The U.S. Citizenship and Immigration Services is planning a full small-business set-aside contract exceeding $100 million to develop and sustain a new IT platform called Immigration Biometrics and Identity Services, or IBIS — a system the agency describes as covering both internal operations and public-facing immigration processing infrastructure. The agency expects to release the solicitation on October 22, 2026, with award projected in the third quarter of fiscal year 2027 and a period of performance running through June 30, 2032. Only small businesses holding a General Services Administration Schedule contract under NAICS code 541512 — computer systems design services — may bid.
What USCIS Does and Why Biometrics IT Is Expanding
U.S. Citizenship and Immigration Services is the Department of Homeland Security component responsible for processing immigration benefit applications — green cards, work authorizations, naturalization petitions, asylum claims, and related services. The agency conducts biometric collection at more than 140 Application Support Centers nationwide, capturing fingerprints, photographs, and signatures that feed into background check workflows crossing multiple federal databases including the FBI's Next Generation Identification system and DHS watchlists.
The scope of that biometric collection is growing. In November 2025, USCIS published a final rule in the Federal Register expanding biometric collection requirements for a broader population of immigrants and petitioners, including additional applicant categories previously exempt from fingerprinting. The rule extended the age range for biometric collection and added new circumstances under which the agency may require biometrics from benefit requestors and sponsors. That regulatory change directly increased the volume and complexity of data IBIS must handle — the system is the IT backbone supporting the expanded collection mandate.
What IBIS Covers Technically
The IBIS program scope is broad. Contractors will be expected to deliver across data analytics and machine learning, biometrics and identity management, entity resolution, cloud application development, DevSecOps, continuous integration and continuous delivery pipelines, incident response, and technical documentation. The system must serve both USCIS internal case management workflows and the public-facing infrastructure through which applicants interact with the agency electronically.
Entity resolution — the technical discipline of determining whether two or more data records refer to the same individual — is central to immigration biometrics, where applicants may appear under multiple names, dates of birth, or identification numbers across different agencies and time periods. Modern entity resolution at federal scale relies heavily on probabilistic matching algorithms and, increasingly, machine learning models trained on large datasets. The inclusion of AI and ML capabilities in the IBIS scope signals that USCIS expects this work to go beyond routine system maintenance and into active model development and tuning.
Cloud application development and DevSecOps requirements indicate the agency intends IBIS to run on modern cloud infrastructure with security built into the development pipeline rather than bolted on at the end. CI/CD pipeline work means the winning contractor will manage automated testing, deployment, and release cycles — a capability set more commonly associated with software product companies than traditional federal IT shops.
The GSA Schedule Gateway
USCIS has structured IBIS as a GSA Schedule acquisition under NAICS 541512, which means access to the competition runs through the General Services Administration's Multiple Award Schedule program. Both large and small businesses must hold a GSA Schedule contract to participate in the broader IBIS ecosystem, but the prime contract itself is a full small-business set-aside — large businesses may not bid as primes.
This structure is significant because it creates a dual gate for potential competitors: first, they must be on GSA Schedule; second, they must qualify as a small business under the NAICS 541512 size standard. The GSA Schedule requirement also means the government intends to use existing contract vehicles rather than standing up a new vehicle or running a full open-market procurement. For contractors already on Schedule, this reduces the procurement overhead on both sides. For those not on Schedule, there is still time to apply — GSA typically processes new Schedule offers within four to six months, which means firms that begin the application process promptly could be positioned before the October solicitation drops.
What It Means for Contractors
The IBIS opportunity is explicitly reserved for small businesses, and GSA Schedule 541512 is the entry ticket. Companies without a Schedule contract cannot bid as primes and should begin the offerory process immediately if they intend to compete. GSA's eOffer portal accepts applications year-round; the IT Schedule 70 — now consolidated under the MAS program — is the relevant vehicle for NAICS 541512.
Capability alignment will matter significantly in this competition. The IBIS scope rewards firms with demonstrated experience in at least three core areas: biometric data management systems at federal scale, AI and machine learning model development or integration, and DevSecOps or cloud-native application delivery in a DHS or law enforcement environment. Entity resolution experience — whether from commercial identity verification, financial services fraud detection, or prior immigration IT work — is directly transferable to this program and will likely be scored.
Small businesses without direct USCIS or DHS experience but with relevant commercial capabilities in identity management, biometrics, or cloud security should review past USCIS IT contract vehicles and consider teaming with firms that hold relevant past performance. The period of performance runs through June 2032, making this a multi-year engagement worth structuring strategically — a strong teaming arrangement that fills capability gaps now can pay dividends across the full contract lifecycle. Watch SAM.gov for the solicitation release; the October 22, 2026 target date gives firms roughly four months to finalize Schedule status, identify teammates, and begin drafting technical approaches. Given the AI/ML and biometrics emphasis, companies should plan to demonstrate not just generic IT delivery credentials but specific experience with probabilistic matching, model governance, and identity data pipeline work — the capabilities the IBIS scope most directly calls out. Firms that can point to deployed identity resolution or biometric collection systems in a federal law enforcement or immigration context will be the strongest competitors at evaluation.
