DevSecOps Pipeline Automation

The contract focuses on developing and maintaining secure CI/CD pipelines for the CLAIMS3 immigration case management system, ensuring automated testing and deployment processes are robust, scalable, and compliant with federal security standards. The work is subcontracted under the broader oversight of the Department of Homeland Security’s USCIS Contracting Office and requires implementation at the place of performance in Camp Springs, Maryland, with a NAICS code of 541511 indicating information technology services. The contractor is expected to integrate DevSecOps practices throughout the pipeline to embed security controls, automate vulnerability scanning, enforce compliance policies, and enable rapid, reliable software releases without compromising system integrity or data privacy. The contract emphasizes end-to-end automation, requiring the contractor to design, implement, and continuously improve infrastructure as code, configuration management, and monitoring systems to support the CLAIMS3 platform’s operational needs. Emphasis is placed on zero-trust architecture, secure credential handling, role-based access controls, and auditability of all pipeline activities. While no set-aside designation is specified, the work must align with federal cybersecurity frameworks and support the mission-critical functions of the immigration case management system, ensuring high availability and resilience under sustained operational demand.