UEI: HUJFDP334G53 CAGE: 1ZZP6 NAICS: 541512 SAM.gov: ACTIVE
SOULIER GROUP LLC Microsoft 365 Governance · Cybersecurity · Federal Compliance

Capability Statement

Microsoft 365 Governance, Identity, Threat Protection, Network Security, Virtualization, Records Management, and Compliance Translation for Federal and Regulated Commercial Environments.

Quick Facts

Legal NameSoulier Group LLC
Unique Entity ID (UEI)HUJFDP334G53
CAGE Code1ZZP6 (assigned 2026-05-07)
Entity TypeWisconsin LLC (single-member, disregarded entity)
Primary NAICS541512: Computer Systems Design Services
Additional NAICS541519, 541611, 541690, 518210, 541513, 561621
Size StandardSmall Business at all NAICS sizes
State of FormationWisconsin (organized 2026)
Principal Place of BusinessWisconsin

Socioeconomic Certifications

Capability Domains

1. Microsoft 365 Tenant Governance and Policy Management

2. Identity, Access, and Privileged Access Governance

3. Data Classification and Tagging at Enterprise Scale

4. Records Management and Retention

5. Security Operations and Threat Protection

6. Network Security and Perimeter Operations: Multi Vendor

Production hands on operations across the network security platforms that dominate federal civilian, DoD, SLED, and tribal IT environments:

7. Virtualization and Datacenter Operations

8. Email Security and Hybrid Mail

9. Compliance Program Support: Translation to Federal Requirements

Framework Experience Translation to Federal / DoD Requirements
HIPAA Security Rule Risk analysis (164.308(a)(1)), access control (164.312(a)), audit controls (164.312(b)), evidence collection. Crosswalks to NIST SP 800-66r2 and NIST 800-53 (Moderate baseline). Audit evidence patterns translate to DoD CUI handling under NIST 800-171.
PCI DSS (v3.2.1 era hands on) Network segmentation (Req 1), access control (Req 7-8), vulnerability management (Req 5-6, 11), audit logging (Req 10). Crosswalks to NIST SP 800-171 / CMMC Level 2 control families AC, AU, CM, SC, SI.
CJIS Security Policy v6 (SEPP) Multi state law enforcement client support. CJIS Security Policy Appendix G provides direct crosswalk to NIST SP 800-53 controls. Advanced Authentication, audit logging, and physically secure location requirements translate to NIST 800-171 control families.
FFIEC / GLBA (banking) No direct GLBA / FFIEC examination work. Adjacent regulatory rigor pivot from PCI DSS and HIPAA experience: same evidentiary, control design, and audit readiness patterns. FFIEC Cybersecurity Assessment Tool (CAT) and Information Security IT Examination Handbook align with NIST CSF and NIST 800-53.
NIST CSF / 800-53 General familiarity for cyber program design across Identify / Protect / Detect / Respond / Recover function categories.

These regulatory patterns share evidentiary, control design, audit readiness, and continuous monitoring requirements with NIST 800-53 Moderate, NIST 800-171 / CMMC Level 2, and DoD CUI handling under DoDI 5200.48.

10. Microsoft Cloud Partner and Licensing

Live Security Posture (Walk the Walk)

Soulier Group LLC operates this website with the same defense in depth posture we recommend to clients. HTTP controls: HSTS preload, strict Content Security Policy, X-Frame-Options DENY, Referrer-Policy strict-origin-when-cross-origin, Permissions-Policy lockdown. DNS: DNSSEC signed (DS at .com TLD, ECDSA P-256 / SHA-256). Mail: SPF hard fail, DKIM 2-selector, DMARC published. Federal alignment: approach mirrors OMB M-21-07 IPv6-readiness expectations and CISA BOD 18-01 mail authentication requirements. Independent verification welcome via the security.txt at /.well-known/security.txt.

Differentiators for Prime Subcontracting Teams

  1. DoD 8140 IA Level II baseline (Active CompTIA Security+ SY0-701): principal holds the federally recognized cybersecurity workforce qualification (achieved 2026-05-10); satisfies "Sec+ or equivalent" prerequisite common in DoD and civilian federal IT solicitations.
  2. ISBEE / SDB certified small business: provides socioeconomic credit on prime evaluation criteria for federal solicitations.
  3. Production Microsoft 365 multi tenant administration experience: direct production responsibility across regulated client portfolios, not academic exposure.
  4. Lean operational profile: single accountable owner pattern reduces bench management overhead for primes; ideal for smaller named sub roles or specific labor categories.
  5. Cross domain compliance experience: HIPAA + PCI + CJIS breadth is uncommon in single practitioners; useful for primes presenting compliance driven proposals.
  6. Native American Owned, ISBEE certified: supports federal tribal preference and minority business participation goals.
  7. Microsoft Cloud Partner Program: evaluating enrollment ahead of CSP eligibility milestones.
  8. Federal procurement cycle literacy: Army DTSPO M365 Records Management RFI submitted May 2026; ongoing Sources Sought / RFI monitoring across primary NAICS. Reads PWS documents and writes federal-grade technical responses.

Engagement Availability

Procurement Information

Available for Open Market procurements, ISBEE / Buy Indian Act set-asides, and for subcontracting on prime offeror teams competing on GSA MAS, 8(a) STARS III, and agency specific IDIQs. Contracting officers may issue sole-source awards under FAR 52.212-3 (Buy Indian Act) for procurements where ISBEE eligibility applies.

DoD Indian Incentive Program (DFARS 252.226-7001)

Soulier Group LLC qualifies as an Indian Owned Economic Enterprise. Documentation packet for prime contracts manager / FSO review available on request.

Sources Sought / Market Research RFI Support

Federal contracting officers drafting Sources Sought notices or Market Research RFIs in our scope (Microsoft 365 governance, identity, threat protection, network security, virtualization, federal compliance) may request a technically deep capability statement: delivered within 48 hours. Supports acquisition team set-aside justifications under the Rule of Two.

Download PDF Capability Statement Experience & Pipeline Contact Print this page