By Cyber Defense Technologies January 27, 2026 5 min read
Few staffing challenges are as persistent as filling cleared cybersecurity roles. Programs need people with the right technical skills, the right clearances and the right qualifications for their work roles, often all at once and on a contract schedule. Vacancies delay deliverables, stretch existing staff and can put contract performance at risk.
There is no single solution, but understanding the options helps programs make better decisions.
Why these roles are hard to fill
- Skills are scarce. Demand for experienced cybersecurity professionals outpaces supply across the economy, and specialized skills such as incident response, reverse engineering or classified network engineering are scarcer still.
- Clearances take time. Investigations and adjudications take time, and candidates who already hold active clearances are in high demand.
- Qualification requirements apply. Department of War cyber roles carry workforce qualification requirements, which narrow the candidate pool further.
- Competition is intense. Cleared professionals receive frequent offers from other contractors and commercial employers.
Understanding DoDM 8140.03
For years, DoD 8570.01-M governed qualification of the information assurance workforce, largely through baseline certifications tied to job categories. In February 2023, the Department issued DoD Manual 8140.03, "Cyberspace Workforce Qualification and Management Program," which replaced 8570.01-M.
Key differences:
- Work roles, not job categories. Qualification is tied to work roles defined in the DoD Cyber Workforce Framework (DCWF), covering a much broader range of cyber roles.
- Multiple ways to qualify. Foundational qualification can come from education, training or certification, depending on the role, alongside on-the-job residential qualification.
- Proficiency levels. Roles specify basic, intermediate or advanced proficiency.
- Time limits. Personnel newly assigned to cyberspace work roles are expected to achieve foundational qualification within nine months and demonstrate residential qualification within twelve months.
For programs, this means staffing plans must consider not only whether candidates can do the work, but whether they can meet the qualification requirements for the specific work role in time.
The options
Hiring vs. staff augmentation for cleared cyber roles
Direct hire
Long-term capacity
- Builds institutional knowledge
- Requires recruiting, clearance and onboarding time
- You manage training and certification
- Best for enduring, core roles
Staff augmentation
Speed and flexibility
- Cleared, qualified people placed faster
- Scale up or down with the program
- Certification and qualification maintained by the provider
- Best for surges, gaps and specialized skills
Direct hiring
Hiring your own staff builds long-term capability, institutional knowledge and team cohesion. It is the right approach for enduring roles at the core of the program. The trade-offs are time, recruiting cost and the ongoing responsibility for training, qualification and retention.
Staff augmentation
Staff augmentation places qualified, cleared professionals from a partner into your program. It is well suited to:
- urgent vacancies that cannot wait for a full hiring cycle
- surges in workload, such as an authorization push, inspection preparation or a major migration
- specialized skills needed for a defined period
- covering gaps while permanent hires are recruited and cleared
The partner handles recruiting, clearance maintenance and certification, and can often provide replacements quickly if needs change.
Developing your own
Growing talent internally, through training junior staff, sponsoring certifications and supporting cleared employees moving into cyber roles, builds loyalty and fills gaps over time. Veterans, who often hold clearances and bring relevant experience, are a strong source.
Combining approaches
Most successful programs combine all three: a core of direct hires, augmented staff for surges and specialties, and development pipelines for the future.
What to look for in a staffing partner
- Active clearances at the levels you need, and the ability to sponsor or maintain them
- Personnel qualified for the relevant DCWF work roles and proficiency levels
- Real technical depth, not only resume matching
- The ability to fill roles quickly and replace people if needed
- A track record in environments like yours
Retention: the other half of the problem
Hiring a cleared professional is expensive; losing one is more expensive. Programs that retain talent tend to:
- offer meaningful, mission-focused work
- support ongoing training and certification
- provide clear career paths
- respect work-life balance, even under schedule pressure
- recognize contributions visibly
Planning ahead for staffing
Many staffing crises are predictable. Programs can reduce them by:
- Forecasting needs at proposal and contract start, including clearance levels and DCWF work roles for each position.
- Identifying single points of failure, such as roles only one person can perform, and planning coverage.
- Building bench strength with partners who can provide qualified people quickly when needed.
- Starting clearances early for new hires and internal transfers.
- Tracking qualification deadlines so personnel meet 8140.03 requirements on time.
Frequently asked questions
Can augmented staff fill positions that require specific work-role qualifications? Yes, if they are qualified for those roles. Confirm qualification requirements with your contract and ensure the partner provides evidence.
How quickly can staff augmentation fill a role? It depends on the role, clearance level and location. Candidates with active clearances and matching qualifications can often start much faster than a full hiring cycle allows.
Does DoDM 8140.03 still require certifications? Certifications remain one way to meet foundational qualification for many roles, alongside education and training options, depending on the work role and proficiency level. Check the requirements for each specific role.
How CDT can help
CDT's cleared staff augmentation places experienced cybersecurity professionals who hold the clearances your program requires and meet DoDM 8140.03 work-role qualifications. Our cyber training and exercises help programs build their own talent.
