DevSecOps & CI/CD Pipeline Integration

The contract seeks integration of a GRC platform into existing DevSecOps workflows and CI/CD pipelines to automate security validation and embed compliance directly into the software development lifecycle. This effort aims to streamline security checks, reduce manual intervention, and ensure continuous adherence to regulatory and operational standards throughout development, testing, and deployment phases. The contractor will be responsible for seamless technical alignment between governance, risk, and compliance tools and automated pipeline stages, enabling real-time enforcement of security policies and proactive identification of vulnerabilities. The work is classified as a subcontract under NAICS code 541512 and is issued by the Department of Defense through the FA8139 Afsc Pzimb Software office. The place of performance is designated as Coffeyville, Kansas, with a zip code of 73145. Responses are due by July 23, 2026, and the solicitation was posted on July 10, 2026. There is no set-aside designation specified, and the contract type is not applicable to small business set-asides or specific socioeconomic categories. The point of contact information is not provided, and all inquiries must be directed through the official SAM.gov portal for this opportunity.