# RFQ: Procurement and Implementation of a Next-Generation Firewall (NGFW)

**Company:** [Inkomoko](http://jobs.workable.com/companies/7e9PsrDWL45N74boSvgDGK.md)
**Location:** Nairobi, Kenya
**Workplace:** on site
**Employment type:** Temporary
**Department:** Digital Transformation

[Apply for this job](http://jobs.workable.com/view/45dc4a6d-dc57-4f10-87d0-b0a0bb4e935e)

## Description

**ABOUT INKOMOKO** 

Inkomoko supports entrepreneurs to grow their businesses in order to improve livelihoods, create jobs, and help communities thrive.

In 2025, Inkomoko was listed by the Financial Times as the 8th fastest-growing company in Africa, supporting entrepreneurs across East and Central Africa to grow thriving businesses and build inclusive, resilient economies.  
Founded in 2012, Inkomoko is a non-profit that has worked with more than 100,000 entrepreneurs, including thousands of refugee businesses. Inkomoko provides a combination of training, consulting, access to finance, and market-level systems change to drive impact for our clients. We are the largest investor to refugee entrepreneurs in Africa.  
  
Inkomoko has 800+ staff in 50 offices across Chad, Ethiopia, Kenya, Rwanda, and South Sudan. Through Inkomoko’s 2030 strategic plan, we are adding 3 additional countries to positively impact 7M people, by serving more than 550,000 entrepreneurs and growing our $30M loan fund.  
  
**INKOMOKO VALUES**  
All staff at Inkomoko are connected to a shared set of organizational values:

-   _**Purpose:**_ be solutions-oriented, produce high-quality work, and be a global leader.
-   _**Achievement:**_ push yourself to reach beyond what you previously thought possible. 
-   _**Improvement:**_ be humble, engage in continuous growth through open & accurate feedback
-   _**Bravery:**_ willing to take risks, create a safe space for others, be compassionate, and inclusive.
-   _**We Eat Goat:**_ we celebrate success and support each other in hard times. We do this work together in the spirit of turikumwe, tuko pamoja, abren nen, Kula na sawa, On est ensemble.

**Introduction**

Inkomoko invites qualified and experienced ICT solution providers to submit quotations for the supply, **implementation, configuration, and support of a Next-Generation Firewall (NGFW) and Zero Trust Architecture (ZTA) solution.**

The selected vendor will provide a comprehensive security solution capable of protecting Inkomoko's network infrastructure across its primary and disaster recovery (DR) environments while supporting secure connectivity for multiple country offices.

The assignment includes supply of equipment, implementation, migration, configuration, testing, documentation, training, and post-implementation support. 

**Objective**

The objective of this procurement is to secure Inkomoko's network perimeter and internal infrastructure through the implementation of a high-performance, identity-aware Next-Generation Firewall that supports:

-   Zero Trust Network Access (ZTNA) 
-   Multi-site orchestration 
-   Advanced threat protection 
-   High availability 
-   Secure remote connectivity 
-   Centralized management and reporting 

**Scope of Work**

The successful vendor shall provide the following:

-   Supply of enterprise-grade Next-Generation Firewall appliances. 
-   Installation and configuration at the Primary and Disaster Recovery sites. 
-   High Availability deployment (Active-Active or Active-Passive). 
-   Layer 7 application inspection. 
-   Identity-aware access control. 
-   SSL/TLS inspection. 
-   Intrusion Prevention System (IPS). 
-   Advanced malware protection and sandboxing. 
-   Web and URL filtering. 
-   Zero Trust Architecture implementation. 
-   Device posture assessment. 
-   Endpoint telemetry integration. 
-   Micro-segmentation. 
-   SD-WAN configuration. 
-   Centralized cloud management. 
-   Policy synchronization between sites. 
-   Security logging and compliance reporting. 
-   Migration from the existing firewall environment. 
-   Knowledge transfer and administrator training. 
-   24/7 support and maintenance. 
-   Firmware and security signature updates. 

Delivery shall be completed within 30 calendar days from issuance of the Purchase Order. 

**Deliverables**

The successful vendor shall provide:

-   NGFW deployment and implementation plan. 
-   Installed and configured firewall infrastructure. 
-   Successful migration from existing firewall infrastructure. 
-   Security policy documentation. 
-   SD-WAN configuration documentation. 
-   Administrator training. 
-   Knowledge transfer documentation. 
-   Acceptance testing report. 
-   Warranty documentation. 
-   Support and maintenance plan.

## Requirements

**Vendor Qualifications**

Interested vendors should demonstrate:

-   Experience implementing enterprise firewall solutions. 
-   At least three similar projects completed within the past five years. 
-   Authorization as a reseller or implementation partner for the proposed firewall solution. 
-   Certified security engineers assigned to the project. 
-   Availability of local or regional support. 
-   Financial capacity to deliver the assignment. 
-   Ability to provide 24/7 technical support. 

**Financial Proposal**

The quotation should clearly distinguish:

-   Hardware costs 
-   Software licenses 
-   Professional implementation services 
-   Training 
-   Support and maintenance 
-   Annual subscription costs 
-   Warranty 
-   CAPEX costs 
-   Recurrent/OPEX costs 

**Evaluation Criteria**

The evaluation will comprise both technical and financial assessments. Proposals will be evaluated using the following criteria:

1.  **Technical Compliance (30%)**  
    Assessment of compliance with the required Next-Generation Firewall (NGFW) specifications, including Zero Trust Architecture, Intrusion Prevention System (IPS), VPN capabilities, SSL inspection, SD-WAN functionality, reporting features, and overall security capabilities.
2.  **Implementation Methodology (15%)**  
    Evaluation of the proposed implementation approach, including the migration strategy, project management methodology, testing procedures, documentation, and rollout plan.
3.  **Vendor Experience (10%)**  
    Assessment of the vendor's experience in delivering similar enterprise firewall implementation projects, supported by relevant client references and project history.
4.  **Technical Team Qualifications (10%)**  
    Evaluation of the qualifications, certifications, and relevant experience of the proposed technical team responsible for the implementation and support of the solution.
5.  **Support and Service Levels (10%)**  
    Assessment of the vendor's support capabilities, including availability of 24/7 support, response and resolution times, escalation procedures, maintenance services, and local or regional support presence.
6.  **Cybersecurity Standards (5%)**  
    Evaluation of compliance with recognized cybersecurity standards and best practices, such as ISO 27001, the NIST Cybersecurity Framework, and CIS Controls.
7.  **Training and Knowledge Transfer (5%)**  
    Assessment of the proposed training program, administrator and user documentation, knowledge transfer approach, and operational manuals.
8.  **Company Capacity and Financial Stability (5%)**  
    Evaluation of the vendor's organizational capacity, financial stability, corporate profile, and ability to successfully deliver and support the project.
9.  **Warranty and Maintenance (5%)**  
    Assessment of the warranty period, firmware and software updates, security signature updates, and ongoing maintenance services included in the proposal.
10.  **Financial Proposal – Total Cost of Ownership (5%)**  
     Evaluation of the overall cost of ownership, including hardware acquisition, software licensing, implementation services, subscriptions, maintenance, support, and any other recurring or one-time costs.

## Benefits

**Application Details**

**Mandatory Requirements**

Vendors shall submit:

-   Certificate of Incorporation/Registration 
-   Valid Tax Compliance Certificate 
-   Company Profile 
-   Authorization letter from the manufacturer (where applicable) 
-   Evidence of similar assignments 
-   Reference letters or completion certificates 
-   CVs of proposed technical personnel 
-   Technical Proposal 
-   Financial Proposal 
-   Proposed implementation schedule 

Submissions shall be sent electronically to: [procurement.regional@inkomoko.com](mailto:procurement.regional@inkomoko.com) 

Mandatory Email Subject: Quotation Submission – Firewall – \[Vendor Name\]

**Deadline for Queries:** 28 July 2026

**Submission Deadline: 31st July 2026**

**Queries Email:** [**procurement.regional@inkomoko.com**](mailto:procurement.regional@inkomoko.com)

**Clarifications**

Any requests for clarification shall be submitted via email no later than 28 July 2026. Responses to clarification requests will be shared with all participating vendors, where appropriate, to ensure fairness and transparency.

**Disclaimer**

Inkomoko reserves the right to accept or reject any quotation, annul the procurement process, or reject all quotations at any time prior to contract award without thereby incurring any liability to affected vendors. Receipt of a quotation does not obligate Inkomoko to award a contract.