Cloud Architect / Solutions Architect

1. 1
   Build Cloud Fundamentals — AWS or GCP/Azure Associate

   Start with one cloud platform and develop practical depth before branching. AWS is the market leader (32% market share) and the most sought-after certification. AWS Certified Solutions Architect — Associate ($300 exam) is the first target. Study path: Adrian Cantrill's AWS SAA course (most comprehensive), AWS free tier hands-on labs. The Associate validates foundational knowledge of core services: compute (EC2, Lambda), storage (S3, EBS, EFS), networking (VPC, subnets, security groups, Route 53), databases (RDS, DynamoDB), and IAM.

   AWS Solutions Architect Associate
2. 2
   Develop Hands-On Infrastructure Experience

   Certifications without hands-on experience are hollow to technical interviewers. Build real systems: deploy a 3-tier web application on AWS (load balancer, EC2 auto-scaling group, RDS database), set up a serverless application with API Gateway + Lambda + DynamoDB, configure a VPC with public and private subnets and a NAT gateway, and implement a CI/CD pipeline with CodePipeline or GitHub Actions. These projects on a public GitHub or AWS portfolio demonstrate the practical architecture skills certifications alone don't signal.

   Hands-on AWS labs and portfolio projects
3. 3
   Learn Infrastructure as Code — Terraform

   Infrastructure as Code (IaC) with Terraform is the standard practice for managing cloud infrastructure in production environments. Terraform allows you to define your entire infrastructure in configuration files, version-control it in Git, and apply changes safely across environments. HashiCorp Terraform Associate certification ($70) validates foundational IaC knowledge. Building the AWS portfolio projects above with Terraform rather than the console demonstrates production-level practices.

   Terraform + HashiCorp Certified Associate
4. 4
   Develop Architecture Best Practices Knowledge

   AWS Well-Architected Framework (six pillars: operational excellence, security, reliability, performance efficiency, cost optimization, sustainability) is the design framework cloud architects use to evaluate architecture quality. Study each pillar deeply — understand the tradeoffs between them (reliability improvements often cost more; performance optimizations can reduce security). This framework knowledge is what technical interviewers probe in architecture design discussions.

   AWS Well-Architected Framework mastery
5. 5
   Earn AWS Solutions Architect Professional

   AWS Certified Solutions Architect — Professional (SAP, $300 exam) is the senior-level credential. It validates the ability to design complex, multi-account, multi-region, hybrid architectures at enterprise scale. Preparation requires 2+ years of hands-on AWS experience. This certification consistently produces some of the highest salary premiums of any technical credential — employers treat SAP as a signal of genuine senior-level cloud architecture capability.

   AWS Solutions Architect Professional (SAP)

• 9:00 AMArchitecture review — a development team wants to migrate their on-premises microservices to AWS. Review their current state: 12 Java services, Oracle database, LDAP authentication, 500ms latency requirement. Proposed AWS architecture: ECS Fargate for containers, Aurora PostgreSQL for database, Cognito for auth, ALB for load balancing. Identify risks: Oracle → PostgreSQL migration will require schema changes, LDAP → Cognito requires SSO integration.
• 10:30 AMCost modeling — the team's current estimate is $45,000/month. Build a revised estimate in AWS Pricing Calculator: right-size the ECS task definitions based on CPU/memory profiling, propose Reserved Instances for the Aurora cluster (3-year RI saves 62% vs. on-demand), and identify unused NAT Gateway data transfer costs. Revised estimate: $28,000/month — $204K annual savings.
• 12:00 PMLunch — 30 minutes.
• 1:00 PMTerraform module design — create reusable Terraform modules for the standardized VPC architecture (3 AZs, public/private/data subnet tiers, VPC Flow Logs, NAT Gateways). Every new AWS account in the organization will use this module. Review with the platform engineering team.
• 2:30 PMSecurity review — a new data lake architecture needs a security review before go-live. Check: S3 bucket policies (no public access, encryption at rest with KMS), IAM roles following least-privilege principle, CloudTrail logging enabled, Security Hub findings (3 medium-severity findings need remediation before launch). Document findings and required remediations.
• 4:00 PMExec presentation — 30-minute presentation to the CTO on the cloud migration program status: 18 of 35 workloads migrated, $1.2M in annual infrastructure savings realized, 99.97% availability across migrated workloads. Q&A on the database migration timeline.

Cloud architects design enterprise-scale infrastructure — a role requiring deep technical knowledge, cross-system judgment, and organizational accountability that AI tools assist but cannot replace. The +17% growth reflects sustained cloud adoption across all industries.