Skip to main content
HonestMOS
●InvestigationsCongress made VA disability claims free to file. An entire industry charges veterans anyway — and nobody can stop them.→
←Back to 5821 Criminal Investigator — overview, pay, training, civilian translation, reviews
5821E8-E9

Criminal Investigator

E-8 to E-9 (Senior NCO) · Marines

E1–E3E-4E-5E-6E-7E8–E9
HEADS UP

The two forks at this rank are genuinely different careers and the Corps will not let you run both simultaneously. The 1stSgt / SgtMaj track is troop leadership at scale — you are the senior enlisted voice in a formation, your Marines need to see you in the building, and the commanding officer relies on you for the one read that staff cannot produce: what is actually happening among the enlisted ranks. The MSgt / MGySgt track is enterprise policy and program management — you shape the investigative framework, the training program, and the clearance architecture that determines what every USMC CID agent can and cannot do for the next decade. Both are senior and both are consequential. Know which one you are, and be honest about it before the board makes the decision for you.

The Honest MOS Read
At MSgt and above in MOS 5821, the personal caseload is gone — not reduced, gone — and the Marines who report to you are carrying the cases you used to carry. The institutional impact at this rank comes from the policy decisions you influence, the FitRep attributions you make, the GySgts you develop or fail to develop, and the enterprise-level framework you either maintain or improve. The agent conducting a midnight search warrant on a remote installation is operating inside the standard you set for what a USMC CID investigation looks like — the documentation discipline, the SAPR reporting protocol, the rights advisement procedure, the evidence chain standard. You have not been to that installation in three years. The standard traveled without you. The MSgt billet at the MCIO regional headquarters or HQMC provost marshal staff is where the career's operational knowledge converts into institutional architecture. You are advising the MCIO director or the provost marshal general on whether the current investigative jurisdiction agreement with NCIS needs revision — based on two decades of experience running field offices where the agreement created problems the policy did not anticipate. You are advising the CMC staff on whether the SAPR investigative training program produces agents who can handle the complexity of a general-officer-adjacent case — based on watching the program produce three cohorts of GySgts, some of whom were ready and some of whom were not and for identifiable, fixable reasons. That advisory role requires both the credibility of an agent who carried the cases and the institutional perspective of a Marine who has seen the policy applied across installations, commands, and force structure changes. Earning the first and building the second is what the GySgt tour was for. The 1stSgt billet — typically in an MP battalion or the CID headquarters company — is a fundamentally different role. The formation accountability, the welfare of 80 to 200+ Marines, the commanding officer's reliance on the 1stSgt as the honest voice of what the enlisted ranks actually know and feel — none of those functions are investigative. The 5821 1stSgt brings investigative expertise to a formation leadership role, which means she understands the CID agents in the company better than a 5811 MP 1stSgt would, and she can speak the investigative community's language when the commanding officer needs context on why a CID agent's caseload justifies a training accommodation or a deployment exception. But the primary accountability at the 1stSgt billet is for the formation — not for the investigation — and the 1stSgt who runs the formation through the CID section chief instead of through the chain of command has confused her previous assignment with her current one. DoD Instruction 5505.3 becomes a policy document rather than an operational reference at this rank. The MSgt who advised on the last revision cycle knows where the policy creates friction between CID operational independence and installation command authority — because they have been in the conference room when the friction materialized into a problem. The policy language that seemed adequate in the abstract is the language a GySgt calls about from Okinawa because a commanding general's staff is testing its limits, and the MSgt's advisory role is to know exactly where the limits are and to brief the MCIO director on the revision recommendation before the next policy cycle. That is institutional work, not case work, and it is the work this rank exists to do. Post-service transition from MSgt and above is predominantly into senior federal law enforcement billets: NCIS supervisory special agent (GS-13 to GS-15), FBI supervisory special agent, DEA group supervisor, DoD IG senior investigator, CBP or ICE senior investigator. The transition at this rank requires 24-to-36 months of deliberate preparation — the federal hiring timeline, the VA disability process, and the security clearance continuity between the USMC clearance and the federal agency clearance all run in parallel and all take longer than the agent expects in the last year of service. The MGySgt or SgtMaj who plans the transition thoroughly sets up the next 20 years; the one who retires and then starts planning is behind by 12 to 18 months from day one.
Career Arc
  • 01MSgt or 1stSgt selection via HQMC centralized SNCO board — FitRep relative value, billet profile, PME completion (SNCO Academy Career and Senior courses), and rated GySgts' board results as the measure of the reporting senior.
  • 02Initial billet assignment: MCIO regional headquarters senior enlisted advisor, HQMC provost marshal staff senior NCO, or 1stSgt of an MP battalion — the MCIO manpower officer coordinates with the regional director and the force SNCO academy on placement.
  • 03First enterprise-level advisory engagement as MSgt — MCIO director quarterly review, provost marshal general staff brief, or DoD IG coordination meeting where the MSgt's field-level experience is the reason the invitation exists.
  • 04SNCO Academy Senior Course completion if not done at GySgt — required before competing for SgtMaj designation.
  • 05SgtMaj or MGySgt board cycle: HQMC reads FitRep relative value on rated GySgts, billet profile at the MSgt level, PME completion, and the enterprise metrics the MSgt's billet produced.
  • 06Command SgtMaj slate consideration — if the SgtMaj track is the path, the MCIO director and the force SgtMaj coordinate the command SgtMaj designation with HQMC manpower; the slate is competitive and the FitRep profile from the MSgt billet is the primary input.
  • 07Post-service transition execution: federal GS-1811 application packet submitted and in process, VA disability claim filed pre-EAS, security clearance continuity coordinated with the receiving agency — all active 24-36 months before the retirement date.
Common Screwups
  • ×An integrity incident at MSgt or SgtMaj — financial disclosure failure, investigative misconduct, fraternization, clearance-related falsification, or a failure to report a subordinate's integrity violation — permanently forecloses the federal LE post-service career. The NCIS Office of Professional Responsibility and every GS-1811 hiring agency pull the OPF; a separation code tied to investigative misconduct is a disqualifying flag in the federal hiring adjudication process, and the Marine Corps does not issue a softer separation code because the rank was senior. The standard does not soften with seniority. It hardened.
  • ×Taking a public position against the MCIO director's or provost marshal general's policy in front of field agents or junior staff. The disagreement happens in the conference room with the door closed, with the data and the recommendation on paper, and the MSgt walks out aligned every time — even when the policy is imperfect and the MSgt's position is correct. The field agents who watch a senior SNCO undermine the institutional leadership above them do not see principled dissent; they see institutional fracture, and they build their own behavior on the same model.
  • ×A documented FitRep inflation pattern at this rank — GySgts whose FitReps significantly overstated their readiness for MSgt, who then failed the MSgt board or performed below expectations in the MSgt billet — is an attribution problem the HQMC board eventually attributes to the reporting senior. At MSgt and SgtMaj, the reporting senior's FitRep record follows the rated Marines' subsequent performance in a way that is visible to the HQMC staff. Two cycles of unsustainable attribution ends the SgtMaj candidacy.
  • ×Allowing the post-service transition to feel like a formality. The MGySgt or SgtMaj who retires expecting the federal LE market to accommodate their timeline discovers that GS-1811 hiring processes take 12-18 months, that VA disability claims require pre-separation documentation that cannot be assembled after the fact, and that security clearance continuity gaps of more than 12 months create a reinvestigation requirement at the federal agency that delays the first reporting date. Start the transition work at 36 months out. No exceptions.
  • ×Stopping personal PT because the rank feels senior enough. The 1stSgt who fails a PFT is the story the MP battalion tells for the next two years about whether the standard in this unit is real. The MGySgt at HQMC who is not hitting 1st-Class on the recorded tests is providing a read on the MCIO enterprise's fitness culture that the provost marshal general will eventually cite. The fitness standard did not end at GySgt. It will not end at MGySgt or SgtMaj.

A Day in the Life

  • 0500Wake. Check the secure voicemail and the MCIO regional overnight report. At the MSgt level, the overnight report is an enterprise view — not one installation, all installations. A significant incident at any field office in the region that is above the GySgt's reporting threshold goes to the regional director and to the MSgt before the director's morning brief. Flag items that require the director's attention before the 0800 stand-up; route items within MSgt advisory authority directly.
  • 0530–0645Personal PT — self-managed, non-negotiable. The MSgt's fitness standard is visible to every agent in the enterprise at every recorded test. Train to 1st-Class consistently. Three days run, two days strength, one rest. The week where the schedule makes this impossible is the week where the 0430 alarm matters.
  • 0700–0800Review and prepare for the day's most consequential engagement — the MCIO director's morning brief, the policy working group session, the mentoring session with the GySgt who has the hard board conversation coming. Identify what you need to know that you do not know yet and make the call to get it before 0800.
  • 0800–0900MCIO regional or headquarters morning stand-up — enterprise status from each section head, significant case and personnel developments, the director's priority for the week. The MSgt's role in the stand-up is the analyst's read and the advisor's recommendation: what does the aggregate picture tell the director that the individual status reports do not, and what action does the aggregate picture recommend.
  • 0900–1200Primary work block. Policy advisory work on the active revision in progress; FitRep Section A drafts for the GySgts whose cycle is closing this quarter; training calendar review for the enterprise aggregate; coordination call with the NCIS headquarters liaison if the joint investigative framework is in a revision cycle. The MSgt who lets the meeting schedule fill this block for more than two consecutive days is the MSgt who is not producing the institutional output the billet exists to produce.
  • 1200–1300Chow — with the enterprise. The MCIO headquarters table includes the regional directors, the provost marshal staff senior NCOs, and the NCIS and AFOSI liaison officers when they are in building. These conversations are the enterprise's informal information network; the MSgt who attends regularly knows the institutional terrain before it becomes a formal problem.
  • 1300–1600Afternoon work block — typically the weekly cycle's administrative and mentoring period. Mentoring sessions with rated GySgts: one per month at minimum, two per month for GySgts in the board window or navigating a billet transition. Clearance and training calendar aggregate review. Regional field office GySgt calls — the MSgt who checks in with each field office GySgt monthly stays current on the installation-level picture that does not rise to the director's briefing threshold but that informs the enterprise assessment.
  • 1600–1700End of day review. Update the transition planning tracker — the MSgt's own VA claim status, the USAJOBS application status, the clearance continuity coordination status — because the transition takes care of itself only if it is tracked. Brief the duty officer on anything from the day's work that needs overnight monitoring. Clear the inbox of items that will create a backlog if not addressed before morning.
  • 1700–2100Off-duty time — family, personal development (reading the Commandant's planning guidance, federal LE management literature, current DCSA policy updates), and the weekly family readiness check if the 1stSgt billet is the current assignment. The duty phone is on. The standard does not change because the rank is senior.
  • Enterprise inspection or board cycleThe week before an IG enterprise review or an HQMC board advisory session is not preparation time — it is verification time. The documentation that needs to exist was built over the preceding 12 months: clearance calendar clean, training records current, FitRep Section A drafts completed ahead of deadline, field office metrics validated from the case management system rather than from the GySgt's summary email. The MSgt who is building the binder the week before the inspection is showing the IG team exactly what the enterprise's administrative discipline looks like when it is not being reviewed.
  • Sensitive investigation surge — flag-officer or service-level case in progressThe enterprise schedule adapts to the case, not the other way around. The MSgt who carries the service-level case as agent of record — or who is the primary advisor to the director on the case's investigative integrity — is working 10-to-12-hour days for the duration of the investigation. The administrative calendar continues in the background with reduced tempo. The GySgts are managing the field offices. The director is briefed daily. The documentation log runs in parallel with the investigation itself. This is the event the entire career was preparation for; execute it to the DoD IG standard and the institutional credibility follows.

Weekly Cadence

Monday at the enterprise level is the MCIO director's planning day and the MSgt's intelligence-collection day. The weekly enterprise report from each regional field office lands over the weekend; Monday morning is spent reading the aggregate and identifying the two or three things the director needs to know before the Tuesday policy meeting or the Wednesday board advisory session that the individual reports did not surface. The MSgt who shows up to the Monday stand-up with the aggregate read already done is the advisor the director listens to; the one who reads the reports during the stand-up is the one who is always behind by a half-step. Tuesday through Thursday carries the institutional work cycle. Policy advisory sessions and working group meetings live in the midweek window when the enterprise's decision-makers are most accessible. FitRep Section A drafts for the current quarter's rated GySgts are due to the director by the end of the month; midweek is the writing period. The monthly clearance and training calendar aggregate review runs on the third Wednesday — consistent enough that the regional headquarters staff knows to have the data ready. The individual GySgt mentoring sessions are scheduled for Thursday afternoons when the week's case and administrative work is substantively complete and the conversation can run to the honest length it requires without a meeting cutting it short. Friday is the administrative close and the transition maintenance day. The weekly transition tracking update — VA claim status, USAJOBS application pipeline status, clearance continuity coordination status — takes 20 minutes and prevents the 12-month backlog that produces a retirement date with no plan behind it. The nightly duty handoff is thorough; the MSgt who leaves the enterprise without a clean Friday handoff because the week was long is the MSgt who gets a Saturday phone call about something that could have been resolved Thursday afternoon.

Key Skills — How to Drill Each

  1. 01
    Brief the MCIO director, provost marshal general, or CMC staff on the enterprise-level criminal threat picture — agent readiness, caseload trends, clearance health, GCM outcome metrics — with real data and the kind of candor that protects the institution even when the numbers are uncomfortable.
    The enterprise-level brief at MSgt is not a compilation of field office status reports. It is an analysis product: where are the caseload trends moving, what does the clearance health picture tell the director about investigative capacity over the next 18 months, what do the GCM outcome metrics tell the provost marshal general about agent quality compared to NCIS and AFOSI at the joint-force level. Build the brief from the data the field offices report into the MCIO regional system, validated against the case management aggregate, and presented with a methodology section the DoD IG could review. The MCIO director who is briefed on a problem by his MSgt senior enlisted before the IG finds it is the director who trusts the MSgt's situational awareness on the next problem. The director who learns about the problem from the IG first is the director who asks why the MSgt did not see it.
  2. 02
    Build and manage the MCIO enterprise training and TS/SCI reinvestigation calendar across all CID field offices — no agent carries a lapsed credential into a case while simultaneously managing the throughput constraints of the clearance adjudication pipeline.
    The enterprise training calendar at MSgt is a program management function: identify the aggregate clearance reinvestigation due dates for all agents across all field offices, build the annual training pipeline by specialty (digital forensics currency, SAPR investigator certification, advanced interview technique), coordinate with the DCSA on adjudication throughput constraints that affect the reinvestigation timeline, and build contingency routing for agents whose clearance is in the reinvestigation cycle and whose case access is temporarily limited. The field office GySgts are tracking their own offices; the MSgt is tracking the aggregate and flagging the systemic risk — three field offices with clustered reinvestigation dates in the same quarter, one DCSA adjudication backlog that affects 15% of the enterprise's senior agents. That is an MCIO director brief item, not a field office tracking problem.
  3. 03
    Write and defend FitReps on five to eight GySgts per cycle — relative value attribution the HQMC board can read and defend, Section A narrative with action-result-impact, zero inflation the reporting officials cannot sustain.
    At MSgt, the FitRep narrative must be built on the GySgt's enterprise-visible outputs — the field office IG inspection results, the GCM outcome metrics from the office the GySgt led, the FitRep quality of the SSgts the GySgt rated, and the performance of the junior agents who came up under the GySgt's development. These are observable, documentable outputs. A Section A that cites 'outstanding leadership' without citing the field office's metrics is a Section A that the HQMC board reads as assertion without evidence. Build a running observation file on each rated GySgt throughout the year: document the IG inspection result, document the GCM outcome data from the regional reporting system, document the SSgt FitRep quality metric from the regional director's cycle review. The Section A writes itself from the observation file if the observation file was maintained.
  4. 04
    Lead or oversee the most sensitive criminal investigations at the service or joint level — flag-officer misconduct, systemic financial fraud, complex SAPR cases involving senior personnel — with the investigative independence the institution requires and the documentation standard that survives Congressional or DoD IG scrutiny.
    At MSgt, carrying an investigation as agent of record is rare but the cases warrant it: the commandant's staff misconduct referral, the enterprise-level financial fraud that crosses multiple installations and fiscal years, the SAPR case where the subject is a general officer and the DoD IG is running a parallel review. The documentation for these cases begins at the intake report and runs through every coordination action, every scope decision, every command disclosure event. Build a parallel documentation log that captures every decision in the investigation with the rationale — not just the action, but why the action was taken rather than an alternative. The Congressional notification packet and the DoD IG report that eventually summarize this investigation will quote from this log. If the log does not exist, the investigators writing the IG report will reconstruct it from emails and call records, which will not be as favorable to the investigation's integrity.
  5. 05
    Mentor the next GySgt cohort on the 1stSgt / SgtMaj versus MSgt / MGySgt path — honest reads, not comfortable reads — so the right agents go to the right tracks.
    The annual mentoring session with each rated GySgt at the MSgt level is 60 to 90 minutes, structured, and followed by a written summary the GySgt keeps. The session covers: the GySgt's FitRep profile as the MSgt reads it honestly; the billet profile gaps that exist relative to the MSgt and 1stSgt board requirements; the fork decision and the MSgt's read of which path fits this GySgt based on observed performance rather than the GySgt's preference; and the specific actions — billet request, PME scheduling, FitRep behavioral focus — the GySgt takes over the next 12 months to advance on the identified path. The GySgt who leaves the mentoring session with a comfortable affirmation and no specific actions has not been mentored; she has been managed. Comfortable conversations that avoid the honest read produce GySgts who are blindsided at the MSgt board and who correctly identify the mentoring failure as a contributing cause.
  6. 06
    Advise the commanding general, MCIO director, or CMC on the second-order effects of LE and CID policy decisions — jurisdictional agreements, SAPR reporting framework changes, clearance adjudication policy revisions — in language that translates operational reality into decisions general officers can make.
    The advisory brief at this rank is a policy product, not an operations brief. The MSgt who shows up to a CMC staff policy discussion with a field-level anecdote and a recommendation that the policy should change has done half the work. The MSgt who shows up with the anecdote, the aggregate data that shows the anecdote is representative rather than exceptional, a specific language change to the policy that addresses the problem without creating a new one, and an analysis of how NCIS and AFOSI have handled the same policy gap in their respective frameworks — that MSgt gets the policy revised. Translate the operational reality into the institutional decision the general officer can make, with the supporting material that survives the SJA's legal review and the Inspector General's policy assessment.

Manuals & References — What Chapters Matter

  • DoD Instruction 5505.3 — Defense Criminal Investigative Organizations and DoD Law Enforcement Organizations
    At MSgt and SgtMaj you are advising on revisions to this document, not just applying it. Read the current version against the field reports from your GySgts about where the policy creates friction at the installation level — the gap between the written coordination framework and the actual coordination problems the field offices face is the basis for the revision recommendation you bring to the MCIO director. The joint-force coordination section and the investigative independence provisions are the ones most frequently tested by installation commanders; own both at the depth required to defend the policy in front of a commanding general and a JAG SJA simultaneously.
  • Manual for Courts-Martial (MCM) — Rules for Courts-Martial (RCM) and Military Rules of Evidence (MRE), with annual update review
    You are no longer personally carrying GCM cases at this rank, but you are the enterprise's reference on whether the investigation packages your GySgts are generating meet the MRE standard before they reach the trial counsel. When the regional director asks why a specific field office's GCM referral-to-conviction rate is below the MCIO enterprise average, the answer lives in the case file documentation quality — and the MSgt who can read the MRE against the case file documentation and identify the gap is the MSgt who can fix it through training rather than through personnel action. Pull the annual MCM update when it publishes and brief the GySgts on what changed.
  • MCO 1610.7 — Performance Evaluation System and the current MARADMIN updates governing SNCO board cycles
    At MSgt, you are the reporting senior or the reviewing official on FitReps that move the next GySgt cohort to MSgt and 1stSgt. Read the reviewing official's responsibilities specifically — the relative value comparison across all rated SNCs in the reporting chain, the reviewing official's notation authority, and the reporting senior's accountability for attribution that the reviewing official overrides. The MARADMIN for each board cycle updates the relative value guidance and the review criteria; pull the current MARADMIN before the FitRep cycle deadline and align your Section A language with the current guidance, not last year's.
  • MCO 1400.32 — Marine Corps Promotion Manual (MSgt / 1stSgt / SgtMaj / MGySgt board mechanics)
    Read the SNCO board section cover to cover and pull the current selection rates for 5821 MSgt and SgtMaj from the recent board MARADMINs before advising the GySgts under you. The selection rate data and the board precept are public documents; a MSgt who advises GySgts on the board without checking the current selection rate data is giving advice based on outdated assumptions. The precept language describes what the board is prioritizing in the current cycle — billet diversity, PME completion, rated Marine performance — and the advisory conversation with the GySgt should be aligned to the precept.
  • MCO 1900.16 — Marine Corps Separation and Retirement Manual
    The agents coming to this rank for transition advice are planning federal LE second careers, and the separation and retirement documentation that affects their federal LE hiring eligibility — the DD-214 characterization, the narrative reason for separation, the separation code — is governed by this order. A senior SNCO who does not understand how the DD-214 information feeds the federal hiring adjudication process is giving transition advice that can inadvertently mislead a junior agent into a separation documentation outcome that reduces federal LE hiring competitiveness. Read the relevant sections before any separation counseling conversation at the GySgt level.
  • The Commandant's Planning Guidance and the Commandant's Reading List — current editions
    At MGySgt and SgtMaj, the institutional strategy the Commandant has published is the context inside which every MCIO policy recommendation is evaluated. The Planning Guidance describes the capability investments and force structure priorities the Corps is making; a MCIO policy recommendation that does not account for the force structure implications the Planning Guidance telegraphed will be rejected on grounds that have nothing to do with investigative quality. Read the current edition of both documents at the start of each year, brief the relevant sections to the GySgts in your enterprise, and test your policy recommendations against the strategic direction before taking them to the MCIO director.

Standards — How to Hit Each

  • Sergeants Major Academy (USMC SgtMaj Academy at Marine Corps University, Camp Geiger, NC) resident course completed or slated — required PME gate for SgtMaj candidacy.
    The SgtMaj Academy is not an optional broadening experience for MSgts tracking toward SgtMaj — it is the required PME completion the SgtMaj board evaluates. Schedule the in-residence course in the first 24 months of the MSgt billet through the force SgtMaj's office and the Marine Corps University course coordinator. The seat competition is real at the senior enlisted level; MSgts who wait until year three to schedule find the available seats consumed. The in-residence experience — the peer network of MSgts from across the Corps and from joint service, the senior leadership curriculum, the strategic studies component — is not replicated by distance education at this level. In-residence is the standard.
  • Zero senior-enlisted integrity incidents — financial, investigative misconduct, fraternization, clearance-related disclosure failure.
    There is no remediation path from an integrity incident at MSgt or SgtMaj in a CID MOS. The Corps does not retain investigating agents with integrity findings at any rank; at the senior enlisted level, the institutional knowledge, billet access, and TS clearance tier make the integrity risk to the institution too significant for the standard remediation framework. The preventive discipline is the same as it has always been: financial obligations disclosed and current, foreign contacts reported on schedule, personal relationships within the chain managed to the fraternization standard, and investigative conduct documented and open to review. The MGySgt or SgtMaj who is operating as if the same personal discipline that worked at GySgt is still sufficient is correct. There is no higher-rank exception.
  • MCIO enterprise IG inspection results, clearance health metrics, and GCM case outcome rates in the top tier of the DoD CID community.
    These are the metrics the provost marshal general reports up against NCIS and AFOSI at the DoD-level law enforcement performance review. The MSgt's contribution to these metrics is indirect but real: the training program quality, the FitRep accuracy that puts the right GySgts in the right RAC billets, and the policy advisory work that removes the friction points that drag down case quality all flow through the MSgt's billet. Benchmark the USMC CID metrics against the published NCIS and AFOSI equivalents — not competitively, but calibratively. When the USMC CID GCM outcome rate is above the DoD LE average, the MSgt's briefing to the provost marshal general cites the contributing factors. When it is below, the MSgt's briefing includes the root cause analysis and the corrective action plan.
  • Personal FitRep profile that HQMC can defend — the rated GySgts who get selected for MSgt and 1stSgt are the performance metric.
    The SgtMaj board's read of the MSgt's reporting-senior record is longitudinal: how many of the MSgt's rated GySgts made the board, and did the FitRep relative value attributions predict performance in the subsequent billet? An MSgt whose rated GySgts consistently underperformed relative to the FitRep narrative has an attribution problem that the HQMC board will identify. An MSgt whose rated GySgts perform at or above the FitRep level has built an attribution record that supports SgtMaj candidacy. The way to build the second record is to maintain the observation file, write the honest Section A, and differentiate the rated agents accurately — not generously, not defensively, accurately.
  • Post-service transition plan running 24-36 months out — VA disability claim filed pre-EAS, federal LE credentialing pathway identified, security clearance continuity coordinated.
    The GS-1811 federal criminal investigator series at NCIS, FBI, DEA, DoD IG, CBP, and USSS has specific hiring processes with 6-to-18-month timelines from application to reporting. The VA disability claim that is filed pre-EAS produces an initial rating before separation and avoids the appeal cycle that post-EAS filers experience. The security clearance continuity agreement with the receiving federal agency — the mechanism by which the USMC TS clearance transfers to the federal agency's adjudication system without a gap year — requires a conversation with the receiving agency's security officer at least 12 months before separation. None of this can be started in the last 90 days before retirement. Start at 36 months. Finish it at 12. The agents watching the MSgt or SgtMaj execute the transition are taking notes on whether the process the enterprise recommends to junior agents actually works — because the senior SNCO who demonstrates it does is the most credible transition advisor in the building.

Technical Mistakes — Concrete Consequences

  • Taking a public position against MCIO director or provost marshal general policy in front of field agents or in a forum visible to the enterprise.
    The field agents do not see principled dissent when the senior SNCO publicly challenges the institutional leadership — they see institutional fracture, and they build their own behavior toward the chain on the same model. The commanding officers who hear about the public disagreement from the installation SgtMaj form a read of the MCIO enterprise's internal cohesion that affects every future resource request and support ask the field offices make to those commands. The policy disagreement is legitimate and the institution needs the candid advice; it needs it in the MCIO director's conference room with the door closed, with the MSgt's data and recommendation on paper. Not in the field agent briefing. Not at the regional conference. Not in the email thread that is going to be forwarded.
  • Allowing a GySgt to run a field office with a documented investigative quality problem because she produces clearance numbers and assignment metrics that the MCIO director values.
    The NCIS SAC, the DoD IG, and the trial counsel community will independently document the investigative quality problem and will independently identify that the MCIO enterprise's metrics did not capture it. The SgtMaj who protected the GySgt from accountability absorbs the accountability in the MCIO director's office when the DoD IG's field review of that installation's case files produces the finding the SgtMaj could have addressed 18 months earlier. The enterprise metrics the director values are real and matter; they do not substitute for the case quality assessment the MSgt is uniquely positioned to perform.
  • Letting the approach to retirement feel like a long warm-up — reduced intensity on the job while the transition planning is in progress.
    The junior agent conducting the 0200 interview on a remote installation is still watching what standards the most senior SNCO in the enterprise sets and what the senior SNCO was willing to walk past in the last year before retirement. A senior SNCO who is visibly coasting in the final year communicates to every agent in the enterprise that the standards are aspirational and that sustained performance is for career advancement rather than for the mission. The FitReps the MSgt or SgtMaj writes in the final year of service are still determining whether GySgts make MSgt; those FitReps deserve the same rigor as the ones written in year one. Until the date of separation, the enterprise is the job.
  • Confusing seniority with leverage — building a personal program, a personal following, or a personal information network inside the MCIO enterprise that operates outside the chain.
    The MCIO director who discovers that a senior SNCO has been operating a parallel communication channel with field office agents — routing information, guidance, or career advice outside the established chain — has a command authority problem that is addressed by removing the source. The institutional knowledge and the personal relationships a senior 5821 SNCO accumulates over a career are the reason the advisory role is valuable; those assets are destroyed when they are used to build a personal power structure rather than to strengthen the institutional framework. The senior SNCO who advises through the chain and attributes results to the chain builds institutional capital that outlasts the career. The one who builds a personal following discovers that followers are not portable.
  • Giving transition advice to junior agents based on personal recollection of the federal hiring process rather than current research.
    Federal LE hiring processes change — GS-1811 pay scales, DCSA clearance adjudication timelines, NCIS and FBI application requirements, Veterans' Preference rules — and the MSgt who gives transition advice based on how the process worked when a peer retired five years ago is giving advice that can be materially wrong. The junior agent who follows that advice and finds the process does not work the way the senior SNCO described has a valid grievance. Check the current USAJOBS GS-1811 job postings, the current DCSA clearance timeline publications, and the current VA disability claim processing metrics before any transition counseling session. The 30 minutes of current research is the difference between useful guidance and confident misinformation.

Career Decisions at This Rank

  • SgtMaj / MGySgt fork — command SgtMaj designation versus senior occupational specialist MGySgt track at MCIO enterprise level
    The command SgtMaj designation is competitive, slate-driven, and governed by the force SgtMaj's office working with HQMC manpower. The MCIO director and the provost marshal general submit nominations; the final designation is an HQMC decision. The MSgt who is tracking toward command SgtMaj needs a billet profile that includes both field leadership (RAC-equivalent billets) and enterprise advisory experience, a FitRep profile without a missed board cycle, and a relationship with the force SgtMaj's office that reflects awareness of the nomination timeline. The MGySgt track is different: the senior occupational specialist runs the enterprise's institutional knowledge and policy advisory functions without the formation leadership accountability. Both tracks require Senior Course completion. The honest conversation is whether the MSgt's strongest contribution to the institution comes from leading formations or from shaping policy — and the MSgt who cannot answer that question honestly is the one the force SgtMaj's office will answer for.
  • NCIS civilian SA transition at MSgt versus serving to SgtMaj or MGySgt
    The federal GS-1811 age-entry consideration that applies at GySgt is even more significant at MSgt. Most competitive GS-1811 open-competitive announcements have a maximum age of 37 at appointment, with Veterans' Preference providing offsets under VEOA and USERRA authorities. An MSgt who separates at 20 years of service at roughly 38-40 years old is at or past the standard maximum entry age for most open-competitive GS-1811 announcements and relies on Veterans' Preference hiring authorities for the federal LE transition. Those authorities are strong and federal agencies use them regularly for senior veterans; the pathway is not closed, but it is different. The MSgt who wants to spend 20 more years as a case-carrying federal SA should understand the age-entry math before deciding whether to serve to SgtMaj. The MSgt who wants to spend the remainder of the career shaping the enterprise and then transition to a senior GS-13/14/15 LE management role has a different calculus.
  • Transition execution — VA disability claim, GS-1811 application timeline, security clearance continuity
    The transition from MSgt or SgtMaj is a three-track parallel process that cannot be run sequentially. Track one: the VA disability claim filed pre-EAS through the Benefits Delivery at Discharge program, with all documentation assembled 12-18 months before separation. Track two: the federal LE GS-1811 application on USAJOBS, with agency-specific assessments completed and references prepared, starting 18-24 months before EAS. Track three: the security clearance continuity coordination with the receiving federal agency, where the USMC TS clearance is transferred to the agency's adjudication system to avoid a gap that would require a new full investigation. Running all three tracks in parallel requires a project management discipline the investigation work prepared the MSgt for. The senior SNCO who demonstrates a clean transition — applying the same documentation discipline to the transition process that they applied to the cases — is the most credible transition advisor in the enterprise.
  • Private sector security versus federal LE post-service — corporate security director versus GS-1811 special agent
    The post-service split for senior 5821 Marines runs between federal law enforcement (GS-1811 in the criminal investigator series) and private sector corporate security and investigations leadership. The federal LE path provides a continuation of the mission, the clearance, the investigative authority, and the institutional identity at a GS-13 to GS-15 level. The corporate security path often provides a higher immediate salary — Director of Investigations or VP of Security at a Fortune 500 firm draws a significantly higher salary than a GS-15 step 10 — and a less demanding operational schedule. The honest calculus: the MSgt who took the job for the cases and the mission, who finds the investigation work intrinsically meaningful, who values the federal law enforcement credential and the clearance continuation — federal LE. The MSgt who is motivated by contribution but for whom the investigative pace has run its course and who has a family whose quality of life would benefit from the corporate flexibility — corporate. Neither answer is wrong, and both paths are genuinely available to a senior 5821 with the right profile. Talk to agents who took each path five years out. They will tell you things the brochure does not.
  • Teaching and schoolhouse — FLETC instructor, Marine Corps University faculty, or MCIO training program cadre versus operational enterprise role
    The schoolhouse billets at FLETC (Criminal Investigator Training Program), the SNCO Academy at Marine Corps University, or the MCIO internal training cadre are available at the MSgt/MGySgt level and are populated by senior 5821 Marines with investigative depth and the teaching temperament to transmit it. The schoolhouse billet is not the easy path — teaching investigative tradecraft to probationary agents is demanding and requires a different skill set than running an investigation. But the compound effect of a senior agent who can teach — whose students carry the better documentation discipline, the Article 31b precision, and the evidence chain standard into their cases for the next 20 years — exceeds the investigative output of one more case-carrying agent. If teaching is genuinely interesting and the schoolhouse billet is available, take it. If it is not interesting and the billet is a career management compromise, the students will know within the first week.

How the Seat Varies by Unit Type

  • MCIO regional headquarters — senior enlisted advisor to the MCIO regional director
    The MSgt at MCIO regional headquarters is the regional director's enterprise-level view of what the field offices are actually experiencing — the operational reality that the formal reports capture incompletely. The regional headquarters MSgt coordinates the regional training and clearance calendar, facilitates the field office IG inspection preparation, manages the GySgt mentoring program across the region, and serves as the first advisory voice when a field office situation exceeds the GySgt's authority but does not yet rise to the regional director. The regional headquarters MSgt who maintains active monthly contact with each field office GySgt — calling, visiting, asking the questions the GySgts will not put in the formal report — builds the situational awareness that makes the director's quarterly enterprise brief accurate.
  • HQMC provost marshal staff — law enforcement staff senior NCO
    The HQMC provost marshal staff billet is the policy center of the USMC LE enterprise. The MSgt at the provost marshal staff works on the policy products that govern every CID field office in the Corps — MCIO investigative framework revisions, SAPR investigative protocol updates, clearance adjudication coordination with DCSA, and the LE performance metrics the commandant reports upward to the SECDEF and the DoD IG. The work is desk-heavy and Washington D.C.-adjacent, which means the pace, the stakeholder complexity, and the institutional politics are all different from field office reality. The MSgt who has lived in the field offices and who can translate operational reality into policy language that survives the SJA's legal review and the G1's resource analysis is the MSgt the provost marshal staff actually needs — not a skilled writer who has never carried a case.
  • 1stSgt — MP battalion or company with CID section oversight
    The 1stSgt billet in an MP battalion is the most formation-intensive role a senior 5821 will hold. The unit is primarily 5811 MPs — not CID agents — and the 1stSgt's primary accountability is for the 80 to 200+ Marines in the formation, their training, their welfare, their discipline, and their readiness for the commanding officer. The 5821 background is an advantage in understanding the CID element and speaking the investigative community's language, but the 1stSgt who runs the formation through the CID agents rather than through the 5811 MP NCOs has confused MOS expertise with formation leadership authority. The job is the formation. The MOS experience is the context.
  • SgtMaj — MCIO director's senior enlisted advisor or command SgtMaj of an MP regiment
    The SgtMaj billet at the director level is the enterprise's senior enlisted voice in every policy, personnel, and program decision the MCIO director makes. The SgtMaj does not run investigations, does not manage FitRep cycles below the MSgt level, and does not fill the field office supervisory role — the SgtMaj shapes the standard that everyone below the SgtMaj applies when they do those things. The command SgtMaj at an MP regiment is the senior enlisted of a formation that includes both 5811 MPs and 5821 CID agents, manages the enlisted corps across multiple battalion 1stSgts, and advises the regimental commander on the enlisted climate, discipline, and development of the entire regiment. Both roles require the SgtMaj to be credible to constituencies that did not come up through the same MOS; the 5821 SgtMaj who can speak the 5811 MP language fluently — who understands the patrol function, the installation security architecture, and the MP NCO culture — is the SgtMaj who leads the regiment rather than just the CID section.
  • FLETC or MCIO schoolhouse — training cadre or instructor billet
    The FLETC Criminal Investigator Training Program cadre includes USMC CID senior agents in the federal law enforcement instructor pool at Glynco, Georgia. The MCIO internal training program has its own cadre of senior agents who deliver advanced investigative training to the current agent workforce. Both instructor billets require the full investigative credential — CITP graduate, current clearance, current LE qualification — plus the teaching qualification the schoolhouse requires. The institutional leverage of a schoolhouse billet at the MSgt level is significant: the investigative standards the senior instructor embeds in the probationary agent cohort at FLETC, or in the advanced training program for the current GySgt cohort, compound across every case those agents carry for the next 20 years.

What Good Looks Like at This Rank

The good 5821 MSgt is the senior Marine every CID agent in the enterprise knows by reputation — not because the MSgt has been at every installation, but because the FitRep comments the MSgt wrote on the GySgts those agents work for are accurate and because the policy revisions the MSgt recommended to the MCIO director reduced the friction that had been slowing investigations across the enterprise for three years. The agents do not know the MSgt's name from a formation — they know it from the result of a clearance adjudication that processed faster because the MSgt fixed the pipeline coordination problem, or from a SAPR investigation protocol that was updated to reflect the complexity of cases that the old protocol was not designed for. The MGySgt who serves on the MCIO policy advisory team is the senior SNCO the MCIO director calls when the DoD IG's enterprise review produces a finding that the institutional response needs to address before the Congressional notification. The director calls because the MGySgt knows where the finding came from — which field offices, which systemic gap in training or policy, which GySgt assignment decision created the conditions for the failure — and because the recommendation the MGySgt brings to the director's conference room will be specific, actionable, and grounded in the actual case file evidence rather than in institutional defensiveness. The director who walks into the Congressional staff briefing with the MGySgt's analysis behind the institutional response walks in with something the staff can evaluate rather than something they can only accept or reject. The 1stSgt or SgtMaj who came up through 5821 and leads an MP battalion formation brings something to that billet that a 5811 lifer does not: the direct understanding of what the CID agents in the company are actually doing, why the chain-of-custody standard is not bureaucratic pedantry, and why the NCIS working relationship is a long-term institutional asset that the PMO officer may not fully value. The 5821 SgtMaj who teaches a young MP why the evidence vault standard matters before the junior Marine ever assists on an evidence collection is the SgtMaj whose formation understands the LE mission at a level of professional depth most MP formations do not reach until the first GCM package falls apart at the Article 32. That depth is the investigative career converted into institutional contribution — which is exactly what the career was built to produce.

Preview — The Next Rank

There is no next level — there is the transition. For the MGySgt, SgtMaj, or the senior 5821 in the final billet before retirement, the preview is not of a higher rank but of the career that the investigative service was preparing for. The federal GS-1811 special agent who arrives at NCIS, FBI, DEA, or the DoD IG with a USMC CID credential, a current TS clearance, a GCM conviction record in the field office files, and a management profile that shows enterprise-level advisory work at the MSgt or SgtMaj level starts at a grade and responsibility level that most federal LE hires without military criminal investigation experience do not reach for a decade. The post-service federal LE career is not a soft landing — it is a second career with its own demanding standards, its own promotion competition, and its own investigative complexity. The senior NCIS SSA running a counterintelligence case in the Pacific or the FBI SSA managing a financial fraud task force in the Mid-Atlantic region is doing work that looks different from the USMC CID billet but draws on exactly the same investigative discipline, the same documentation standard, and the same command advisory capability the Marine career built. The transition is not a retirement from investigative work; it is a continuation of it in a different institutional framework. The agents who have retired from senior 5821 billets and are five years into the federal career are the most useful advisors for the MSgt who is 30 months from EAS. Talk to them — not to recruiters, not to transition briefers, not to the transition assistance program counselor who has never carried a federal criminal investigation. Talk to the retired SgtMaj who is three years into an NCIS supervisory billet and ask what the first year actually looked like. That conversation is worth more than every transition seminar the Marine Corps offers combined.
FAQ

5821 E8-E9 — Frequently Asked Questions

Q01What does a E8-E9 5821 (Criminal Investigator) actually do?
As MSgt you are the senior occupational specialist in the MCIO enterprise — MCIO regional director's enlisted advisor, HQMC law enforcement staff senior NCO, or the senior CID billet at the division or MEF level.
Q02What's the most important thing to know as a E8-E9 5821?
The two forks at this rank are genuinely different careers and the Corps will not let you run both simultaneously.
Q03What does a typical day look like for a E8-E9 5821?
Time-blocked day at the E8-E9 5821 rank tier: 0500 Wake. Check the secure voicemail and the MCIO regional overnight report. At the MSgt level, the overnight report is an enterprise view — not one installation, all installations. A significant incident at any field office in the region that is above the GySgt's reporting threshold goes to the regional director and to the MSgt before the director's morning brief. Flag items that require the director's attention before the 0800 stand-up; route items within MSgt advisory authority directly, 0530–0645 Personal PT — self-managed, non-negotiable.…
Q04What mistakes get E8-E9 5821 soldiers fired or relieved?
An integrity incident at MSgt or SgtMaj — financial disclosure failure, investigative misconduct, fraternization, clearance-related falsification, or a failure to report a subordinate's integrity violation — permanently forecloses the federal LE post-service career. The NCIS Office of Professional Responsibility and every GS-1811 hiring agency pull the OPF; a separation code tied to investigative misconduct is a disqualifying flag in the federal hiring adjudication process,…
Q05What career decisions matter most at the E8-E9 5821 rank tier?
SgtMaj / MGySgt fork — command SgtMaj designation versus senior occupational specialist MGySgt track at MCIO enterprise level — The command SgtMaj designation is competitive, slate-driven, and governed by the force SgtMaj's office working with HQMC manpower. The MCIO director and the provost marshal general submit nominations; the final designation is an HQMC decision. The MSgt who is tracking toward command SgtMaj needs a billet profile that includes both field leadership (RAC-equivalent billets) and enterprise advisory experience, a FitRep profile without a missed board cycle,…
Q06What's next after E8-E9 for a 5821 (Criminal Investigator) in the Marines?
There is no next level — there is the transition.
Q07What manuals and regulations does a E8-E9 5821 need to know cold?
DODI 5505.3 — Defense Criminal Investigative Organizations (you shaped the USMC-specific implementation; now you brief the MCIO director on where the policy creates problems and recommend changes to the Joint Chiefs staff).; MCO 1610.7 — Performance Evaluation System (you are the reporting senior or senior reporting official on FitReps that decide the next GySgt-to-MSgt slate).; MCO 1400.32 — Marine Corps Promotion Manual (MSgt / 1stSgt / SgtMaj / MGySgt board mechanics;…

This playbook has no tips yet. Be the first to share what you know.

Published by the Honest MOS Editorial DeskVerified against DoD/.gov sourcesUpdated May 2026Editorial standards