Pentagon War Force is a Department of Defense recruitment campaign launched June 30, 2026, with the Office of Personnel Management. It hires hundreds of software engineers and AI specialists for two-year “forward deployed engineer” roles paying up to roughly $200,000 a year.

What Is the Pentagon War Force?

Pentagon War Force is a targeted hiring campaign to bring top software engineers and AI specialists into the Department of Defense. The Office of Personnel Management and the Pentagon jointly announced the launch on Tuesday, June 30, 2026. The goal is straightforward. Fill the technical talent gap and speed up military AI adoption.

The program does not recruit combat personnel. The initiative doesn’t seek to hire trigger-pullers but rather AI experts and other software engineers. These hires write code, build systems, and deploy AI tools. They support the mission from behind a keyboard.

The scale is significant. OPM will be looking to hire “hundreds” of software engineers for the Pentagon via the War Force effort, according to the press release. That is a large intake for a specialized federal program.

Why Did the Pentagon Launch War Force Now?

The Pentagon launched War Force to replace a large number of technology workers it recently lost. The timing ties directly to workforce cuts under the current administration.

The numbers explain the urgency. Pentagon War Force is a direct response to the net loss of 5,700 technology workers at the Pentagon since the Trump administration took office. Broader federal data shows a steeper drop. GAO data shows the Defense Department lost 24,366 technical employees by the end of fiscal 2025, followed by another 2,787 during the first quarter of fiscal 2026.

Some of those losses were deliberate. In March 2025, Defense Secretary Pete Hegseth issued a memo outlining plans to rebuild the department, aiming to eliminate redundant and bureaucratic steps through automation and technological solutions. The plan cut civilian positions on purpose. Now the department needs specialized engineers back. This pattern of thinning teams and then scrambling for talent shows up across the organizations I cover, and it rarely resolves cleanly.

The AI mission adds pressure. As the Pentagon accelerates its push to integrate artificial intelligence across the military, it is turning its attention to recruiting the technical talent needed to turn that strategy into reality.

How Does War Force Fit Into Tech Force?

Pentagon War Force is a spinoff of a larger federal program called Tech Force. It narrows that broader effort to a single department.

The recruitment effort operates under OPM’s larger Tech Force program, which launched in December 2025 to onboard tech and cybersecurity professionals across federal agencies. Tech Force set an ambitious target. When it first launched last December, OPM set a goal of hiring 1,000 technologists by March.

That goal fell short. So far, close to 300 Tech Force candidates have been hired and about 125 have been onboarded, OPM Spokesperson McLaurine Pinover told Federal News Network. The gap between the target and the result is worth watching as War Force ramps up.

War Force is not the first spinoff. The War Force initiative marks the second spinoff effort under Tech Force. In March, NASA rolled out its own tech talent recruitment program, called NASA Force.

The War Force Job: Pay, Terms, and Requirements

Here is the core deal for applicants. Read these numbers before you commit.

The roles are temporary, two-year appointments with annual salaries up to approximately $200,000. The positions carry a specific title. They are classified as “forward deployed engineer” roles, targeting people with hands-on experience in AI, machine learning, automation, and data systems.

Eligibility is strict. Applicants must be U.S. citizens and must be capable of obtaining and maintaining a Secret or Top Secret security clearance. That last point matters more than the salary for many people. The clearance process can take six months to well over a year on its own. Plan for that delay.

The hiring path skips the usual red tape. These are two-year appointments processed through a streamlined hiring pathway that bypasses the standard competitive civil service examination process.

One detail to confirm: the application deadline. Sources report two different dates. Applications are open on USAJobs through July 17, 2026, according to most reporting. Some early announcements listed July 10 instead. As of this writing, the July 17 date appears in the most recent USAJobs-based reporting. Check the live USAJobs listing before you apply, since the official posting is the only binding source.

What Will War Force Engineers Actually Do?

Pentagon War Force engineers build and deploy AI systems directly inside military operations. They embed with the units that use the technology.

The reach is deep. The engineers could “embed down to the unit level across the department” to support operational needs and “ensure a more lethal United States military,” according to an OPM press release. The work centers on frontier technology. The department seeks experts in designing, building, integrating and maintaining capabilities like frontier AI, machine learning, automation and data systems.

The mission connects to a specific strategy. Pentagon Chief Technology Officer Emil Michael said War Force will help with executing the key tenets of the War Department’s AI Acceleration Strategy, guidance released in January that outlines plans for rapidly integrating AI capabilities into operations. The way AI adoption reshapes daily work here echoes the wider shift toward AI adoption across workplaces, just under far higher stakes.

Michael framed the pitch in patriotic terms. “War Force is a call to action for patriotic forward-deployed engineers who want to serve their country and the warfighter,” he said.

Where Does the “Forward Deployed Engineer” Model Come From?

The “forward deployed engineer” title is borrowed from the private defense tech sector. War Force did not invent it.

The designation is borrowed directly from the Palantir playbook, where the model was pioneered in the early 2010s. Palantir built the role and used it in military settings first. The idea is simple. Put engineers next to the customer, not back at headquarters.

The name itself is notable. President Donald Trump signed an executive order last September that authorized DOD to use the “secondary title” of War Department. That framing runs through the whole campaign, from the program name to the official statements.

Can War Force Compete on Pay?

War Force can compete with defense contractors, but not with top AI labs. The pay ceiling sets a clear boundary on who it will attract.

Against Palantir, the offer holds up. Palantir pays its median forward deployed software engineer around $215,000 in total compensation in 2026, a tier War Force’s pay range can meet. Against frontier AI labs, it falls behind. Senior FDE total compensation at OpenAI and Anthropic runs $350,000 to $550,000 and up, according to 2026 compensation data.

Demand for these engineers is surging everywhere. FDE job postings across the industry grew 729 percent year over year from April 2025 to April 2026, per Indeed data. That number tells you why the Pentagon had to launch a dedicated campaign. It is fighting for scarce talent.

So the target pool is specific. War Force is competing against a specific tier of the defense tech market – Palantir, Anduril, Shield AI – where the mission-driven FDE model originated and where security clearances are already the norm. Those candidates already accept clearances and mission work. They are the realistic applicants. For engineers weighing the move, the broader signal is clear: AI skills are becoming the fastest route to career growth, and defense is now bidding for them directly.

How War Force Connects to Other Pentagon Tech Efforts

Pentagon War Force is one piece of a wider Pentagon push to rebuild technical staff. Other programs run alongside it.

The Pentagon War Force recruitment effort comes after DOD announced in April that it was launching a cyber apprenticeship program this summer to bring more skilled personnel into the agency. That program drew heavy interest. Pentagon Chief Information Officer Kirsten Davies said the apprenticeship program had already generated more than 70,000 inquiries ahead of its official launch.

The people running War Force bring specific backgrounds. Kaydee James, chief of staff of the DoD’s Chief Digital and Artificial Intelligence Office and a former DOGE chief of staff, described the program’s core operational problem at a Government Service Delivery conference on June 11. The rise of AI-driven roles like these mirrors how hiring itself is shifting toward skills over credentials across the wider job market.

What to Watch Next

Pentagon War Force is a two-year bet by the Pentagon to buy back the technical talent it shed. The pay tops out near $200,000, which competes with defense contractors but not with the AI labs paying double. Watch three things: how many of the “hundreds” of targeted hires actually onboard, whether the clearance backlog slows the whole effort, and whether the July deadline holds on the live USAJobs listing. Given that Tech Force missed its first target by a wide margin, the onboarding numbers will tell the real story.

The post Pentagon War Force: Inside the DoD’s Push to Recruit Hundreds of AI Engineers appeared first on Tomaro Group.

WebMCP is a proposed open web standard that lets websites expose structured tools to in-browser AI agents. It enters a public origin trial in Chrome 149 on June 2, 2026, replacing fragile screen scraping with direct, declared tool calls.

What Is WebMCP, in Plain Terms?

WebMCP lets a website hand an AI agent a set of ready-made tools instead of forcing the agent to scrape the page. The full name is Web Model Context Protocol. Think of a labeled control panel a browser agent can operate directly.

Today’s browser agents work the hard way. They take a screenshot, ask a model to find the “Add to cart” button, click, wait, and screenshot again. That loop is slow, costly, and breaks the second a designer renames a CSS class.

WebMCP swaps the guessing for a stable contract. Your site declares what it can do. The agent calls those functions with user permission. No pixel hunting required.

Why Google Made This Move at I/O 2026

Google announced WebMCP at its I/O 2026 developer keynote on May 19, with the companion documentation posted the day before by Chrome’s Alexandra Klepper. The announcement marks the first time the proposed web standard has been made testable on production traffic.

The timing is not random. Google framed the whole event around what it calls the agentic web, where AI agents act as first-class users of the internet. WebMCP is the plumbing that makes that vision work without breaking existing sites. It sits alongside Google’s broader push into agent tooling, the same direction driving its multi-billion-dollar AI infrastructure spending over the past year.

Gemini in Chrome will support WebMCP APIs, with Gemini Spark, Google’s cloud-based personal agent, expected to be among the first to call these tools. That puts a real consumer agent behind the standard, not just a spec on paper.

How WebMCP Actually Works

WebMCP gives developers two ways to expose tools. Both are thin layers on patterns the web already supports.

The Declarative Surface

You annotate existing HTML forms. A search box, a checkout form, a booking field. The agent reads those annotations and knows exactly what each input expects. No new framework needed.

The Imperative Surface

You register JavaScript functions as callable tools. An agent can invoke a function like or and get a structured result back. This handles the logic that a plain form cannot.

Right now the feature lives in Chrome 146 Canary behind a “WebMCP for testing” flag. The origin trial opens with Chrome 149 on June 2. Developers can register a domain and ship WebMCP support to real users during the trial window.

Microsoft Co-Wrote It, but Apple and Mozilla Are Quiet

Microsoft co-authored the WebMCP spec and shipped Edge 147 support back in March 2026. That matters. Chrome holds roughly 65% browser market share, and Edge adds another 5%, so a pattern backed by both Google and Microsoft covers around 70% of browsers.

The gap is on the other side. Firefox and Safari have made no commitments, and Anthropic’s 2026 MCP roadmap does not mention WebMCP. The spec currently sits in the W3C Web Machine Learning Community Group, not on the official W3C Standards Track. So this is a strong proposal with heavy backing, not a ratified standard yet.

That distinction is fair to keep in mind. A Chromium-preferred pattern is not the same as a universal web standard. Still, 70% browser support out of the gate is a serious starting position.

The agent-tooling space has been crowded lately. Anthropic has pushed hard on the same theme with its agentic coding upgrades in Claude Opus 4.7, and the broader coding gains across the Claude 4 line show how fast this category is moving. WebMCP is Google’s answer at the browser layer.

What Site Owners Should Do Before June 2

Start by reading the spec and testing one tool on a staging branch. You do not need to rebuild your site. The smart first step is annotating a single high-value form, like search or checkout, and registering for the origin trial token.

The strategic shift is the real headline. For most of early 2026, site owners asked how to stop agents from breaking their pages. From Chrome 149 onward, the question flips to how to become the site an agent prefers to use. As more shoppers lean on the AI assistant apps now topping the charts, being agent-readable starts to look like basic SEO for a new era.

There is a security upside too. Structured tool calls with explicit user authorization beat blind automation that mimics clicks. After incidents like the GitHub breach tied to a compromised coding tool, a model where sites declare exactly what agents may do is a cleaner trust boundary.

You can follow the trial details on the official Chrome for Developers documentation and track the standardization status through the W3C community group.

My Read on This

Faster AI models ship every few months. That is a cadence, not a story. WebMCP is different because it is infrastructure. It changes how websites and agents talk to each other at the protocol level.

The June 2 origin trial will not flip the web overnight. Adoption depends on Gemini in Chrome actually calling these tools at scale, and on Safari and Firefox eventually showing up. But the direction is clear. Sites that get agent-readable early will be the ones agents reach for by default. The ones that wait may spend the back half of 2026 wondering why a competitor keeps getting recommended instead.

The post WebMCP Lands in Chrome 149: Google’s Bid to Rewire How AI Agents Use the Web appeared first on Tomaro Group.

Microsoft confirmed fixes for several vulnerabilities already seen in active exploitation, including elevation-of-privilege bugs in the Windows kernel and a remote code execution flaw in a widely deployed Office component. The Cybersecurity and Infrastructure Security Agency added multiple entries to its Known Exploited Vulnerabilities catalog within 24 hours, giving federal agencies tight deadlines to patch.

For business leaders and IT buyers, the bigger story is what this cycle says about software risk in 2026. Enterprise stacks are heavier, vendor sprawl is wider, and the pressure to patch fast keeps colliding with the reality of staffing shortages. Teams looking at how to staff around this kind of pressure can compare notes with our reporting on how skills-based hiring is changing IT career paths, since security and patch operations are now central to those job descriptions.

What shipped in the May 2026 update

Microsoft addressed more than 70 vulnerabilities in the May release, with a handful rated critical. The most attention went to a zero-day in the Windows Common Log File System driver, which researchers tied to ransomware activity over the past six weeks. A second zero-day affected the Scripting Engine and could be triggered through a crafted document or web page.

Outside Microsoft, the month also brought new advisories from Ivanti, Fortinet, and SAP. Ivanti issued another round of Connect Secure patches, the latest in a chain that began with the high-profile zero-day disclosure in January. SAP closed a critical flaw in NetWeaver that scored a 10.0 on the CVSS scale and is now under active monitoring by enterprise SOC teams.

Why this matters for businesses

The pattern is hard to ignore. Software supply chain risk is no longer a niche topic for security blogs, it is a board-level conversation. Companies running federated identity, VPN appliances, and ERP systems are now expected to patch within hours, not weeks. The cost shows up in overtime, in delayed projects, and in the budget lines that fund detection tools.

For smaller firms, the message from this month’s cycle is simpler. Keep an inventory of every internet-facing appliance, subscribe to vendor advisories, and treat Patch Tuesday as a fixed business event. The same discipline that made career growth steps work in business applies to patch management. It rewards consistency, not heroics.

Open source software is shifting too

While Microsoft dominated headlines, the open source world had its own big May. The Linux Foundation published an update to its security baseline for critical projects, and the OpenJS Foundation flagged renewed social engineering attempts against maintainers, echoing the XZ Utils episode from 2024. Reuters covered the renewed maintainer pressure in detail, and the takeaway is that human risk inside small open source teams is still the weakest link in the global software stack.

Cloud providers responded by tightening their software bill of materials policies. AWS and Google Cloud both expanded SBOM requirements for marketplace listings this month, a move that lines up with new procurement rules in the European Union and parts of the United States.

AI coding tools enter the patch conversation

Another shift this month is how AI assistants are being used inside patch work itself. Several large enterprises confirmed they now run AI-generated remediation scripts through staging before deployment, with human review at the final step. The trend has its critics, but adoption keeps rising. Readers tracking that career shift can see our coverage on why AI skills are now the fastest route to career growth, which touches on how security and DevOps roles are absorbing these tools.

GitHub also expanded its Copilot autofix feature to cover more vulnerability classes during the month, and JetBrains pushed updates to its on-device AI tooling. For now, the human in the loop stays. Compliance teams are not yet comfortable letting agents patch production without sign-off.

What IT leaders should do this week

The short list is straightforward. Apply the May Microsoft updates on a tested ring within seven days. Validate that Ivanti Connect Secure, Pulse, and Policy Secure appliances are on the current build. Audit any SAP NetWeaver instance exposed to untrusted networks. Confirm that endpoint detection rules cover the new CLFS exploitation patterns published by CISA.

Leaders who want a wider view of how technology pressure is reshaping team structure can also look at our piece on corporate leadership skills that build strong teams, since patch fatigue is now a retention issue, not only a security one.

Bottom line

May 2026 will be remembered as a heavy month for software security, but not an unusual one. The cadence of zero-days, vendor advisories, and AI-assisted fixes is becoming the steady state of enterprise IT. Companies that build patch discipline into normal operations will spend less time firefighting later in the year.

I will keep tracking the rest of the May rollouts and follow up if any of the active exploits widen in scope before the June cycle.

The post May 2026 Patch Tuesday Hits Hard as Microsoft and Ivanti Push Fresh Fixes appeared first on Tomaro Group.