NGA Common Operations Release Environment (CORE), Helm-Infrastructure as a Code
Overview
Buyer
Place of Performance
NAICS
PSC
Set Aside
Original Source
Timeline
Qualification Details
Fit reasons
- NAICS alignment with historical contract wins in similar service areas.
- Scope strongly matches core technical capabilities and delivery model.
Risks
- Past performance thresholds may require one additional teaming partner.
- Potential clarification needed on staffing minimums before bid/no-bid.
Next steps
Validate eligibility requirements, assign capture owner, and schedule partner outreach to confirm teaming strategy before submission planning.
Quick Summary
The National Geospatial-Intelligence Agency (NGA) is conducting a Request for Information (RFI) for the Common Operations Release Environment (CORE), Helm-Infrastructure as a Code (IaC). This RFI seeks industry input on implementing a cost-effective, "Configuration as a Service" centric platform to deliver bundled NGA CORE Helm-IaC solutions within Department of War (DoW), Intelligence Community (IC), and NGA IT/cyber requirements. Responses are due by 12:00 noon ET on February 26, 2026.
Purpose & Scope
NGA, in support of its Platform Services office, is seeking information on how contractors would implement a "Configuration as a Service" platform capable of delivering bundled NGA CORE Helm-IaC. Key requirements include supporting deployment to both internet-connected and air-gapped environments, providing solutions for initial CORE DevSecOps service offerings (e.g., GitLab, Nexus, OpenShift, SonarQube, Fortify), operating under a "bring your own license" model, and demonstrating monthly complete deployment of the CORE environment. The RFI focuses on platform-level DevSecOps and Kubernetes engineering, not application-specific development.
Key Clarifications
- Submission: Vendors must submit two separate responses: one for the Helm/IaC RFI (max 10 pages) and one for the CORE Modernization RFI (max 12 pages). All font within RFI responses must be 12pt.
- Technical: NGA is open to various IaC tools and GitOps approaches, seeking industry best practices. Performers are expected to maintain and enhance an existing Cross Domain Solution (CDS) and are authorized to use IaC for automated provisioning and network management within security boundaries. The deployment scope refers to CORE tools, not program-specific applications.
- Compliance: CMMC Level 2 compliance is required for CUI access. All software must undergo NGA's C-ATO process, including security scans and integration with NGA's IdAM solution.
- Team Structure: NGA is seeking input on optimal team structures and hybrid support models, with 24x7 operational support expected.
- Legacy Applications: Performers are not expected to migrate or modernize legacy applications.
Submission Details
- Questions Due: No later than 12:00 noon ET on January 30, 2026.
- RFI Responses Due: No later than 12:00 noon ET on February 26, 2026.
- Method: Responses may be uploaded to the CORE Helm-IaC effort on the classified ARC site, OR emailed to Charlene.K.Fowler@nga.mil and Travarus.K.Davis@nga.mil.
- Format: White paper (Microsoft Word, max 10 pages for Helm-IaC RFI).
Additional Notes
This RFI is for information and planning purposes only and does not constitute a solicitation or commitment to award a contract. Interested parties must have a classified ARC account to access the classified ARC website. Responders should identify potential Organizational Conflicts of Interest (OCI).