Roadmaps

Ordered paths through the same material. Each one ends with something you deploy.

Cloud DevOps Engineer
11 phases · 41 chapters
Breadth plus a production platform: from a Linux shell to a system you deploy and operate yourself.
Open roadmap →
Ends with
Cloud Native DevOps Platform
A self-managed kubeadm cluster on AWS, provisioned with Terraform, configured with Ansible, delivered by Jenkins and Argo CD, and observed with Prometheus and Grafana.
View project
AWS Cloud Engineer
8 phases · 16 chapters
Cloud infrastructure: build a VPC that is actually private, then everything that runs inside it — and know what each piece costs.
Open roadmap →
Ends with
A VPC you can defend in review
Multi-AZ VPC with private data subnets, least-privilege IAM, secrets out of source control, an autoscaling tier behind a load balancer, and a monthly cost you can explain line by line.
View project
DevSecOps
8 phases · 18 chapters
Security throughout delivery: put the gates in the pipeline, not in a document nobody reads.
Open roadmap →
Ends with
A pipeline that can say no
An enforced SonarQube quality gate, Trivy filesystem and image scans that block on high severity, immutable image tags, secrets outside source control, and default-deny network policies in the cluster.
View project
Kubernetes Specialist
8 phases · 15 chapters
Deep Kubernetes operations: run a cluster you built yourself, then secure it, package it, deliver to it and observe it.
Open roadmap →
Ends with
Self-managed Kubernetes cluster on AWS
A kubeadm-provisioned cluster on AWS with Calico networking, default-deny network policies, Helm-packaged workloads, Argo CD reconciliation and a Prometheus stack. Multi-control-plane HA is listed under what this path does not yet teach.
View project