DevSecOps CI/CD Pipeline Development

The contract seeks the development and ongoing maintenance of a secure, automated CI/CD pipeline tailored for rapid software delivery in tactical environments classified at IL5–IL6 security levels. The effort requires deep expertise in DevSecOps practices to integrate security controls directly into the software build, test, and deployment lifecycle while ensuring compliance with stringent DoD information assurance standards. The solution must support continuous integration and delivery in constrained, disconnected, or low-bandwidth operational settings typical of battlefield or field-deployed systems, with emphases on resilience, auditability, and minimal human intervention. The work is to be performed at Aberdeen Proving Ground, Maryland, under a subcontract arrangement classified under NAICS code 541512 for Custom Computer Programming Services. Proposals must be submitted by May 27, 2026, and the contracting activity falls under the Department of Defense, specifically managed by the W6QK Acc-apg office. The contract demands proven experience with secure development frameworks, hardened infrastructure, and toolchains compatible with DoD cybersecurity requirements, including but not limited to STIGs, RMF, and FedRAMP-aligned controls, ensuring that automation does not compromise operational security or data integrity in high-threat environments.