There are roughly 3.7 million Americans with an active or current security-clearance eligibility, per the Office of the Director of National Intelligence’s FY2023 Annual Report on Security Clearance Determinations, released February 2024. About 1.26 million of them hold Top Secret. The Defense Counterintelligence and Security Agency (DCSA) ran more than 1.7 million personnel-security actions against that base in FY2023 alone, per its Trusted Workforce 2.0 strategy briefings. And every one of those 3.7 million eligibilities sits on top of an Executive Order 13526 classification framework that was signed in 2009 and a Security Executive Agent Directive 4 (SEAD 4) adjudicative rubric whose 13 guidelines are older than most current TS/SCI holders’ employment histories. The system is large, slow, and structurally important. It is also the binding constraint on hiring for the federal cyber, intelligence, and defense workforce in 2026.

This guide is built for that audience: cleared candidates, hiring managers, and contractor FSOs who need a current working reference rather than a vendor brochure. Every number below is year-tagged. Every directive cited is linked to the published text. Where the law is unsettled or the policy is in motion — Trusted Workforce 2.0 in particular — the section says so.

What a federal security clearance actually is in 2026

A federal security clearance is a formal eligibility determination that a U.S. Government employee, military service member, or contractor employee can be granted access to classified national security information at a specified level — Confidential, Secret, or Top Secret — under EO 13526. It is not a job, not a badge, and not a permanent credential. It is an active adjudication that says you can be trusted with information at a specified level and, where applicable, with compartmented access programs such as Sensitive Compartmented Information (SCI) and Special Access Programs (SAP). DCSA runs the investigative engine for approximately 95 percent of the executive branch as of FY2024, per the agency’s published strategy. ODNI sets the policy framework through Security Executive Agent Directives, with SEAD 4 being the controlling document for the 13 adjudicative criteria applied at every level of the system.

Two facts anchor everything else. First, clearance is sponsor-driven: you cannot apply for one on your own. The federal government issues clearances against billets, not individuals, and a specific contracting officer, government program manager, or hiring authority must initiate the request against a documented classified requirement. Second, clearance is portable across the federal enterprise but never automatic. Reciprocity rules under Trusted Workforce 2.0 govern the conditions under which a Secret cleared on Monday at one agency is usable on Tuesday at another. The Government Accountability Office’s July 2024 report on personnel-vetting performance documents the still-uneven implementation of reciprocity across DoD components and the intelligence community, which means in practice that “fully cleared” depends heavily on the receiving agency.

Greg Touhill, the former federal Chief Information Security Officer who now directs the CERT Division of Carnegie Mellon’s Software Engineering Institute, has argued in SEI Insights commentary that the cleared workforce’s structural shortage is now a national-security risk in its own right — the clearance system is the bottleneck that decides how fast the federal government can stand up cyber, intelligence, and counterintelligence capacity. That framing, increasingly conventional in 2026, is why understanding the system below is no longer just an HR question; it is a workforce-strategy question.

The three civilian clearance levels and the special accesses above them

The hierarchy is older than most candidates realize. Executive Order 13526, signed by President Obama in December 2009 and still in force in 2026, lays out three classification levels — Confidential, Secret, and Top Secret — and by extension the three corresponding clearance levels. Confidential is the entry level, granted under a Tier 1 or Tier 3 investigation depending on role. Secret is the working majority of cleared roles in the defense industrial base, granted under a Tier 3 investigation. Top Secret sits at the apex of routine clearances and rides on a Tier 5 single-scope background investigation. Above Top Secret are not higher classifications but compartmented accesses: SCI is granted by the intelligence community under Intelligence Community Directive 704 for access to specific intelligence sources and methods, and Special Access Programs are agency-specific. The polygraph — counterintelligence scope or full-scope lifestyle — is layered on top for certain National Security Agency, Central Intelligence Agency, and National Reconnaissance Office billets.

The cleared population is concentrated at the top end. Per the ODNI FY2023 Annual Report, roughly 1.26 million people held Top Secret eligibility at the end of FY2023. The remaining ~2.4 million held Secret or Confidential. Sensitive Compartmented Information indoctrination layered onto Top Secret was held by an estimated 800,000 to 900,000 of the TS population, concentrated at NSA, CIA, NRO, NGA, DIA, FBI, and the Office of the Director of National Intelligence. The bottom line: of the 3.7M total cleared, fewer than one in four are TS/SCI-eligible, and that is the cohort that commands the salary premiums detailed later.

Inside the SF-86: the form that drives every clearance decision

Every federal clearance investigation begins with Standard Form 86 (SF-86), the Questionnaire for National Security Positions, submitted through the e-Application (e-App) platform that DCSA brought online in 2024 to replace OPM’s legacy e-QIP system. The SF-86 is 136 pages of structured disclosure covering thirteen substantive sections: personal identifying information; place of birth and citizenship; relatives; education back ten years; employment back ten years; military service; selective service registration; financial record (delinquencies, bankruptcies, tax issues); foreign contacts; foreign activities and travel back seven years; illegal drug use back seven years (lifetime for security positions and certain agencies); alcohol-related counseling or treatment; police record including arrests and citations; and use of information technology systems.

Two patterns generate the majority of clearance denials and revocations, per published DOHA hearing summaries and the ClearanceJobs editorial archive maintained by Lindy Kyzer: unreported foreign contacts, especially close and continuing relationships with foreign nationals, and unreported financial delinquencies. Disclose everything the form asks for, including matters you believe are sealed or expunged. The investigators have access to records you do not, and the omission is almost always worse than the underlying issue. False statements on the SF-86 are independently prosecutable under 18 U.S.C. § 1001, even when the underlying conduct would not have disqualified the applicant.

Mark S. Zaid, the Washington security-clearance attorney whose firm represents applicants and federal employees in adjudication and appeal cases, has been blunt in published commentary about which mistakes cost candidates clearances: applicants who fail to disclose are nearly always doing more damage than the underlying conduct would have. That framing is the single most useful lens an SF-86 applicant can carry into the form: complete, honest, and over-disclosing beats edited, polished, and incomplete every time.

The investigation phase: what background investigators actually do

Once your sponsoring agency or contractor submits your e-App package, DCSA assigns the case to a federal investigator or a contracted firm. The three current DCSA prime contractors for background investigations — CACI, Peraton, and General Dynamics Information Technology — carry the bulk of the contracted investigator workload, with federal DCSA investigators handling sensitive cases and complex foreign-contact dispositions. For a Tier 3 Secret, the investigator runs automated records checks (NCIC, credit, federal court, military), contacts current and recent employers, and interviews two to three references nominated on the SF-86.

For a Tier 5 Top Secret, the workload expands substantially. A subject interview is mandatory and typically runs two to four hours, covering every issue area on the SF-86. The investigator interviews neighbors and coworkers in person or by telephone at every residence and employer in the past seven years, foreign travel and foreign contacts are scrutinized in depth, and financial holdings are reviewed line by line. The investigator writes a Report of Investigation (ROI) that goes to the adjudicating agency for a clean-or-issue determination. Procedures, file structure, and adjudicator authority are codified in DoD Manual 5200.02 for DoD-sponsored cases and in ICD 704 for SCI-eligible cases.

Adjudication: the 13 categories that decide your case

After the Report of Investigation lands, an adjudicator at the sponsoring agency applies the 13 Adjudicative Guidelines codified in SEAD 4: Allegiance to the United States; Foreign Influence; Foreign Preference; Sexual Behavior; Personal Conduct; Financial Considerations; Alcohol Consumption; Drug Involvement and Substance Misuse; Psychological Conditions; Criminal Conduct; Handling Protected Information; Outside Activities; and Use of Information Technology. Each guideline lists specific conditions that raise security concerns and mitigating conditions that may resolve them.

The adjudicator uses the “whole-person concept,” weighing the nature and seriousness of the conduct, the circumstances surrounding it, the frequency and recency, the applicant’s age and maturity at the time, the voluntariness of participation, the presence or absence of rehabilitation, the motivation, the potential for pressure or coercion, and the likelihood of recurrence. Clean cases close in days. Cases with issues receive a Statement of Reasons (SOR) the applicant can respond to in writing or at a personal appearance under Department of Defense rules in 32 CFR Part 147. On marijuana specifically, December 2021 NCSC guidance directed adjudicators to evaluate past use in context rather than apply a per se bar — though most intelligence-community polygraph programs still expect multi-year abstinence before submission.

How long the process actually takes in 2026 (and why the average shifted)

End-to-end clearance timelines in 2026 are markedly better than the 2017-2019 backlog crisis, when Top Secret cases routinely took 400 days or longer and the queue at the legacy National Background Investigations Bureau peaked at roughly 725,000 cases per GAO’s continued personnel-vetting oversight. DCSA’s FY2026 published end-to-end averages, measured from e-App submission to final eligibility determination, are 90 to 120 days for Secret-level Tier 3 cases and 180 to 365 days for Top Secret Tier 5 cases, per the agency’s Personnel Vetting performance metrics. SCI adjudication adds 60-180 days on top of a Top Secret. Polygraph-required cases at NSA and CIA can extend the window further; Federal News Network’s DCSA coverage has tracked full-scope poly cases running 14 to 22 months elapsed.

The variance inside those ranges is driven by four things: cleanliness of the SF-86 (no foreign contact issues, no financial flags, no unreported residences); responsiveness of references and employers; volume at the adjudicating agency (CIA and NSA queue depth varies quarter to quarter); and whether continuous vetting flags are clean at the time of adjudication. Continuous vetting, mandated for all cleared personnel under Trusted Workforce 2.0, has reduced the periodic reinvestigation workload substantially — DCSA and ODNI have cited figures in the 60-70 percent range for the periodic-reinvestigation share now absorbed by continuous evaluation rather than retriggering a fresh investigation, which is why end-to-end averages have come down.

There is a counter-case worth surfacing. Bill Evanina, who ran the National Counterintelligence and Security Center from 2014 to 2021 and now consults publicly on insider-threat policy, has argued in CSIS commentary and Hill testimony that some of the apparent backlog reduction reflects definitional changes — not all cases now counted as “closed under continuous vetting” would have closed under the older periodic-reinvestigation regime. The headline averages are real and meaningfully better than 2018, but the system’s underlying throughput capacity has not expanded as dramatically as the metrics suggest. Suzanne Spaulding, the former DHS NPPD Under Secretary who now leads the Defending Democratic Institutions program at CSIS, has made the related point in published commentary: the personnel-security system’s interaction with broader information-security policy needs the same level of executive attention that classification reform now receives.

Trusted Workforce 2.0: how the system actually changed between 2014 and 2026

The Trusted Workforce 2.0 initiative is the single biggest policy change in the personnel-security system in a generation, and understanding the timeline matters because every applicant in 2026 is being processed under rules that did not exist in 2018. The proximate cause was the 2015 OPM data breach, which exposed background-investigation records for 21.5 million Americans and forced a re-architecture of how the federal government collects, holds, and reuses personnel-security data. The structural cause was the queue: by Q4 2017, the legacy National Background Investigations Bureau was carrying roughly 725,000 open cases per GAO oversight, and Top Secret cases routinely ran 400+ days end-to-end.

The practical upshot for an applicant in 2026: your SF-86 is processed through e-App rather than legacy e-QIP, your investigation runs against a continuous-vetting baseline rather than a five- or ten-year periodic schedule, and your eligibility once granted is monitored against credit, criminal, terrorism, and foreign-travel data feeds in near-real time. The system is faster, more data-rich, and harder to game than it was a decade ago. It is also more linked: a flag in one feed routes to your sponsoring security officer rather than waiting for a reinvestigation cycle.

The Facility Clearance (FCL) track for contractors and small business set-asides

Personnel clearances are the headline story, but the second clearance system worth understanding is the Facility Clearance (FCL), which authorizes a contractor company (not an individual) to hold classified contracts and store classified information. The FCL is administered under the National Industrial Security Program by DCSA and governed by 32 CFR Part 117 — the NISPOM rule, which moved out of the DoD 5220.22-M manual into the Code of Federal Regulations in December 2020. A small business pursuing federal cleared contracts cannot self-sponsor an FCL; a Government Contracting Activity must initiate the request after determining a classified requirement exists on a prime or subcontract.

The FCL process typically takes 6-18 months and requires the company to designate a Facility Security Officer (FSO), complete the SF-328 Certificate Pertaining to Foreign Interests, and pass DCSA’s review of foreign ownership, control, or influence (FOCI). Small business set-asides under 8(a), HUBZone, and WOSB programs do not bypass the FCL requirement; they only affect prime contracting eligibility. For small contractors, the practical path is to sub on a cleared prime first, build past performance, and pursue an FCL once a Government Contracting Activity sponsors one. Working an early State Department contractor billet or a CIA contractor role on an existing prime’s task order is a common on-ramp for individuals before companies pursue their own FCL.

Reciprocity under Trusted Workforce 2.0 and what it means when you change jobs

The Trusted Workforce 2.0 initiative, formalized by ODNI and OPM in 2018 and built out through 2024-2025, sets the policy that clearance eligibility transfers across federal agencies and between agencies and cleared industry. In practice, reciprocity means a Secret cleared on Monday at DISA should be usable on Tuesday at a defense contractor without a fresh investigation. Three exceptions tighten that in 2026: SCI access requires the receiving agency to indoctrinate (read-in) the holder, even if the underlying Top Secret transfers cleanly; polygraph requirements vary by agency and a CI polygraph from one agency does not satisfy a full-scope lifestyle polygraph at another; and any break in cleared service longer than 24 months requires a reinvestigation. Continuous vetting under TW 2.0 means your Secret or Top Secret is now perpetually monitored against credit, criminal, terrorism, and foreign travel data sources, with flags routed to your sponsoring security officer rather than waiting for a five-year or ten-year periodic reinvestigation.

Reciprocity remains uneven in practice. GAO-24-106753, published July 2024, identified specific cases where DoD components imposed additional vetting steps on incoming cleared transfers that the policy framework theoretically did not require — adding weeks to months for hires the agencies themselves classified as reciprocity-eligible. Sean Bigley, the security-clearance attorney whose ClearanceJobs columns document the working-level frustrations of cleared candidates moving between programs, has written repeatedly that the gap between TW 2.0 policy and TW 2.0 implementation is where most clearance-transfer pain originates. The fix is procedural rather than legal: build a relationship with the receiving FSO before you accept the offer, and ask in writing what they will require beyond the existing eligibility record.

The salary premium: what a clearance is actually worth in 2026

Clearance translates into measurable salary lift across every cleared career track. The premium scales with the clearance level and the local labor market, and it is meaningfully larger inside the National Capital Region than in regional markets. The figures below combine the ClearanceJobs 2024 Compensation Report, the Bureau of Labor Statistics OEWS May 2024 release for SOC 15-1212 (Information Security Analysts) as the commercial baseline, and live posted compensation ranges from ZipRecruiter and CyberSecJobs.com. The premiums are largest where the supply constraint is tightest: full-scope-poly cleared cyber, mid-career, in the NSA and CIA contract ecosystems.

The cleared career path beyond pay scale is documented in our complete clearance-jobs career guide; the underlying clearance hierarchy is broken out in detail in Levels of Security Clearance; and the TS/SCI-specific market is covered in our dedicated TS/SCI clearance guide.

Maintaining your clearance: continuous vetting, foreign travel reporting, and self-reporting obligations

Holding a clearance is an ongoing obligation, not a one-time hurdle. Under SEAD 3 (Reporting Requirements) and the continuous-vetting regime, cleared personnel are required to self-report a defined set of life events promptly, typically within 30 to 90 days: foreign travel (including personal vacation travel for SCI holders, often pre-approval required); foreign contacts that move from casual to close or continuing; arrests, citations, and detentions including DUI; marriage, cohabitation, and divorce; financial events such as bankruptcy filings, garnishments, and tax liens; changes in name or citizenship; psychological treatment that affects judgment (with carveouts for combat-related counseling and routine marital or grief counseling under DCSA guidance); and adverse media reports. Failure to self-report is itself a personal-conduct concern under SEAD 4 Guideline E and has been the proximate cause of clearance revocations that the underlying event alone would not have triggered.

Polygraph holders face additional disclosure requirements. Cleared candidates failing or having problems on the polygraph can find a working overview in our polygraph failure guide; the most common driver is incomplete or inconsistent self-disclosure during the pre-test interview rather than the physiological scoring itself.

Denials, revocations, and the appeal process

If an adjudicator issues a Statement of Reasons (SOR) proposing denial or revocation, the cleared employee or applicant has the right to respond. Department of Defense civilian and contractor cases route through 32 CFR Part 147 and the Defense Office of Hearings and Appeals (DOHA). The applicant submits a written response to the SOR within the deadline set by the agency (typically 20 days, extendable for cause). If the response does not resolve the concerns, the applicant may request a hearing before a DOHA Administrative Judge, present witnesses and exhibits, and receive a written decision. Either party may appeal the AJ decision to the DOHA Appeal Board on legal grounds. Intelligence community cases follow agency-specific procedures under ICD 704 with parallel appeal rights.

Realistic expectations: most denials at the DOHA stage stand on appeal absent a procedural error or new mitigating evidence, but a meaningful share of revocations are reversed when financial issues are paid off, treatment is completed, or foreign contacts are documented and reported. Mark Zaid, who has represented federal employees and contractors in clearance cases for nearly three decades through his Washington firm, has consistently advised in published commentary that the strongest mitigation strategy is timely disclosure plus documented remediation — not silence followed by polish at the hearing stage. Applicants who treat the SOR as a litigation moment rather than a documented-remediation moment generally lose.

What to watch through 2026 and 2027

The personnel-security system in 2026 is in motion in three specific ways that will determine how the next two years play out for cleared candidates. First, the FY2026 DoD budget materials have funded DCSA personnel-security throughput at levels that, if executed, should hold the Tier 5 median below 200 days — but execution is not guaranteed and a return above 220 days would put the system back inside the 2019 problem space. Second, continuous-vetting integration with intelligence community case management is now the single biggest determinant of how fast a flag becomes an adjudication action; if you carry SCI and have not asked your security officer how flags get routed in 2026, do that this quarter. Third, the GAO has explicitly flagged reciprocity-gap implementation as the next area of oversight focus per GAO-24-106753, and follow-on reports through 2026-2027 will determine whether the policy framework actually delivers on the portability promise that TW 2.0 was built to provide.

For an applicant: the highest-use move in 2026 is not chasing a new certification or a different employer. It is treating your eligibility as a managed asset, keeping it current under continuous vetting, and using the clearance as the negotiating lever it actually is rather than the credential it is often mistaken for. Cleared roles concentrated in Arlington and the Pentagon, around Fort Meade, near Fort Belvoir, and around Quantico remain the densest concentrations of cleared hiring demand, with defense-tech entrants like Anduril and the traditional primes both expanding their cleared-cyber rosters into 2027.

Frequently asked questions about U.S. Security clearances

Where to look next

• Levels of Security Clearance: Confidential, Secret, Top Secret
• TS/SCI Clearance: What It Is, How to Get It, and Career Opportunities
• Clearance Jobs: Complete Career Guide for Cleared Professionals
• Polygraph Failing: Common Causes and Solutions for Cleared Applicants
• NSA Jobs: How to Land a Career at the National Security Agency
• CIA Contractor Jobs: How to Land Work Supporting the Agency in 2026
• How to Get State Department Contractor Jobs: A 2026 Field Guide
• Anduril Careers: How to Get Hired at the Leading Defense Tech Company
• Cleared Jobs Near the Pentagon, Arlington Virginia
• Cleared Jobs Near Fort Meade Maryland
• Cleared Jobs Near Fort Belvoir Virginia
• Cleared Jobs Near Quantico Marine Corps Base Virginia