NGA ATS RFI 20260325.pdf

UNCLASSIFIED

REQUEST FOR INFORMATION

1.0 PURPOSE

1.1 The National Geospatial-Intelligence Agency’s (NGA) Corporate Applications Division

(PEBC) in support of our Human Development (HD), Talent Acquisition Office (HDR) is conducting comprehensive market research to understand the current capabilities of commercial

Applicant Tracking Systems (ATS) that leverage artificial intelligence for capabilities including, but not limited to, semantic resume screening, candidate matching, predictive analytics, and workflow automation. The NGA is seeking to identify mature, innovative solutions that can streamline the federal hiring process from initial job posting to final onboarding.

1.2 The information gathered will be instrumental in shaping our acquisition strategy and defining the requirements for a next-generation talent acquisition platform. Furthermore, based on the responses received, NGA anticipates inviting a select number of vendors to participate in a no-cost, pilot of their solution, currently anticipated for Q3 of this calendar year. This ATS

Program Pilot represents a valuable opportunity for industry partners to have their technology showcased in a live test environment and collaborate directly with our agency to help define the future of talent acquisition at the NGA.

1.3 THIS IS A REQUEST FOR INFORMATION (RFI) ONLY. This RFI is issued solely for information and planning purposes – it does not constitute a Request for Proposal (RFP) or a promise to issue an RFP in the future. This RFI does not commit the Government to contract for any supply or service whatsoever. Further, NGA is not seeking proposals at this time and will not accept unsolicited proposals. Responders are advised that the U.S. Government will not pay for any information or administrative costs incurred in response to this RFI. All costs associated with responding to this RFI will be solely at the interested party’s expense.

2.0 BACKGROUND AND OBJECTIVE

Current hiring processes are labor-intensive and lack the modern, data-driven tools necessary to compete for top talent effectively. NGA manages a diverse portfolio of applications critical to our mission. A significant portion of these applications are built on platforms such as Oracle and

Salesforce with front-end interfaces often developed using Angular. Our objective is to modernize the ATS capability and integrate it within our current PeopleSoft Human Capital

Management (HCM) system of record, and our Service Now information technology service management (ITSM) system.

Based on the requirements outlined in the Office of Personnel Management’s (OPM), "Merit

Hiring Plan" Memorandum (Appendix A), dated May 29, 2025, the NGA is exploring an ATS that is capable of managing the entire recruitment process - from job posting to onboarding, and serve as the central repository for candidate data, job requisitions, and interview information.

To improve the hiring process and support OPM's requirement to decrease the government-wide time-to-hire to under 80 days, NGA has identified several key requirements. The system must include applicant management (sourcing, screening, interviewing, and selection), automated applicant communications, interview scheduling, offer letter generation, and collaboration tools for the hiring team. It also requires a resume repository with AI-powered agents to reduce screening time, AI-powered analytics to track hiring timelines, and comprehensive onboarding support.

An end-to-end auditing capability is also a required component of NGA's application process.

The system must be accessible to applicants and HR program managers and include progress indicators and automated AI workflows to complete tasks efficiently. Additionally, it must provide secure interfaces, such as application programming interfaces (APIs) and secure file transfer protocol (SFTP), to connect with OPM HR systems and the Intelligence Community

Candidate Gateway, utilizing encrypted channels and following established data transfer agreements.

The implementation of an ATS at NGA is necessary to comply with several federal mandates:

• Appendix A: OPM Memorandum, Merit Hiring Plan

• Appendix B: Chance to Compete Act

• Appendix C: Executive Order 14170

• Appendix D: Reforming the Federal Hiring Process and Restoring Merit to Government

Service

• Appendix E: Modernizing and Reforming the Assessment and Hiring of Federal Job

Candidates

• Appendix F: OPM 80-day End-to-End Hiring Roadmap

2.1 PLANNED ACQUISITION:

The Government is obtaining market information/capabilities on ATS for planning purposes as well as determining requisite technical capabilities and does not presently intend to award a contract.

2.2 PERFORMANCE

2.2.1 PILOT PROGRAM PARTICIPATION AGREEMENT: Based on RFI responses and the potential capabilities demonstrated to supply the prerequisite ATS security and functional requirements, vendors selected to participate in an ATS Program Pilot will be required to enter into a formal agreement that provides the Government with a no-cost, limited-term software license for the duration of the pilot. This arrangement will be executed via a Bailment Agreement (see Attachment

1 of the RFI), which will grant the Government temporary possession and use of the vendor's solution for the sole purpose of testing and evaluation. The Bailment Agreement will govern the terms of the pilot, ensuring that the vendor retains full ownership and all intellectual property rights to their solution, while authorizing the Government to assess its capabilities within a controlled, operational test environment. Participation in the pilot is contingent upon the vendor's acceptance of these terms.

2.2.2 LOCATION: Springfield, VA

2.3 CONSTRAINTS AND LIMITATIONS:

The following are anticipated to apply to the ATS requirement:

2.3.1 Security and Compliance:

Category Constraint Rationale / Description

Cloud

Environment

Cloud based solutions must be hosted within a

FedRAMP Authorized cloud environment at the

Moderate impact level.

To ensure confidentiality, integrity, and availability of government data and protect applicant PII, the system must meet established federal security standards for cloud services.

Data

Residency

All data, including applicant PII, metadata, and backups, must be stored and processed exclusively within the Continental United States (CONUS).

To comply with federal data sovereignty policies and prevent foreign access to sensitive, albeit unclassified, information.

Data

Encryption

Data must be encrypted both at rest (using FIPS

140-2 validated cryptographic modules) and in transit (using TLS 1.2 or higher).

To protect sensitive applicant data from unauthorized access or disclosure at all points in its lifecycle.

Authentication The system must support multi-factor authentication (MFA) for all HR Manager and administrator accounts. Integration with government-provided identity services (e.g.

ID.me, Login.gov) for applicants is highly desired.

To prevent unauthorized access to the system and ensure the identity of privileged users.

Accessibility The user interface for both applicants and HR managers must be fully compliant with Section

508 of the Rehabilitation Act.

To ensure the system is accessible and usable by all individuals, including those with disabilities.

Supply Chain

Security

The proposed solution must not include any hardware, software, or services from entities prohibited by the Federal Acquisition Supply

Chain Security Act (FASCSA) or other federal blacklists.

To mitigate national security risks associated with the federal government's information and communication technology supply chain.

2.3.2 Technical and Operational:

Category Constraint Rationale / Description

AI

Transparency

& Bias

The vendor must describe the methodology used to mitigate algorithmic bias in its AI-powered screening and matching tools. Black-box AI solutions with no explainability are not acceptable.

The government must have the ability to audit AI-driven recommendations.

To ensure fair and equitable hiring practices in compliance with EEO regulations and to build trust in automated decision-making processes.

System

Integration

The solution must provide a secure, REST-based

API for bi-directional data exchange with external government systems (e.g., OPM's USAJOBS, background investigation providers). All API connections must be secured via government-approved methods.

To ensure seamless interoperability with the existing federal HR ecosystem and to automate the end-to-end hiring workflow.

Data

Ownership

The government will retain full ownership and control of all data entered into or generated by the system. The vendor is prohibited from using

To ensure the government maintains unlimited rights to its mission-critical and sensitive information.

government data for any purpose other than fulfilling the scope of the government’s requirements. The vendor will demonstrate methods for controlling the data.

Customization The system must be configurable to support agency-specific hiring workflows, assessment questions, and offer letter templates without requiring custom software development.

To provide the flexibility needed to adapt to unique mission requirements and evolving hiring policies without incurring any development costs.

Personnel Vendor personnel with administrative access to the production environment must be U.S. citizens and may be subject to a government background investigation.

To reduce the risk of insider threats and ensure that individuals with privileged access to government data are properly vetted.

2.4 SECURITY REQUIREMENTS: The following security requirements will apply to this ATS requirement: Uncleared contractor personnel are authorized to work on this contract at the

UNCLASSIFIED level without the requirement of a security clearance.

2.4.1 Cybersecurity Requirements

To protect Controlled Unclassified Information (CUI), including applicant data, the proposed ATS solution must meet the following cybersecurity requirements:

o FedRAMP Authorization: Cloud solutions must have achieved, or be in the process of achieving, a FedRAMP authorization at the Moderate impact level.

(https://fedramp.gov) o NIST Compliance:

▪ Non-resident Software as a Service (SaaS) systems must be capable of implementing the security controls as defined in NIST SP 800-171, "Protecting Controlled Unclassified Information in Nonfederal Systems and

Organizations."

▪ Resident (on prem) systems must be able to fully implement the security controls defined in NIST SP 800-52, “Security and Privacy Controls for

Federal Information Systems and Organizations” o Statutory Compliance: The solution's cybersecurity posture must comply with the requirements set forth in 10 U.S.C. §§ 391-393.

2.5 ORGANIZATIONAL CONFLICT OF INTEREST (OCI): In accordance with FAR Part

9.5, please discuss any performance which may lead to an OCI and how the vendor would mitigate, avoid, or neutralize the conflict.

3.0 REQUESTED INFORMATION

Responses must only contain UNCLASSIFIED information and be marked “UNCLASSIFIED” on all pages in both the header and footer. No classified information or concepts may be included in your response.

Input of the information contained in the responses may be solicited and reviewed by NGA non-

Government consultants or experts who are bound by appropriate non-disclosure agreements.

3.1 ADMINISTRATIVE

https://fedramp.gov/

Information to include the following as a minimum:

3.1.1. Name, mailing address, overnight delivery address (if different from mailing address), phone number, fax number, company website, and e-mail of designated point(s) of contact.

3.1.2. BUSINESS TYPE.

NAICS code(s) 513210 – Software Publishers is applicable to this acquisition. The responder is to provide answers to the following questions:

To be considered for a Small Business set-aside, at least 50 % of the cost of contract performance incurred for personnel shall be expended for employees of the responder. (FAR 52.219-14, Limitation of Subcontracting)

RESPONSE

Are you a Small Business? (), If so, which type: ☐ YES ☐ NO

Small Disadvantaged small business? ☐ YES ☐ NO

Service Disabled small business? (FAR 19.14) ☐ YES ☐ NO

8(a) Small Disadvantaged small business? (FAR 19.8) ☐ YES ☐ NO

HUBZone small business? (FAR 19.13) ☐ YES ☐ NO

Woman-Owned Small Business? (FAR 19.15) ☐ YES ☐ NO

Involved in a mentor and/or protégé program? ☐ YES ☐ NO

3.1.3 Recommendation for alternative NAICS Code? Provide rationale for any NAICS Code applicable to the planned acquisition other than the NAICS code identified above.

3.1.4 Unique Entity Identifier (UEI) Number: _________________

3.1.5 Commercial and Government Entity (CAGE) Code: ______________________________

3.1.6 Defense facility security clearance? What type? What level? _______________________

3.1.7 Accounting system, if applicable? Date of last audit? Audit performed by? Determined adequate/inadequate? ___________________________________________________________

3.1.8 Purchasing system? Date determined adequate or inadequate? ______________________

3.1.9 Timekeeping system? Date of last audit? Who performed? Determined adequate/inadequate? ___________________________________________________________

3.1.10 Do you hold a GSA Federal Supply Schedule (FSS) contract applicable to the NAICS code (s) identified above? If yes, provide contract number(s). _____________________________

3.1.11 Are you registered in SAM? _________________________________________________

3.1.12 Are you interested in: Prime contract? Teaming to include Joint Venture? Subcontractor opportunities? _________________________________________________________________

3.1.13 Include additional details that are not already requested based on the constraints of the information request.

http://www.acquisition.gov/far/current/html/Subpart%2019_14.html#wp1093836 http://www.acquisition.gov/far/current/html/Subpart%2019_8.html#wp1092796 http://www.acquisition.gov/far/current/html/Subpart%2019_13.html#wp1094801 http://www.acquisition.gov/far/current/html/Subpart%2019_15.html#wp1094868

3.2 EXPERIENCE

3.2.1 COMMERCIAL.

Provide relevant details on the responder providing the same or similar services offered or made to the general public or to non-governmental entities for purposes other than governmental purposes in the last three (3) years. Relevant details to NGA’s proposed acquisition should include, but not be limited to, information regarding the contract value, size and length of the effort, responder performing as a prime or subcontractor, customary practices (warranty, financing, discounts, contract types, etc.) under which the sales of the service(s) are made, security details, the customary practices regarding customizing, modifying, or tailoring of a service(s) to meet customer needs and associated costs, the kinds of factors that are used to evaluate performance; the kinds of performance incentives used; the kinds of performance assessment methods commonly used; the common qualifications of the people performing the services; and requirements of law and/or regulations unique to these service(s), that can demonstrate the responder’s abilities and capacity to meet NGA’s need.

3.2.2 GOVERNMENT.

Provide relevant details on the responder providing the same or similar services offered or made to Government agencies other than NGA in the last three (3) years. Relevant details should include, but not be limited to contract value, information regarding the contract number, agency, responder performing as a prime or subcontractor, size and length of the effort, type of pricing and/or cost, security details, the kinds of factors used to evaluate performance; the kinds of performance incentives; the kinds of performance assessment methods; the qualifications of the people performing the services; and any unique terms and conditions, that can demonstrate the responder’s abilities and capacity to meet NGA’s need.

3.3 CAPABILITIES

The following is the responder’s capabilities to meet the proposed acquisition set forth in Section

2 of this RFI.

3.3.1 Government requirements needed to support the RFI objective

3.3.1.1 Requirement capabilities that the responder currently possesses. Responses should include the relevant information regarding specific skills, experience, and security clearances that its employees, by labor category, currently possess in performing these services, and any needed hardware or software.

3.3.1.2 Detail the service capabilities that the responder currently does not possess to meet the RFI objective.

3.3.2 Recommended type of pricing for this type of service (e.g. FFP, FPIF CPIF).

3.3.3 Extent to which the responder’s product and/or service is currently available and their ability to participate in the ATS pilot.

3.3.4 Notional schedule and type of plan for transition-in and transition-out (based on previous or similar work efforts).

3.4 RECOMMENDATIONS

The responder is invited to provide information and recommendations for fashioning this proposed acquisition. Recommendation areas may include the type of contract, anticipated contract terms & conditions, incentives, variations in delivery schedule, data requirements, contract pricing, and any other areas that the responder believes is relevant for the Government to achieve its stated objectives.

4.0 RESPONSES

4.1 Interested parties are directed to respond to this RFI with a white paper.

4.2 White paper shall be in Microsoft Word for Office or compatible format and shall not exceed 10 pages (excluding Section 3.1 Administrative responses). A page is defined as each face of an 8½” x 11” sheet with information contained within a one-inch margin on all sides.

Font type shall be Times Roman 12 point. Vendor’s submissions are also requested to exclude company identifying information, beyond its Administrative responses, within the content of the submission.

4.3 Interested parties are also directed to respond to the ATS RFI Questions in Attachment 2 of the RFI. The responses to Attachment 2 RFI questions will not count against the 10-page limit.

4.4 Submissions containing the white paper and responses to RFI questions are due no later than 4:00 pm ET on April 15th, 2026. Responses shall be limited to and submitted via e-mail only as a message attachment to Grant.I.Njoku@nga.mil and Brandon.M.Woodson@nga.mil with the message subject line NGA ATS RFI Response. Please note the size limitation of an email is 30 MB.

4.5 Proprietary information should not be included. If proprietary information is deemed essential as part of the response, it should be minimized and MUST BE CLEARLY MARKED.

To aid the Government, please segregate proprietary information. Please be advised that all submissions become Government property and will not be returned.

5.0 MEETINGS AND DISCUSSIONS

Government representatives may or may not choose to meet with potential RFI service providers as part of their market research. Such meetings and discussions may be for the purpose of further clarification and understanding of potential capability, especially any development and certification risks.

6.0 QUESTIONS

Questions and the whitepaper regarding this RFI should be submitted in writing by e-mail to

Grant.I.Njoku@nga.mil.

7.0 SUMMARY

This RFI is only intended for the Government to identify and review responses from potential commercial capabilities and sources to determine the feasibility of the solution fulfilling the

Government’s requirements detailed in the RFI. The information provided in this RFI is subject to change and is not binding to the Government. The Government has not made a commitment to procure any of the RFI requirements discussed, and release of this RFI should not be construed as such a commitment or as authorization to incur cost for which reimbursement would be required or sought. All submissions become Government property and will not be returned.

file://///gold.rtgold.nima.mil/home/nde_users_23/hulltd/RedirectedData/Downloads/0 mailto:Brandon.M.Woodson@nga.mil file://///gold.rtgold.nima.mil/home/nde_users_23/hulltd/RedirectedData/Downloads/0