r/defensecontracting

Young aspiring defense contractors

I was at a meeting of local defense contractors in the northeast. This room was filled with people in their 60s who were talking about the problem acquiring new talent to replace an aging workforce. Lots of their best people are retiring and they need to fill those jobs.

Some of their outreach included events at local high schools and universities as well as media on local television. I surmise most of Gen Z is not watching the local news.

We have a lot of people here trying to get into defense contracting so lets open a discussion on how we can bridge the gap between these established government contractors and a young, enthusiastic workforce.

First, are any of our members located in the Northeast? Specifically NY, RI, Connecticut, and NJ. If so, I can publish local events hosted by these companies. There has been significant expansion of the defense manufacturing base in this area and they need people.

Grumman used to have a big facility here so there are quite a few people locally that have contacts with the primes, as well as great local support for contractors.

If you're just starting out in defense contracting, tell us about your experience trying to find your way.

reddit.com
u/BidLink — 8 hours ago
▲ 36 r/defensecontracting+1 crossposts

Which companies are currently paying the best TS/SCI yearly premiums/bonuses?

Hi Everyone,
I'm looking to move to a new role and want to target companies that offer a significant pay bump for an active TS/SCI.

I've heard some big tech firms like Microsoft and Amazon (AWS) offer substantial premiums—sometimes around 15% or higher, or fixed bonuses ranging from $15k to $45k just for holding the clearance.

Aside from MSFT and AMZN, which other companies-especially in big tech, cloud infrastructure, Devops, cyber or specialized defense are known for high clearance-specific pay?

reddit.com
u/chekmekchek — 2 days ago
▲ 4 r/defensecontracting+1 crossposts

Asking for a friend: Can I be a federal employee and sell to the federal government?

Does anyone in here work for the federal government and sell to the federal government?

I was told it is possible so long as you have written approval from your supervisor to sell to the federal government after work hours, and they’re not selling to their own agency that they are employed by.

Wondering, does anybody do this?

reddit.com
u/Cold_Rub106 — 1 day ago

Does sales enablement even exist for b2G?

Most enablement content is about social selling on LinkedIn. That doesn't work for the Department of Defense. What are you guys using to enable your teams?

reddit.com
u/Typical-Cut-2300 — 14 hours ago

GDIT benefits

I’m considering a move to GDIT. what are the benefits like, short term and maternity? is there a waiting period before you’re eligible for these? how is the work life balance and company culture?

reddit.com
u/Enigma_http418 — 2 days ago
▲ 32 r/defensecontracting+1 crossposts

We attended the CyberAB Town Hall this week and they indicated that there is a lot of misunderstanding around the November 2026 deadline. Some people are under the impression that they have to have a C3PAO assessment done by November 2026.

The November "deadline" is not a hard deadline the way people are characterizing it. CMMC is a phased approach. The ecosystem is currently in phase 1 where self assessments are the focus. In November 2026, C3PAO assessment requirements will *begin* appearing in contracts as a rule rather than the exception.

Anyone who has a C3PAO assessment requirement in their contracts already knows. The primes already sent notices out. Some primes have even set their own deadlines in advance of November 2026 and others are using November 2026 as their deadline.

CMMC compliance can be expensive and it can be what many would call "painful." However, companies within the ecosystem have had more than a decade to prepare and some have been saying that they were compliant anyway as they were delivering on contracts. (insert wink here)

Sharing a few related thoughts...

Money-

For businesses in the defense industrial base, it's important to understand what work you want to pursue or continue delivering and what you're willing to invest to be able to do it. That's the very first part of the calculus: https://www.isaca.org/resources/news-and-trends/isaca-now-blog/2026/cmmc-as-a-business-design-decision-part-1-decide-what-work-you-want

Knowing what and when-

If you're a sub already delivering on DIB contracts and you're not sure if / when you need to be CMMC compliant and to what level (L1 or L2), reach out to your Prime and have a conversation.

Get help if you need it-

If you've decided that you're going to pursue DIB work, do not go it alone - *if you don't have a CCP or a CCA on staff*, hire an implementation consultant. The consultant should do a deep dive with you on your CUI business processes so that they can help you with scope.

Scope-

*Scope is where a lot of organizations fall down.*

Remember that scope is a noun and a verb in the CMMC world. And, it's a single most important word in your CMMC journey: You need to make sure that you've identified all of the people, processes, and technology that store, process, or transmit CUI - and you need to separate them from everyone and everything else.

Some organizations don't even make it out of the pre-assessment phase to be able to move forward with their assessment because of improper scoping.

Engineering-

Do not treat CMMC as an engineering project. CMMC is a compliance program. The technology is typically the least challenging part. If you let engineers lead your CMMC compliance journey, you probably will not be successful. Compliance and engineering need to work hand-in-hand.

Think "minimum necessary" when purchasing or designing your CUI environment - do not gold plate or allow tinkering with the environment after you've decided on the design. *Freeze* the enclave design as soon as you can. Enclave tinkering can destroy your scope.

What you write down needs to be real-

Documentation must absolutely match implementation and operations. Here's why:

CMMC level two has 110 security requirements and 320 assessment objectives. The assessor will evaluate each of those objectives and rate each one as "met" or "not met".

The assessor will review your documentation, which includes your policies and procedures. There are two other assessment methods… "interview" and "test". That is how the assessor will determine whether your documentation matches how things really work in your organization. *This is the other place where organizations tend to fall down.*

So...a C3PAO assessor may ask your team member(s) how a particular assessment objective within their scope of duties is achieved (interview). They may choose to ask your team member to *demonstrate* how a particular assessment objective is achieved within their scope of duties (test). Think screen sharing and walk-throughs.

One of the quickest paths to an assessment objective being rated as "not met" by an assessor is documentation that doesn't match implementation or operations.

u/ResilientTechAdvisor — 13 days ago
▲ 0 r/defensecontracting+1 crossposts

CLAUDE

I’m wondering if anyone is creating Claude skills for RFP or RFI responses. I’ve already made skills for resumes and past performance writeups, but I was wondering if anyone has built skills for technical approaches or staffing plans.
I was wondering other use cases like capture and business development.

reddit.com
u/Smart_Web962 — 3 days ago

Waiting on The Surge Funding

Hello All,
I am set to join a defense contractor in a new role. They said they are just “waiting on this surge funding” so that they can fund these new roles. I’m sure this is a normal thing, but do any of you specifically know what surge funding she’s talking about, and when that is paid out? Or is it all relative?

Thanks!

reddit.com
u/Uncle_Snake43 — 2 days ago

Hello. I (27m) have recently accepted a position with a contractor at Soto Cano Airbase in Honduras. It's a yearlong contract, and honestly pretty excited about this opportunity. I know the base has been around since the 80s, but I wanted to ask if anyone in this group had worked there before and what their experience was?

I am fluent in Spanish and know how to be aware of my surroundings. That being said, I still am horrible at packing. Can anyone that has been down there speak from experience about things that they wish they would have brought and/or things that would have been better left in the states? What areas in Comayagua are the best to check out? Where should I steer clear of? What is the gym scene like? What is the night life like?

Any feedback/general advice is greatly appreciated.

reddit.com
u/Travis_Bickle21 — 7 days ago
▲ 3 r/defensecontracting+1 crossposts

Hey everyone,

Looking for some insight from anyone familiar with Lockheed Martin Space hiring timelines or internal processes.

I recently completed a great interview earlier this week for an RF related Integration & Test Engineer II role in Colorado, and was told they were planning to interview one more candidate before making a decision within the next couple of weeks.

At the same time, I’ve been informed I’ll be receiving an offer from another defense contractor for a Systems Engineer II in Arizona in the next day or two, and I’ll likely need to make a decision within a few days of receiving it.

I’ve also already been in contact with the recruiter I worked with and sent a follow-up email to keep them updated on my situation.

My main question is:

- Is it realistic to expect Lockheed to accelerate a decision in this situation?
- Or is their process typically fixed enough that I should not rely on hearing back quickly, even after communicating my timeline?

I would prefer the Lockheed role as working in the space sector of defense is my dream, but trying to make a smart decision with limited time.

Appreciate any insight, especially from current or former employees.

Thanks

reddit.com
u/Same-way-2218 — 13 days ago