user manuals, and the delivery of technology training tailored to MCPS
staff roles.

4 RFP 1083.7
3.2 Mandatory Technical Tasks and Standards
The mandatory technical tasks and standards are designed to ensure that all IT solutions are high-
quality, accessible, and fully compliant with rigorous state and federal regulations. These requirements
are categorized into specific technical capabilities and the methodological frameworks that govern
their delivery.
3.2.1 Mandatory Technical Tasks
Contractors must demonstrate the operational capacity and technical expertise to perform several high-
priority tasks across all relevant functional areas:
* Systems Integration: This includes the design, configuration, and maintenance of integrations
using the Oracle Integration Cloud (OIC) to bridge cloud-based and on-premises systems as well
as integrations with other enterprise systems.
* Comprehensive Quality Assurance (QA): Contractors may be required to provide performance,
load, and stress testing. Furthermore, they must conduct Independent Verification and Validation
(IV&V) activities to assess system functionality, security, and overall readiness before
deployment.
* Technical Writing and Training: This task involves developing Standard Operating Procedures
(SOPs), online help, and user documentation. Training must be tailored specifically to MCPS staff
roles and system users.
* Enterprise Application Configuration: For specialized systems like Oracle Fusion Cloud
(HCM, ERP, EPM), mandatory tasks include executing HDL and HSDL uploads, configuring
business workflows, and creating Fast Formulas.
* Information System Security: Contractors may be required to perform vulnerability
assessments, penetration testing, and disaster recovery planning to protect enterprise
infrastructure.
3.2.2 Methodological Frameworks and Industry Standards
To ensure professional consistency and quality, all services performed under this contract must adhere
to established industry and government frameworks:
* Project Management & Development: Project management services must align with the
PMBOK Guide standards, including rigorous schedule, budget, and performance reporting.
* Accessibility and Non-Visual Access (NVA): All deliverables must comply with Non-Visual
Access (NVA) and ADA Section 508 standards. Technology must provide equivalent access for
effective use by individuals who are blind or visually impaired, including keyboard controls for
input and synthesized speech or Braille for output. The Contractor warrants that the cost of
modifying technology for NVA compliance will not increase the overall cost by more than five
percent (5%).
3.2.3 Data Privacy and Regulatory Compliance
All services must be performed in accordance with MCPS security, privacy, and compliance standards:
* Regulatory Frameworks: Contractors are required to comply with applicable data protection
regulations and frameworks, including SOC 2, the Family Educational Rights and Privacy Act

5 RFP 1083.7
(FERPA), the Children's Online Privacy Protection Act (COPPA), and the Maryland Student
Privacy Act.
* Source Code Escrow: For all custom software solutions, the Contractor must agree to a Source
Code Escrow arrangement. This ensures that MCPS maintains access to the source code and
associated documentation in the event of vendor insolvency or dissolution.
3.2.4 Enhanced Vetting and Security Protocols
The security of MCPS information and computing resources is a mandatory operational requirement:
* State IT Security Policy: The Contractor and all personnel must comply with and adhere to the
State IT Security Policy and Standards, which may be updated periodically.
* Enhanced Background Investigations: All personnel assigned to the engagement must
successfully complete Criminal Justice Information System (CJIS) state and federal background
checks at the Contractor's expense. These investigations must include Social Security Number
(SSN) trace and verification, the US Department of Justice National Sex Offender Registry, and
a criminal record check for felony convictions within the last ten (10) years.
* Disqualifying Criteria: Personnel who have been convicted of a felony or crimes involving
telecommunications and electronics are strictly prohibited from performing work for MCPS.
3.3 Standardized Labor Categories and Qualifications
3.3.1 Purpose and Intent
To ensure consistent personnel quality and technical excellence, MCPS adopts a standardized labor
category structure modeled after the Maryland CATS+ framework. Offerors must align all proposed
personnel with these specific definitions, which mandate minimum education levels and precise years
of progressive experience. These categories establish the baseline for technical evaluation and
financial transparency, ensuring MCPS can acquire expert consulting services that meet documented
state and industry standards.
3.3.2 General Qualification and Substitution Rules
Unless otherwise restricted in a specific Statement of Work, MCPS allows the following substitutions
to provide flexibility while maintaining rigor:
* Substitution of Education for Experience: A Master's Degree may substitute for two (2) years
of the general and specialized experience for roles requiring a Bachelor's Degree.
* Substitution of Experience for Education: Experience equivalent to two (2) years per year of
college plus a degree in any discipline may be substituted for a required degree in a specific field,
subject to approval MCPS.
* Professional Certifications: Recognized professional certifications (e.g., PMP, SQL Certified
DBA, CISSP) may substitute for up to two (2) years of experience upon MCPS approval.
3.3.3 Technical Specialist Labor Categories (Enterprise Cloud & Data)
* Subject Matter Expert (Senior): Provides high-level vertical expertise (e.g., HR, Finance,
Student Systems) and formulates system specifications. Requires a Bachelor's Degree in the

6 RFP 1083.7
specific required discipline and 12 years of relevant industry experience, with 10 years of
specialized technical experience in the required field.
* Analyst, Financial (Senior): Specializes in defining government financial business practices and
documenting technical specifications for Oracle ERP/EPM modules. Requires a Bachelor's
Degree and 8 years of analyst experience, with 5 years focused on financial cost accounting and
information systems.
* Analyst, Computer Systems (Senior): Provides technical direction for software development
and prepares milestone status reports for major system installations. Requires a Bachelor's Degree
and 8 years of experience in complex application analysis and design, including DBMS and
multiple programming languages.
* Database Management Specialist (Senior): Manages SQL-based systems, defines security
procedures, and executes critical HDL/HSDL data uploads. Requires a Bachelor's Degree and 6
years of experience in DBMS systems analysis and programming, with 3 years in current DBMS
technologies.
3.3.4 Development and Engineering Labor Categories
* Applications Development Expert: Acts as a technical mentor and lead for complex enterprise-
wide software solutions and integrations. Requires a Bachelor's Degree and 7 years of IT industry
experience, with 3 years as a high-level technical expert.
* Engineer, Software: Reviews system specifications, analyzes subsystems for reusability, and
prepares unit and test scripts. Requires a Bachelor's Degree and 3 years of software engineering
experience, including 2 years with SQL or third/fourth generation languages.
3.3.5 Cybersecurity and Quality Assurance Categories
* Systems Security Specialist (Senior): Analyzes and defines security requirements, performs risk
assessments, and manages the implementation of multilevel security (MLS). Requires a
Bachelor's Degree and 8 years of security experience, with 5 years in defining requirements for
high-level applications.
* Quality Assurance Consultant (Senior): Establishes QA metrics and methodologies (e.g., root
cause analysis) to ensure products meet industry standards and government regulations. Requires
a Bachelor's Degree and 8 years of QA experience, with 5 years working with statistical methods.
* Testing Specialist: Specialized in designing and executing software tests (functional and
technical) and preparing test scripts to ensure compliance with regulations. Requires a Bachelor's
Degree and 4 years of software development experience, with 2 years focused on testing.
3.3.6 Operational Support and Content Categories
* Technical Writer/Editor: Responsible for preparing user manuals, Standard Operating
Procedures (SOPs), and installation guides. Requires a Bachelor's Degree (preferred) or
Associate's and a minimum of 5 years of professional experience in technical documentation.
* Training Specialist/Instructor: Develops training materials and conducts classroom sessions
tailored to MCPS staff roles. Requires a Bachelor's Degree and 4 years of experience in
information systems training, including 2 years of end-user IT training.
* GIS Analyst: Writes programs and develops macro-level commands for spatial analyses and
report production. Requires a Bachelor's Degree in Geography or a related field with specialized
GIS coursework and 2 years of professional GIS experience.

7 RFP 1083.7
3.4 Vendor Requirements
To ensure the delivery of high-quality IT consulting services and project stability for large enterprise
systems, the Contractor must meet the following mandatory requirements.
1. Technical Qualifications
a. Proof of Capability: For each technical competency checked in the proposal, the Vendor
must provide verifiable evidence of relevant experience, including expertise in specific
product components and technologies.
2. Fiscal Integrity and Legal Mandatory Submissions
a. Conflict of Interest: Vendors must complete a Conflict of Interest Affidavit and Disclosure
to ensure services are provided impartially and without professional conflicts.
3. Personnel Management and Staffing Requirements
a. Staffing Plan and Mapping: Vendors must provide a Staffing Plan Chart showing the time
commitment of each professional staff member mapped to the Standardized Labor Categories
defined in Section 4.4.
b. Substitution Protocol: Any substitution of personnel requires at least 15 business days'
notice and formal written approval from the MCPS Purchasing Agent. Proposed substitutes
must possess qualifications equal to or superior to the personnel they are replacing.
c. Task Leader Designation: Senior or lead labor categories may serve as a Task Leader and
must possess supervisory or project leadership experience.
4. Security, Vetting, and Insurance
a. Enhanced Background Screening: All personnel assigned to the engagement must
successfully complete Criminal Justice Information System (CJIS) state and federal
background checks at the Contractor's expense. Investigations must include SSN trace and
verification, National Sex Offender Registry checks, and a criminal record check for felony
convictions within the last 10 years.
b. Disqualifying Criteria: Personnel convicted of a felony or crimes involving
telecommunications and electronics are strictly prohibited from working on MCPS projects or
premises.
c. Cyber/IT Insurance: The Vendor must maintain Cyber/Information Technology Insurance
of at least $2,000,000 per claim and annual aggregate.
d. Breach Reporting: Any security breach or unauthorized data exposure must be reported to
MCPS immediately upon discovery, with a formal written report submitted within three (3)
days.
5. Data Privacy and Regulatory Compliance
a. Student Privacy Acts: Vendors must comply with FERPA, the Maryland Student Privacy
Act of 2015, and COPPA.
b. SOC 2 and HIPAA: A current SOC 2 Type II report is required for the Contractor and any
subcontractors handling sensitive MCPS data. If the vendor handles healthcare-related data,
they must execute a formal Business Associate Agreement (BAA) in compliance with HIPAA.
c. Subcontractor Flow-Down: The Contractor is fully responsible for the performance of all
subcontractors and must ensure all security, privacy, and background check requirements are
flowed down into all subcontract agreements.

8 RFP 1083.7
6. Project Deliverables and Risk Management
a. Source Code Escrow: For all custom software, the Vendor must agree to a Source Code
Escrow arrangement to ensure MCPS maintains access in the event of vendor insolvency.
b. Ownership: MCPS shall solely own all System Source Materials, including executable
instructions, configuration files, and algorithms.
7. Administrative Oversight
a. Usage Reporting: The Contractor shall provide electronic weekly productivity reports
summarizing tasks, deliverables, and hours spent.
b. Contract Management Oversight (CMO): For Statement of Works valued at $1 million or
greater, Contractors must participate in self-reporting oversight activities to monitor project
health.
c. Audit of Records: MCPS or its agent shall have the right to examine any Contractor records
involving transactions related to the contract for three (3) years after final payment.
3.5 Data Privacy and Security
To ensure the protection of more than 159,000 students and 25,000 employees, the Contractor shall
adhere to the following integrated privacy and security framework
3.5.1 Comprehensive Regulatory Compliance
The Contractor shall comply with all federal, state, and local laws and Board of Education policies
applicable to student data and privacy, including but not limited to:
* Family Educational Rights and Privacy Act (FERPA) and Maryland Student Privacy Act of 2015.
* Children's Online Privacy Protection Act (COPPA) and the Protection of Pupil Rights
Amendment (PPRA).
* MCPS Regulations including AFA-RA (Data Collection), JOA-RA (Student Records), and JFF-
RA (Protected Student Information).
* HIPAA Compliance: If the engagement involves healthcare-related data, the Contractor shall be
designated a "Business Associate" and must execute a formal Business Associate Agreement
(BAA) in compliance with HIPAA.
3.5.2 Verifiable Internal Controls (SOC 2)
To validate proper access and data protection, MCPS requires verifiable evidence of the Contractor's
security posture:
* SOC 2 Type II Report: The Contractor-and any subcontractors handling sensitive MCPS
data-must provide a current SOC 2 Type II report at the time of proposal or upon request.
3.5.3 Subcontractor Flow-Down and Primary Liability
The Contractor shall not subcontract any portion of the work without prior written notice to MCPS.
* Flow-Down Mandate: The Contractor must ensure that all security, privacy, and background
check requirements are "flowed down" into all subcontract agreements.

9 RFP 1083.7
* Primary Responsibility: The Contractor remains fully responsible and liable to MCPS for the
performance, acts, errors, and omissions of all subcontractors as if they were the Contractor's own
employees.
3.5.4 Breach Notification and Response Protocols
* Immediate Notification: The Contractor must report all security breaches or incidents
compromising MCPS data immediately upon discovery.
* Contractual Reporting Window: A formal written report must be submitted to the MCPS within
three (3) days of initial discovery.
* Cooperation: The Contractor shall cooperate fully with MCPS to ensure timely legal notice is
provided to affected individuals.
3.5.5 Data Ownership, Monetization, and Disposition
* Exclusive Ownership: MCPS shall solely own all data, databases, and derived data products.
* Prohibition of Sale: Unless approved in writing, the Contractor is strictly prohibited from selling,
giving, or distributing any MCPS data, reports, or materials to any third party.
* Return Procedures: At termination, the Contractor must return MCPS data in a specified format
and timeframe, including a certification of deletion for any data remaining on Contractor
systems.
* Source Code Escrow: For custom software, the Contractor must agree to a Source Code Escrow
arrangement to protect MCPS access in the event of vendor insolvency.
3.5.6 Cybersecurity Insurance Mandates
* Coverage Limits: The Contractor shall maintain Cyber/Information Technology Insurance of
at least $2,000,000 per claim and annual aggregate.
* Required Endorsements: The policy must explicitly cover unauthorized access, mitigation costs,
third-party notification, regulatory coverage, and credit monitoring.
* Tail Coverage: This insurance must be maintained throughout the term and for two years
thereafter for services completed during the agreement.
3.5.7 Standards, Infrastructure, and Audit Rights
* IT Security Policy: All personnel must adhere to the State IT Security Policy and Standards,
including prohibitions against connecting unauthorized equipment to the MCPS LAN/WAN.
* Non-Visual Access (NVA): All solutions must meet Maryland and Fairfax NVA standards; the
cost of modification for compliance shall not increase the price by more than five percent (5%).
* Right to Audit: MCPS or its authorized agent shall have the right to examine any Contractor
records or books involving contract transactions for a period of three (3) years after final payment.
3.6 Subcontractor Oversight, Compliance, and Security
3.6.1 Mandatory Disclosure and Approval
The Contractor shall not subcontract any portion of the work under this Master Agreement without
prior written notice to the MCPS Purchasing Agent. For each proposed subcontractor, the Contractor
must clearly identify:
* Legal name, business address, and primary contact information.
* A description of the specific technical services or solution elements to be performed.