MHCC 27-010 Website Maintenance and Support

The State of Maryland’s Department of Health is seeking a qualified small‑business vendor to provide ongoing website maintenance, cloud infrastructure management, application support, security, backup, disaster‑recovery, and help‑desk services for the Maryland Health Care Commission (MHCC) web environment hosted on AWS. The contractor will work closely with Commission IT staff, deliver an integrated project schedule, monthly status and SLA performance reports, and maintain compliance with NIST, state, and DoIT security standards. Key deliverables include infrastructure management, Drupal/.NET application support, database administration, security monitoring, backup/DR testing, incident management, documentation, and annual SOC 2 Type 2 audit reporting. The contract is limited to certified small‑businesses and will be performed in the United States. • Ongoing AWS environment administration (IAM, VPC, security groups, monitoring, auto‑scaling). • Application support for Drupal CMS and .NET services, including CI/CD pipelines. • Database administration for MariaDB and SQL Server RDS instances. • Security compliance (NIST, SOC 2, encryption, WAF, incident response). • Backup, disaster‑recovery, and data retention (RPO 1 hr, RTO 24 hr). • 24/7/365 incident response with defined SLA response/resolution times. • Monthly and quarterly reporting, documentation, and knowledge transfer. • Optional future work via task orders for enhancements or migrations.