A working guide to the federal IT market — contract vehicles, buyers, and approaches
Last reviewed on May 12, 2026.
Ceiling: Unlimited | Duration: 20 years
Ceiling: $50B | Duration: 10 years
Ceiling: Unlimited | Duration: 10 years
Ceiling: $75B | Duration: 10 years
Ceiling: $50B | Duration: 10 years
Ceiling: $17.5B | Duration: 10 years
| Agency | Annual IT Budget | Focus Areas | Key Vehicles |
|---|---|---|---|
| Department of Defense | $46.5B | Cybersecurity, C4ISR, Cloud | DISA Encore, NETCENTS |
| Department of Homeland Security | $8.9B | Border tech, Cybersecurity | EAGLE, FirstSource |
| VA | $7.2B | Health IT, EHR modernization | T4NG, VECTOR |
| HHS/CMS | $6.8B | Healthcare IT, Data analytics | CIO-SP4, SPARC |
| Treasury/IRS | $4.3B | Tax systems, Financial tech | TIPSS-5, IRS IDES |
Common for staff augmentation and agile development projects.
Used for well-defined deliverables and commercial items.
Similar to T&M but without materials, common for services.
The GSA Multiple Award Schedule remains the workhorse contract vehicle for federal IT — broader than any single GWAC, with a 20-year contract term and access to all agencies. For software, professional services, and many hardware categories, the Schedule sits alongside the agency-specific GWACs above. The trade-off is the catalog discipline a Schedule requires; see the GSA Schedules overview for what it actually involves to obtain and maintain one.
For IT products specifically, NASA SEWP is often the fastest path — quote-driven ordering with lower fees than Schedule. For IT services with health-IT emphasis, NIH CIO-SP4 is the dominant vehicle. For enterprise-scale integration and modernization, GSA Alliant 3 covers the largest programs. For 8(a)-only IT work, 8(a) STARS III supports both directed and competitive task orders. For professional services work that crosses traditional IT boundaries, OASIS+ is GSA's flagship vehicle; see federal professional services contracts for how the services side of the federal market differs from the products side.
Before pursuing any IT contract vehicle, the basic eligibility work has to be in place: an active SAM.gov registration, sensible NAICS codes on the record, and the relevant small business certifications if you plan to pursue set-aside work.
Compliance overlays specific to federal IT: CMMC certification for DoD work involving CUI, and Section 889 for telecommunications equipment.