DoD 8140 Certifications: What a Cyber Job Now Requires

DoD 8140 Certifications: What a Cyber Job Now Requires

If a job advert says “must be 8570 compliant”, it is quoting a policy that was cancelled in February 2023. The requirement now comes from DoD 8140, and it is tied to the work role you are hired into.

This page is for the person applying for the job, not the contracting officer. If you want to work in cyber on a federal contract — as a service member, a veteran or a civilian — here is what the requirement actually is and where to start.

What changed, in plain terms?

DoD Manual 8140.03, Cyberspace Workforce Qualification and Management Program replaced DoD 8570.01-M, the Information Assurance Workforce Improvement Program on 15 February 2023. The old shorthand everyone learned — “I need an IAT Level II” — no longer maps to anything. Positions are now described as a DoD Cyber Workforce Framework work role at a proficiency level: Basic, Intermediate or Advanced.

Practically, that means two things for you. The job advert should name a work role. And the certification that qualifies you depends on that role, not on a single universal list.

So which certification should I get?

Ask the hiring manager or your security manager for the work role and proficiency level, then check the official qualification matrices. We are not going to print a certification list here, because the matrices change and a wrong answer costs you a course fee and possibly a job.

What we can tell you from experience: CompTIA Security+ is the most commonly requested starting credential for technical cyber roles, and CompTIA A+ and Network+ are what people without an IT background usually need first. See our IT career path guide.

Is there a time limit I should know about?

Yes. DoD has set an end date for using experience as a conditional alternative to foundational qualification: 2027 for one workforce element and 2028 for the others. In other words, the route of “I have done the job for years, so I do not need the certificate” is closing. If you are already in a cyber position on experience alone, this is the year to get the certification sorted.

Where do we fit in?

We teach the certifications these roles ask for: cyber security including Security+, CySA+, CEH and CISSP, plus Microsoft and Cisco tracks for infrastructure roles. Live online or in class in Miami, and military and government students get 10% off.

Related pages

Government and military training

Frequently asked questions

Is DoD 8570 still a thing?

No. It was cancelled by DoD Manual 8140.03 on 15 February 2023. Job adverts still say 8570 out of habit, but the policy behind the requirement is 8140.

What is a DCWF work role?

A job description in the DoD Cyber Workforce Framework. Each one has qualification options at up to three proficiency levels: Basic, Intermediate and Advanced.

Which certification counts for my role?

It depends on the role. Get the work role and level from the position description, then check the official DoD qualification matrices or ask us and we will help you match it to a course.

Can I qualify on experience instead of a certification?

For now, in some cases. DoD has set an end date for that option: 2027 for one workforce element and 2028 for the others.

Do you offer a military discount on these courses?

Yes, 10% for military personnel and government employees.

Talk to us about your requirement

Government agencies and military personnel get a 10% discount on our training. Private group delivery is available on your dates, on site, at our Miami campus or live online.

Call 305-648-2000

Official sources: DoD 8140 qualification matrices ยท DoD Cyber Workforce Framework

Written by The Code Academy. Last updated October 2026. This page summarises public federal guidance and is not legal or contractual advice — confirm requirements against the official sources above or with your security manager.