Cybersecurity Career Roadmap, 2026 to 2030

A roadmap, built to change.

Specific, measurable, achievable, relevant and time-bound. This is a working document, not a finished one. I have a mentor who continues to guide my direction, so what's past 2026 here is direction, not a fixed prediction.

Actively maintained Last updated Synced with GitHub

IT Support toward Cloud Security Engineering

I'm a Cybersecurity Analyst with 3+ years of IT Support experience, actively building toward Cloud Security Engineering. This is direction, not a claim that every stage is already reached.

01

IT Support

02

Cybersecurity

03

Cloud Security

04

Automation

05

DevSecOps / Cloud Security Engineering

2026 to 2030

2026 Strengthen Cloud Foundations Current

Strengthening my transition from IT Support toward cloud-focused cybersecurity work: Azure administration, networking, identity, monitoring, Microsoft Security and cloud security.

  • AZ-104
  • SC-500
  • AI-901
2027 Build Defensive & Automation Skills

Building stronger defensive security and automation capability while progressing toward SOC and cloud security responsibilities: blue team operations, investigation, automation and repeatable security workflows.

  • 01 · BTL1
  • 02 · SecurityX
  • 03 · AWS Security Specialty
  • 04 · Terraform Associate
2028 Master DevSecOps & Infrastructure

Cloud through DevOps, automation, secure CI/CD, containers and Kubernetes security. Proposed direction, not a booked plan yet.

  • AZ-400
  • GitHub Foundations
  • GitHub Actions
  • GitHub Advanced Security
  • CKA
  • CKS
2029 Advance Toward Architect-Level Development

Longer-term direction toward architect and principal-level security roles. Proposed, not a claim that any of these are underway.

  • SC-100
  • CISSP
2030 Expand Toward Multi-Cloud & Incident Response

Broader security engineering, cloud engineering and incident response capability across more than one cloud provider. Direction, not a guaranteed outcome, and not yet attached to any specific certification.

    Right Now

    What I'm working on this quarter

    Current Focus
    • SOC Operations
    • Microsoft Security
    • Azure Security
    • Detection Engineering
    • Incident Response
    • Cloud Security
    Currently Building
    Preparing for the AZ-104 retake and SC-500, studied side by side rather than one after the other, since both exams sit back to back in October.

    AZ-104 retake in

    Next Milestone
    AI-901, targeted for late November or December 2026, part of a broader understanding of AI's role in security rather than an isolated credential.
    View the full calendar →
    December 2026 and Beyond

    December 2026+

    After AI-901, the plan opens up rather than locking into a fixed sequence. I expect to keep developing deeper SOC work, Microsoft Security, Azure Security, detection engineering, threat hunting, incident response, security automation, cloud security and a working understanding of AI's security implications, all backed by practical projects and technical write-ups.

    This section stays intentionally open. My mentor's guidance shapes it as I go, so treat everything past this point as direction, not a fixed prophecy.

    Open to SOC & Cloud Security Roles