Defense is the single largest sector for federally mandated diverse supplier spend — roughly $96 billion annually when you add up set-asides across the Army, Navy, Air Force, Marines, SOCOM, DIA, and the rest of the DoD enterprise. That number dwarfs every other federal agency category combined.
The catch: most of that money flows through large prime contractors first. Lockheed Martin, Raytheon Technologies, Northrop Grumman, Boeing, General Dynamics, and L3Harris collectively hold hundreds of billions in active DoD contracts. They are required by law to subcontract meaningful portions of that work to small and diverse businesses, and they report their performance against those goals to the DoD annually.
That structure creates the path. For the vast majority of diverse defense contractors, the first dollar comes from a subcontract, not a prime award.
The size of the opportunity
DoD spent approximately $455 billion on contracts in FY2023. Small businesses received about 25% of that total — around $114 billion. Within the small business slice, SDVOSB awards exceeded $27 billion, 8(a) awards topped $16 billion, WOSB awards reached roughly $10 billion, and HUBZone awards came in around $7 billion.
Those figures count only direct prime awards. Subcontract spend to diverse firms from large primes adds another layer that DoD tracks separately through Individual Subcontracting Reports (ISRs) and Summary Subcontract Reports (SSRs). Precise aggregate subcontract figures are harder to pin down, but DoD's stated goal is that large prime contractors direct at least 23% of their subcontract dollars to small businesses, with specific sub-goals for each SB category.
Translation: a $10 billion Lockheed contract carries a legal obligation to direct roughly $2.3 billion in subcontracting to small businesses over the contract life. That is your market.
Which certifications matter most in defense
SDVOSB (Service-Disabled Veteran-Owned Small Business) is the strongest single certification in the DoD ecosystem. Congress set a statutory goal of 3% of prime contracts for SDVOSBs. DoD consistently exceeds that goal — which means contracting officers actively look for SDVOSB set-aside opportunities to protect or sole-source. Sole-source authority extends to contracts up to $4.5 million (or $7 million for manufacturing), meaning a contracting officer can award you a contract without competition if you are the only SDVOSB offeror. VA has its own SDVOSB program (called VOSB/SDVOSB through CVE), but DoD self-certifies through SAM.gov. If you are a veteran with a service-connected disability and own more than 51% of a business, register immediately.
SBA 8(a) is the most powerful certification for professional services work in defense — IT services, program management support, logistics consulting, engineering studies. The 8(a) program gives contracting officers a fast-track sole-source path up to $4.5 million (or $7 million for manufacturing) and competitive set-aside authority with no ceiling. Many OSDBU offices at the service branches actively maintain lists of 8(a) firms and share them with program offices looking to award quickly. The nine-year term and business development support from SBA district offices add real operational value.
WOSB (Woman-Owned Small Business) carries specific DoD subcontracting goals. DoD's goal is 5% of prime and subcontract dollars to WOSBs and EDWOSBs. For industries where WOSBs are underrepresented — which includes most of defense — EDWOSB (Economically Disadvantaged WOSB) set-asides can be used, allowing sole-source awards up to $4.5 million. WOSB certification through WBENC or SBA's certification portal adds credibility beyond the legal threshold.
HUBZone is underutilized in defense and worth considering if your principal office is in a qualifying area. DoD set a HUBZone goal of 3%, and performance against that goal trails the others, which means contracting officers have more reason to use HUBZone set-asides to catch up. The 10% price evaluation preference in full-and-open competitions is meaningful in cost-plus environments.
Key corporate buyers and their programs
Lockheed Martin runs a formal Supplier Diversity Program and tracks performance by business unit. Their F-35 program alone supports thousands of subcontractors across 45 states. Small business contacts are listed by sector on lockheedmartin.com. They actively use the DoD Mentor-Protege Program and have sponsored several protege firms.
Raytheon Technologies (RTX) reports supplier diversity metrics publicly. Their Missiles & Defense and Intelligence & Space segments are the primary entry points for technical subcontractors. RTX hosts a Supplier Portal where small businesses can register capabilities and express interest. They participate in supplier diversity matchmaking events organized by NMSDC and the National Veteran Small Business Coalition.
Northrop Grumman has an OSDBU liaison position and a dedicated supplier diversity office. They are particularly active in the cyber, autonomous systems, and space segments — areas where smaller specialized firms can compete on technical capability rather than production scale.
Boeing Defense, Space & Security reports supplier diversity spend to DoD annually and maintains a Small Business Program office. Their subcontracting plans on major programs like the KC-46 and T-7A set specific dollar targets for small business categories.
General Dynamics runs programs across its IT, mission systems, land systems, and marine divisions. GDIT (General Dynamics IT) is the entry point for most service-oriented subcontractors and routinely uses GSA Schedules and government-wide acquisition contracts that small businesses can get on independently.
How diverse firms typically enter the market
Direct prime awards at the $5 million-plus level require past performance. Past performance requires prior contracts. That circular problem is the barrier most new defense contractors face.
The practical sequence looks like this: register in SAM.gov, get your CAGE code and DUNS, obtain your relevant certification, then target a position as a second-tier or third-tier subcontractor on a current large program. That first subcontract, even if it is a $200,000 task order for document management or IT support, generates a CPARs rating (Contractor Performance Assessment Reporting System) that becomes your past performance reference.
From there, the path typically moves to a prime subcontract position on the next program, then to a teaming partner role on a competitive bid, then to a prime contract as the lead with larger firms as your subs.
Contract sizes in defense vary by tier. Subcontract task orders commonly run $150,000 to $2 million. First prime awards for certified small businesses typically land between $500,000 and $5 million on simplified acquisition or set-aside vehicles. Mature 8(a) sole-source awards can reach $20 million on multi-year contracts.
The DoD Mentor-Protege Program
This program is one of the most underused tools in defense supplier diversity. A large prime contractor (the mentor) agrees to invest in the development of a small disadvantaged business (the protege). That investment can include technical assistance, equipment, facilities, subcontracts, and cash contributions. The mentor receives credit toward its own small business subcontracting goals.
The practical benefit: your mentor gives you real work, covers some development costs, and provides past performance you can use to compete independently. Several SDVOSB and 8(a) firms have used Mentor-Protege agreements to build $20-50 million businesses within five years.
Apply through SBA's Mentor-Protege Program portal. You need an existing relationship with a willing large prime, which is why attending DoD small business conferences and prime contractor supplier days matters.
SBIR and STTR for R&D-oriented firms
If your business does technical work — software development, sensor technology, cybersecurity, advanced manufacturing — SBIR and STTR funding from DoD is worth understanding. Phase I awards are up to $250,000 for a six-month feasibility study. Phase II awards extend to $1.75 million for two years of R&D. Phase III commercialization has no dollar cap and is where the real money is, because Phase III SBIR contracts are exempt from competition requirements.
DoD issues roughly 2,500 SBIR awards per year. The Air Force, Army, and Navy each publish annual SBIR topic solicitations aligned with their current technology gaps. The catch is that SBIR-funded work does not automatically generate the kind of past performance that translates to non-SBIR awards, so treat it as a parallel track rather than a replacement for the subcontracting path.
Security clearances
DoD contracting often requires personnel or facility clearances. A facility clearance (FCL) at the Secret or Top Secret level is required to work on classified programs. The process starts with a sponsoring government agency or prime contractor — you cannot self-sponsor for a facility clearance.
The sequence: win a classified contract or task order, have the government or prime contractor sponsor your FCL request, complete the SF-328 (Certificate Pertaining to Foreign Interests), and go through DCSA review. The process takes 6 to 18 months depending on the classification level and your company's ownership structure.
If your principals already hold individual clearances from prior federal employment or military service, the FCL process moves faster. Plan for it early. A contract that requires a clearance you do not have is not a contract you can start on schedule.
First steps for a new diverse defense business
Register in SAM.gov and keep your registration current. A lapsed SAM registration disqualifies you from any federal award.
Identify which certifications apply (SDVOSB, 8(a), WOSB, HUBZone) and apply now. Processing times run 60 to 120 days for most certifications.
Find your service branch OSDBU. Every branch (Army, Navy, Air Force, Marine Corps, SOCOM, DLA) has an Office of Small and Disadvantaged Business Utilization with staff whose job is to connect small businesses with contracting opportunities. Call them. Email them. Attend their matchmaking events.
Target three to five prime contractors whose active programs align with your capabilities. Register on their supplier portals. Attend their small business days. The relationship that gets you on a subcontract is almost always a personal introduction before it is a formal solicitation.
Aim for a first contract within 18 months of registration. That contract does not need to be large. It needs to exist, perform well, and generate a CPARS rating you can cite in every subsequent proposal.
