Latest US Infrastructure Finance Contracts & Bids

This is a market research notice, not a request for proposal, to identify contractors capable of providing specialized technical and engineering support services for the Western Area Power Administration's Transmission Infrastructure Program (TIP). The notice outlines the required services, including various work areas related to project finance transactions supporting independent power projects. The notice specifies that responses should include a cover page with company information, a brief statement of capabilities, and business size classification. No cost or pricing information should be provided. Responses are due at least 24 hours before the specified due date. The information gathered will be used in the government's determination for the business type utilized in the subsequent Request for Quotation (RFQ). Travel must be authorized in writing at least two weeks in advance, and reimbursement will be in accordance with federal travel regulations.

The City of Desert Hot Springs is seeking proposals from qualified municipal finance consultants to develop a tax increment financing program for housing support infrastructure in the downtown area. The proposal is due on July 14, 2025, by 5:00 PM. Proposals must be submitted in separate envelopes (work proposal and cost proposal) and include a cover letter, firm background, references, staffing plan, subcontracting details, project understanding, scope of services, project schedule, disclosures, insurance requirements acknowledgement, noncollusion affidavit, addenda acknowledgement, and a detailed fee schedule. Questions must be submitted by June 27, 2025. The RFP includes detailed requirements, including insurance coverage, and a scoring sheet for evaluation.

This document outlines security requirements for contractors developing, maintaining, or hosting applications for the Ohio Department of Job and Family Services (ODJFS). Key requirements include data encryption in transit and at rest, use of Data Execution Prevention (DEP) and Address Space Layout Randomization (ASLR), secure enclaves in cloud environments, unique user sessions, access control checks, prevention of injection attacks, and adherence to industry best practices for hardening. Audit logging requirements are detailed, including specific events to be recorded and minimum logging details. The contractor is responsible for acquiring and setting up third-party tools for audit log management. Annual audits (AICPA SSAE No. 18, SOC 1 Type 2 and SOC 2 Type 2 reports) are required for cloud-based or contractor-hosted solutions, with the contractor responsible for all audit costs. The state may audit controls and security measures without notice. Production data is prohibited in non-production environments, and vulnerability scanning (static/dynamic) is required for applications. Penetration testing by a third-party firm is mandated. The contractor must comply with all ODJFS release management and change management processes. The document also specifies requirements for development using various technologies (e. g. , . NET, Java, Salesforce), change management, database read replicas, cloud vendor agnostic products, Infrastructure as Code (IAC), and declarative definition files.