as far as i can tell its randomly sold or acquired through crates, enemy drops, etc. I was lucky enough to get colossus x medium armor for shepard and heavy for wrex but these items were random drops. probably a better chance of buying the armor from the normandy req officer if you acquire the license for whatever company makes it.