IT Certifications Roadmap maps credentials to the work they support. It is designed to prevent two common mistakes: collecting unrelated certifications and attempting advanced exams before building foundational skills. The right sequence depends on whether the destination is support, networking, cloud, cybersecurity, data, DevOps or technical management.
No single roadmap fits everyone. Experience can replace some early credentials, and employer technology choices can change the best vendor path. Use this framework to identify the next useful signal rather than treating every stage as compulsory.
On this page — 17 sections
- The roadmap at a glance
- Route 1: IT support and systems administration
- Route 2: Networking
- Route 3: Cloud
- Route 4: Cybersecurity
- Route 5: DevOps, platform engineering and automation
- Route 6: Data and database work
- How to choose the next certification
- Sample roadmaps
- Roadmaps by starting point
- Certification stacking rules
- How to manage expiration and renewal
- Training selection for each roadmap stage
- Measuring roadmap progress
- Frequently asked questions
- Related Knowledge Compass guides
- Official sources and review notes
The roadmap at a glance
| Stage | Primary goal | Example evidence |
|---|---|---|
| Foundation | Understand hardware, operating systems, networking and security basics. | Home lab, troubleshooting notes, basic scripts. |
| Entry role | Qualify for support, operations or junior administration work. | Ticket history, device setup, identity and access tasks. |
| Specialization | Build role-specific depth in networking, cloud, security, data or automation. | Projects using the relevant platform and tools. |
| Professional level | Design, lead, secure or optimize production systems. | Architecture decisions, incident ownership, business outcomes. |
| Leadership or architecture | Connect technology to risk, cost, governance and strategy. | Cross-team programs, standards, mentoring and measurable impact. |
Route 1: IT support and systems administration
Foundation
Complete beginners should first understand computer hardware, Windows and Linux basics, networking, user accounts, permissions, software installation, security hygiene and structured troubleshooting. CompTIA A+ is a common broad credential for this stage, but a good lab and customer-service practice matter just as much.
Entry role
Target help desk, desktop support, field support or junior operations work. Build evidence around ticket handling, remote support, Microsoft 365 or Google Workspace administration, endpoint security and clear documentation.
Next step
Move toward Network+, CCNA, Linux, Microsoft role-based credentials or cloud administration depending on the environment you support. Avoid taking all routes at once.
Route 2: Networking
Networking remains foundational to cloud and cybersecurity. A sensible sequence is basic networking knowledge, practical configuration, then CCNA or a comparable vendor-neutral credential. Progress into automation, network security, wireless, service-provider or data-center specialization only when work responsibilities require it.
| Level | Possible credential | What to prove beyond the exam |
|---|---|---|
| Foundation | CompTIA Network+ or entry Cisco credential | Subnetting, packet flow, troubleshooting and documentation. |
| Associate | Cisco CCNA | Routing, switching, services, security fundamentals and automation. |
| Professional | Cisco professional-level or specialist certification | Production design, change control and incident ownership. |
| Architecture | Advanced vendor or multi-vendor credentials | Business requirements, resilience, cost and governance. |
Route 3: Cloud
Choose the cloud platform used by your target employers. Fundamentals credentials such as Azure Fundamentals, AWS Cloud Practitioner or Google Cloud Digital Leader can help with vocabulary, but technical roles usually require role-based credentials and hands-on environments.
For operations, consider Azure Administrator Associate, AWS SysOps or Google Associate Cloud Engineer. For design, consider AWS Solutions Architect, Azure Solutions Architect or Google Professional Cloud Architect after the recommended experience. Learn identity, networking, cost management, observability and infrastructure as code alongside the vendor services.
Route 4: Cybersecurity
Cybersecurity is usually a specialization built on IT foundations rather than a completely separate beginner track. Start with networking, operating systems and administration. Security+ or ISC2 Certified in Cybersecurity can provide a baseline. Then choose a function: security operations, penetration testing, cloud security, governance and risk, identity, application security or digital forensics.
Advanced credentials such as CISSP, CISM or specialist cloud-security certifications should follow experience. Employers need evidence that a candidate can identify risk, investigate events, implement controls and communicate decisions.
Route 5: DevOps, platform engineering and automation
This route combines systems, cloud, scripting, source control, containers, CI/CD, observability and infrastructure as code. Certifications from AWS, Microsoft, Google, Kubernetes or HashiCorp can support the path, but the strongest evidence is an automated deployment with tests, monitoring and recovery documentation.
A learner who cannot explain networking, permissions and failure modes should not begin with the most advanced DevOps credential. Build from systems administration or software delivery experience.
Route 6: Data and database work
Database and data-platform certifications can support administration, engineering and analytics roles. Start with SQL, data modeling, access control, backup and recovery. Then choose the platform used by target employers. Cloud data credentials are useful when combined with pipeline projects, data-quality controls and cost awareness.
How to choose the next certification
| Question | Decision rule |
|---|---|
| Do job descriptions repeatedly name the credential? | Prioritize it if the role and technology also match. |
| Do you already perform the exam objectives? | Certification may formalize existing competence. |
| Are you missing the underlying fundamentals? | Build skills before taking a higher-level exam. |
| Can you produce a project while studying? | Prefer credentials that support visible evidence. |
| Will the credential expire soon or require annual renewal? | Include maintenance in the ROI calculation. |
| Is the vendor used locally? | Choose market relevance over global popularity. |
Sample roadmaps
Complete beginner to cloud support
- Hardware, operating systems and networking fundamentals.
- CompTIA A+ or equivalent support-level competence.
- Entry support role or substantial support lab.
- Azure Fundamentals, AWS Cloud Practitioner or Google Cloud Digital Leader.
- Role-based administration credential and a documented cloud project.
Support professional to cybersecurity analyst
- Networking and operating-system administration.
- Security+ or ISC2 Certified in Cybersecurity.
- Log analysis, vulnerability management and incident-response projects.
- Security operations role or security responsibilities within IT.
- Function-specific credential after experience.
Network technician to cloud network engineer
- Network+ or equivalent foundation.
- CCNA and practical routing/switching work.
- Cloud fundamentals and virtual-networking labs.
- Cloud administration or architect credential.
- Automation, security and multi-region resilience projects.
A roadmap is successful when each credential changes what you can credibly do or apply for. A long list of badges without progression is not a roadmap.
Roadmaps by starting point
No IT experience
Begin with operating systems, hardware, networking and security hygiene. Use A+ or an equivalent structured curriculum only if support work is the intended entry point. Build a lab, practice documentation and learn how to communicate with users. Then test the job market before adding another credential.
Existing help desk or desktop support experience
Choose the recurring responsibility you want next. Network+ or CCNA fits networking; Microsoft or cloud administration fits identity and infrastructure; Security+ fits a security-aware operations route. Use current work to obtain projects that demonstrate the new direction.
Software developer moving into cloud
Do not repeat basic support credentials unless needed. Focus on cloud architecture, deployment, identity, observability, containers and infrastructure as code. A role-based cloud credential plus a complete delivery project is more coherent.
Network administrator moving into security
Build security operations, identity, segmentation, vulnerability management and incident handling on top of the networking base. Security+ may formalize breadth; advanced credentials should follow real security responsibility.
Experienced IT generalist
Choose the credential that formalizes a higher-value responsibility: architecture, cloud security, governance, service management or technical leadership. At this level, the exam should validate work already being performed or unlock a defined next role.
Certification stacking rules
| Rule | Good stack | Weak stack |
|---|---|---|
| Progress by responsibility | A+ → support role → CCNA → network role | A+, Network+, Security+, Cloud Practitioner with no projects |
| Combine broad and vendor-specific | Network+ concepts → Azure networking work | Three vendor fundamentals exams |
| Add specialization after foundations | Systems administration → cloud security | Advanced security exam before operating-system competence |
| Use experience as a stage | Credential → project → role → next credential | Credential → credential → credential |
| Renew selectively | Maintain credentials still used in work | Pay to renew every historical badge |
How to manage expiration and renewal
Create a credential register containing issue date, expiration date, renewal window, continuing-education requirements, cost and verification URL. Review it twice a year. Renew credentials that remain relevant to current or target responsibilities; allow others to expire honestly when the maintenance cost exceeds their value.
Microsoft role-based certifications, AWS credentials, CompTIA certifications and professional designations use different renewal models. Never assume that a credential is lifetime because an old version once was.
Training selection for each roadmap stage
- Foundation: choose structured explanations and safe practice environments.
- Associate: require labs, troubleshooting and official blueprint coverage.
- Professional: prioritize scenarios, design tradeoffs and real operational constraints.
- Leadership: include finance, risk, governance, communication and organizational change.
Measuring roadmap progress
Measure more than passed exams. Track tasks you can perform independently, systems you can explain, incidents you can troubleshoot, projects completed, interviews gained and responsibilities added at work. If credentials increase but these indicators do not, the roadmap needs correction.
Frequently asked questions
No. It is useful for beginners targeting support work, but experienced professionals can begin at the level that matches their knowledge. Do not pay to validate skills you can already demonstrate unless employers specifically request the credential.
Learn general cloud concepts, then go deep on the platform used by your target market. Multi-cloud breadth becomes more useful after you can operate one environment competently.
Only when it supports a defined responsibility, promotion, job move or skill gap. Renewal and continuing education may be more valuable than adding another unrelated credential.
Related Knowledge Compass guides
Official sources and review notes
Last reviewed: June 2026. Vendor roadmaps and exam versions are updated frequently.