NSA hires 14 roles while federal hiring freeze blocks all other agencies

Fourteen Openings, One Exception

A Department of War memorandum froze civilian hiring across the federal government on 28 February — except at the National Security Agency. The carve-out, titled "Immediate Civilian Hiring Freeze for Alignment with National Defense Priorities" and posted to the Intelligence Careers portal on 4 August, authorized critical openings. That exception is the only reason these requisitions exist at all.

The move intensifies competition for cleared talent, prompts defense firms to adjust hiring and retention strategies, and leads universities to highlight NSA-aligned curricula. The IC Candidate Portal showed fourteen active requisitions as of early August; the IC Candidate Portal's data captures each posting's core identifiers as they appeared on 4 August 2026.

The Software Engineer posting makes the mission scope explicit: selectees can focus on cybersecurity, high-performance computing, quantum computing research, data analytics, machine learning and artificial intelligence, cryptology and cryptography, complex algorithms, or large-scale platform development. The Research Scientist role sits adjacent, targeting mid-to-experienced computer-systems researchers.

On the business side, Contracting Specialists and Business Financial Managers enter at GG-07 through GG-09 with a mandate to "start a career where you learn to become an acquisition professional supporting the protection of our warfighters around the world, enabling and assisting operations on land, in air, at sea, in space, and within the cyber domain." An Accountant role, advertised separately on LinkedIn in late July, requires 24 semester credit hours in accounting (validated during hiring) and LinkedIn's figures put the full-performance salary band at $85,447 to $133,142. Full-performance entry means a bachelor's degree plus three years of relevant experience, a master's plus one year, or a doctorate with no experience.

Adjudicators hold a distinct gatekeeping function: they "ensure a trusted workforce by providing timely and efficient decisions to determine an individual's eligibility for initial or continued access to NSA classified information." Their grade ceiling reaches GG-12.

The mathematics and language tracks feed structured development programs. Newly hired mathematicians and mathematical statisticians enter the three-year Mathematics Development Program. Language analysts enter the Language Analyst Development Program (LADP), which spans the same four sites as the requisition — Maryland, Georgia, Hawaii, Utah. Attorneys enter the Legal Honors Program. A separate "Former IC Professionals" requisition targets mid-to-experienced talent already cleared and read on, with a grade band stretching the full GG-07 to GG-15 range.

Every posting carries the same non-negotiables: U.S. citizenship, a successful security background investigation, a polygraph, and a two-year DCIPS trial period (one year for veterans' preference eligibles). Random drug testing under Executive Order 12564 applies to all applicants and employees. Veterans' preference follows DoD Instruction 1400.25, Volume 2005.

The freeze exception is narrow. NSA's own careers page still advertises "a wide range of positions — from computer scientists, cybersecurity specialists and engineers to mathematicians, language analysts and more" across STEM, intelligence, mission support, and development programs. But only these fourteen critical roles have open, dated requisitions as of early August. The screen between application and offer is wider than the memo suggests.

The Gauntlet: Two Tracks, No Shortcuts

The NSA security clearance process is unique among federal agencies. Both government contractors and federal employees face the same gauntlet, and a conditional job offer is just the entry ticket. Before a final offer arrives, candidates must clear a two-track suitability process — security and psychological — that runs concurrently and allows no shortcuts.

Security and Psychology Run in Parallel

Security processing begins with the SF-86, a 127-page questionnaire when printed, now submitted through the eApp platform that replaced the legacy e-QIP system across all agencies in December 2024. The background investigation that follows verifies employment, education, and residences, and sends investigators to interview friends, neighbors, supervisors, and co-workers. The goal: assess stability, trustworthiness, reliability, discretion, character, honesty, judgment, and unquestioned loyalty to the United States. DCSA runs roughly 2.7 million investigations a year (about 10,000 per business day), and the timeline stretches two months or longer depending on how often you've moved, changed jobs, traveled overseas, or maintained contact with foreign nationals.

Once the security review wraps, candidates report for in-person processing: a polygraph examination and, in some cases, a one- to two-day security interview. Psychological processing runs on a separate track: a Psychological Assessment Battery (PAB) followed by an interview with a clinical psychologist. Both tracks must succeed before a final offer issues. A candidate with an active TS/SCI and a favorable polygraph from the last 24 months can onboard in weeks; one whose clearance lapsed or who needs a first-time polygraph faces a 6–18 month wait.

Polygraph: Two Flavors, Multiple Sittings

NSA polygraphs are extensive. It is not uncommon for an applicant to sit for two to four separate examinations before the agency is satisfied. Each session averages two to four hours. The test is voluntary; you can terminate at any point, but you must sign a consent form, and every question is reviewed before testing begins.

Two polygraph types are used. Counterintelligence (CI) polygraphs cover espionage, terrorist activity, deliberate damage to government information systems, intentional compromise of classified material, and secret contact with foreign nationals or their representatives. Full-Scope (Lifestyle) polygraphs add personal conduct areas: involvement in serious crime, illegal drug use within the last two years, and deliberate falsification of security forms. SEAD 4, effective June 2017, clarified that adverse clearance determinations cannot rest on polygraph results alone, but the exam remains a gatekeeper. Polygraph results typically remain valid for five years in the cleared community, though agencies do not always share results with one another.

Continuous Vetting Supersedes Periodic Reviews

The government has moved from periodic reinvestigations to ongoing automated monitoring under the Trusted Workforce 2.0 framework. The Department of Defense completed the transition for its approximately 3.6 million clearance holders in 2021. Phase 2 of TW 2.0 finalized all core policies in 2024, and the full national security sensitive population is now enrolled. Continuous vetting runs automated checks against public and government databases, agency-specific data, and event-driven investigative triggers. When an alert fires (criminal activity, suspicious financial transactions, foreign travel), it prompts further investigation.

Thirteen Guidelines, One Dominant Driver

Adjudicators apply 13 guidelines established under SEAD 4:

• Guideline A: Allegiance to the United States
• Guideline B: Foreign Influence
• Guideline C: Foreign Preference
• Guideline D: Sexual Behavior
• Guideline E: Personal Conduct
• Guideline F: Financial Considerations
• Guideline G: Alcohol Consumption
• Guideline H: Drug Involvement and Substance Misuse
• Guideline I: Psychological Conditions
• Guideline J: Criminal Conduct
• Guideline K: Handling Protected Information
• Guideline L: Outside Activities
• Guideline M: Use of Information Technology

In 2016, the Defense Office of Hearings and Appeals (DOHA) held 1,142 clearance appeals hearings. Guidelines A and L produced zero cases before the board in both 2015 and 2016. Financial considerations (Guideline F) consistently rank as the number one reason for denial. Personal Conduct (Guideline E) — dishonesty on the SF-86, during the subject interview, or during the polygraph — is particularly damaging because it directly undermines trustworthiness. Drug Involvement (Guideline H) remains a hard line: the Bond Amendment bars clearance for current illegal drug users, including marijuana. Intelligence Community agencies generally advise a minimum one-year abstinence period; the CIA requires no marijuana use within 90 days of application; the FBI typically looks for three years.

Appeals: A Ladder With a Final Rung

If unresolved security concerns remain, NSA issues a Clearance Decision Statement (CDR) detailing the negative findings and attaching most relevant materials. The applicant has 45 days to request review and respond in writing. NSA then issues a first-step appeal decision — grant or deny. A denial triggers a 15-day window to file a second-step appeal with the Appeal Authority Panel (AAP). The appellant submits a written package with exhibits; a hearing is scheduled within roughly two months before a panel of about five experienced NSA personnel. The hour-long hearing covers all major concerns. The AAP renders a final decision within one to three weeks. No further appeals exist, though a denied individual may reapply after a year if the security concerns are resolved. Most federal employees and contractors also retain the right to a Statement of Reasons and a hearing before a DOHA or agency judge.

Candor Beats Countermeasures

The most important factor in mitigating any issue is being completely upfront from the beginning. Attempting countermeasures during the polygraph is detectable, constitutes a security concern, and will likely result in processing termination and potential disqualification from Intelligence Community employment. In complex polygraph cases, especially where criminal issues could surface, legal representation during the process is not unusual. Emerging technologies such as EyeDetect are being explored as potential supplements to traditional polygraph testing, but the fundamentals haven't changed: candor, consistency, and a clean financial and personal record remain the baseline. That baseline is where the contractor squeeze begins.

Contractors Feel the Squeeze First

The NSA's push to fill specialized roles arrives atop a clearance labor market that was already stretched thin. Since 2014, jobs requiring a security clearance have surged nearly 1,000 percent while the pool of qualified U.S. citizens has grown less than 10 percent. That bottleneck now sits at the center of a defense industrial base reporting 15 percent annual turnover (roughly four times the national average) and vacancy rates of 16 percent across military and civilian technical billets, translating to about 28,000 unfilled positions in 2024 alone.

Contractors feel the squeeze first. The six management-and-operating contractors that run the National Nuclear Security Administration's nuclear security enterprise collectively employ roughly 55,000 people on more than $18 billion in annual obligations. Their representatives told GAO investigators they draw from the same narrow applicant pool as the NSA: U.S. citizens with the specialized skills and clearances needed for weapons-related work. Private-sector tech firms compound the problem; ground-autonomy funding has topped $100 billion since 2010 versus roughly $3 billion on the defense side, and private-sector STEM workers earn approximately $2,600 more per year after controlling for observable differences. M&O contractors say they can match base salaries but cannot offer the bonuses, equity, or flexible remote arrangements that lure candidates away.

The operational fallout is measurable. Ten of fifteen major DoD IT projects have slipped, with delays ranging from one month to five years, and program managers citing the inability to find qualified personnel as a primary driver. Closing the talent gap for a median-sized aerospace and defense company is worth more than $300 million in potential cost avoidance; combined skill, will, and time gaps already cost the sector an estimated $300–330 million annually in lost productivity. The DoD itself loses roughly $2.5 billion each year to IT and software issues, and about 5 percent of its workforce reports a strong urge to leave specifically because of poorly performing systems.

Contractors are reacting. In 2022 NNSA authorized mid-year compensation adjustments, and attrition across the M&O enterprise fell from over 10 percent to around 8 percent in fiscal 2023. Sites have added leave time, expanded health benefits, introduced hybrid schedules — Sandia National Laboratories now has nearly 4,000 of 14,000 employees on telecommuting or remote agreements, and rolled out student-loan repayment and sign-on bonuses. One contractor reported hiring roughly 1,300 people in fiscal year 2022 after beefing up its recruiting team to about twenty sourcers. University partnerships and internship pipelines are expanding; at one site, intern-to-permanent conversions rose from under ten to over thirty per year since 2017.

Yet the structural mismatch persists. Seventy percent of A&D firms score below the global median on organizational health, and a cultural chasm remains: defense organizations emphasize hierarchy and protocol while tech talent prioritizes rapid iteration and autonomy. Half of employers prioritize basic cognitive skills, while only 32% of employees consider them important; conversely, 44% of employees emphasize specialized technological skills, compared to just 24% of employers. Until that alignment shifts and until the clearance pipeline widens, every new federal cyber billet pulls another cleared professional from a contractor base that can ill afford the loss. Universities are responding to that pull.

Universities Rewrite Curricula to Match

The National Centers of Academic Excellence in Cyber Defense (CAE-CD) program, jointly sponsored by the NSA and the Department of Homeland Security, remains the primary mechanism through which schools signal alignment with federal hiring needs. The program recognizes regionally accredited institutions offering cybersecurity degrees or certificates at the associate, bachelor's, and graduate levels. Designations fall into three categories: CAE-CDE for universities with bachelor's and graduate programs, CAE-2Y for community colleges with two-year certificates and associate degrees, and CAE-R for doctoral research institutions rated by the Carnegie Foundation as having highest, higher, or moderate research activity. Each designation lasts five academic years before the institution must reapply.

Curriculum requirements are explicit. Programs must validate a Program of Study — a defined sequence of courses and experiences a student can reasonably complete while earning a degree or certificate — mapped to core Knowledge Units (KUs) specific to each CAE designation. A separate CAE-CO designation targets deeply technical, interdisciplinary programs grounded in computer science, computer engineering, or electrical engineering with extensive hands-on labs. Schools can also pursue focus-area designations layered on top of their base CAE status. The NSA publishes a searchable list of designated institutions, giving students and employers a verifiable filter.

The research partnership model shifted in 2024. Since 2012, the NSA's Research Directorate had funded "lablets" — small, multi-disciplinary university labs advancing the science of security. This year those lablets were replaced by Virtual Institutes (VIs), a model designed to add or retire projects as knowledge advances in three priority areas: Trusted Systems, Artificial Intelligence and Cybersecurity, and Defensive Mechanisms. SoS Program Manager Shavon D. said the VIs facilitate collaboration among industry, academic communities, and NSA research liaisons while aligning with the directorate's mission to anticipate technological advances and transition research into operational outcomes. Research outputs flow into the Science of Security Virtual Organization, an unclassified online repository for community awareness.

Institutional restructuring reflects the same priorities. Effective January 1, 2025, the Auburn Cyber Research Center transitioned to the Auburn University Center for Artificial Intelligence and Cybersecurity Engineering (AU-CAICE), merging AI and cybersecurity engineering under one roof.

Beyond curriculum and research, the NSA is expanding direct engagement. A pilot initiative aims to develop "cyber clinics" nationwide, placing students in roles that support communities and small governments lacking access to cyber risk assessment and planning assistance. The agency has committed to broadening partnerships with colleges, universities, military academies, CAE institutions, and Federally Funded Research and Development Centers — including campus lectures by NSA experts and a Visiting Scholars program that brings university personnel into NSA cybersecurity roles. Diversity targets are explicit: accelerated recruitment at Historically Black Colleges and Universities, Hispanic Serving Institutions, and other minority-focused schools. NSA officials said the relationships matter because students work on hard research problems aligned with the Agency's strategic goals, and one Science of Security project out-brief influenced a section of the White House Office of Science and Technology Policy's four-year Cybersecurity R&D Strategy. The NSA also contributed to the first National Cyber Workforce and Education Strategy in 2023, developed with industry, academia, non-profits, and government partners. The strategy's next test is the applicant facing the automated screen.

How Candidates Clear the Automated Screen

The NSA publishes its own hiring playbook: the agency's Hiring Process page walks applicants through every stage from application to offer. The process is structured around the agency's defined Career Fields: STEM and Cybersecurity, Intelligence and Foreign Language Analysis, Mission Support, and Development Programs. The NSA's Trending Opportunities page lists roles tied to funded mission priorities.

For early-career candidates, the Development Programs and Student Programs pages list internships, co-ops, and scholarship-for-service tracks. Veterans and transitioning service members should start at the Veterans and Military portal.

Networking inside the cleared community works differently than in the private sector. The NSA maintains an official LinkedIn presence. Attending the agency's virtual career fairs (announced on the Careers homepage and via the mailing list) puts applicants in contact with subject-matter experts. The polygraph and background investigation detailed in Section 2 are non-negotiable, and no referral bypasses them.

The single most effective lever is the USAJOBS application itself. The NSA posts all competitive vacancies at apply.intelligencecareers.gov/job-listings?agency=NSA. Each announcement includes a "How You Will Be Evaluated" section listing the knowledge, skills, and abilities (KSAs) scored by the rating panel. Federal hiring guides treat the KSA narrative as a primary differentiator.

Finally, maintain the clearance. The NSA's Benefits page notes tuition assistance and certification reimbursement. Maintaining the clearance is the applicant's burden. The agency's burden is the plan still being written.

The Plan Still Being Written

The NSA's current hiring push, fourteen specialized openings across cybersecurity, accounting, and mission support, sits inside a larger federal workforce shift that the public record only partially illuminates. The agency's own career pages confirm it "offers challenging career opportunities in a variety of fields to protect national security" and that the Central Security Service "provides timely and accurate cryptologic support, knowledge, and assistance" to military and intelligence partners. But no published NSA workforce plan, congressional mandate for specific hiring targets, or detailed federal cybersecurity workforce strategy document matches the specificity of the private-sector offers already on the table.

What the record does show are broad technology-labor trends the defense sector cannot ignore: universities merging AI and cybersecurity curricula under NSA-aligned designations; and a clearance pipeline that still runs 6–18 months for a first-time TS/SCI with polygraph. A candidate who clears can entertain counteroffers the day the badge activates.

Requisition 1261041 closes 6 August. Requisition 1260847 closes 7 August. Requisition 1260912 closes 7 August. By mid-month, the lines on the February memo will be filled or lapsed. The memo doesn't say what comes next.

Working in frontier tech? Zero G Talent tracks the openings: see every open ASML role, browse frontier tech jobs, openings at Stripe, and the people building the field.