Cloud Engineer → Cloud Architect
Highest-paid generalist track. Stack: networking + Linux + cloud + IaC.
Best money-per-year-of-pain in 2026. Broad hiring, well-mapped ramp, and the skills travel between AWS, Azure and GCP with less pain than vendors pretend.
You like building things, you're happy living in a terminal, and you don't mind that half the job is YAML and IAM debugging. The pay reflects that most people give up before they're good at it.
You want a low-stress 9-to-5. Cloud engineers carry the pager when the deploy breaks, and the deploy breaks more than vendors admit.
Phased progression
Foundations → first role → specialisation → advanced. The realistic order, not a script.
Salary figures are POST practitioner estimates, not survey data.
- 010–6 monthsFoundations
Literacy, lab habits, the cert that opens first conversations.
AWS Solutions Architect Associate - 026–18 monthsFirst paid role
Land a Junior Cloud Engineer / Cloud Support. Operational time, not more certs, earns the next move.
Junior Cloud Engineer / Cloud Support£40–55k junior - 031.5–3 yearsSpecialisation
Add a specialist credential aligned to the work you're already doing.
AZ-104AWS Cloud Practitioner£60–85k mid - 043+ yearsAdvanced
Move into adjacent roles. Long-term credentials become worth their cost.
DevOps EngineerAWS Solutions Architect Pro£95–130k senior / architect (UK; +15–25% London fintech)
- 01Foundations0–6 months
Literacy, lab habits, the cert that opens first conversations.
AWS Solutions Architect Associate - 02First paid role6–18 months
Land a Junior Cloud Engineer / Cloud Support. Operational time, not more certs, earns the next move.
Junior Cloud Engineer / Cloud Support£40–55k junior - 03Specialisation1.5–3 years
Add a specialist credential aligned to the work you're already doing.
AZ-104AWS Cloud Practitioner£60–85k mid - 04Advanced3+ years
Move into adjacent roles. Long-term credentials become worth their cost.
DevOps EngineerAWS Solutions Architect Pro£95–130k senior / architect (UK; +15–25% London fintech)
Certification sequence
Ordered by realistic relevance, not vendor marketing.
- AWS Solutions Architect Associate
- AZ-104
- Terraform Associate
- AWS Solutions Architect Pro
- AZ-305
Practical projects
What to actually build, the portfolio that opens interviews.
- Multi-account AWS landing zone with Terraform
- Three-tier app deployed via IaC + CI/CD
- Cost-optimisation audit on a real account
- ·DevOps-first via developer background
- ·Platform engineering via SRE
Realistic expectations
What no recruiter will tell you.
That a single Associate cert gets you hired. It gets you past the keyword filter. What gets you hired is a public project you can walk through end-to-end, ideally with Terraform and a real CI pipeline.
Ten to eighteen months to a first cloud role from a sysadmin or developer background. Coming in cold takes longer, mostly because the interview loops assume you've already broken a few production systems.
What this is based on
Practitioner judgement. External evidence review pending.
Last reviewed: not yet reviewed · UK market
Where this fits
A pathway is a sequence, not a destination. Here are the roles and certs along it.
- Platform / DevOps Engineer → SRE
Build the systems other engineers depend on. Requires coding fluency. Rarely entry-level.
- Cloud Security Engineer
Cloud-native IAM, workload security, policy-as-code. Entered from cloud, not from SOC.
- Software Engineer (Backend / Full-stack)
Ship product, own services. Portfolio matters more than certs.
- Cloud engineering isn't entry-level anymore
In progress. The market that hired junior cloud engineers in 2019 doesn't exist. What replaced it, and the realistic path in.
- DevOps vs platform engineering. What actually changed
In progress. It isn't a rename. The hiring bar, day-to-day, and career ceiling are all different. Most candidates pick the wrong one.
The next step
The pathway is plausible. Whether it holds for five years is a different question.
A Career Verdict applies the framework to your actual stage and stack: what holds, what breaks, what would change the call.
A route shows what is possible. A Career Verdict makes the call.
Career Verdict
Helpdesk → Security Architect
- 01The callA clear judgement on whether your route is realistic, and under what conditions.
- 02Where the route breaksThe most likely point to stall, and why it happens in practice.
- 03What to do nextSpecific priorities for the next 6–24 months, and what to drop.
Career Verdict
- The callA single written judgement on whether the route is realistic for you.
- Plateaus and failure modesThe flat years and the specific ways this route tends to stall.
- Where you standThe strongest and weakest parts of your current position, named.
- Salary realityWhat this route actually pays, set against what you've been told it pays.
Usually within minutes of payment. Kept 24 months, then deleted. Deletion on request at any time.
Built on POST's practitioner-authored assessment framework, informed by two decades across helpdesk, infrastructure and security. The verdict applies that framework to your inputs.