The Bracket-Window Audit: Mid-Year Tax Strategy for $1M–$3M Households
Executive Summary
- July is the audit month. Q2 income is visible. September is the execution deadline. So the ten-week window between them is the natural place to run the bracket-window audit.
- The 3.8% Net Investment Income Tax is the cliff most audits miss. A Roth conversion is not itself NIIT-taxable. However, the conversion raises MAGI. As a result, that higher MAGI can drag existing investment income into the surtax.
- IRMAA sets the ceiling before anything else gets sized. The 2-year MAGI lookback means today’s decision drives 2028 Medicare premiums.
- The Jul 28–29 FOMC decision is a checkpoint, not a sizing input. Lock the audit output before the meeting. Execution can wait; the plan should not.
- The sequence is order-dependent. IRMAA first. LTCG second. Roth conversion third. NIIT drag fourth. RMD onset fifth. Reordering breaks the audit.
The Environment This Month
June CPI came in at 3.5% headline and 2.6% core — a 70-basis-point drop from May. The 10-year Treasury closed Jul 14 at 4.583%. Market pricing points to a Fed hold at 3.50%–3.75% at the Jul 28–29 meeting, with roughly 63.5% probability of no change. However, none of that changes the mid-year audit’s inputs. The 2026 federal bracket schedule is fixed. IRMAA thresholds are fixed. The NIIT threshold has not moved since 2013. As a result, the audit runs on tax law that is settled — while the macro layer is only a checkpoint.
The Bracket-Window Audit — Five Steps in Order
Five-step sequence — verbatim across the July Mid-Year Tax Strategy pillar (D1, D2, D3, D4, D5). Do not reorder.
- Lock the IRMAA ceiling first. The 2-year MAGI lookback drives 2028 Medicare premiums. The 2026 first threshold sits at $109,000 single and $218,000 married filing jointly. Confirm the ceiling before sizing anything else.
- Reserve 0% LTCG room next. Appreciated taxable assets often benefit more from realization at zero tax than the same income does inside a Roth. The 2026 0% ceiling sits at $49,450 single and $98,900 MFJ. Book that room before it gets consumed by a conversion.
- Size the Roth conversion against remaining bracket capacity. Whatever space is left after IRMAA and LTCG is the conversion capacity for this year. Model against the 24% MFJ ceiling ($403,550) or 32% single ceiling ($256,225), not against last year’s plan.
- Subtract the NIIT drag. If the conversion pushes MAGI past $200,000 single or $250,000 MFJ, model the 3.8% NIIT on the lesser of net investment income or the MAGI-over-threshold amount. This step catches the cliff most audits miss.
- Confirm RMD timing and re-audit annually. Required Minimum Distributions begin at age 73 for households born 1951–1959, and age 75 for those born 1960 and later, per SECURE Act 2.0. If RMDs begin within three years, the conversion sizes larger this year — even accepting IRMAA cost — because next year’s bracket space compresses.
Why the Order Matters
Every step depends on the output of the step before it. IRMAA sets the ceiling because the 2-year lookback is unavoidable — the household cannot retroactively lower 2028 Medicare premiums once 2026 MAGI is filed. LTCG comes next because 0% capacity is fragile: a Roth conversion consumes bracket space that could have realized appreciated assets tax-free. The Roth conversion sits third because its size is the residual — whatever capacity remains after the two harder-to-move ceilings are respected.
NIIT drag comes fourth because it is a function of the conversion size, not an independent input. And RMD onset comes fifth because it changes the multi-year framing: households with RMDs starting inside three years accept a higher IRMAA cost this year to preserve bracket capacity for years two and three. In short, reversing any two steps breaks the audit’s arithmetic. That’s why we run it in this order every July, without exception.
What Households Should Do This Month
The July window closes on Sep 30 for practical execution — funds have to clear, custodians have to process, and any coordination with a CPA needs lead time. In turn, the household work for the next four weeks looks like this:
- Pull the Q2 income run-rate and project year-end MAGI.
- Flag any household approaching the $109K / $218K IRMAA cliff at the 2028 lookback date.
- Identify any appreciated taxable positions with 0% LTCG capacity worth realizing before a conversion.
- Model NIIT drag scenarios at $50K, $100K, and $150K conversion sizes.
- Schedule the September execution window with the custodian.
Frequently Asked Questions
Global optimization sounds cleaner but breaks in practice. Two of the five ceilings — IRMAA and 0% LTCG — are difficult to reverse once consumed. Ordering the audit means the least-reversible constraint gets respected first. It’s not the elegant answer. However, it’s the one that survives implementation.
The mechanics apply broadly. However, the coordination stakes scale with asset size. Below $1M in retirement assets, most households never approach NIIT or IRMAA thresholds and the audit collapses to a single decision. Above $3M, the audit adds an estate-planning layer beyond this brief’s scope.
Continue with the July Mid-Year Tax Strategy Pillar
- → Read the Insight: Why Most Roth Conversions Fail Coordination Math (Not Market Timing)
- → Walk the Resource: The Mid-Year Tax Decision Audit: Five Decisions Before September
- → Listen to the Conversation: The 3.8% Cliff Most Mid-Year Plans Miss — NIIT Podcast
- → Read the Market Commentary: Mid-Year Tax Strategy: What June’s Cool CPI Print Means for Roth Conversion Sizing
Next month — August 2026 — the pillar moves to healthcare cost coordination: Medicare enrollment, IRMAA planning (informed by this month’s audit output), supplemental coverage gaps, and long-term care exposure.
Schedule with Security Financial Management
A 15-minute call confirms whether the bracket-window audit needs all five decisions this year or a refresh of two. Coordinating these five before September materially shapes the year’s tax outcome.
About the Author
Dave Allen, CFP® · Managing Partner and founding partner, Security Financial Management. CRD #1210763. Dave has coordinated retirement and tax-planning strategies for multigenerational households since the firm’s founding. Verify credentials at BrokerCheck by FINRA or SEC IAPD.
Disclosures
The information presented is for educational purposes only and does not constitute legal, tax, or investment advice. Security Financial Management, Inc. is a registered investment advisor under Kestra Advisory Services, LLC. Tax planning strategies should be coordinated with qualified tax professionals familiar with your specific situation. Past performance is not indicative of future results.
Securities offered through Kestra Investment Services, LLC, member FINRA/SIPC (Kestra IS). Investment advisory services offered through Kestra Advisory Services, LLC (Kestra AS). Security Financial Management, Bluespring Wealth Partners, LLC, Kestra IS and Kestra AS are affiliated through common ownership by Kestra Holdings.
Verify advisor credentials at BrokerCheck by FINRA or SEC Investment Adviser Public Disclosure.