The Department of Homeland Security obligates more than $15 billion in contracts each year. It is the fourth-largest federal contracting agency by spend, behind DoD, HHS, and VA. For diverse businesses with the right certifications and NAICS codes, it is also one of the more accessible civilian agencies to break into—if you know which components buy what and how to get in front of them.
What DHS actually buys
DHS is not a single buyer. It is a federation of major components, each with its own acquisition office and distinct procurement profile.
FEMA dominates during disaster cycles. Think temporary housing, debris removal, disaster recovery services, logistics, IT systems, and professional services. Awards spike after presidentially declared disasters, so FEMA's procurement is lumpy but large. In active years it can represent $3–4 billion of DHS's total.
Customs and Border Protection (CBP) buys heavily in surveillance technology, border infrastructure, IT systems, uniforms, vehicles, and facilities maintenance. CBP is one of DHS's biggest components by budget and runs its own small business outreach program.
Immigration and Customs Enforcement (ICE) focuses on detention facilities management, transportation services, IT, and investigative support tools.
TSA buys screening equipment, IT modernization, training, and airport operations support. It runs frequent small business set-aside competitions, particularly in IT.
U.S. Coast Guard (USCG) is heavily maritime: shipbuilding, vessel maintenance, aviation parts, and IT. It is a significant buyer and maintains a separate acquisition command.
CISA (Cybersecurity and Infrastructure Security Agency) has grown its budget sharply since 2021. It buys cybersecurity assessments, threat intelligence platforms, consulting, and IT development. Most awards are mid-size professional services contracts, and small businesses compete well here.
Secret Service buys protective equipment, IT systems, vehicles, and specialized training services.
Across all components, the dominant NAICS clusters are IT systems and services (NAICS 54151x), professional services (541611, 541690), facilities and construction (236, 238), and equipment manufacturing and logistics.
How DHS uses set-asides
DHS's small business programs are run through its Office of Small and Disadvantaged Business Utilization (OSDBU), headquartered in Washington. The OSDBU sets annual small business goals by category and monitors component compliance.
DHS has historically met or exceeded its 8(a) set-aside goals. In FY2023, DHS awarded over $1.5 billion to 8(a) firms. That makes it one of the most active 8(a) users in the civilian government. If you hold an SBA 8(a) certification, DHS is a priority target.
HUBZone participation is strong as well. CBP in particular runs facilities and construction work that maps well to HUBZone vendors, especially in border states like Texas, Arizona, New Mexico, and California where HUBZone-designated areas overlap with federal work sites.
SDVOSB and VOSB set-asides are present but DHS is not a VA-equivalent buyer. DoD and VA outpace DHS on veteran set-asides. That said, TSA and Coast Guard both run SDVOSB-targeted competitions in IT and professional services.
WOSB set-asides have grown since SBA expanded the eligible NAICS list in 2020. DHS IT programs and consulting work frequently falls under WOSB-eligible codes. Check current SBA WOSB eligibility tables before submitting—the list expanded materially and some assumptions from before 2022 are out of date.
SDB tracking: DHS reports SDB spending to SBA under the government-wide goal structure. As of FY2023, the government-wide SDB goal is 15 percent of eligible prime contract dollars by FY2025. DHS was tracking at roughly 12–13 percent in recent years, which means contracting officers have active pressure to increase SDB-eligible awards.
Finding DHS opportunities
SAM.gov is the required starting point. When filtering for DHS opportunities on beta.SAM.gov:
- Department: Department of Homeland Security
- Set-aside type: filter by 8(a), HUBZone, WOSB, SDVOSB, or Small Business as needed
- NAICS: use your primary and secondary codes; DHS awards are concentrated in 54151x, 5416xx, 238, and 336612
Set email alerts in SAM.gov for your NAICS codes with DHS as the awarding agency. You want same-day notification, not weekly digests.
FPDS-NG (fpds.gov) shows historical awards. Before you pursue any DHS component, pull the last two fiscal years of awards in your NAICS from that component. You want to know: how much did they spend, on how many contracts, at what average contract value, and what percentage went to small businesses. This tells you whether you are looking at a $200K award you could pursue alone or a $20M contract that requires a teaming arrangement.
DHS Acquisition Forecast: DHS publishes a planned acquisition forecast on its OSDBU website, updated periodically. It lists anticipated procurements by component, dollar range, NAICS, and set-aside designation. This is not always current, but it surfaces opportunities 6–18 months before they hit SAM.gov. Bookmark dhs.gov/osdbu and check it quarterly.
Component small business offices: Each major DHS component has its own Small Business Specialist. These are not gatekeepers; they are resources. A 15-minute call with the CBP or TSA Small Business Specialist before an opportunity posts gives you context on what contracting officers actually care about in proposals. Most specialists are reachable via the DHS OSDBU directory.
Registration and portal requirements beyond SAM.gov
SAM.gov registration is necessary but not sufficient for DHS contracting.
DHS Procurement Forecast Tool: DHS uses an internal tool for some forecast data that supplements the public-facing OSDBU forecast. You access current iterations through the OSDBU website.
ORCA / SAM.gov certifications: Ensure all your representations and certifications are current in SAM.gov. DHS contracting officers flag expired certifications as an immediate disqualifier. Audit your SAM.gov record every 12 months minimum—it expires annually.
Dynamic Small Business Search (DSBS): SBA's DSBS pulls from SAM.gov. Make sure your capability narrative is complete. DHS small business specialists run DSBS searches when building sources-sought lists.
FEMA vendor registry: If you are targeting FEMA disaster work specifically, FEMA maintains its own vendor registry separate from SAM.gov for certain logistics and disaster relief categories. Check the FEMA Procurement and Contracting page directly for current registration portals—these change after major disaster cycles.
Facility clearances: A handful of DHS components (Secret Service, some ICE investigative support work) require facility-level security clearances for contract performance. This is not a first-contract concern for most small businesses, but it is a ceiling to be aware of if you are targeting those components long-term.
Subcontracting through DHS primes
DHS's major prime contractors are a direct path to subcontract revenue while you build past performance.
The largest DHS prime contractors by obligated dollars include Leidos, Accenture Federal Services, Booz Allen Hamilton, General Dynamics IT, Unison (formerly part of ManTech), SAIC, and Perspecta (now part of SAIC following the 2021 merger). IBM Federal and Deloitte Federal both hold significant DHS IT contracts.
Each of these firms has a small business liaison or supplier diversity contact. When a prime wins a large DHS contract with a subcontracting plan—required on prime contracts above $750K—they are contractually obligated to meet small business subcontracting goals. They need qualified diverse subs, particularly with relevant DHS past performance or clearances.
The concrete approach: pull large DHS prime awards from FPDS, identify the winner, find their subcontracting plan from the contract (FOIA-able but often summarized in public documents), and reach out to their small business office with a specific capability pitch tied to the work scope.
Also watch DHS's Governmentwide Acquisition Contracts (GWACs) and IDIQs. Programs like Alliant 2 (GSA), STARS III (GSA 8a), and SEWP V carry DHS task orders. If you are on STARS III, you are already positioned for DHS IT task orders—DHS is a heavy STARS III user.
DHS Mentor-Protege Program
DHS runs one of the most active Mentor-Protege programs in the federal government. It operates under SBA's All Small Mentor-Protege framework but DHS has its own OSDBU-managed application process and a track record of active mentorships.
The program pairs a small disadvantaged business (protege) with an established large contractor (mentor) for a formal developmental relationship—typically 24–36 months. Mentors provide technical assistance, business development support, financial help, and often subcontracting work. Joint ventures formed under the program can compete as a team for federal contracts, with the protege's socioeconomic status applying to the JV.
Current and past DHS mentors include Booz Allen, SAIC, Leidos, and several mid-tier defense and IT firms. To apply, the protege must be SBA-certified (8a, WOSB, HUBZone, SDVOSB, or VetBiz) and have fewer than two years of federal contracting experience in most cases. Applications go through DHS OSDBU directly, not through SBA.
If you qualify, this is worth pursuing aggressively. Joint ventures that emerge from mentor-protege relationships win DHS contracts at higher rates than first-time solitary bidders.
First steps for a diverse business pursuing DHS
Pick one component. Do not start with "DHS" as an abstract target. Start with "TSA IT professional services" or "FEMA logistics" based on your actual NAICS codes and where your commercial experience maps.
Pull two years of FPDS data for that component in your NAICS. Understand the award sizes, the incumbents, and the set-aside mix before you write a single proposal.
Register in SAM.gov with your socioeconomic certifications current and your capability statement complete. Add a targeted capability statement in DSBS—three paragraphs, specific past performance, relevant clearances if any.
Contact the component's Small Business Specialist. Introduce yourself via email with a one-page capability summary. Ask whether any sources-sought notices are expected in your area in the next 6–12 months.
If you hold an 8(a) certification, ask the DHS OSDBU directly about sole-source 8(a) opportunities. The 8(a) sole-source threshold for non-DoD agencies is $4.5 million. DHS awards 8(a) sole-source contracts regularly below that ceiling.
Attend DHS Industry Days. DHS OSDBU hosts an annual DHS Industry Day and component-specific matchmaking events. These are real procurement events where contracting officers attend, not vendor fairs. Register through the OSDBU website when announced.
If your first year produces no awards, evaluate whether your NAICS mix is right, whether your capability statement addresses what DHS actually buys, and whether subcontracting with a prime is a faster path to past performance than prime bidding alone. Past performance is the variable that governs almost every competitive evaluation at DHS. One solid subcontract reference from a $10M DHS contract is worth more than ten white papers about your capabilities.
