QSTAG RFI_20250701.pdf

70SBUR25I00000016

Request for Information (RFI) – Quality, Security, Testing, Automation and Governance (QSTAG)

1. Sources Sought Notice

The U.S. Citizenship and Immigration Services (USCIS), a component of the Department of Homeland Security (DHS), is the Federal government agency that oversees lawful immigration to the United States.

This is a Sources Sought Notice to identify potential business sources with the capacity, and technical capability necessary to successfully provide industry best practices in Agile and DevSecOps to the U.S. Citizenship and Immigration Services, Applied Technology Division’s Emerging Technology Branch.

This RFI is issued solely for informational and planning purposes and does not constitute an Invitation for Bids, Request for Proposal, or Request for Quotations. In accordance with FAR 15.201(e), responses to this notice are not offers and cannot be accepted by the Government to form a binding contract, nor do responses affect a potential respondent's ability to respond to any future synopsis/solicitation that may or may not follow or restrict the U.S. Government's eventual acquisition approach. Additionally, the U.S. Government will not provide reimbursement for any information that may be submitted in response to this RFI. Respondents are solely responsible for all expenses associated with responding to this RFI. Respondents will not be notified of any results derived from a review of the information provided; however, information gathered may be utilized for technical and acquisition purposes.

2. Scope of Requirements

U.S. Citizenship and Immigration Services (USCIS) Office of Information Technology (OIT) Applied Technology Division (ATD) Emerging Technology Branch (ETB) focuses on DevSecOps strategy to bridge the gap between diversely mature programs within USCIS by developing and implementing tools and techniques that aid best practices and enhance centralized visibility, quality, and frequency of delivery. ETB provides support for end to end, performance, interoperability, and automation testing including process improvement with solution design and execution of testing facilitation and/or product demonstration. ETB also focuses on implementing cutting edge, advanced solutions utilizing robotic process automation (RPA) and machine learning (ML) to identify application-specific and enterprise-wide trends to continuously refine processes over time by addressing gaps and streamlining redundant repetitive tasks. ETB Technical Governance initiatives accelerate secure and reliable digital transformation by guiding delivery team adherence to enterprise standards for development, security and operations ensuring every system aligns with USCIS mission and modernization goals

The DHS, USCIS, Office of Information Technology (OIT) requires support for:

2.1 Enhancement of Security and Operations (DevSecOps) practices and Continuous

Integration and Continuous Delivery (CI/CD) pipelines that implement security integration and continuous monitoring solutions to secure applications and workloads ensure compliance with Zero Trust principles.

2.2 Enhancement of a variety of agile focused testing services including end-to-end integration testing, performance testing, interoperability/compatibility testing, Section 508(active hands-on testing of applications according to the Department of Homeland Security (DHS) Accessibility and Language Services (A&LS) protocols and procedures) and test automation.

2.3 Enhancement of Robotic Process Automation (RPA) along with Machine Learning (ML) techniques to streamline repetitive tasks and enhance decision-making capabilities within DevSecOps workflows and beyond.

2.4 Enhancement to the lean, smart standardizations guiding the software delivery processes to provide better information for data-driven decisions to reduce risk and drive down the cost of independent quality testing, development and operations and maintenance.

2.5 Development of creative approaches to information visibility to promote better information radiation, communication and collaboration among different teams (development, security, operations) and provide a shared understanding of the processes across the agency.

This is the next iteration of Quality and Independent Verification and Validation Services for Delivery (QISD) task order # 70SBUR21F00000057. See APFS # F2025070572.

3. Response Instructions

3.1 Responses are due by 2:00 PM Eastern Time (ET) on July 15, 2025.

3.2 Responses should be submitted in MS Word or PDF format.

3.3 Responses should be submitted via email to Amir.Hrnjic@uscis.dhs.gov and Vivian.E.Lantigua@uscis.dhs.gov with a Cc to Patrick.C.Gadwah@uscis.dhs.gov.

3.4 Responses shall be no more than five (5) pages to include graphics. Proprietary information, if any, should be minimized and must be clearly marked. To aid the Government in managing proprietary information, please segregate it. Please be advised that all submissions become Government property and will not be returned.

3.5 In the response, provide the following additional information:

i. RFI # 70SBUR25I00000016;

ii. Company Name, Address, Contact Person Information (including telephone number and email address);

mailto:Amir.Hrnjic@uscis.dhs.gov mailto:Vivian.E.Lantigua@uscis.dhs.gov mailto:Patrick.C.Gadwah@uscis.dhs.gov

iii. Vendor’s Unique Entity Identifier (UEI);

iv. Business Size and Size Standard / Classification related to North American Industry Classification System (NAICS) code;

v. Identify your business size and whether you are a large, or small business: HUBZone small business; service-disabled, veteran-owned small businesses; 8(a) small business;

women-owned small business; and/or small disadvantaged business. This information will assist the Government in determining the appropriate acquisition strategy, including the possibility of a set-aside.

vi. Please identify DHS-specific or Government Wide Acquisition Contracts that you currently hold (including your contract numbers and the current performance period of that contract) that could be used to procure these services.

vii. Are you interested in this opportunity as a prime contractor, subcontractor or part of a teaming arrangement?

4. Information Sought

For the following topics please share examples of your corporate experience and if available past performance to support your responses. For any experience that is referenced be sure to provide contract numbers, identification as a Prime or Sub, if Sub the approximate percentage of work performed, contract values, performance period, # of staff the work encompassed, duration of the contract and performance rating received.

4.1 Describe the comprehensive methodology your company has implemented related to automation testing integrated into continuous integration/continuous delivery (CI/CD) pipelines and reusable performance testing across large scale systems while ensuring robust governance across systems and services, in alignment with the industry state of the art standards.

4.2 Describe the processes and standards your company has implemented in to iteratively improve high quality services and products in a dynamic DevSecOps ecosystem while bridging gaps between applications/systems with varying levels of DevSecOps maturity.

4.3 Describe the strategies your company has leveraged to adopt standardized best practices, maintain compliance and enforce accountability with the goal of enabling secure, efficient, and scalable enterprise development, deployment and operations.

4.4 Describe the experience your company has in employing Robotic Process Automation

(RPA) and Machine Learning (ML) based solutions to improve the quality and efficiency of development, testing, security coverage, operations, and production of software solutions for automating and standardizing delivery.

4.5 Describe the strategies you would recommend be utilized in streamlining procurement and delivery of complex enterprise enablement solutions including but not limited to

DevSecOps, Test Automation, RPA and ML based solutions along with ensuring technical governance across all offerings.

i. For example, suggested Contract Type and Labor Categories to address these requirements.

Reminder: This RFI is for informational and planning purposes and does not constitute an Invitation for Bids, Request for Proposals, or Request for Quotations.