DA01--Health Services DevSecOps, NEW CONTRACT (VA-26-00011357)
Overview
Buyer
Place of Performance
NAICS
PSC
Set Aside
Original Source
Timeline
Qualification Details
Fit reasons
- NAICS alignment with historical contract wins in similar service areas.
- Scope strongly matches core technical capabilities and delivery model.
Risks
- Past performance thresholds may require one additional teaming partner.
- Potential clarification needed on staffing minimums before bid/no-bid.
Next steps
Validate eligibility requirements, assign capture owner, and schedule partner outreach to confirm teaming strategy before submission planning.
Quick Summary
The Department of Veterans Affairs (VA), specifically the Office of Information & Technology (OIT) Health Services Portfolio (HSP), is conducting market research for Health Services DevSecOps support. This new contract (VA-26-00011357) seeks to identify qualified firms capable of providing development, sustainment, modernization, enhancement, and integration services to deliver high-quality IT services for Veterans' healthcare. Responses are due February 12, 2026, at 10:00 AM Eastern Time.
Scope of Work
The contractor will provide shippable products, operations support, and security compliance for all HSP products, including Clinical Services, Patient Care Services, VHA Finance, and more. The effort requires employing a DevSecOps methodology and Agile practices for continuous delivery and improvement. Tasks encompass development, testing, deployment, security, operations, architecture, refactoring, and ongoing maintenance for legacy, current, and future products within a DevSecOps lifecycle.
Contract & Timeline
- Type: Sources Sought / Market Research
- Product Service Code: DA01 (Support Services for Application Development and Support)
- Period of Performance: One 12-month base period with two 12-month option periods and two optional tasks.
- Place of Performance: Contractor facilities, with potential travel to Government sites.
- Set-Aside: None specified.
- Response Due: February 12, 2026, at 10:00 AM Eastern Time.
- Published: February 5, 2026.
Special Requirements
Contractor personnel must complete VA mandatory training. Solutions must comply with Section 508 accessibility standards, support IPv6-Only, and be PIV card-enabled. Required expertise includes Agile, DevSecOps, MUMPS, and potentially AI. Background investigations (Tier 1, 2, 4) will be necessary. Performance standards include adherence to VA policies (e.g., PLM Playbook), incremental deliveries (no less than 90 days apart), and sprint durations (two to four weeks). Compliance with FedRAMP, VA Enterprise Cloud (VAEC), and VA Cloud-First Policy is also mandated.
Additional Notes
Amendment 01 clarifies that Scrum team structuring recommendations and PWS recommendations are excluded from the overall 10-page response limit. This notice is for planning purposes only and does not guarantee a future solicitation.