Strategic Services for Identity and Access Management (IAM)

BDC is undertaking a strategic initiative to modernize its enterprise-wide Identity and Access Management (IAM) foundation to strengthen security, improve governance, and support the adoption of a scalable and sustainable Zero Trust architecture. This initiative spans the full IAM scope, including human and non-human identities, applications and APIs, cloud and on-premises environments, and associated governance and operating models. Given the breadth of BDC’s digital ecosystem and the criticality of IAM as a foundational security capability, this initiative requires a structured, enterprise-level approach supported by independent strategic expertise. Through this procurement process, BDC seeks to engage a strategic advisory partner with proven experience in large-scale IAM transformation, Zero Trust design, and regulated environments. The selected partner will be responsible for: Lot 1 (Fixed Mandate): Designing and delivering a comprehensive strategic IAM roadmap, defining a clear target-state vision, guiding principles, architectural orientations, and a prioritized set of initiatives covering authentication, authorization, identity lifecycle management, access governance, and integration with security and platform services. Lot 2 (Advisory Services Retainer): Providing on-demand advisory support throughout the lifecycle of the IAM transformation, including validation of strategic options, guidance on architectural and design decisions, sequencing and dependency analysis, operating model and governance considerations, and ad-hoc expertise to support execution readiness and stakeholder alignment. The engagement must balance security, compliance, operational efficiency, and business enablement, while remaining pragmatic and executable within BDC’s operating and regulatory context. Bidding and Documents are available on http://www.merx.com. Fees may apply; See https://www.merx.com/public/pricing for more information.