Skip to main content
HonestMOS
●InvestigationsCongress made VA disability claims free to file. An entire industry charges veterans anyway — and nobody can stop them.→
←Back to 5821 Criminal Investigator — overview, pay, training, civilian translation, reviews
5821E7

Criminal Investigator

E-7 (Sergeant First Class) · Marines

E1–E3E-4E-5E-6E-7E8–E9
HEADS UP

The resident agent in charge billet is not a promotion prize — it is the hardest leadership job in the MCIO enterprise at the field level. The commanding general calls your office directly. The installation SgtMaj expects you at the table for every force protection brief. The NCIS SAC in your region has your personal cell number. If you are arriving at this rank thinking the senior supervisory agent role is about managing junior agents and signing off on paperwork, you will lose the CID office's credibility with the command inside six months — and that credibility, once gone, takes years to recover.

The Honest MOS Read
GySgt in MOS 5821 is the rank where the job stops being primarily investigative and becomes primarily institutional. You are still the most capable investigator in the field office and you still carry the most sensitive cases — the flag-officer misconduct referral, the installation drug network that reached the battalion staff, the SAPR case where the subject is a senior SNCO — but you are carrying those cases in parallel with running a field office, managing eight to twenty agents, advising a general officer, and fighting for the resources and autonomy the CID enterprise needs to function with integrity. The tension between all of those tasks is the job, and the GySgt who handles one while neglecting the others will find out which one they neglected when the MCIO regional director calls. The resident-agent-in-charge billet is the senior CID presence on a major installation. You are not staff in the PMO's building — you report to the MCIO regional director and your operational independence is protected by DoD Instruction 5505.3 for a reason. That independence means the commanding general cannot tell you which investigations to close, which subjects to clear, or what findings to report — but it does not mean the CG is your adversary. The best resident agents in charge brief the commanding general more often than he asks, not less. A commander who understands the criminal threat picture his installation is actually carrying makes better force protection decisions, approves the CID's resource requests faster, and backs the field office when NCIS or federal LE wants to absorb jurisdiction that belongs in-house. The CG who does not know what the CID office is working on is not insulated — he is uninformed at the worst possible time. The MCIO regional director is your actual chain of command and your actual evaluator. The resident agent in charge who builds the installation command relationship while keeping the regional director fully informed is the GySgt the MCIO system trusts with the hard installation assignments — the ones where the command relationship is difficult, the cases are sensitive, and the field office's performance will be cited in a HASC hearing or a DoD IG report within two years. The regional director knows which GySgts can hold that tension. Make sure he knows you are one of them, and make sure you actually are. Case complexity at GySgt is different from what it was at SSgt. You are carrying cases where the subject is a senior officer or SNCO, where the congressional interest is live, where the DoD IG has opened a parallel review, and where the trial counsel from the region's legal services activity is in your field office once a week. Your case file documentation does not just have to meet the MRE standard — it has to survive an Inspector General review, a defense attorney who was previously a JAG officer with ten years of GCM experience, and a congressional notification packet that the MCIO director may have to hand-carry to the Inspector General of the Marine Corps. The GySgt who treats that documentation standard as the same standard that worked at SSgt will have a memorable conversation with the regional director. FitRep writing at GySgt is the highest-leverage administrative act you perform. You write four to six SSgt FitReps per cycle, and those FitReps are the proximate cause of whether the agents under you advance, stagnate, or separate. A Section A that documents observed investigative behavior — which cases the agent carried, what the trial counsel's acceptance rate was on that agent's packages, how the agent performed in a live GCM cross-examination — is a Section A that stands up at the HQMC board. A Section A that says 'outstanding supervisory agent' without that granularity is a Section A the HQMC board reads and discounts, and the SSgt who deserved GySgt does not get it because the GySgt who could have made the case did not write it. The MSgt-versus-1stSgt fork is live at this rank and the MCIO regional director is watching which way you lean before you have consciously decided. The troop leadership track toward 1stSgt and eventually SgtMaj runs through formation management, enlisted welfare, unit culture, and battalion-level administrative accountability — all of which a GySgt-RAC is doing at scale in the field office. The SME track toward MSgt runs through MCIO headquarters billets, policy advisory roles, and enterprise investigative oversight. Neither track is more valuable than the other and neither is available to GySgts who have not already built the FitRep profile that makes the argument for either. Start the conversation with the regional director and your own battalion SgtMaj before the board cycle opens — not after.
Career Arc
  • 01GySgt pin-on under the HQMC centralized SNCO selection board — FitRep relative value, PME completion (SNCO Academy Advanced Course), and the 5821 billet profile read as a unit by the board.
  • 02Resident agent in charge or senior supervisory agent billet assumption at a major installation CID field office — MCIO regional director assignment slate, not self-nominated.
  • 03First installation commander brief as RAC — criminal threat picture, active case status summary (without compromising investigation integrity), resource requirements, and recommended command actions.
  • 04SNCO Academy Senior Course slated — required PME gate as the MSgt board approaches; coordinate with the regional director and the force SNCO academy coordinator 18 months before the window.
  • 05First flag-officer-adjacent or senior-official investigation as agent of record — the case that the MCIO regional director and HQMC are both tracking, carried by your field office, documented to DoD IG-survivalbe standard.
  • 06MSgt / 1stSgt board cycle — HQMC centralized board reads FitRep relative value, billet profile, PME completion, and the rated SSgts who advanced under your watch as the evidence of GySgt performance.
  • 07Post-Marine Corps transition lane active 24-36 months before EAS — federal LE GS-1811 application package in progress (NCIS SA, FBI SSA, DEA group supervisor, DoD IG), security clearance continuity coordinated with the receiving agency, VA disability claim filed before separation.
Common Screwups
  • ×Allowing the commanding general's opinion of a case outcome to shape the investigation's direction. The CG's Title 10 authority and the CID's investigative independence under DoD Instruction 5505.3 are in permanent tension — the GySgt who resolves that tension by telling the command what it wants to hear loses the field office's credibility with the NCIS SAC, the trial counsel, and the DoD IG at the same time, in that order.
  • ×An integrity incident at this rank — financial disclosure failure, investigative misconduct, foreign contact undisclosed during reinvestigation, clearance-related falsification — ends the career permanently and follows you into the federal LE job market. The GS-1811 hiring process at NCIS, FBI, DEA, and the DoD IG pulls the OPF; a separation code tied to investigative misconduct forecloses the GS-1811 track entirely.
  • ×NJP or courts-martial action at GySgt. The institutional knowledge and billet access a GySgt-RAC holds means that any UCMJ action triggers both a command-level investigation and an MCIO-internal integrity review. The Corps does not carry investigating agents with UCMJ records in sensitive billets.
  • ×A documented FitRep inflation pattern — SSgts who were rated high by this GySgt but repeatedly fail at the GySgt board — is an accountability problem the HQMC board eventually attributes to the reporting senior. Two cycles of inflated FitReps that cannot be defended at the board end the MSgt candidacy as effectively as a missed PME gate.
  • ×Losing the NCIS working relationship through a jurisdictional dispute handled badly. The NCIS SAC's read of the USMC CID field office is a permanent feature of every joint investigation the installation will run for the next decade. A GySgt who fought a jurisdictional dispute aggressively and was wrong, or who was right but handled it in a way that poisoned the working relationship, is a GySgt the regional director moves to a different installation — not promotes.

A Day in the Life

  • 0500Wake. Check the secure voicemail line and the field office duty agent's overnight log for any incident reports. A death investigation intake, an off-post incident with installation nexus, or an overnight arrest with CID implications gets a call to the duty agent before PT. Anything that touches a senior officer or an active GCM case gets a text to the regional director before 0600.
  • 0530–0630Personal PT — the schedule is self-managed at this rank, which means it either happens here or it does not happen. Three days run, two days strength, one day rest per week is the sustainable model when the duty phone does not cooperate. The agents know your PFT score; the installation SgtMaj's unit health-of-the-force report includes the MCIO office. Train to 1st-Class, consistently, without an audience.
  • 0700–0800Hygiene and transit to the field office. Review the case management system overnight updates — any new case intakes, any JAG messages on pending GCM cases, any NCIS coordination requests. Identify the one thing in today's schedule that will go sideways and decide in advance how you want to handle it.
  • 0800–0830Morning stand-up with the field office — all agents, 15 minutes. Caseload summary from each SSgt section: active cases by major-offense category, any trial counsel coordination needs, any clearance or evidence vault issues, any personnel or welfare situations. The RAC does not run a slide presentation at the morning stand-up; the RAC listens and asks the right two questions. The field office that dreads the morning stand-up is the field office whose RAC is running it as a performance review instead of a coordination tool.
  • 0830–1200Primary work block — the thing that actually moves the most sensitive cases and the most important institutional work. On investigation days: review and approve outgoing GCM case packages, coordinate with the trial counsel on active cases, conduct or oversee interviews on cases in the RAC's direct portfolio. On administrative days: FitRep Section A drafts, training calendar updates, clearance tracking review, preparation for the installation commander or PMO officer brief. The RAC who lets the meeting schedule fill this block entirely is the RAC who stops being a credible investigator by month six.
  • 1200–1300Chow — often with the installation SgtMaj, the PMO officer, or the SJA staff, depending on the week. The RAC who eats lunch alone in the field office every day is the RAC whose command relationship stays transactional. These meals are not optional networking; they are the information exchange that makes the criminal threat brief more credible and the resource request more likely to succeed.
  • 1300–1600Afternoon work block — typically the week's meeting-heavy period. NCIS resident agency coordination call or in-person meeting if there is a joint case in progress. Mentoring sessions with SSgt agents: one per week minimum, with a specific topic (FitRep narrative language review, caseload complexity assessment, PME timeline, career fork discussion). Regional MCIO director call when the weekly update is due. Evidence vault accountability walkthrough with the vault NCO on the last day of each month.
  • 1600–1700End-of-day field office walkthrough — check that the duty agent for tonight is briefed, check that the evidence vault is secured and the certification is signed, check that any case development that needs the regional director's awareness is in the nightly report before 1700. The RAC who delegates the closeout entirely and leaves at 1600 finds out what was missed when the regional director calls at 2000.
  • 1700–2000Off-duty time — but the duty phone is always on. Family time, personal development (reading the CMC's Planning Guidance, the Commandant's reading list, federal LE management literature), or catching up on FitRep drafts when the week's meeting schedule consumed the primary work block.
  • 2000–2200If the duty agent called about an overnight incident: assess, advise, or respond directly if the case complexity or sensitivity warrants it. A flag-officer-adjacent intake or a homicide response gets the RAC in the field office regardless of the hour. A routine off-post DUI that produces an MP report and a case referral can wait for morning if the duty agent is managing it correctly.
  • Active investigation surge — major case in progressThe daily schedule collapses into the case. The RAC is agent of record on the installation's most sensitive case and the case demands 10–12 hour days until the investigation plan is executed and the GCM package is complete. The SSgt section chiefs are running the field office's routine caseload. The regional director is informed daily. The trial counsel is in the field office twice a week. The CG's SJA knows the case is active and is managing the command disclosure discipline. This is why the field office trains and prepares outside of surge periods — so the institution can sustain when the RAC is consumed by the case.
  • IG inspection cycleThe 30 days before an IG inspection are not preparation time — they are verification time. The documentation that needs to exist for a clean IG inspection was built over the preceding 12 months: training records current, clearance calendar clean, evidence vault accountability certified monthly, case management system entries contemporaneous. The GySgt who is building the binder in the week before the inspection is showing the inspection team exactly what the field office's day-to-day administrative discipline actually looks like.

Weekly Cadence

Monday is the RAC's planning and reporting day. The weekend duty log is reviewed in the first hour; any overnight incident that needs the regional director's awareness goes into the Monday morning update before the stand-up. The weekly case management review runs after the stand-up — the RAC walks the SSgt section chiefs through the priority caseload, identifies any case that has stalled and needs a push, and assigns any new intake that came in over the weekend. The FitRep drafting for the quarter's due agents is supposed to start Monday morning and is almost always deferred to Tuesday afternoon because something operational consumed the window. Build the Monday plan knowing that the case will run it over; the RAC who builds an immovable Monday schedule is the RAC who misses the case developments because the meeting was on the calendar. Tuesday through Thursday is the operational core. Joint investigation coordination with NCIS or civilian LE happens on Tuesdays when both offices can protect the time. The most sensitive case interviews are scheduled in the middle of the week when the evidence chain and the coordination record are most current. The CG staff brief — when it is on the schedule — runs on Wednesday afternoon at most installations, which means the criminal threat update slides are finalized Tuesday night. The mentoring sessions with SSgt agents are scheduled for Thursday afternoons when the week's case work is substantively complete and the agent has something to talk about beyond what's on the case management screen. Friday is the week's administrative close. The nightly duty log is reviewed, the week's case management entries are verified for completeness, the clearance and training calendar gets a weekly check, and the duty agent for the weekend is briefed. The Friday that the RAC leaves early because the caseload was light is the Friday that something breaks at 1900 and the duty agent is dealing with a situation that should have had a more thorough handoff. Brief the duty agent as if you will not be reachable. Sometimes you will not be.

Key Skills — How to Drill Each

  1. 01
    Brief a general officer or installation commander on the installation criminal threat picture — active investigation status, crime trend data, resource requirements, recommended command actions — with real data and no hedges.
    The installation commander brief is a quarterly event at most major installations and an immediate event whenever a sensitive case breaks or a crime trend hits a threshold the CG needs to know about. Build the brief on actual case management system data — do not rely on the SSgt section chief's informal summary. Trend lines need three or more data points before you project them; pointing to a single incident as a 'trend' in front of a three-star is a credibility hole the G2 will fill for you. Practice the 90-second version of every active investigation's status — no case names, no subject identities, but clear enough that the CG understands the field office's resource load and the risk picture to the installation. The commander who walks out of your brief understanding the problem makes better decisions; the commander who walks out confused calls the PMO officer instead of you.
  2. 02
    Write four to six SSgt FitReps per cycle with defensible relative value — the GySgt-to-MSgt board at HQMC reads your attribution rationale, and weak attribution breaks SSgts who deserved better.
    Every SSgt FitRep Section A should be built from a running observation file you keep throughout the rating period — not reconstructed from memory in the two weeks before the deadline. Note specific cases, specific outcomes, and specific trial counsel feedback on the agent's work. For a Section A to survive the HQMC board's relative value comparison, it needs outcome data: the agent ran three GCM packages; trial counsel accepted two without revision; the third required one supplemental interview; the agent corrected the documentation gap independently. That is a Section A. 'Outstanding investigator with exceptional case management skills' is a Section A that the board reads as a placeholder. Relative value placement — where this SSgt stands relative to the others you are rating — requires you to have actually differentiated the agents. The GySgt who ranks all six SSgts in the top block out of generosity has not ranked them; the board treats a uniform stack as undifferentiated.
  3. 03
    Lead or oversee a complex felony investigation as the agent of record — homicide, major fraud, senior-official misconduct — from complaint intake through general courts-martial testimony, coordinating with NCIS, JAG, and where applicable the DoD IG.
    The documentation discipline at GySgt level is different from SSgt: every coordination action with NCIS, JAG, or DoD IG is memorialized in a formal coordination log, not in an email thread. The jurisdictional agreement with NCIS goes on paper before the investigation proceeds past the initial complaint intake. Every decision to expand or narrow the investigative scope is documented with a rationale — when a GySgt-authored investigation ends up at a HASC hearing, the decision log is the thing that either validates the investigation or exposes a command influence problem. Keep the special agent in charge and the regional director informed at every material development; a regional director surprised by a case development in a congressional notification packet is a regional director who moves the field office to a different GySgt.
  4. 04
    Develop and deliver the installation's annual criminal intelligence threat assessment — pattern analysis, hotspot mapping, trend projection — at the standard the installation G2 and the commanding general use for force protection decisions.
    The annual criminal threat assessment is not a case summary with a paragraph added at the end. It is a pattern analysis product: where are offenses clustering by location, time of day, unit affiliation, and victim population? What is the trajectory of each offense category year over year? Which criminal networks have installation nexus and what are their current operational indicators? Build the assessment from the case management data with a methodology section the G2 can validate — 'we analyzed cases closed in FY N with confirmed installation nexus' is a methodology statement; 'we looked at what happened this year' is not. The G2's shop produces the unclassified threat assessment for the installation monthly; your criminal threat assessment should be the source document they cite for LE-related crime trends, not a product that competes with theirs.
  5. 05
    Manage the field office annual training and TS/SCI reinvestigation calendar across all agent ranks — certifications current, polygraphs on schedule, advanced training slots filled — through a deployment cycle and an IG inspection in the same fiscal year.
    The training and clearance calendar is the GySgt's version of the artillery section chief's ammunition lot management — a discipline that looks bureaucratic until the IG inspection or the DoD IG review finds a lapsed credential on a case agent and asks why the resident agent in charge did not catch it. Build a 24-month rolling calendar at the start of every year: every agent's polygraph due date, every agent's periodic reinvestigation trigger date, every specialty training certification expiration (digital forensics currency, advanced interview technique refresher, SAPR investigator certification). Deploy cycle conflicts get resolved by sending the agent before or immediately after the deployment — a lapsed credential is not an acceptable deployment artifact. The IG inspection team reviews the training and clearance binder first; a clean binder in the first 30 minutes of the inspection sets the tone for everything else.
  6. 06
    Mentor two to three SSgt agents into GySgt-board-ready candidates — honest FitRep management, progressive case complexity assignment, clear-eyed read on who is heading toward resident-agent-in-charge track versus MCIO staff or schoolhouse billet.
    The GySgt mentor conversation is annual, direct, and written down. Every SSgt under your supervision should leave the annual mentoring session with a written career plan that identifies: the FitRep narrative the GySgt is building for them and what behavioral evidence they need to produce to support it; the case complexity trajectory the GySgt is assigning them over the next 12 months; the PME gate the SSgt needs to clear; and the honest read on which post track fits them based on what the GySgt has actually observed. Comfort over candor at this point produces SSgts who are blindsided at the GySgt board and who blame the GySgt — correctly — for a failure to prepare them. The SSgt who does not have the temperament for the resident-agent-in-charge seat deserves to know that now, with enough runway to build a credible MCIO staff or schoolhouse track instead.

Manuals & References — What Chapters Matter

  • DoD Instruction 5505.3 — Defense Criminal Investigative Organizations and DoD Law Enforcement Organizations
    At GySgt you are not reading this instruction — you are citing it to a commanding general who wants to know why you are conducting an investigation his staff did not request. Section 3 defines the investigative independence and jurisdictional primacy of the USMC MCIO; Section 4 establishes the coordination framework with NCIS, AFOSI, and CID Army that governs your joint investigations. The GySgt who understands the policy well enough to brief a CG on what it permits and what it prohibits — in plain language, in a conference room, without pulling the document — is the GySgt who maintains the field office's operational independence when the command relationship gets tense.
  • Manual for Courts-Martial (MCM) — Rules for Courts-Martial (RCM) and Military Rules of Evidence (MRE)
    You are testifying in general courts-martial proceedings where the defense counsel has a law degree, has read your investigation file more carefully than you have in six months, and is preparing to impeach your methodology as well as your memory. The MRE sections on hearsay exceptions, chain-of-custody evidentiary standards, and the admissibility of digital evidence are the ones the defense counsel is attacking; own them before trial counsel prep, not during it. RCM Article 32 preliminary hearing procedure is the process by which the investigation package you built gets evaluated for sufficiency before the commanding officer refers to trial. A GySgt whose Article 32 packet is returned for supplemental investigation is a GySgt who has had a conversation with the regional director.
  • MCO P5580.2 — Marine Corps Law Enforcement Program
    The overarching USMC LE regulation that governs the authority structure of both the PMO and the CID. At GySgt, the relationship between the CID field office and the PMO chain matters: the GySgt who understands where the PMO's police authority ends and the CID's investigative primacy begins avoids the jurisdictional friction that slows every joint installation LE response. Chapter on evidence standards and property management is the administrative framework your evidence vault accountability rests on — the IG inspector knows this chapter and will ask your vault NCO about it.
  • MCO 1610.7 — Performance Evaluation System
    You are writing the FitReps that determine whether your SSgts make GySgt. Read the relative value placement guidance specifically — the HQMC board's read of your FitRep stack across multiple rated agents is the mechanism by which your SSgts are differentiated from the rest of the Corps' SSgt CID agents. The Section A narrative standard at GySgt reporting-senior level requires outcome language, not trait language. A GySgt who has not read MCO 1610.7 since SSgt is writing FitReps under an outdated policy framework; the revision cycle is real and the current version governs.
  • NAVMC 1200.1 — Marine Corps MOS Manual (5821 senior-tier billet requirements and RAC qualification criteria)
    The MOS manual describes the resident-agent-in-charge qualification criteria and the senior CID billet structure that governs GySgt assignment. Read the 5821 senior-tier section before the MCIO regional director conversation about billet assignment — the qualification criteria for RAC designation, the billet proficiency designator requirements, and the training program prerequisites are documented here. The GySgt who shows up to a billet assignment conversation knowing the RAC qualification prerequisites from the MOS manual is the GySgt the regional director assigns to the RAC billet.
  • MCO 1400.32 — Marine Corps Promotion Manual (GySgt-to-MSgt / 1stSgt board mechanics)
    The MSgt and 1stSgt boards run on FitRep relative value and billet profile — not composite scores. Read the SNCO board section carefully and pull the current MARADMIN for the 5821 MSgt/1stSgt selection rates before you advise your SSgts on the timeline. The GySgt who understands the board mechanics advises the SSgts on what FitRep behavior actually moves the needle; the GySgt who gives generic 'keep your nose clean and you'll make it' advice is not useful to an SSgt trying to build a real case for selection.

Standards — How to Hit Each

  • SNCO Academy Advanced Course (Career Course) graduate — required PME gate for GySgt competitiveness and the baseline for advising SSgts on their own PME path.
    Schedule the Career Course in-residence at the SNCO Academy well before the MSgt board window — the seat becomes harder to get as the GySgt billet load intensifies. The regional director will sign the training request when you bring it with a specific course date and a coverage plan for the field office during the absence. Do not let the operational tempo at a high-caseload installation eat the PME slot; a GySgt who arrives at the MSgt board without Career Course is visibly disadvantaged regardless of FitRep quality. The Senior Course (for SgtMaj candidacy) needs to be on the radar before the MSgt board cycle — not something to schedule 'later.'
  • Field office TS/SCI clearance and LE credentialing aggregate — zero lapses at IG inspection, zero unresolved reinvestigation flags on active case agents.
    Build a clearance and credentialing tracking spreadsheet the day you assume the RAC billet: every agent's clearance tier, polygraph date, periodic reinvestigation trigger, digital forensics certification currency, advanced interview training currency, and SAPR investigator certification. Review the tracker monthly — not quarterly, monthly. A lapsed credential found at an IG inspection is traced directly to the RAC's administrative failure, not the agent's. The IG inspection team will ask to see the tracking documentation on day one; a GySgt who presents an organized, current tracker demonstrates administrative command authority. A GySgt who describes the tracking system verbally without a document is a GySgt who does not have one.
  • 1st-Class PFT and CFT under MCO 6100.13 — the field office watches the RAC's score as a signal about the fitness standard in this office.
    The CID community does not run formation PT on the battalion's schedule in most billet configurations, which means the GySgt's fitness standard is self-enforced. The agents who work for you are watching your score on every recorded test. A GySgt who scores 2nd-Class on a PFT has communicated that 2nd-Class is acceptable in this field office — because if the standard were actually 1st-Class, the RAC would be hitting it. Train specifically for the events: three-mile run pace work, pull-up volume, crunches pacing. An agent who fails a PFT is still a CID agent who failed a PFT, and the installation SgtMaj will note it in the health-of-the-force report the installation CG reads.
  • USMC CID case clearance rate and investigative quality metric — cases closed with GCM conviction, administratively closed for documented insufficient-evidence reasons, or referred to the appropriate jurisdiction with clean handoff documentation.
    The metric is not the conviction rate alone — the DoD IG has noted repeatedly that conviction rates alone incentivize investigation scope narrowing to easy cases. The full quality metric is: what proportion of GCM-referred cases from this field office resulted in conviction or plea; what proportion of cases referred to NCIS or civilian LE resulted in prosecution in those jurisdictions; what proportion of administratively closed cases had documented insufficient-evidence rationale that the regional director and a subsequent IG review agreed was accurate. Build the tracking internally by quarter and compare against the MCIO enterprise baseline the regional director publishes. The RAC who presents a trend analysis of her own field office's quality metrics in the regional director's quarterly review is the RAC who demonstrates institutional self-awareness.
  • FitRep relative value profile that HQMC can defend at the MSgt / 1stSgt board — rated SSgts who deserved selection are the GySgt's performance scorecard.
    The single most consequential administrative output of the GySgt billet is the stack of SSgt FitReps the HQMC board reads. Track your own rated agents' Section A input quality by reviewing the reporting senior's final FitRep language against your Section A draft and noting what changed and why. If the reporting senior is consistently revising your Section A input upward, your drafts are too conservative; if they are revising downward, your drafts are inflated. The goal is Section A language the reporting senior accepts without substantive revision — not because it is safe, but because it is accurate and well-supported. The GySgt's own FitRep at the MSgt board includes a read of how the rated SSgts performed after the GySgt rated them. Attribution matters.

Technical Mistakes — Concrete Consequences

  • Allowing the installation commander's operational priorities to shape which investigations receive CID resources and which ones are deferred.
    The DoD IG and the NCIS Office of Professional Responsibility both review investigation prioritization decisions when a sensitive case later produces a congressional complaint or a media inquiry. A GySgt whose case assignment records show that high-profile installation events consistently caused CID resource reallocation away from open felony investigations is a GySgt who will explain those decisions to the MCIO regional director and potentially to a DoD IG investigator. DoD Instruction 5505.3 exists precisely because that pressure is predictable; the resident agent in charge who lets it work is the one the instruction is designed to protect against.
  • Letting a clearance-related financial obligation or foreign-contact disclosure lapse on any agent because the caseload pressure was high.
    The GySgt signed the quarterly credentialing certification. The IG inspection team will pull that certification and compare it against the clearance records; a lapsed reinvestigation trigger on an active case agent, documented against a certification the GySgt signed, is an IG finding that goes into the field office report and into the GySgt's administrative record. The regional director does not distinguish between 'forgot' and 'knew and did not act'; both are administrative failures and both appear the same way in the inspection report.
  • Carrying institutional friction with the NCIS resident agency into a joint investigation.
    The NCIS SAC's formal after-action report on the joint investigation cites CID coordination quality. The regional MCIO director receives that report and compares it against the GySgt's own after-action documentation. A pattern of NCIS-cited coordination failures from a specific CID field office becomes an assignment-slate decision for the regional director — the GySgt at that office moves to a different installation, and the move is not a promotion. The working relationship with the NCIS resident agency is a long-term institutional asset; a single disputed jurisdictional decision handled badly in front of a trial counsel or a commanding general is a debt the field office repays for years.
  • Briefing the commanding general on an active case status with case details that were not cleared for command disclosure.
    Defense counsel will ask in discovery whether the commanding general's staff had knowledge of the investigation details before the Article 32 hearing. If the answer is yes and the source is a briefing by the resident agent in charge, the command influence issue becomes the first motion the defense files — and it is a motion with a real factual foundation. The GySgt who briefs the CG on case status rather than criminal threat picture has handed the defense a viable taint argument. The briefing format is specific: threat picture and resource needs to the CG; case status to the JAG legal services activity only, through the trial counsel's coordination framework.
  • Writing a FitRep that inflates a marginal SSgt because the relationship is good and a difficult conversation was easier to avoid.
    The HQMC board compares this GySgt's entire rated stack against every other GySgt's rated stack. When the marginal SSgt does not perform at the GySgt level after a strong FitRep, the attribution problem returns to the GySgt who wrote it. More immediately: the SSgt who was genuinely competitive and needed an honest differentiating FitRep from this GySgt did not get it, missed the board, and will eventually figure out why. The GySgt's reputation inside the MCIO community is built one FitRep cycle at a time, and the agents who watch what happens to their peers at the board know exactly whose FitRep mattered and whose did not.

Career Decisions at This Rank

  • MSgt (senior occupational specialist / MCIO headquarters track) versus 1stSgt (troop leadership / formation management track)
    This is the fork that defines the second half of the career, and the honest answer is that most GySgts know which way they lean before the HQMC board makes it formal. The MSgt track at 5821 runs toward MCIO headquarters billets, HQMC provost marshal staff, and eventually the MGySgt enterprise advisory and policy roles — work that is still investigative in character, shaped by institutional policy and joint-force relationships, and heavily dependent on the technical expertise the agent built over the preceding decade. The 1stSgt track runs toward MP battalion or company first sergeant billets — formation accountability for 80 to 200 Marines, unit welfare, training management, and the enlisted advisor role for a commanding officer whose primary concerns are not investigative. Neither track produces a worse senior Marine; they produce different senior Marines. The GySgt who is genuinely energized by a clean GCM package and a field office that runs at a high technical standard is building toward MSgt. The GySgt who is genuinely energized by a Marine who was going nowhere and then was not — because the first sergeant found the right leverage — is building toward 1stSgt. Talk to the MGySgts and 1stSgts you respect and ask them which days they would take back if they could.
  • NCIS civilian special agent transition at the end of the GySgt tour versus continuing to MSgt / 1stSgt
    The NCIS civilian SA pipeline is the most common post-Marine federal LE destination for senior 5821 GySgts, and the timing question is real. A USMC CID GySgt with a current TS clearance, a FLETC-certified investigation credential, and a GCM conviction record in the field office files is a competitive NCIS applicant at the GS-12 or GS-13 level under the GS-1811 criminal investigator series. The tradeoff: leaving at GySgt produces a higher starting grade in the federal service because the age-entry requirements for GS-1811 positions cap hiring at 37 years for most open-competitive announcements (with Veterans' Preference offsets). An agent who serves to MGySgt or SgtMaj is likely above that age-entry threshold for most competitive announcements and relies more heavily on VEOA and Veterans' Preference hiring authorities, which are strong but not unlimited. The agent who genuinely wants to make MSgt and lead the enterprise at the senior level should not leave to avoid a hard board cycle; the agent who wants to spend the next 20 years running cases as a federal SA and can get in now should go. These are not the same person and neither decision is wrong.
  • MCIO headquarters billet versus stay-in-field and build the resident-agent-in-charge track
    The MCIO headquarters billet at GySgt is a career-broadening experience that produces a different kind of institutional knowledge — policy development, MCIO program management, joint-force LE coordination at the enterprise level — than another field office tour produces. The field office tour produces a stronger investigative credential and a more direct FitRep narrative for the HQMC board ('ran a 15-agent office, closed X GCM packages, zero IG findings'). The headquarters billet produces policy and program experience that the MGySgt and SgtMaj roles require, and the regional director's read of a GySgt who has done both is more favorable than the read of a GySgt who has done only one. If the MCIO headquarters opportunity is available and the GySgt has two solid RAC tours behind her, taking the headquarters billet before the MSgt board strengthens the case. If the GySgt is approaching the MSgt board on the first competitive cycle and has only one RAC tour, another field tour may be the stronger board profile.
  • SNCO Academy Senior Course timing relative to the SgtMaj / MGySgt board window
    The Senior Course at Marine Corps University is the PME gate for SgtMaj candidacy, and the scheduling discipline matters. The MSgt board does not require Senior Course completion; the SgtMaj board does. Agents who make MSgt and are tracking toward SgtMaj need the Senior Course in the first 24 months of the MSgt billet — before the SgtMaj board window opens — to be competitive. The GySgt who is planning the SgtMaj track should be scheduling Senior Course for early in the MSgt tour, not treating it as something to get to 'eventually.' The Marine Corps University coordinator and the force SNCO academy seat allocation process are both easier to navigate from a position of advance planning than from a position of 'I need a seat in the next six months before the board.'
  • Transition planning — when to start and what the target is
    The 24-to-36-month transition window the JOB-side entry references is not aspirational — it is structural. The federal GS-1811 hiring process takes 6 to 18 months from initial application to reporting date; the VA disability claim process takes 6 to 12 months to produce an initial rating; the security clearance continuity paperwork that the receiving agency needs starts at least 12 months before separation to avoid a gap year between the USMC clearance and the federal agency clearance. A GySgt who begins none of this at the start of the tour and retires at the end of it will spend 12 to 18 months out of federal law enforcement before the first GS-1811 appointment. That gap is a resume problem in a community where currency matters. Start the USAJOBS profile and the federal application research in the first year of the GySgt tour, not the last.

How the Seat Varies by Unit Type

  • Major installation CID field office — resident agent in charge billet (Pendleton, Lejeune, Quantico, Okinawa)
    The full RAC billet with a large caseload, a significant agent roster, and a commanding general who uses the criminal threat brief to make force protection decisions. The NCIS resident office at this installation is a daily coordination partner; the trial counsel from the region's legal services activity is in the field office multiple times per week during active GCM preparation. The installation SgtMaj expects the RAC at every force protection meeting. The federal LE community (NCIS, AFOSI, FBI field office) knows the USMC CID office at this installation by reputation before knowing it by personnel. This is the billet that the HQMC MSgt board reads as the highest-complexity GySgt assignment.
  • Smaller installation or Marine Corps Air Station CID office — senior supervisory agent
    A smaller installation CID presence may not carry the RAC designation but still requires the GySgt's full supervisory and advisory capability. The caseload is lower volume but the cases are the same complexity — felony investigations, SAPR, financial fraud, senior-official misconduct — because the criminal categories do not scale with installation size. The NCIS coordination is with a smaller resident office or may require coordination with the nearest larger NCIS resident agency. The commanding officer relationship is with a colonel or brigadier general rather than a major general, which changes the brief format but not the advisory responsibility.
  • MCIO regional headquarters staff billet
    The GySgt who takes an MCIO regional headquarters slot rather than a second RAC tour gains enterprise visibility and policy development experience that field office tours do not produce. The work is program management — clearance health metrics for all field offices in the region, training calendar coordination, IG inspection preparation support, NCIS regional coordination agreements, case quality review and reporting to the MCIO director. The cases are not personally carried at the headquarters level; the institutional influence on every case in the region is constant. The regional headquarters GySgt who maintains direct field office relationships — calling the SSgt supervisors at the field offices, visiting the offices quarterly — avoids the credibility erosion that affects headquarters NCOs who lose touch with the operational reality of the people they are supervising from a distance.
  • Joint basing assignment — CID field office co-located with Army CID or AFOSI
    Joint bases (JBSA, Joint Base Myer-Henderson Hall, Joint Base Lewis-McChord, Joint Base Pearl Harbor-Hickam) create overlapping CID, Army CID, and AFOSI jurisdictions that require active coordination agreements to function without friction. The USMC CID GySgt at a joint base is managing a jurisdictional coordination framework with at least one other service's criminal investigation organization and sharing an installation command relationship with commanding officers from multiple services. The DODI 5505.3 coordination framework is the document everyone claims to have read and few have internalized — the GySgt who knows it and knows the Army CID and AFOSI resident agents in charge personally avoids the joint-base friction that otherwise consumes the case timeline.
  • OCONUS billet — Okinawa (III MEF), Marine Forces Europe, Marine Forces Pacific
    OCONUS CID billets at the GySgt level involve SOFA-governed LE authority that limits the field office's jurisdiction in ways that do not apply CONUS. The Status of Forces Agreement with Japan governs the CID's authority to conduct investigations on Japanese soil when the subject is a US service member and the victim or scene is off-base. Host nation police coordination — with the Okinawa Prefectural Police or the German Bundeskriminalamt for MARFOREUR — is a daily feature of the work. The GySgt who has not read the applicable SOFA before conducting an off-base investigation creates a diplomatic incident the embassy's defense attaché office has to manage. The case complexity is the same; the legal architecture around the cases is fundamentally different from CONUS experience.

What Good Looks Like at This Rank

The good 5821 GySgt is the resident agent in charge the MCIO regional director assigns to the installation where the command relationship is most difficult and the cases are most sensitive — because the regional director knows that the field office will come back from that assignment with its investigative credibility intact. The commanding general on that installation may push back on every criminal threat brief, may prefer comfortable assessments over accurate ones, and may have a staff that views the CID field office as a liability rather than a resource. The good GySgt gives the honest brief every quarter, in the CG's conference room, from the case management data — and builds enough of a relationship with the CG's SJA and the installation SgtMaj that the honest brief is received as a service rather than a provocation. Her FitRep stack from the GySgt tour reads like a case file — because it was built like one. Every SSgt Section A cites specific cases, specific trial counsel acceptance rates, and specific courts-martial testimony performance. When two of the three SSgts she rated make GySgt on the first board and the third one makes it on the second after closing the documented gap she identified eighteen months earlier, the HQMC board remembers the reporting senior's name. The third SSgt remembers it too — not with resentment, but because the honest FitRep gave him something to work toward rather than a comfortable misread that would have left him surprised at the board. Her field office's IG inspection results are clean because she built the tracking documentation in the first 30 days and maintained it through two deployment cycles and one leadership transition. The NCIS SAC in the region calls her before escalating any jurisdictional question to the regional director level because the working relationship was built by solving problems rather than arguing about primacy. When she sits down with the regional director about the MSgt conversation, the director does not have to look up her file — he has been briefing it to the MCIO deputy director for two years.

Preview — The Next Rank

MSgt at 5821 is the rank where the job becomes enterprise-level rather than installation-level. The resident-agent-in-charge billet managed one installation's criminal investigation program; the MSgt billet at the MCIO regional headquarters or HQMC level shapes the investigative framework for all of them. The policy decisions, the training program standards, the clearance adjudication coordination with OPM and DCSA, and the liaison relationships with NCIS, AFOSI, and federal LE at the regional director level — all of these flow through or are influenced by the MSgt's advisory work in a way that no single field office can replicate. The FitRep load changes at MSgt in a different way than it did at the prior transitions. The MSgt writes five to eight GySgt FitReps per cycle, and those FitReps determine who among the current cohort of GySgts becomes the next generation of RACs and MCIO headquarters seniors. The quality and accuracy of the MSgt's FitRep attributions is the institutional self-reproduction mechanism of the entire CID enterprise; a MSgt who inflates consistently or fails to differentiate is degrading the pipeline that the MCIO director depends on for the next decade of senior leadership. The accountability for that is not abstract — it shows up in the MCIO's IG results, in the trial counsel community's relationship with CID field offices, and in the federal LE hiring market's read of USMC CID credentials. The 1stSgt fork produces a different version of enterprise impact: the MP battalion 1stSgt runs the enlisted formation that supports the CID mission, manages the welfare and training of the military police who work alongside CID agents, and builds the enlisted culture of the LE enterprise at the unit level. The 1stSgt who understands the CID program from the inside — because she carried the cases and ran the field office — is the 1stSgt who can explain to a young MP why the chain-of-custody standard matters before he ever assists on an evidence collection. The investigative expertise does not go unused in the 1stSgt seat; it becomes the foundation of the NCO development program the 1stSgt runs.
FAQ

5821 E7 — Frequently Asked Questions

Q01What does a E7 5821 (Criminal Investigator) actually do?
You run a CID field office or serve as the senior supervisory agent of the largest section within a major installation office.
Q02What's the most important thing to know as a E7 5821?
The resident agent in charge billet is not a promotion prize — it is the hardest leadership job in the MCIO enterprise at the field level.
Q03What does a typical day look like for a E7 5821?
Time-blocked day at the E7 5821 rank tier: 0500 Wake. Check the secure voicemail line and the field office duty agent's overnight log for any incident reports. A death investigation intake, an off-post incident with installation nexus, or an overnight arrest with CID implications gets a call to the duty agent before PT. Anything that touches a senior officer or an active GCM case gets a text to the regional director before 0600, 0530–0630 Personal PT — the schedule is self-managed at this rank, which means it either happens here or it does not happen. Three days run, two days strength,…
Q04What mistakes get E7 5821 soldiers fired or relieved?
Allowing the commanding general's opinion of a case outcome to shape the investigation's direction. The CG's Title 10 authority and the CID's investigative independence under DoD Instruction 5505.3 are in permanent tension — the GySgt who resolves that tension by telling the command what it wants to hear loses the field office's credibility with the NCIS SAC, the trial counsel, and the DoD IG at the same time, in that order; An integrity incident at this rank — financial disclosure failure,…
Q05What career decisions matter most at the E7 5821 rank tier?
MSgt (senior occupational specialist / MCIO headquarters track) versus 1stSgt (troop leadership / formation management track) — This is the fork that defines the second half of the career, and the honest answer is that most GySgts know which way they lean before the HQMC board makes it formal. The MSgt track at 5821 runs toward MCIO headquarters billets, HQMC provost marshal staff, and eventually the MGySgt enterprise advisory and policy roles — work that is still investigative in character, shaped by institutional policy and joint-force relationships,…
Q06What's next after E7 for a 5821 (Criminal Investigator) in the Marines?
MSgt at 5821 is the rank where the job becomes enterprise-level rather than installation-level.
Q07What manuals and regulations does a E7 5821 need to know cold?
DODI 5505.3 — Defense Criminal Investigative Organizations (you coordinate at the NCIS SAC and regional MCIO director level; you are not reading the policy, you are applying it in real time).; Manual for Courts-Martial (MCM) — Rules for Courts-Martial and Military Rules of Evidence (you are testifying in the most complex GCM proceedings on the installation; the defense counsel will have read your file more carefully than anyone).; MCO 1610.7 — Performance Evaluation System (FitRep policy;…

This playbook has no tips yet. Be the first to share what you know.

Published by the Honest MOS Editorial DeskVerified against DoD/.gov sourcesUpdated May 2026Editorial standards