BLOG / 🇺🇸 United States · · daily

Federal IT & Cybersecurity Contracts — October 23, 2026

Federal IT & Cybersecurity Contracts

By Gunpowder Editorial ·

7 total filings analysed

Executive Summary

Seven federal IT and cybersecurity awards dated October 23, 2026 (stream window) carry a combined obligation of $1,406,131,752, but the record is dominated by a single $1,138,891,386 Booz Allen Hamilton award from the Department of Veterans Affairs, which is dated 2021-01-07 and therefore does not fall within the stated period, a date inconsistency that should be verified before relying on it.

None of the seven awards is defense-related, so the entire stream is civilian (VA, DHS, DOJ/FBI, GAO, HHS/CDC, HHS/NIH) and the defense-sector read-through is zero. The dominant theme is civilian IT services and cloud hosting labor, with most non-Booz Allen awards in the $27M to $84M range and mostly neutral signals (6 of 7), reflecting modest, option-dependent revenue rather than step-change events. The highest-conviction signal is the Booz Allen VA award as the only bullish item, though its date and the absence of revenue, margin, and competition data limit confidence. The key watch item is option exercise and outlay pace across the group, since most awards show less than half of their potential value obligated and several have low outlay ratios, notably SAIC's GAO delivery order at roughly 19% outlaid.

Materiality, sentiment, and priority are scored by Gunpowder’s analysis pipeline. How we score filings →

Tracking the trend? Catch up on the prior Federal IT & Cybersecurity Contracts digest from October 15, 2026.

Investment Signals (7)

  • Booz Allen Hamilton: $1.14B Department of Veterans Affairs award (MEDIUM)
    ▲

    Booz Allen Hamilton received a $1,138,891,386 VA award, the largest obligation in the stream and the only bullish signal, carrying materiality 8/10 and strength 7/10. The award date of 2021-01-07 falls outside the stated October 23, 2026 period, so its timing and current execution status need verification.

  • Amazon Web Services: $83.4M DHS/CISA sole-source cloud hosting delivery order (MEDIUM)
    ▲

    AWS received an $83,417,225 firm-fixed-price, sole-source delivery order from DHS CISA for cloud hosting (NAICS 518210), with a potential end date of 2028-08-31 and $0 outlayed so far. Option exercise and early outlays are the catalysts to watch, though the award is small relative to AWS's scale.

  • Sentinel Group LLC: $40.6M VA fixed-price delivery order with high pricing risk (LOW)
    ▲

    Sentinel Group's $40,614,444 firm-fixed-price VA delivery order places cost-overrun risk on the contractor, with about 70% ($28,559,001) already outlaid and the current end date of 2027-05-19. Margin outcomes cannot be determined from the data, and the public status of the recipient is not stated.

  • SAIC: $34.6M GAO delivery order with low early outlay (MEDIUM)
    ▲

    SAIC's $34,586,787 GAO time-and-materials delivery order has only about $6.48M (roughly 19%) outlaid, and the obligation covers about 35% of the $98,003,800 base-plus-options ceiling, so realized revenue depends on future option exercise and funding actions.

  • ECS Federal (ASGN): $50.6M FBI time-and-materials BPA call order (LOW)
    ▲

    ECS Federal, a subsidiary of ASGN Incorporated, received a $50,589,964 DOJ/FBI time-and-materials BPA call order against a $133,959,215 base-plus-options value, with $18,668,681 outlaid. ASGN's total revenue is not disclosed, so materiality to the parent cannot be assessed.

  • Deloitte Consulting: $30.3M CDC IT services delivery order (LOW)
    ▲

    Deloitte Consulting's $30,324,217 CDC time-and-materials delivery order (NCEZID IT Services 3.0) has roughly 54% of its $55,806,063 ceiling obligated and $14,177,877 outlaid. The award is non-material to Deloitte's scale and is relevant mainly as sector read-through.

  • Information Management Services: $27.7M NIH CIO-SP3 cost-plus delivery order (LOW)
    ▲

    Information Management Services received a $27,707,726 NIH NCI cost-plus-fixed-fee delivery order under the CIO-SP3 Small Business IDIQ, with $13,510,172 outlaid and a potential ceiling of $84,401,912. Eligibility and designation status relative to the small-business vehicle is unexplained in the data.

Risk Flags (4)

  • Concentration [HIGH RISK]
    ▼

    The stream's aggregate value is driven by one Booz Allen VA award of $1.14B, which accounts for roughly 81% of the $1.41B total, so aggregate figures overstate breadth of signal. The award date inconsistency (2021 versus the stated 2026 period) also raises a data-integrity question.

  • Execution [MEDIUM RISK]
    ▼

    Several awards show low outlay relative to obligation or unexercised ceilings, including AWS at $0 outlayed, SAIC at about 19%, and ECS Federal at about 37%, so realized revenue is uncertain.

  • Execution [MEDIUM RISK]
    ▼

    Sentinel Group's firm-fixed-price structure places cost-overrun risk on the contractor for a $40.6M VA delivery order, and the data gives no margin information.

  • Budget [MEDIUM RISK]
    ▼

    None of the awards provides agency budget or appropriations trend data, so funding durability for DHS, DOJ, GAO, HHS, and VA cannot be assessed from this record, and CR exposure cannot be quantified.

Opportunities (3)

  • ◆

    Option exercises on multiple civilian IT vehicles would convert unexercised ceilings into obligations, notably ECS Federal's FBI BPA (from $50.6M obligated toward $134M), SAIC's GAO order (from $34.6M toward $98M), and Information Management Services' NIH order (from $27.7M toward $84.4M).

  • ◆

    AWS's sole-source DHS/CISA cloud hosting delivery order, with potential value through 2028-08-31, signals sustained federal cloud demand and possible follow-on orders.

  • ◆

    Deloitte's CDC IT services order (ceiling $55.8M) and Sentinel's VA order provide recurring labor and application support demand that may extend through the 2029 potential end dates.

Sector Themes (2)

  • ◆

    Six of seven awards are time-and-materials, cost-plus, or delivery orders for application development and IT support labor (NAICS 541512, 541519, 541511), spanning VA, DOJ/FBI, GAO, CDC, and NIH. This points to steady labor-based civilian demand rather than a single technology wave.

  • ◆

    The AWS DHS/CISA sole-source delivery order ($83.4M, NAICS 518210) is the only explicit cloud-infrastructure award in the stream, indicating continued civilian migration to hyperscale cloud, though its size is small relative to AWS.

Watch List (5)

  • 👁

    {"entity" => "Booz Allen Hamilton", "reason" => "Largest award in the stream at $1,138,891,386 from VA, but the 2021 award date conflicts with the stated period and the record lacks revenue and margin context.", "trigger" => "Verify award date and any VA modifications or recompete announcements"}

  • 👁

    {"entity" => "Science Applications International Corporation (SAIC)", "reason" => "GAO order at $34.6M with about 19% outlaid and only 35% of the ceiling obligated, so realized revenue depends on option exercise.", "trigger" => "Option exercise decision near the 2027-12-09 current end date"}

  • 👁

    {"entity" => "Amazon Web Services / AMZN", "reason" => "Sole-source DHS/CISA cloud order at $83.4M with $0 outlayed, indicating a sustained civilian cloud demand signal.", "trigger" => "First outlays and any follow-on delivery orders under the DHS/CISA activity"}

  • 👁

    {"entity" => "ASGN Incorporated", "reason" => "ECS Federal's FBI BPA ($50.6M obligated against $134M ceiling) is time-and-materials, so revenue tracks labor hours; parent materiality is undisclosed.", "trigger" => "Option exercises and ASGN federal segment revenue disclosures"}

  • 👁

    {"entity" => "Sentinel Group LLC", "reason" => "Fixed-price VA order with high cost-overrun risk and about 70% already outlaid, with public status unknown.", "trigger" => "Any scope modification or VA extension toward the 2027-07-10 potential end"}

Get daily alerts with 7 investment signals, 4 risk alerts, 3 opportunities and full AI analysis of all 7 filings

$30/mo after a 14-day free trial — no credit card required. See pricing or explore intelligence streams.

More from: Federal IT & Cybersecurity Contracts

🇺🇸 More from United States

View all →