Skip to main content
HonestMOS
●InvestigationsCongress made VA disability claims free to file. An entire industry charges veterans anyway — and nobody can stop them.→
←Back to IT Information Systems Technician — overview, pay, training, civilian translation, reviews
ITE4

Information Systems Technician

E-4 (Specialist/Corporal) · Navy

E1–E3E-4E-5E-6E-7E8–E9
HEADS UP

IT3 (E-4) is where the rating's NEC stack and the post-service cleared-IT market start materially driving career decisions. You're now a senior junior enlisted on a network ops watch, a SATCOM operator, a cyber operator on a Fleet Cyber unit, or an NEC-coded specialist in a sub-rating role. The NWAE cycle for IT2 (E-5) is the next gate. Navy COOL funds the CCNP / CISSP-progression and the senior cyber credentials; the AC/RC and IA (Individual Augmentee) deployment options also open at this rank.

The Honest MOS Read
Information Systems Technician Third Class (IT3, E-4) is where the rating's specialization track and the post-service cleared-IT pipeline start materially driving career decisions. As an IT3 you're typically a senior junior enlisted on a ship's IT department watch (network ops, SATCOM, COMSEC), a senior SATCOM operator at a shore communications station, a cyber operator on a Fleet Cyber Command unit, an NEC-coded specialist (cryptologic communications, special communications platforms, network specialty NECs) at the appropriate command, or a junior IT support specialist at a shore installation. The promotion math under the Navy Enlisted Advancement System (NEAS) under MILPERSMAN: the Navy-Wide Advancement Examination (NWAE) cycle for IT3 → IT2 (E-5) runs twice yearly under NAVADMIN. FMS (Final Multiple Score) combines exam score, evaluations (the Navy's enlisted evaluation system), time-in-rate, awards, and education. The IT rating's NEAS cutoff is published per NAVADMIN after each cycle and moves with rating manning needs. The IT rating has historically been one of the larger Navy enlisted ratings — manning swings drive the cutoff materially. The job content at IT3 in a ship's IT department: senior junior enlisted on the network ops watch, running daily network operations, troubleshooting connectivity issues, supporting the ship's combat systems network (CSNI — the classified combat systems network — and the NIPR / SIPR networks), maintaining the SATCOM links during underway operations, contributing to the ship's IT readiness reporting, and being the senior junior enlisted operator on the watch under the LPO (Leading Petty Officer — typically an IT1 or IT2). On a shore station or Fleet Cyber unit, the role is similar — senior junior enlisted operator on the daily watch, training the IT3s and junior ITs, owning the equipment accountability for the watch's gear, and supporting the LPO on watch management. The NEC sub-specialty pipeline at IT3 is where the career arc shape gets locked in. NEC codes for the IT rating that open at the IT3 / IT2 tier (per the NEC catalog at MyNavy HR / NPC): network specialty NECs (advanced network operations, network defense, network administration), SATCOM specialty NECs (advanced satellite communications, specialty SATCOM platforms), cryptologic communications NECs (the integration with the Cryptologic Technician — CT — rating community for SIGINT and cyber operations support), special communications NECs (specialty platforms, deployable communications packages), and the various cleared cyber operational NECs. The NEC you stack at IT3 shapes the rest of the career. The Navy COOL credential opportunity at IT3 extends beyond the junior-enlisted basics to the senior IT and cyber credentials. Cisco CCNA (foundational, often already complete by IT3), Cisco CCNP — Routing and Switching / Enterprise / Security (the senior Cisco credentials, materially career-shaping for network operators), CompTIA Sec+ (DoD 8140 baseline — already complete for cleared positions), CompTIA CySA+, CompTIA PenTest+, the GIAC cert stack (GCIH — Certified Incident Handler, GCFA — Certified Forensic Analyst, GCFE — Certified Forensic Examiner, GREM — Reverse Engineering Malware, GPEN — Penetration Tester), CISSP — Certified Information Systems Security Professional (the senior cyber leadership credential, often the IAM Level 2/3 cert under DoD 8140), the various vendor certifications (Microsoft, AWS, Azure, Splunk, CrowdStrike, the various SIEM and SOAR platforms). Navy COOL funds these per the named credential catalog (verify current at navycool.navy.mil). The AC/RC (Active Component / Reserve Component) and IA (Individual Augmentee) deployment options open at IT3. AC/RC opportunities for IT3s to support Reserve units in trainer / advisor roles; IA deployments to forward CENTCOM / EUCOM / INDOPACOM locations supporting joint task forces and ad-hoc operational needs. IA deployments are competitive for cleared cyber operators and the credential is career-shaping for the senior NEC chief board. The deployment / operational tempo at IT3 continues. Surface fleet ITs deploy on the ship's cycle; submarine ITs on the submarine's cycle; shore-based ITs see standard Navy deployment vulnerability with possible IA. The senior-junior-enlisted operator role on a deployment is materially different from the junior-enlisted operator role — you're now training the IT3s coming up behind you and contributing to the IT department's underway operations at a senior-watch-stander level. The reenlistment math at first-term EAS: IT SRB tier and bonus amounts are published in current NAVADMIN messages and vary year over year with retention need. The IT rating has historically had access to meaningful SRB amounts due to retention math against the civilian cleared-IT market — verify the current NAVADMIN SRB message before signing. The conversation with the career assistance officer at this rank should be structured around the SRB amount, the obligation length, the NEC pipeline timing, and the post-service market timing. The post-service market for cleared IT3s with the right NEC stack and Navy COOL credentials: defense contracting (Booz Allen, Leidos, ManTech, SAIC, Northrop Grumman, Lockheed Martin, Raytheon, the long tail of cleared cyber and network contractors — these firms have explicit veteran hiring programs for cleared IT veterans), federal civil service (CYBERCOM civilian positions at GS-11 to GS-13 entry, NSA civilian positions, CISA, DHS cyber, federal IT positions), and the private-sector cleared market (financial services cleared cyber, big tech cleared infrastructure, telecommunications cleared positions). Cleared cyber and network positions for veterans with the right cert stack, NEC, and TS/SCI clearance range from $110K-$170K+ depending on metro, role, and polygraph status.
Career Arc
  • 01IT3 (E-4) pin-on via NEAS / NWAE cycle.
  • 02Senior junior enlisted role: network ops watch senior, SATCOM operator, cyber operator, NEC-coded specialist.
  • 03NEC sub-specialty pipeline: network specialty NECs, SATCOM specialty, cryptologic communications, cleared cyber NECs.
  • 04Navy COOL credential stack: Cisco CCNP, CompTIA CySA+ / PenTest+, GIAC certs (GCIH/GCFA/GREM/GPEN), CISSP, vendor certs.
  • 05AC/RC trainer / advisor opportunities and IA (Individual Augmentee) deployment windows.
  • 06NWAE cycle for IT2 (E-5) — twice yearly, FMS-based, NAVADMIN-published cutoff.
  • 07First reenlistment window with SRB consideration per current NAVADMIN.
Common Screwups
  • ×Letting Navy COOL slip past IT3. CCNP, CySA+, PenTest+, GIAC certs, CISSP — funded credentials that the cleared-IT market reads directly. Leaving them on the table costs measurable post-service salary.
  • ×NEC pipeline drift. The IT rating's career arc is shaped by NEC sub-specialty; IT3s who coast through general duty without pursuing NEC-coded billets miss the career-shaping windows that drive senior-NEC chief board read.
  • ×DUI / drug pop / clearance issues — separation under MILPERSMAN ch.1910, clearance revocation, post-service cleared-IT market foreclosed for years (clearance reinstatement timelines are multi-year).
  • ×COMSEC mishandling. Junior NCO COMSEC handling errors propagate through investigation and can result in clearance revocation and administrative separation; the IT rating's COMSEC discipline is non-negotiable.
  • ×EVAL season drift. The Navy enlisted evaluation system weights heavily in FMS for advancement; sloppy EVAL narratives compound across cycles and there's no recovery within a board cycle.

A Day in the Life

  • 0500-0600Wake up. Phone check — overnight watch chat, watchbill changes, any open IR ticket the IT2 LPO needs you to know before quarters. Drive or walk to the IT spaces or the help-desk floor; PT gear on or stow it depending on the section's schedule.
  • 0600-0700Command PT or section PT. The IT3 runs the section PT cycle the LCPO published. Lead the boots through the warm-up if the LPO assigned you the role; set the pace; the ITSNs under you read the difference between an IT3 who leads PT and an IT3 who just shows up to it.
  • 0700-0800Chow, change into utilities or working dungarees. Pre-quarters: read the watch turnover log, walk through overnight tickets, check controlled-cryptographic-equipment custody if your billet touches it, review the day's IT-21 / ONE-Net status feeds and any open IR escalations before the LPO puts out plan-of-the-day.
  • 0800-0830Quarters. LCPO puts out plan-of-the-day; the cyber officer or department head briefs anything driving the day; the LPO assigns billet rotations. As IT3 you may be tasked to brief the section on the day's maintenance window, the upcoming STIG cycle, or the open IR ticket. Brief tight: 60-90 seconds, no notes, names and timelines.
  • 0830-1130Watch-supervisor billet — help-desk shift lead, network operations watch, SATCOM watch, submarine comm watch (for L09A pipeline ITs aboard the boat), shore comm production floor. Spot-check the ITSN screeners' tickets; sign off on dispositions; call escalations to the IT2 LPO when the picture warrants. The ITSNs under you operate under your supervision; the chain runs.
  • 1130-1230Chow. You eat with the other IT3s and the senior ITSNs — not with the IT2 LPO, who eats with the senior petty officers. Quick check of the watch chat, section tickler, controlled-cryptographic-equipment log if your billet touches it, afternoon watchbill changes.
  • 1230-1500Afternoon block. Section training (IA brief, STIG cycle drill, IR playbook walk-through, CCE handling for billets that touch it, NEC familiarization brief if the section is staging an NEC packet decision), NEC packet review with the ITSNs you mentor, eEVAL input drafting for the section's ITSNs, change-management ticket review and approval at the IT3 delegated scope, OPORD comm / IT input if the unit is in workup, NWAE study block at well-run divisions. The IT2 LPO may pull you for 30 minutes to walk through a section issue or an NEC candidate's packet.
  • 1500-1600CCNA / CySA+ / cert study block. The IT3 who lets the day eat the NWAE study block has already lost the next cycle. The LCPO who sees you with the BIB or the CCNA study guide open during slow time defends your study time on the watch rotation. Navy COOL funds the voucher; you have to deliver the study log.
  • 1600-1630End-of-watch turnover. The IT3 owns the watch-supervisor turnover — billet assignments confirmed for the on-coming watch, controlled-cryptographic-equipment count countersigned, tickets handed off cleanly, IR escalations briefed to the on-coming watch, anything pending escalated to the IT2 LPO if it should not wait until morning. The LCPO walks the deck before release; the LPO walks the deck after.
  • 1630-1800Released. Most days. Field problems, GQ drill weeks, deployment workups, sub patrol underway (for L09A pipeline ITs), MEU embark for green-side detached ITs, and standing duty change this hour by hours or days. PRT prep, gym, NWAE study, cert study, family time.
  • 1800-2100Personal time. Married IT3 (more common at this paygrade than at ITSN) — family time, kids' homework, the spouse's questions about the next PCS window, the school slot conversation if there is one. Single IT3 off-base on BAH or in the barracks (less common at IT3) — gym, study, NEC packet build at the kitchen table, NWAE study with the IT3 cohort.
  • 2100-2200Section tickler maintenance — section training tracker, NEC packet pipeline status, eEVAL drafts on the ITSNs under your mentoring, NWAE study log. The IT2 LPO who texts at 2130 with a section question expects a clean answer from the IT3 watch-supervisor.
  • 2200Lights out. Tomorrow at 0500. Afloat IT3s on the standing watch rotation may be on a different sleep cycle; submarine IT3s on patrol live the boat's day-night cycle on the watch rotation.
  • Standing watch (afloat IT-21 / ONE-Net watch rotation, sub patrol underway, deployment cycle, NCTAMS / NCTS production floor)Sit the watch as the watch-supervisor under the IT2 or IT1 LPO. Monitor network health, escalate any service degradation or compromise indicator to the LPO inside the published window, log every action in the watch log, hand off cleanly to the on-coming watch. The IT3 watch-supervisor is the chain's first technical-leadership tier — your spot-checks are what catches the ITSN's missed STIG remediation, the unattended account anomaly, the controlled-cryptographic-equipment custody gap.
  • IA / RMF inspection cycle (CCRI / CORA / equivalent) — every 12-18 months at most platformsThe IT3 is the operator on the floor when the inspector walks in. Have the diagrams printed, the IP plans posted, the STIG / ACAS compliance reports current, the CCE custody log countersigned, the change-management tickets traceable. The LCPO defends the section that briefs without caveats; the inspector reads the section that has not closed its findings. Inspection cycles collapse the watch rotation for the week — extra hours, more LPO oversight, no slipping on the documentation discipline that should already be in place.

Weekly Cadence

The Mon-Fri rhythm at IT3 runs on the LPO's training plan, the LCPO's plan-of-the-week, and the department head sync the LCPO came out of Friday with the next week's priorities. Monday is heaviest planning — the LPO publishes the watchbill, the section's training calendar, the maintenance window schedule, the CCRI / CORA / IA inspection prep milestone, the eEVAL cycle if the period is closing. As IT3 your Monday is reading the watchbill, confirming watch-supervisor billet assignments for the ITSNs under you, walking the section tickler, and briefing the section on the day's plan if the LPO assigned you the brief. Tuesday through Thursday are the working core. The watch runs at the platform's volume — afloat IT-21 / ONE-Net spaces, shore production floor, submarine comm watch on patrol. Section training falls on the days the LCPO and cyber officer blocked — IA briefs, STIG cycle walk-through, IR playbook drill, CCE handling for billets that touch it. As IT3 watch-supervisor you may run a section-level lane on Tuesday and the IT2 LPO observes; you may sit the department-head sync at 1330 on Wednesdays as the IT3 representative if the LPO is detached on a billet conflict. Thursday is often the heaviest training / inspection day at the department level — the LCPO walks the deck and the IT3 whose billet gets walked first sets the tone for the section. Friday is plan-of-the-week-out for the next week. The LCPO publishes the watchbill; the department head sync at 1500 confirms the next week's training and inspection calendar; the LPOs across the department align at section LPO sync; the LCPO walks the deck for the weekly readiness brief. The IT3 watch-supervisor brings the watch-quality report (ticket SLAs, IR ticket count, STIG / ACAS compliance percentage, any open escalations), the eEVAL inputs on the ITSNs under you, the NEC packet status for any ITSN in the pipeline, and any section issues that should not wait the weekend. Field rotations (CSG / ESG workup-deployment-leave cycle on amphibs and carriers, submarine patrol cycle for L09A IT3s, NCTAMS / NCTS exercise cycle, IA / RMF inspection prep windows, IA opportunities to forward CENTCOM / EUCOM / INDOPACOM joint task forces) collapse the Mon-Fri rhythm — the section is operating to the field calendar, the LCPO sync moves to whenever the cyber officer can land it, and the garrison-time tasks (NWAE study, cert exam prep, NEC packet mentoring) get crammed into the off-day windows or the post-rotation block.

Key Skills — How to Drill Each

  1. 01
    Run a watch shift in the IT-21 / ONE-Net spaces or the NCTS / NCTAMS production floor as the petty officer on watch — incident triage, escalation to CIRT / Fleet Cyber, clean handoff without the LPO rewriting your turnover.
    The IT3 watch-stander runs the network operations or help-desk floor under the IT2 or IT1 LPO. Triage every incident through the platform's IR playbook (mapped to NIST SP 800-61); escalate any compromise indicator (phishing, unexplained account anomaly, STIG drift, unauthorized device) to CIRT / Fleet Cyber inside the published reporting window; log every action in the watch log; hand off cleanly to the on-coming watch with a written turnover the LPO does not have to rewrite. The LPO who has to rewrite an IT3's turnover twice tells the LCPO; the LCPO tells you once. Build the discipline by running 30-45 days of watches with the IT2 LPO spot-checking your log entries before you sit the watch under your own authority.
  2. 02
    Manage Active Directory user, group, and OU operations inside your delegated scope — no shared admin accounts, no sloppy group nesting, every change logged.
    AD operations at the IT3 tier are the daily account-and-permission workload — creates, disables on PCS / EAS, group membership changes for the wardroom rotations, OU restructures when the command reorganizes. Operate inside the delegated administrative scope the LPO assigned; never use shared admin accounts (every domain-controller action is logged and shared-account actions are unattributable — JAG cannot defend them); document every change in the change-management ticket queue the platform runs (ServiceNow / Remedy / the platform-specific equivalent). The CIRT review on any AD compromise traces back through the audit log; the IT3 whose name does not show up in the audit log because he hid behind a shared account is the IT3 whose career does not survive the JAG question.
  3. 03
    Run a SCCM / WSUS / Tanium patch deployment cycle on the published maintenance window with reporting back to the LCPO the inspector can read.
    Patching at the IT3 tier is the published maintenance-window discipline — never patch outside the window (you will brick the ship in the middle of a brief or take the shore command off the network in the worst possible hour), always test on the platform's pilot ring before pushing to production, always report compliance back to the LCPO in the format the inspector reads at the next CCRI / CORA cycle. SCCM / Tanium / WSUS reports give you the percentage; the LPO and LCPO want the percentage plus the named exceptions (the boxes that did not patch, the reason, the closure plan). The IT3 who reports 'patching done' without the named exceptions is the IT3 the LCPO discounts; the IT3 who reports '98% compliance, three exceptions named with closure plans' is the IT3 the LCPO defends.
  4. 04
    Stand up a tactical / shipboard network segment — VLAN, DHCP, internal DNS, switch port config — with a printed diagram and IP plan for the relief.
    Shipboard network segments are the IT3's deployable engineering work — a new wardroom workspace VLAN, a temporary embarked-staff segment for an admiral's embarked staff during a deployment, a tactical training segment for an exercise. Build the segment on the platform's standard pattern (VLAN ID, subnet, DHCP scope, internal DNS entries, switch port assignments, ACL rules); document it in the platform's diagram tool (Visio, the platform-specific equivalent); print the diagram and the IP plan and post it in the IT space. The IT3 who goes on leave or PCS without a printed diagram for his segments is the IT3 whose stack falls apart on the relief and the LPO has to rebuild from packet captures. The discipline at IT3 is documentation that survives turnover.
  5. 05
    Operate the platform comm stack at the watch-supervisor level — IT-21 / ONE-Net afloat, NCTAMS / NCTS infrastructure shore, the submarine's comm suite if you came through Groton — and troubleshoot a downed circuit inside the watch.
    The IT3 on the comm watch is responsible for circuit availability inside the watch cycle. When a circuit drops, troubleshoot the chain — patch panel, switch, router, satellite uplink, the remote end — log the troubleshooting steps, escalate to the IT2 LPO if the resolution time exceeds the watch SLA, document the root cause in the after-action. Submarine ITs run a different comm stack (the boat's HF / SATCOM burst comms suite, the floating wire / mast considerations) on a different operational tempo; the discipline is identical — log every action, escalate cleanly, document the root cause. The IT3 who can troubleshoot a downed circuit cold and document the resolution is the IT3 the LCPO names for the next NEC slate.
  6. 06
    Walk a senior officer through a phishing remediation without making him feel stupid — and document the CIRT ticket cleanly enough that Fleet Cyber Command does not call back.
    The phishing event is the IT3's customer-facing technical-leadership test. The senior officer who clicked the link is embarrassed; he does not need you to make him more embarrassed. Walk him through the remediation steps (password change, MFA reset, account audit, any second-factor token replacement); document the user's exact words on what he did and when; run the platform's incident-response playbook to its closure step; report up to CIRT / Fleet Cyber inside the published window. The CIRT report that comes back from Fleet Cyber with no follow-up is the IT3's quiet validation; the report that comes back with a request for clarification is the IT3 who has to write a clarification under the LCPO's eye. Build the documentation discipline now — the IT2 board reads the IR ticket-writing quality directly.

Manuals & References — What Chapters Matter

  • SECNAVINST 5239 series — DON Cybersecurity / IA Program.
    The umbrella you are now expected to quote inside your billet — not chapter and verse, but section and intent. The IA officer at the wardroom level quotes it back at you on every spot check; the LPO checks your understanding at section sync. Pull the current version from the Navy Doctrine Library; never quote from the version on the platform's share that has been there since the last PCS.
  • OPNAVINST 5239 series — Navy Cybersecurity Program.
    The Navy-specific implementation. At IT3 you are inside the operator sections — the watch-stander responsibilities, the incident reporting cadence, the IA work-role compliance. Read the sections that govern your billet (afloat IT operator, NCTS shore operator, submarine comm watch, Fleet Cyber Command billet) and own the relevant sections cold.
  • DoDM 8140.03 — Cyberspace Workforce Qualification (with DoDD 8140 as the policy parent).
    The chart the LCPO checks against your cert sheet at every watch turnover. At IT3 you are sitting an IAT-II work role (Sec+ minimum); the IT2 NWAE-eligible billets often want IAT-II with CCNA or IAT-III trending. Read your work-role definition and the cert path forward — the IT3 who knows the work-role chart is the IT3 who picks his next cert deliberately.
  • DISA STIGs (Security Technical Implementation Guides) — public.cyber.mil — for the platforms you administer.
    At IT3 you are administering — not just running STIG scans on boxes the LPO blessed. Windows 10/11, Server, Active Directory, Cisco IOS-XE, Microsoft 365 / SharePoint, the application-specific STIGs your platform runs. Pull the current STIG for the asset you administer the same week the cycle drops; remediate the open items inside the published timeline; report compliance to the LCPO in the format the CCRI / CORA inspector reads.
  • NIST SP 800-53 — Security and Privacy Controls; NIST SP 800-181 — NICE Framework.
    800-53 is the controls catalog under every Navy cyber accreditation; 800-181 is the NICE Framework that maps cyber work roles to skills and competencies (the parent under DoDM 8140's Navy implementation). At IT3 you are not writing the package, but you are working inside the controls — and the IT2 NWAE bibliography quotes both directly.
  • NAVPERS 18068 Vol II + the current NEC source-rating NAVADMIN — read the entries for IT-8404 submarine, the network-administration NEC family (verify current codes — IT-2735 / IT-2779 / IT-3389 family has shifted), the cryptologic communications NECs.
    You are no longer browsing the NEC catalog — you are picking the packet that shapes the next 8-12 years of the career. Pull NAVPERS 18068 Vol II Volume II and the current NEC source-rating NAVADMIN before any packet decision; talk to senior ITs in each pipeline; sit with the career counselor with the source documents open. The IT3 who picks the NEC from a buddy's brochure-summary version is the IT3 the LCPO has to mentor out of the wrong path at IT2.

Standards — How to Hit Each

  • IAT Level II compliance maintained at all times (Sec+ continuing education or CCNA-Security equivalent).
    Sec+ continuing education credits accrue across the cycle; the LCPO tracks expiration on the section tickler. If your Sec+ is approaching expiration, schedule the CEU work or the CCNA-Security follow-on before the cert lapses — IAT-II non-compliance pulls you from the watch billet immediately. Navy COOL funds the renewal voucher and the CCNA-Security exam; do not let the cert lapse because the cycle slipped past you.
  • CCNA before the IT2 NWAE if you are network-side; AZ-900 / AZ-104 if your platform runs Microsoft cloud workloads.
    Cisco CCNA is the network-administration NEC pathway's structural credential and the IT2 board's preferred cert at IT3. Pull the current CCNA exam objectives from cisco.com; build a 90-day study plan around the official study guide (Wendell Odom's CCNA cert guide is the standard self-study reference) and the platform's lab access (GNS3 / EVE-NG / the physical lab at NCTAMS / NCTS / Fleet Cyber if you have access); sit the exam before the next IT2 cycle. Navy COOL funds the voucher. Azure / AWS associate certs follow the same pattern for platforms running cloud workloads.
  • PRT Good Medium or better; BCA in standard. Submarine ITs are held to the platform's additional medical screening on top.
    PRT cycles twice yearly under OPNAVINST 6110.1 — train the cycle, do not sprint the morning of the test. Build base running mileage with the section's PT cycle; layer in plank / push-up / sit-up progression; stay in BCA standard. Submarine ITs are held to the platform's additional medical screening (depth qualification, claustrophobia / psych screening for sub patrol cycles) and to the boat's PRT standards on top of the Navy-wide cycle. The IT3 who falls out of standard at the platform level is the IT3 the LCPO cannot defend at the next IT2 slate.
  • NWAE for IT2 prep documented on the LCPO's timeline; pull the current Bibliography for Advancement (BIB) and own it.
    The IT2 NWAE BIB is published per NETC / MyNavyHR before each cycle. Pull it the same week it drops; build a 60-90 minute daily study log five days a week; the LCPO defends the candidate who walks in with a documented study log and EAW (Enlisted Advancement Worksheet) clean. The BIB is the test, the test is the BIB; the IT3 who studies off a generic IT-rating reference instead of the published BIB walks into the exam with the wrong material studied. Verify TIR, awards, education, and NECs are all reflected on EAW before the cycle closes.
  • At least one NEC pipeline packet in motion (IT-8404 submarine, network administration NECs, CTN conversion if applicable) or a documented reason you are still building the next one.
    The IT3 without an NEC pipeline pathway is visible at the next IT2 ranking board; the LCPO marks the gap. Talk to the career counselor and the LCPO in the same week; pull the current NEC source-rating NAVADMIN; pick the packet that fits your career arc; build the packet — ASVAB / AFQT score, security clearance, medical screening (additional for submarine), PRT / BCA, command endorsement, sea-shore counter math. The packet itself takes 2-4 weeks of focused work; the wait time for selection varies by NEC cycle. The IT3 who has the packet on the LPO's desk is the IT3 the LCPO names at section sync; the IT3 who is 'thinking about it' is the IT3 the LCPO does not defend.

Technical Mistakes — Concrete Consequences

  • Using shared admin accounts for AD operations.
    Every domain-controller action is logged in the AD audit log; shared-account actions are unattributable in JAG / IG review. The CIRT investigation on any AD compromise traces back through the audit log; the IT3 whose name does not show up because he hid behind a shared account is the IT3 whose career does not survive the JAG question. The LCPO cannot defend an unattributable action at the Chief board, even if everything else is clean. Shared-account discipline is the IAT-II operator's first audit-defensible habit; break it once and the file follows you.
  • Patching outside the published maintenance window.
    You will brick the ship in the middle of a brief or take the shore command off the network in the worst possible hour. The senior watch officer calls the LCPO; the LCPO walks to the LPO; the LPO walks to you. Maintenance-window discipline is the IT3 operator's hard boundary — the change-management ticket exists for a reason and the platform's plan-of-the-week defends it. Off-window patching that takes down a wardroom brief or a SIPR-dependent operation is the kind of finding that lands on the IT3's eEVAL narrative and follows him to the IT2 slate.
  • Building a network segment without printing the diagram and the IP plan.
    When you go on leave or PCS, the relief cannot inherit your stack and the watch falls apart. The LPO rebuilds from packet captures; the LCPO learns about it at section sync; the eEVAL narrative reflects the gap. Documentation that survives turnover is the IT3's defended discipline — the senior IT2s who PCS'd before you left undocumented segments on the network are the IT2s the LCPO still discounts three years later.
  • Treating a cyber-incident-response ticket as a help-desk ticket.
    A phishing campaign or a STIG drift gets reported to CIRT / Fleet Cyber Command inside the published timeline or the LCPO is on the phone with the wardroom and the cyber officer. The IR ticket is a different document from the help-desk close-out — it follows the platform's IR playbook (mapped to NIST SP 800-61), it has timelines, indicators, containment-eradication-recovery, lessons-learned. The IT3 who closes an IR event as a help-desk resolution is the IT3 whose name shows up in the Fleet Cyber after-action.
  • Posting OPSEC-relevant photos from the IT spaces or any deployment / patrol / exercise window — racks, screens, unit insignia, classified handling, deployment timing.
    The OPSEC officer and adversary collectors both read social media. A photo of an IT-21 / ONE-Net rack with hostname banners visible, a screen showing classified material, a deployment manifest, a unit-patch selfie during a workup — any of these can result in security incident under SECNAVINST 5510 / OPNAVINST 5239, clearance action, and administrative response under MILPERSMAN. The cleared-IT post-service market reads OPSEC and clearance findings directly; the IT3 who learns OPSEC discipline at IT2 the hard way has already lost time and possibly the clearance.

Career Decisions at This Rank

  • NEC pipeline maturity — IT-8404 submarine, network NEC family (verify current codes), advanced comm / cryptographic NECs, CTN cross-rate.
    The IT3 NEC decision is the one that shapes the next 8-12 years. If you did not start the NEC conversation at ITSN, the IT3 window is the structurally last comfortable time to pipeline — at IT2 the LPO responsibilities consume the school-time bandwidth and the family conversation gets harder. IT-8404 (Submarine IT) at Naval Submarine School Groton, CT routes you into the submarine community for the rest of the career; the network NECs (pull the current source-rating NAVADMIN — verify IT-2735 / IT-2779 / IT-3389 family) feed the network specialty track at fleet or shore commands; the advanced comm / cryptographic NECs feed Fleet Cyber Command, NCTAMS, NCTS, and NSA-attached commands; CTN cross-rate routes you out of the IT rating entirely into the cyber-warfare CT community. Talk to senior ITs in each pipeline before you commit; the wrong packet is worse than no packet; the LCPO who watches an IT3 pipeline into the wrong NEC carries the mentoring burden of routing him out of it three years later.
  • Re-enlistment / first-term contract end — with or without IT SRB.
    The IT3 re-enlistment window typically opens 12-24 months before first-term EAS. The IT rating's SRB schedule per current NAVADMIN varies by NEC, zone (A 0-6 yr, B 6-10 yr), and rating manning math. NEC-coded IT3s often see meaningful SRB tied to retention math against the civilian cleared-IT market — verify the current NAVADMIN SRB message before signing. The trap: signing a 6-year contract to maximize the bonus, then deciding 18-24 months later you want out, or accepting an NEC tour the contract locks you into without aligning with the family or the spouse's career. Run the math twice — base pay, BAH with dependents, SRB net of taxes, the next assignment and NEC tour, the post-service market timing. If the re-up math does not work without the bonus, the re-up does not work. The IT3 who re-enlists into the right path is the IT2 / IT1 the LCPO is grooming for Chief; the IT3 who re-enlists into the wrong path is the petty officer the LCPO has to mentor through the slow realization.
  • Navy COOL credential pace at IT3 — CCNA mandatory for network-side, then CySA+ / PenTest+ / CCNP / CISSP-track.
    Navy COOL still funds the voucher at IT3. CCNA enters the picture if it has not already (the network-administration NEC pathway and the IT2 board's preferred cert at IT3); CompTIA CySA+ and PenTest+ open the cyber operator track for ITs whose NEC pathway routes them toward Fleet Cyber / NIOC / cryptologic billets; the CCNP track (Routing & Switching / Enterprise / Security) is the senior network operator's career-shaping cert; CISSP at IT3 is rare but achievable for the IT3 with strong cyber background, and gates the IAM Level 2/3 work roles at IT2 / IT1. Build the cert stack on a quarterly cadence; do not collapse the window to the last six months before EAS. The cleared-IT contractor market reads the cert sheet directly; the IT3 who exits the second enlistment with CCNP + CySA+ + Sec+ + clearance is structurally positioned for $110K-$170K cleared roles depending on metro and polygraph status.
  • AC/RC (Active Component / Reserve Component) and IA (Individual Augmentee) deployment options.
    AC/RC opportunities for IT3s to support Reserve units in trainer / advisor roles open at this paygrade; IA deployments to forward CENTCOM / EUCOM / INDOPACOM joint task forces open in parallel. IA deployments are competitive for cleared cyber operators and the credential is career-shaping for the senior NEC chief board. The honest test: do you want the joint-cyber operational experience and the boost to the IT2 board record, or do you want the family-stable garrison rotation? Both are defensible. The IT3 who takes the IA window builds a different chief-board record than the IT3 who declines; the post-service market reads forward-deployed IT experience directly. Talk to the career counselor and the LCPO before applying; the IA selection process runs through the chain.
  • Commissioning packet — Seaman to Admiral - 21 (STA-21), Navy ROTC scholarship route, LDO / CWO IT-side.
    STA-21 is the active-duty commissioning program for senior junior enlisted; the LDO (Limited Duty Officer) and CWO (Chief Warrant Officer) pathways open at IT2 / IT1 typically but the IT3 with a clear academic track can start the conversation. The honest test: do you want to be a commissioned IT / Information Warfare officer (the URL — Restricted Line — Information Warfare community for the IT operator track, or the LDO IT-side for the technically-focused warrant-to-commission path), or do you want to stay enlisted and build to Chief / Senior Chief? Talk to senior enlisted who chose each path; talk to a Navy LDO / CWO who came from the IT enlisted ranks; talk to a URL Information Warfare officer at the wardroom level. The STA-21 packet is competitive and the timing window narrows after IT2.

How the Seat Varies by Unit Type

  • Carrier or amphib IT department (large ship, IT-21 / ONE-Net dept)
    Big-deck shipboard IT3 — watch-supervisor over an ITSN section on the help-desk floor or the network operations watch, billet rotation through the IT-21 / ONE-Net infrastructure team, exposure to the carrier or amphib's combat-systems-adjacent IT services. Sea pay, sea-shore rotation under detailing policy. Deployment cycle is the CSG / ARG / amphib rhythm — workup, ~7-month deployment, post-deployment sustainment, leave / repair. The IT3 on a big deck briefs at department-head sync with the IT2 LPO; mentors 3-5 ITSNs at the section level; rotates through 2-3 watch billets across the tour to build breadth. The big-deck IT3 experience is operationally broad and gives the strongest NEC pipeline decision support across the rating's options.
  • Small surface combatant or destroyer (small IT shop, broader scope)
    Small-shop IT3 on a DDG, FFG, LCS, or small surface combatant — 4-10 ITs total, often a single IT2 LPO and no embarked goat-locker chief. The IT3 is the watch-supervisor by default on most rotations and the senior IT during off-watch hours; responsibility per IT3 is materially higher than the equivalent billet on a carrier. The exposure to end-to-end shipboard IT — IT-21 / ONE-Net, SATCOM, controlled-cryptographic-equipment, the ship's combat-systems-adjacent IT services — is broader. The career-shaping benefit: the small-combatant IT3 walks into IT2 NWAE with a depth of platform integration that the carrier IT3 may not have. The cost: less depth on any one billet and a more fragile section bench.
  • Submarine (IT-8404 pipeline)
    Submarine IT3 with L09A NEC after Naval Submarine School Groton, CT (IT-8404 pipeline). Submarine duty pay, dolphins (Submarine Warfare Specialist) PQS, the boat's operational patrol cycle (60-120 day patrols on fast-attack or boomer with SSBN / SSGN / SSN-specific differences). Small comm shop on the boat — often 2-6 ITs total, with COB-adjacent senior enlisted oversight. The IT3 on a submarine is often the second-most-senior IT aboard on smaller boats and may be the watch-supervisor during entire patrol windows. Small, professionally tight community; the bubblehead identity is distinct from the rest of the surface and aviation Navy; the post-service market reads submarine IT experience as the highest-trust IT operator profile.
  • Shore — NCTAMS / NCTS / NIOC / Fleet Cyber
    Shore-side IT3 at a strategic Navy communications or cyber command — NCTAMS Atlantic/Pacific, NCTS, NIOC, Fleet Cyber Command subordinate units. The work is the Navy's enterprise IT and strategic communications backbone or the cyber operational fabric. Watch rotations on the strategic floor; possible IA deployment to forward joint task forces. As IT3 you may be the watch-supervisor over a 4-6-ITSN production team or the NEC-coded specialist (advanced comm / cryptographic NEC, network specialty NEC) embedded in a production cell. The shore IT3 builds the senior enterprise IT or cyber operational depth the cleared-contractor market reads at the next paygrade.
  • Joint / SOF-attached IT billet
    IT3 detached to a joint task force, a MEF G-6 detachment (green-side with Marines), or a SOF-attached billet supporting Naval Special Warfare or the joint SOF community. Smaller IT cell, broader operational scope, faster operational tempo, exposure to joint communications and cyber requirements you will not see at a single-service command. The IT3 detached to a joint billet operates at a watch-supervisor level on a smaller cell — the senior IT on the detachment may be an IT2 or IT1 — and the responsibility profile is materially higher than the equivalent billet at a fleet command. Career-shaping for the right IT3; not the right billet for an IT3 who has not yet built the watch-supervisor discipline.

What Good Looks Like at This Rank

The good IT3 is the petty officer the LPO trusts with the XO's VTC problem and the IT-21 / ONE-Net circuit outage on the same watch, because both come back working and the wardroom does not have to ask twice. His ticket-queue close-outs are not reopened; his STIG / ACAS posture is defensible at the platform level; his maintenance-window discipline is the example the LCPO uses at section training. He has CCNA on the cert sheet (or scheduled within the next two cycles), an IT-8404 / submarine or network NEC packet in his folder if he wants it, and the LCPO is already mentioning his name for the next IT2 slate. His eEVAL bullets are action-result-impact, not generic IT filler — measurable accomplishments, named outcomes, the language the IT2 board actually reads. The LPO does not have to rewrite his ticket close-outs or his change-management documentation because the IT3 has done the work. The senior rater knows the section's pipeline and can name which ITSN is selecting at the next NEC slate (because the IT3 is the LPO's mentoring delegate). The cyber officer mentions him by name at department sync. The wardroom treats him as the IT they ask for by name on a real problem — and the goat locker reads it. He sits the IT2 NWAE on a documented study log the chief can defend, and the NEC pipeline he is in is the one the LCPO recommended without prompting. His warfare device (Surface / Submarine / Aviation / Expeditionary depending on platform) is on his blouse if the billet supports it; if it is not yet, the PQS book is open and the qual board date is on the calendar. He has read NAVPERS 18068 Vol II on the NEC variant he wants and he knows the school length, the post-school assignment pattern, and the post-service translation. He is the IT3 the LCPO is grooming for IT2 — and the goat locker has already had the conversation about him without him being in the room.

Preview — The Next Rank

IT2 (E-5) is the rating's first real petty-officer-of-the-section tier — the working senior IT, section LPO in fact even when the title is unofficial. The IT3s call you LPO whether the watchbill posts the rotation that way or not, and the chief is mentoring you toward anchors he expects to pin in two boards. The first 90 days at IT2 are the transition window — the LPO billet pulls you off the watch-supervisor role on a single rotation and into the section LPO role across multiple billets, the eEVAL profile against your peer IT2s begins to drive the IT1 board record, and the NEC pipeline you stacked at IT3 starts to mature into operational depth. The job content at IT2 is materially different from IT3. You run a section — a watch section in the ship's IT spaces, an NCTS / NCTAMS help-desk team, the comm shop on a sub as the senior IT aboard (if there is no senior rate in the billet), a MEF G-6 IT cell, or a specialty cell at a Fleet Cyber Command shore command. You train and qual-sign two-to-four IT3s and ITSNs; you build the section's training plan; you manage your slice of the IT-21 / ONE-Net infrastructure; you write the network-status portion of the daily SITREP or department-head sync; you own the IA / cybersecurity compliance work the LCPO does not have time to do himself. The IT3 close-out discipline you built carries forward; the LPO accountability for the ITSNs and IT3s under you is the new layer. The NWAE for IT1 is no longer abstract; the eEVAL trait average against your peer IT2s actually starts to matter for the next slate. NEC-coded billets define the seat — IT-8404 submarine on a boat, network administration NECs at a shore enterprise IT command, advanced comm / cryptographic NEC stack if you pipelined that path, the CTN conversion seat if the cyber-warfare side is the endgame. Navy COOL still funds the credential stack — CCNP, CySA+, PenTest+, the GIAC track, CISSP enters the picture for IAM-track ITs. The cleared-IT contractor market reads IT2 with the right NEC stack and clearance as $110K-$170K+ depending on metro, role, and polygraph status. Build the IT2 the way the LCPO is grooming you to: clean section, mentored IT3 packets producing, defended NWAE study log, current warfare device, EAW clean.
FAQ

IT E4 — Frequently Asked Questions

Q01What does a E4 IT (Information Systems Technician) actually do?
You own a shift in the ship's IT spaces, the NCTS / NCTAMS help-desk floor, the comm shop on a sub if you came out of Groton with the 8404 / submarine NEC, or the MEF G-6 IT bench if you are detached green-side.
Q02What's the most important thing to know as a E4 IT?
IT3 (E-4) is where the rating's NEC stack and the post-service cleared-IT market start materially driving career decisions.
Q03What does a typical day look like for a E4 IT?
Time-blocked day at the E4 IT rank tier: 0500-0600 Wake up. Phone check — overnight watch chat, watchbill changes, any open IR ticket the IT2 LPO needs you to know before quarters. Drive or walk to the IT spaces or the help-desk floor; PT gear on or stow it depending on the section's schedule, 0600-0700 Command PT or section PT. The IT3 runs the section PT cycle the LCPO published. Lead the boots through the warm-up if the LPO assigned you the role; set the pace; the ITSNs under you read the difference between an IT3 who leads PT and an IT3 who just shows up to it, 0700-0800 Chow,…
Q04What mistakes get E4 IT soldiers fired or relieved?
Letting Navy COOL slip past IT3. CCNP, CySA+, PenTest+, GIAC certs, CISSP — funded credentials that the cleared-IT market reads directly. Leaving them on the table costs measurable post-service salary; NEC pipeline drift. The IT rating's career arc is shaped by NEC sub-specialty; IT3s who coast through general duty without pursuing NEC-coded billets miss the career-shaping windows that drive senior-NEC chief board read; DUI / drug pop / clearance issues — separation under MILPERSMAN ch.1910,…
Q05What career decisions matter most at the E4 IT rank tier?
NEC pipeline maturity — IT-8404 submarine, network NEC family (verify current codes), advanced comm / cryptographic NECs, CTN cross-rate — The IT3 NEC decision is the one that shapes the next 8-12 years. If you did not start the NEC conversation at ITSN, the IT3 window is the structurally last comfortable time to pipeline — at IT2 the LPO responsibilities consume the school-time bandwidth and the family conversation gets harder. IT-8404 (Submarine IT) at Naval Submarine School Groton, CT routes you into the submarine community for the rest of the career;…
Q06What's next after E4 for a IT (Information Systems Technician) in the Navy?
IT2 (E-5) is the rating's first real petty-officer-of-the-section tier — the working senior IT, section LPO in fact even when the title is unofficial.
Q07What manuals and regulations does a E4 IT need to know cold?
SECNAVINST 5239 series — DON Cybersecurity / IA program.; OPNAVINST 5239 series — Navy Cybersecurity Program (current version; pull from the Navy Doctrine Library, not the stale folder on the share).; DoDM 8140.03 — Cyberspace Workforce Qualification (this is the chart the LCPO checks against your cert sheet at every watch turnover).

Based on 23 tips from 0 contributors

Published by the Honest MOS Editorial DeskVerified against DoD/.gov sourcesUpdated May 2026Editorial standards