The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
Cloud Engineer, CCoE (Level 002)
2-3 yearsSkills to master
- Deepen your expertise in IaC development, build and maintain automation scripts, master observability tools, and consistently apply existing governance policies. You'll be building the foundations.
You're ready to move on when
- Consistently delivers high-quality IaC modules and automation scripts.
- Proactively identifies and resolves operational issues in cloud environments.
- Demonstrates a solid understanding of FinOps principles and cost optimisation techniques.
- Successfully mentors new joiners and contributes to team best practices.
- 2
Senior DevOps Engineer / Infrastructure Architect
5-7 yearsSkills to master
- Transitioning from a pure build role to one with more governance and optimisation. You'll need to develop strong FinOps knowledge, understand enterprise-level governance frameworks, and hone your influencing skills to drive adoption of standards.
You're ready to move on when
- Has designed and implemented complex cloud infrastructure solutions for multiple projects.
- Demonstrates a strong understanding of security and compliance in cloud environments.
- Has experience driving efficiency and automation in infrastructure provisioning.
- Can articulate the business value of technical decisions to non-technical stakeholders.
- 3
Cloud Security Engineer
4-6 yearsSkills to master
- You'll need to broaden your focus beyond just security controls to encompass cost optimisation, operational excellence, and the full scope of cloud governance. Developing strong influencing skills for non-security-focused engineers is key.
You're ready to move on when
- Has designed and implemented robust cloud security controls and policies.
- Deep understanding of cloud identity, network security, and data protection.
- Experience with security automation and integrating security into CI/CD pipelines.
- Can effectively communicate security risks and mitigation strategies to technical and business teams.