What a Security Clearance Is for IT Jobs in Canberra

Hunting for IT work in Canberra comes with a particular kind of tedium: every listing has to be read end to end just to find out whether it needs a security clearance.

The wording is all over the place, too — Baseline, NV1, NV2, PV, TS-PA, one acronym after another:

Australian citizenship required.

Must be eligible to obtain and maintain a security clearance.

Active NV1 clearance required.

Sometimes you get halfway down a listing and start getting excited. The stack lines up, the years line up, the responsibilities read like someone copied them off your résumé — and then the fine print says: must hold a Baseline clearance.

Without Australian citizenship, IT work in Canberra can be hard to come by. A large slice of the market is unavailable.

The rules and application process are scattered across the internet in fragments, and some of the information is contradictory. These are my notes from reading through the official documents.

A clearance is a relationship of trust that can be revoked

The first time people hear “security clearance,” they may picture an upgraded police check, or a certificate they can obtain independently. A clearance is assessed and maintained in a different way.

A clearance is closer to a judgment the government makes about a person at a given point in time: whether they’re suitable to be trusted with access to classified government information, systems, or resources. Official guidance frames it as an assurance — a confirmation built on the checks completed at that time, not a permanent pass. The clearance holder, the sponsoring organisation, and the vetting agency all continue to carry responsibility for maintaining that trust, and the level required is set by what the role actually needs to touch, not by seniority or job title.

Two people with the same “Software Engineer” title can sit in very different places: building a commercial SaaS product usually needs no clearance at all; writing a government system that handles PROTECTED data might need Baseline; working in a SECRET environment needs NV1; national security and defence systems go further, into NV2 and PV. Even holding NV2 does not provide access to everything marked TOP SECRET. Government systems follow a need-to-know principle, with access limited to what the role requires; seniority and curiosity are not grounds for access.[1]

Five levels, and a top tier being phased out

Level	Highest classification it typically allows ongoing access to
No clearance	Unclassified information; being marked OFFICIAL or OFFICIAL:SENSITIVE alone doesn’t automatically trigger a clearance requirement
Baseline	PROTECTED
Negative Vetting Level 1 (NV1)	SECRET, with temporary access to TOP SECRET in specific circumstances
Negative Vetting Level 2 (NV2)	TOP SECRET
Positive Vetting (PV)	TOP SECRET, including authorised caveated resources
TOP SECRET–Privileged Access (TS-PA)	TOP SECRET and authorised caveated resources; gradually replacing PV, administered by the TS-PA Vetting Authority inside ASIO

“Negative Vetting” is the historical name for those two levels. A role can require a clearance because it counts as a position of trust, even if it does not handle classified material directly. The classification labels attached to its data may therefore not, on their own, indicate whether the role needs vetting.[1][6]

Why PR isn’t enough on its own

Under the general eligibility rules, applying for an Australian Government security clearance requires two things at once: Australian citizenship, and a checkable background. Every clearance also has to be sponsored by a government entity or an accredited organisation — you can’t sponsor yourself, and there’s no way to simply pay AGSVA for an NV1 out of pocket.[1][2]

PR grants the right to live and work in Australia long-term, but it usually can’t substitute for the citizenship requirement a clearance sits on. A citizenship waiver does exist for non-citizens, but it was never meant to be a standard job-seeking path. Organisations generally only consider one where there’s an exceptional business need — the person is essential to a critical task, the role can’t be redesigned to avoid classified material, there’s no suitable Australian citizen available, the applicant’s nationality doesn’t create an unacceptable conflict of interest with the role, or the applicant is a PR actively pursuing citizenship. Even an approved waiver doesn’t guarantee the clearance itself gets granted — waivers are tied to a specific role and organisation, come with a time limit, need re-justifying, and generally don’t transfer if you change jobs. The 2025 PSPF update went further and explicitly banned stacking multiple eligibility waivers together.[3]

For most PR job-seekers, a citizenship waiver is unlikely to provide a dependable basis for career planning before citizenship. It exists for an organisation’s critical need and is not a standard pathway for candidates seeking employment.

A chicken-and-egg problem

You cannot apply for a clearance on your own initiative. The process starts once a government entity or accredited organisation intends to place you in a role that requires one. The usual sequence is role application, selection or a conditional offer, sponsorship, then clearance assessment.

The 2026 PSPF says agencies hiring under the merit principle should not screen out a candidate solely because they do not currently hold a clearance. If the person is willing and able to obtain the required clearance before starting, they should not need to hold it before selection. That is why APS job ads tend to say “must be able to obtain and maintain” rather than requiring one up front.

Government contractors and consulting firms often work differently, and the ads say so directly: “active NV1 required.” The project may already be underway, the client may need someone in a secure environment immediately, and the company may be unable to wait through an assessment or absorb the risk of a delayed start. Canberra effectively runs two hiring markets at once: direct government hiring leans toward selecting on merit first and sponsoring afterward, while the contractor market often needs a capability ready to deploy, with an active clearance as part of that package. An active NV1 enables a developer to enter a client’s environment immediately, which can lead to faster interviews in the contractor market.[7]

The application is initiated by an employer

The process is usually initiated by an employer. Before an organisation sponsors you, it typically runs its own pre-employment screening. A clearance assesses whether you are suitable to hold a government security permission; it does not replace verification of qualifications, employment history, or fitness for the role. Some departments, including Home Affairs, add an Employment Suitability Screening to AGSVA clearance vetting, so a person can pass AGSVA’s assessment and still not meet that department’s own suitability standard.[8]

Once an organisation decides to sponsor you, the process broadly runs like this: a Security Officer initiates the request in myClearance, you get an email and a text, you fill in your details and upload documents through the portal, AGSVA checks the application is complete, then it moves into checks covering identity, background, police records, travel, finances, referees, and digital footprint, with a security interview, financial review, or psychological assessment layered in depending on the level. A vetting analyst puts together an assessment and passes a recommendation to an authorised delegate, and finally both you and your sponsor get the outcome.

Applicants generally have 20 business days to complete the myClearance application, and AGSVA’s target is to confirm completeness within 10 business days of submission. The formal assessment clock starts once the file is confirmed complete. Missing documents, slow referees, and hard-to-verify overseas history can all extend the process. If a specific document cannot reasonably be obtained, AGSVA may accept a Statutory Declaration in its place. It is not a blanket substitute for unverifiable information: the underlying question is whether your identity and history can be confirmed through independent, reliable sources.[1]

What vetting can investigate

Say “background check” and most people think of a criminal record. That’s part of it, but the scope of vetting goes well beyond an ordinary National Police Check: identity, birth certificates, name changes, addresses, employment and education history, passports and overseas travel, criminal and legal records, drug use, organisational memberships and online accounts, family members and partners, overseas contacts you’re in regular touch with, income, property, loans and business interests, your public digital footprint, health and psychological status, and whatever your referees report.

How far back that history needs to go depends on the level. Baseline usually covers the last five years of addresses, employment, education, and travel; NV1 and NV2 usually go back ten years; PV goes back to age sixteen, or the last ten years, whichever is longer. Referee requirements scale up the same way — Baseline typically needs one professional referee covering at least the last three months; NV1 and NV2 add a personal referee who can speak to the last ten years; PV needs one professional referee and four personal referees, together covering from age sixteen or the last ten years, whichever is longer. Referees are generally given fifteen business days to respond, and for PV they may also be interviewed by phone, video, or in person.[1]

An independent agency may need to reconstruct and verify years of an applicant’s life. A passport and a clean police check cover only a small part of that work.

For migrants, the hard part isn’t an overseas background — it’s whether it can be verified

For anyone who arrived in Australia as an adult, most of their education, work, housing, and social ties happened somewhere else. The natural worry follows: parents overseas, regular contact with friends and family in the country of origin, years of study and work abroad — does that sink the application before it even starts?

There is no rule that treats being born overseas as an automatic failure. Vetting assesses whether that history can be verified through independent, reliable sources; whether there are unexplained gaps; whether a loyalty, obligation, or interest could conflict with Australia’s national interest; whether family, debt, or assets could make someone vulnerable to coercion; and whether the applicant disclosed information honestly, proactively, and in full. The PSPF defines a checkable background as one the vetting agency can verify through independent, reliable sources. Gaps created by an overseas history can lower the agency’s confidence without amounting to a security problem. Employer records, school records, official documents, and referees who knew you at the time can help fill in the picture.

Practically, that means it’s worth getting organised early: overseas birth certificates and household registration documents, transcripts and diplomas, contracts or payslips from past employers, a full address history, old passports and travel records, referees who can speak credibly to the years spent overseas, foreign-language marriage, divorce, or name-change documents, and NAATI-certified translations where required — AGSVA is explicit that non-English birth certificates and marriage documents generally need a NAATI translation.[1]

Overseas family and foreign contacts are not automatic disqualifiers. The 2026 Personnel Security Adjudicative Standard uses a whole-person assessment: whether a foreign contact is a risk depends on the relationship, the country involved, who the other person is, how often you are in touch, whether it could create a conflict of interest or an opportunity for coercion, and whether the applicant reported it. Occasional and ordinary contact, a long and deep connection to Australia, or dual citizenship arising from parentage, birth, marriage, or travel convenience are treated as factors that reduce risk. Clear disclosure of the relationship, frequency, context, and practical impact helps the agency assess the information. Cutting off normal family relationships or making a background appear more Australian does not change the underlying history.

Debt and therapy in a clearance assessment

The adjudicative standard assesses seven main risk areas: external loyalty and affiliations, personal relationships and conduct, financial circumstances, alcohol and drug use, criminal history, security attitude and violations, and emotional and psychological health. What ultimately matters is character — honesty, trustworthiness, maturity, tolerance, resilience, and loyalty — and a single piece of unfavourable information doesn’t automatically lead to a refusal. Assessors also weigh how serious the conduct was, the context it happened in, how often, how long ago, how old the applicant was at the time, whether it’s been addressed, and how likely it is to recur.[4]

A mortgage, a car loan, or a credit card does not cause a refusal simply by existing. Financial review considers an inability or unwillingness to repay debt, a long pattern of not meeting financial obligations, consistently spending beyond your means, unexplained wealth, tax evasion, fraud or other unlawful financial conduct, out-of-control gambling, and whether your financial position leaves you open to inducement or coercion. If financial difficulty came from redundancy, illness, divorce, or a business downturn, and the applicant actively managed the debt, set up a repayment plan, and behaved responsibly, those count as mitigating factors.

The same standard states that seeking mental health counselling on its own cannot be used to draw a negative inference. It assesses whether a condition materially affects judgement, reliability, or trustworthiness, and whether the applicant is following professional treatment advice. A condition that is treated, stable, and disclosed proactively can lower the associated risk. Seeing a psychologist does not by itself determine whether someone is fit to hold a clearance. Failing to disclose a medical history can create a separate integrity concern.

The standard places considerable weight on cooperation with the assessment and on complete, candid, and truthful answers. Refusing to cooperate or deliberately withholding information can lead to a clearance being refused or revoked, or to the process being terminated, and is assessed separately as an integrity and judgement concern. Questions about a potential disclosure can be referred to the Security Officer.[4]

Time and money: why an active clearance is worth something

As of when this was written, AGSVA’s published service targets and reported actual performance look roughly like this, in business days:

Level	Service target	Reported actual performance
Baseline	20 days	~26 days
NV1	70 days	~81 days
NV2	100 days	~103 days
PV	180 days	~212 days

These are aggregate figures and do not promise a timeframe for any individual case. A complex background, overseas checks, missing paperwork, or slow referees can all extend the process. The clock starts once the application is confirmed complete and excludes the applicant’s initial 20 business days to complete the form and the completeness check. The sponsoring entity pays the fees. Holding a clearance day-to-day has no ongoing cost; re-assessment, upgrades, and revalidation do.[5][9]

For employers, a candidate who already holds an active NV1 can reduce the need to fund and organise an assessment, shorten the wait before a project starts, and reduce the risk of a failed assessment or delayed start. It also allows a person to enter a government client’s environment sooner. In the contractor market, this can improve access to certain projects without automatically increasing salary. Final pay still depends on technical skill, the scarcity of the role, contract structure, and market supply and demand.

Being cleared isn’t the end of the story

A clearance can sit in a few different states: active (a current sponsor exists, and both holder and sponsor are meeting their maintenance obligations), inactive (still inside its revalidation window but without a current sponsor), expired (past the revalidation window), or ceased (formally ended through refusal, revocation, or no longer meeting eligibility). A new employer generally can’t just “take over” an expired clearance — they need to start a fresh initial assessment.

When a person changes jobs, the new employer has to register a sponsorship interest in myClearance. A person can have multiple sponsors at once if there is a genuine business need for each, and every organisation has to register its interest formally. A clearance with no sponsor becomes inactive and can eventually be cancelled. A new organisation can continue to sponsor a clearance when the conditions are met. When someone leaves a role, access to that organisation’s systems, premises, and material is revoked. A clearance status that is later reactivated does not restore access to former projects.

There is also an ongoing reporting obligation, covering changes to a name, identity, or nationality; marriage, separation, cohabitation, or other significant relationship changes; moving house or changes to household members; frequent or unusual foreign contact; overseas relatives and residency; international travel; a new mortgage, significant new debt, a major change in household income, or an unexpected windfall; changing employer; outside business activities, especially with overseas individuals or organisations; a significant change in health, medical, or psychological status; police involvement, criminal matters, or disciplinary action; illegal drug use or alcohol problems; a security incident; and identity documents compromised through a cyberattack. Buying a house or getting married does not need approval. It does need reporting in line with clearance and organisational rules, so the security team can decide whether any further action is needed. Political views are not subject to blanket scrutiny. A change in voting preference does not need reporting, though a shift in belief that becomes active support for or participation in a political cause might need to be disclosed. Under the traditional AGSVA framework, the standard revalidation cycle currently sits at 15 years for Baseline, 10 for NV1, and 5 to 7 for NV2 and PV, and AGSVA can trigger a review for cause outside the normal cycle whenever a specific risk emerges.[1]

AGSVA says clearance holders must not publish their specific clearance level on LinkedIn or other social platforms. The responsibility also extends to employers, recruiters, and third parties: the holder is expected to have an unauthorised disclosure removed, and an unresolved public disclosure can itself count as a reportable security incident. PSPF Direction 003-2025, which took effect in October 2025, also requires government entities to manage the risk of personnel disclosing online information that identifies or hints at access to classified material, including the fact of holding a clearance. This means public résumés, personal sites, and social-media profiles should not list Baseline, NV1, NV2, PV, or TS-PA, or hint at the systems someone can access. Information that needs to be shared can go directly to an approved recruiter or Security Officer.[6][10]

Opportunities and trade-offs

For someone planning to stay in Canberra long-term and work inside the government or defence ecosystem, a clearance can open access to government departments, defence, national security, border enforcement, and the consulting and defence-industry firms that support them. An active clearance can also make “immediate start” contractor roles available. It is an advantage that depends on a qualifying role, organisational sponsorship, time, and ongoing maintenance. That can matter to a company with an urgent project, even though it is better understood as a deployment advantage than a technical credential. Some roles pay an allowance for it: a 2026 ASIO listing for the TS-PA Vetting Authority offered a 7.5% allowance for maintaining TS-PA, while also ruling out working from home.

The trade-offs can also be substantial. Without citizenship, this path is largely unavailable, and citizenship alone does not secure a role willing to sponsor an applicant. That can create an uneven starting point for a migrant entering the workforce. Vetting covers information that many people would not normally volunteer to an employer, including family relationships, overseas contacts, finances, drug use, mental health, travel history, and online accounts. The process is covered by the Privacy Act, while still involving a significant degree of personal scrutiny.

Classified work also affects where and how someone can work. Jobs handling classified material generally cannot be done over a home network or in a public space; fully remote work becomes less likely as the clearance and system sensitivity increase. Work that cannot be shown in a portfolio may be harder to explain outside the government ecosystem. Some government and defence projects use modern cloud, data, and distributed-systems work, while others are shaped by legacy systems, procurement cycles, and strict change control. Over time, a cleared career can become closely tied to the Canberra government market through a person’s network, résumé, and salary expectations. These are trade-offs to consider alongside the opportunities.

A realistic path through it

Before citizenship, courses or services that claim to “arrange” a clearance do not create a clearance pathway: individuals cannot self-sponsor, and a sponsor is still required. Preparation at that stage can include building Australian experience at companies that do not need a clearance, improving technical and English communication skills, keeping a complete record of addresses, employment, education, and travel, maintaining an explainable financial position, staying in touch with former managers and long-standing friends who could serve as referees later, and planning a citizenship application around personal circumstances.

Once citizenship is in place, roles advertised as “Australian citizenship required, must be eligible to obtain and maintain a security clearance” may be more likely to sponsor a strong candidate who does not already hold a clearance than roles demanding “active NV1 required” from day one. Direct government hiring, graduate programs, and larger organisations that can start someone on unclassified work can be practical entry points.

The paperwork can be assembled long before an invitation arrives: five to ten years of address history, every stretch of employment and education, overseas travel records, passports, birth, citizenship, marriage, and name-change documents, NAATI translations for anything not in English, referees who can cover the relevant years, details on overseas family, an honest financial picture, and a clear explanation for anything that needs one. Applications need to be complete, consistent, and verifiable; gaps and inconsistencies are likely to draw attention during vetting. Once cleared, it helps to know the current sponsor, clearance state, and which life changes trigger a report. Clearance details do not belong on LinkedIn, a personal site, or a public résumé.

Having read through the material, my takeaway is that a security clearance has clear eligibility rules, a defined application process, and meaningful trade-offs. Understanding those details can help when a job ad includes the words “NV1 required.”

These are notes compiled from publicly available Australian Government sources. They describe general rules, aren’t professional advice, and aren’t a guarantee of any individual outcome. For a specific role, assessment, reporting, or disclosure requirement, defer to your sponsoring entity, Security Officer, the relevant Authorised Vetting Agency, and whatever version of the PSPF is current at the time.