Quality, Security, Testing, Automation and Governance (QSTAG)

***01/22/2026 UPDATE - Updated Requirement*** DHS FAR Class Deviation (Number 25-20) for FAR Part 8 in response to the Revolutionary FAR Overhaul (RFO) instructs the DHS acquisition workforce to follow the RFO Part 8. USCIS conducted market research and consistent with our market research, and pursuant to RFO 8.401 and GSAM 538.7103-3, USCIS issued the QSTAG RFQ to as many FSS contractors as practicable to reasonably ensure that quotes will be received from at least three contractors capable of meeting our needs. We will not be distributing the RFQ to any additional contractors. ***01/16/2026 UPDATE - Updated Requirement Description; NAICS Code; Estimated solicitation release date; Small business set aside; and Alternate POC.*** USCIS will use FAR Part 8.4 ordering procedures for the Federal Supply Schedule, consistent with GSAM/R Subpart 538.71. The Government plans to issue this requirement to GSA MAS IT Schedule 54151S small business contract holders identified through market research as aligned with the Government s requirement, in accordance with GSAM/R 538.7103-3(a)(2). Market research was used to identify a viable pool of interested sources capable of meeting the requirement. ***12/18/2025 - Updated the anticipated solicitation release date.*** 10/10/2025 - An RFI was posted via SAM.gov on 7/1/2025 and closed on 7/15/2025. The following APFS record fields have been updated: small business program, dollar range, contract type, type of award, and estimated solicitation release date. QSTAG Service Objectives: 1. To allow United States Citizenship and Immigration Services (USCIS) the flexibility to secure technical support with the knowledge, skills and capabilities in Development Security Opertations (DevSecOps) advanced testing and automation solutions for the systems and services that support the USCIS mission. 2. To aid or enable USCIS, Office of Information Technology (OIT) product/portfolio teams to build and continually improve the quality of their products and speed of delivery by implementing cutting edge DevSecOps, advanced testing, applications and workloads security, automation and RPA technology solutions. 3. To re-use, build and continually improve reliable, valuable, and sustainable automated pipelines for use by engineering teams and stakeholders to easily integrate and benefit from available solutions. 4. To ensure standardized best practices, compliance and accountability, resulting in secure, efficient, and scalable operations that include development, testing, deployment and continuous improvements across the enterprise."