BLOG/🇺🇸United States··daily

Federal IT & Cybersecurity Contracts — January 20, 2026

Federal IT & Cybersecurity Contracts

5 total filings analysed

Executive Summary

Five federal IT and cybersecurity contracts totaling $374M underscore sustained U.S. government investment in systems modernization, Medicare support, VA data migration, and diplomatic security through 2026-27. Bullish signals dominate for Deloitte, CGI Federal, Oracle Health, and Accenture via multi-year firm-fixed price obligations averaging $73.7M each, with $45M in aggregate unexercised options offering upside. Neutral stance on EY reflects zero outlays on its $79M award; pervasive execution risks from firm-fixed pricing, subawards (~$44M total), and delayed funding demand vigilant monitoring.

Tracking the trend? Catch up on the prior Federal IT & Cybersecurity Contracts digest from January 19, 2026.

Investment Signals(3)

  • Robust Multi-Year IT Modernization Commitments(HIGH)

    GSA, HHS/CMS, VA, and State Dept awards provide revenue visibility to 2026-27, with $374M obligated across firm-fixed price delivery orders/BPA calls.

  • Ginnie Mae IT Support Fully Funded but Unstarted(HIGH)

    $79M Time & Materials obligation for EY includes all options but zero outlays since 2022 award, tempering immediate revenue impact.

  • Non-Competed VA Data Migration Lock-In(MEDIUM)

    Oracle's $72M firm-fixed award without competition signals entrenched positioning in VA OEHRM systems development.

Risk Flags(2)

  • Execution[HIGH RISK]

    Firm-fixed price structures across 4/5 contracts expose contractors to cost overruns on long-duration (to 2027) IT/cyber projects.

  • Execution[MEDIUM RISK]

    $44M in subawards across 90+ recipients (avg. $490K each) create subcontractor dependencies; zero outlays on 3/5 contracts signal funding delays.

Opportunities(2)

  • $45M aggregate unexercised options (20% of obligations) across Deloitte ($16M), Accenture ($23M), CGI ($5M), Oracle ($2M).

  • Recurring focus on legacy modernization (MARX, OEHRM, ILMS, GFIT) positions primes for follow-on work post-2026.

Sector Themes(2)

  • Non-small U.S./foreign-owned consultancies (Deloitte, EY, CGI/Timken, Oracle, Accenture/Novetta) secure 100% of $374M via full/open competition or sole-source.

  • GSA (32%), HHS/CMS (19%), VA (19%), State (19%) drive spending on cyber-safe, enrollment, migration, security systems.

Watch List(3)

  • 👁

    {"entity"=>"Ernst & Young", "reason"=>"$79M fully obligated but zero outlays since 2022 on 5-year T&M contract.", "trigger"=>"Initial outlays >$5M or contract modification"}

  • 👁

    {"entity"=>"Accenture Federal Services", "reason"=>"Highest options upside ($23M) on newest award (2023) for Diplomatic Security ILMS.", "trigger"=>"Options exercise or subaward outlays"}

  • 👁

    {"entity"=>"Oracle Health Government Services", "reason"=>"Non-competed $72M VA award with zero outlays and $9M subawards signals execution pivot point.", "trigger"=>"First outlays or OEHRM follow-on award"}

Get daily alerts with 3 investment signals, 2 risk alerts, 2 opportunities and full AI analysis of all 5 filings

🇺🇸 More from United States

View all →
Federal IT & Cybersecurity Contracts — January 20, 2026 | Gunpowder Blog