Skip to content

Instantly share code, notes, and snippets.

@xpe
Created April 17, 2026 16:47
Show Gist options
  • Select an option

  • Save xpe/c5e1c50f1aa8893750d2ca164bb82036 to your computer and use it in GitHub Desktop.

Select an option

Save xpe/c5e1c50f1aa8893750d2ca164bb82036 to your computer and use it in GitHub Desktop.
NASA Force - compressed hiring window, third-party sign up list

NASA Force: Notes on a Compressed Hiring Window and a Third-Party Signup List

April 17, 2026

(This document was generated by Claude Opus 4.7 on 2026-04-17.)

On April 17, 2026, NASA's first "NASA Force" opportunity opened on USAJOBS with a closing date of April 21 — a four-day public application window. NASA Force was announced on March 4, 2026 as a dedicated talent track within OPM's US Tech Force initiative, aimed at placing engineers and technologists into term appointments supporting NASA's exploration, research, and advanced technology priorities.

The rollout raises two distinct questions worth separating: (1) whether the four-day window is a fairness problem, and (2) whether the Constant Contact signup list used to notify interested applicants is legally compliant.

1. The Four-Day Application Window

What it could mean

Hypothesis Rough Prior Notes
Pre-selection / "wired" position 25–35% Window length alone is a weak signal. The stronger signal of pre-selection is usually hyper-specific job requirements written around a known candidate.
Volume management 35–45% Short windows are often used when the agency expects to be flooded with applications. NASA Force had ~6 weeks of advance publicity via the March 4 announcement and an email signup list.
Narrow de-facto candidate pool by design 25–35% Structural filtering via Direct Hire Authority, network-based recruitment, and tight timing can achieve pre-selection-like outcomes without any individual violation.

Legal posture

Direct Hire Authority (5 CFR part 337, subpart B) legally eliminates competitive rating and ranking, veterans' preference, and "rule of three" procedures. Public notice is required under 5 U.S.C. §§ 3327 and 3330, but no minimum duration is specified. A four-day posting is therefore technically compliant.

Enforcement of merit-system principles against short windows is weak. Inspectors General and the Office of Special Counsel rarely pursue these cases, and window length is generally not a litigable defect absent other evidence.

Fairness assessment

The most defensible framing is not "this violates civil service law" but "this is a hiring structure designed to favor a particular candidate pool while remaining technically compliant." That pattern — compliance with the letter while frustrating the spirit of open competition — is characteristic of how modern federal hiring flexibilities are often deployed.

Rough estimates:

  • Provable civil service law violation: ~10–15%
  • Structural narrowing that's legal but contrary to the spirit of merit-based open competition: ~50–60%

2. The Constant Contact Signup List

The NASA Force page links to a signup form hosted at lp.constantcontactpages.com/su/sKWkWfp — a third-party marketing domain, not a .gov domain.

Legal baseline

Using Constant Contact is not per se illegal. Other federal agencies (e.g., the U.S. International Development Finance Corporation) use it and publish corresponding Privacy Act notices on their .gov sites.

For the setup to be compliant, NASA needs:

  1. Privacy Act (5 U.S.C. § 552a). Coverage under a published System of Records Notice (agency-specific or government-wide) if emails are retrieved by identifier, and a Privacy Act statement at point of collection under § 552a(e)(3).
  2. E-Government Act § 208. A Privacy Impact Assessment for electronic PII collection.
  3. Paperwork Reduction Act. Voluntary subscriptions typically fall under a PRA exemption.
  4. Vendor security posture. Alignment with NASA's cloud/FedRAMP requirements for the data sensitivity (low, for email-only collection).

Yellow flags

  • Non-.gov domain. Contradicts OMB M-23-02 and CISA guidance pushing federal agencies to use .gov for authoritative public-facing services. Also trains users to trust third-party domains claiming to represent federal agencies — a phishing vector.
  • Parallel infrastructure. NASA already runs subscription lists through GovDelivery/Granicus, which has established federal compliance paperwork. Spinning up a separate Constant Contact list suggests either rollout time pressure or setup outside normal NASA IT/comms channels — either of which raises the probability the privacy paperwork was skipped.
  • Missing Privacy Act statement. If the signup page doesn't display authority, purpose, routine uses, and whether disclosure is mandatory or voluntary, that's a § 552a(e)(3) procedural violation — low-enforcement, but real.

Probability estimate

  • Legal but sloppy: ~70–80%
  • One or more procedural defects (missing Privacy Act statement, missing PIA, no SORN coverage): ~15–25%
  • Actionable violation: <5%

3. The Combined Picture

The signup list and the short window compound each other. The list was live for approximately six weeks before the USAJOBS posting opened. People who knew about it in advance had time to prepare a targeted two-page federal resume, complete the USA Hire assessment in advance (results are valid for one year), and gather required documentation. The general public had four days to do all of that from a cold start.

This is legal. Anyone can sign up for the list. The posting is public on USAJOBS. But the design of the notification and application pipeline systematically advantages a narrower pool — people plugged into Tech Force / NASA Force / tech-policy channels — while preserving formal openness.

The pattern is worth naming clearly: compliance with the letter of merit-system rules while the practical structure narrows the field. Enforcement mechanisms for this kind of structural narrowing are weak to nonexistent. Whether it constitutes "abuse" depends on whether you think the spirit of fair and open competition is a binding norm or a procedural formality.

Sources

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment