Cloud Engineer Roadmap
Step-by-step guide to becoming a Cloud Engineer in 2026. A structured path covering cloud fundamentals, compute, networking, storage, identity, Infrastructure as Code and cloud-native architecture across AWS, Azure and GCP.
Understand the mental model of the cloud before touching any console.
Go deep on one provider first — concepts transfer once you master one.
The services that actually run your code.
How resources connect, isolate and expose themselves to the world.
Choosing the right data store is one of the highest-leverage cloud skills.
Access control is the number-one source of cloud breaches — get it right.
Never click through consoles for production — codify everything.
Running the cloud well means watching health, spend and design quality.
You reached the end!
Reinforce your skills with hands-on tutorials and cheatsheets.
Start Learning: Step-by-Step Tutorials
The complete Cloud Engineer learning path, explained
Every milestone and topic in order, with a short explanation of why it matters.
Cloud Fundamentals
Understand the mental model of the cloud before touching any console.
IaaS, PaaS & SaaSRecommended
Understand the spectrum from raw infrastructure (IaaS) to managed platforms (PaaS) to full software (SaaS), and when to use each.
Regions & Availability ZonesRecommended
Learn how providers organise data centres into regions and AZs, and how this drives latency, redundancy and compliance decisions.
Shared Responsibility ModelRecommended
Know the line between what the cloud provider secures (of the cloud) and what you secure (in the cloud).
Pricing & BillingOptional
Understand on-demand vs reserved vs spot pricing and how to read a cloud bill to avoid surprises.
Choose a Cloud Provider
Go deep on one provider first — concepts transfer once you master one.
AWSRecommended
AWS leads in market share and job demand. Start here unless your target employer uses another cloud.
Microsoft AzureAlternative
Dominant in enterprises and organisations already invested in the Microsoft ecosystem.
Google Cloud (GCP)Alternative
Excellent for data analytics, machine learning and Kubernetes (GKE is best-in-class).
Compute
The services that actually run your code.
Virtual MachinesRecommended
Launch, size, and manage virtual servers including images, instance types, auto-scaling groups and SSH access.
Serverless (Lambda / Functions)Recommended
Use event-driven functions (AWS Lambda, Azure Functions, Cloud Functions) to run code without managing infrastructure.
Managed ContainersRecommended
Run Docker containers on managed services rather than provisioning your own orchestrator from scratch.
Cloud Networking
How resources connect, isolate and expose themselves to the world.
VPC, Subnets & RoutingRecommended
Design virtual private clouds with public/private subnets, route tables, NAT gateways and peering.
Load BalancersRecommended
Use application and network load balancers to spread traffic, enable high availability and terminate TLS.
DNS & CDNRecommended
Manage DNS records and accelerate global delivery with a content delivery network and edge caching.
Storage & Databases
Choosing the right data store is one of the highest-leverage cloud skills.
Object Storage (S3)Recommended
Store files, backups and static assets in object storage with lifecycle policies, versioning and access controls.
Block & File StorageOptional
Attach persistent block volumes to VMs and share file systems across instances.
Managed DatabasesRecommended
Run relational (RDS/Aurora) and NoSQL (DynamoDB) databases as managed services with backups and replication.
Identity & Security
Access control is the number-one source of cloud breaches — get it right.
IAM & Least PrivilegeRecommended
Design users, roles, groups and policies following least privilege. IAM is the foundation of cloud security.
Encryption & KMSRecommended
Manage encryption keys with KMS and enforce encryption for storage, databases and network traffic.
Security ServicesOptional
Layer on managed security services for threat detection, web application firewalls and compliance monitoring.
Infrastructure as Code
Never click through consoles for production — codify everything.
TerraformRecommended
The de-facto standard for provisioning cloud infrastructure declaratively across any provider.
CloudFormation / Bicep / ARMAlternative
Provider-specific tools (CloudFormation for AWS, Bicep/ARM for Azure) that integrate tightly with one cloud.
Monitoring, Cost & Architecture
Running the cloud well means watching health, spend and design quality.
Monitoring & LoggingRecommended
Track metrics, logs and alarms with native tooling (CloudWatch, Azure Monitor) or third-party observability platforms.
Cost OptimisationRecommended
Right-size resources, use reserved/spot capacity, set budgets and tag resources to control cloud spend.
Well-Architected FrameworkOptional
Apply the pillars of operational excellence, security, reliability, performance and cost to design robust systems.
Frequently asked questions
What does a cloud engineer do?
A cloud engineer designs, builds and maintains infrastructure on cloud platforms like AWS, Azure or GCP. This includes compute, networking, storage, security and automating provisioning with Infrastructure as Code.
Which cloud certification should I get first?
For AWS, start with the AWS Certified Cloud Practitioner or Solutions Architect Associate. For Azure, the AZ-900 fundamentals; for GCP, the Associate Cloud Engineer. Certifications validate your knowledge and help with hiring.
Is cloud engineering the same as DevOps?
They overlap heavily but differ in focus. Cloud engineers specialise in designing and running cloud infrastructure, while DevOps engineers focus on the software delivery pipeline and culture. Many roles blend both.
Do I need to learn all three clouds?
No. Master one provider (AWS is the most in-demand) deeply. The underlying concepts — compute, networking, storage, IAM — transfer directly, so a second cloud is much faster to pick up.