Payroll and HR IT Technical Support

The General Services Administration’s Office of Business Applications, through its Payroll and Human Resources Information Technology Services Division, has issued a Request for Information (RFI) under solicitation number 47QACB26N0005 to gather market intelligence for future acquisition planning of development, modernization, enhancement, and operations and maintenance support services for ePayroll and HR IT applications. This RFI is strictly for planning purposes and does not constitute a solicitation, obligation, or commitment from the government to award a contract; responses are not offers and will not be accepted to form a binding agreement. The requirement is designated as a HUBZone Set Aside under NAICS code 541519, targeting qualified small businesses located in historically underutilized business zones. The anticipated period of performance, should a contract result from this RFI, spans from September 30, 2026, to March 29, 2032, including a one-month phase-in period, four 12-month option years, and a potential six-month extension. Work will primarily be performed at the GSA headquarters in Washington, D.C., with possible alternate locations in the Kansas City area as determined by the Contracting Officer’s Representative. Contractors must comply with stringent federal security, identity verification, and data protection mandates, including adherence to Homeland Security Presidential Directive 12 (HSPD-12) and FIPS 201-3 for Personal Identity Verification (PIV) credentialing, requiring all personnel to undergo Tier 2 clearance processes with fingerprinting and National Agency Check with Inquiries (NACI) adjudication before accessing sensitive systems. Key personnel with existing Tier 2 or MBI clearances will be favored. Contractor employees must also adhere to strict protocols for PIV card usage and must comply with NIST SP 800-171 for the protection of Controlled Unclassified Information. Security requirements extend to compliance with prohibitions on Kaspersky Lab, certain telecommunications services, and TikTok under FAR clauses 52.204-23, 52.204-25, and 52.204-27. Technical support must follow GSA’s System Development Life Cycle (SDLC) and agile methodologies, with mandatory deliverables including Project Management Plans, CONOPS, SDLC documentation, test scripts traceable to requirements, unit test results, burn rate reports, and status updates. All deliver