IT Career Paths Roadmaps
Step-by-step roadmaps for the most in-demand IT careers. From zero to employed — with certifications, salary ranges, and free resources.
Network Security Engineer
Protect networks from cyber threats. Design firewalls, implement IDS/IPS, conduct security audits, and respond to incidents.
Foundation (0–6 months)
- Learn networking basics (OSI, TCP/IP, DNS, DHCP)
- Study CompTIA Network+ materials
- Set up home lab: Raspberry Pi, pfSense, Wireshark
- Learn Linux command line basics
Security Basics (6–12 months)
- Earn CompTIA Security+ certification
- Learn about firewalls, IDS/IPS systems
- Practice on TryHackMe or Hack The Box (Easy)
- Study OWASP Top 10 vulnerabilities
Specialization (1–2 years)
- Choose: Blue Team (defense) or Red Team (offense)
- Earn CEH or CCNA Security
- Learn SIEM tools: Splunk, Elastic Stack
- Work SOC analyst role or junior security role
Senior Level (2–4 years)
- Earn CISSP or CISM for management track
- Earn OSCP for penetration testing track
- Lead security audits and incident response
- Architect enterprise security solutions
🔑 Key Skills
🎓 Certifications
📚 Free Resources
- TryHackMe (free)
- Hack The Box
- SANS Institute
- Cybrary (free courses)
- r/netsec community
System Administrator
Manage and maintain server infrastructure, user accounts, backups, and ensure system uptime across Windows and Linux environments.
Foundation (0–6 months)
- Set up Linux on a VM (Ubuntu/CentOS)
- Learn basic Linux commands and file system
- Study CompTIA A+ or start RHCSA prep
- Learn basic networking (DNS, DHCP, IP)
Core Skills (6–12 months)
- Learn Windows Server: Active Directory, Group Policy
- Study scripting: PowerShell (Windows) & Bash (Linux)
- Set up and manage Apache/Nginx web servers
- Learn virtualization with VirtualBox or VMware
Professional (1–2 years)
- Earn RHCSA or Microsoft AZ-800 certification
- Learn configuration management: Ansible, Puppet
- Set up monitoring systems (Zabbix, Grafana)
- Practice disaster recovery and backup strategies
Senior SysAdmin (2–3 years)
- Move towards DevOps or Cloud focus
- Learn Docker and Kubernetes basics
- Earn RHCE or Microsoft MCSE
- Mentor junior admins, lead infrastructure projects
🔑 Key Skills
🎓 Certifications
📚 Free Resources
- Linux Journey (free)
- The Practice of System and Network Administration (book)
- r/sysadmin
- Ansible Documentation
- Microsoft Learn (free)
Cloud Engineer
Design, build, and manage cloud infrastructure on AWS, Azure, or GCP. Implement scalable, resilient cloud architectures.
Cloud Basics (0–3 months)
- Create free-tier AWS or Azure account
- Take AWS Cloud Practitioner prep course (free on YouTube)
- Learn core services: EC2, S3, VPC, IAM, RDS
- Earn AWS Cloud Practitioner certification
Core Services (3–9 months)
- Study AWS Solutions Architect Associate
- Build projects: static site on S3, API on Lambda, RDS setup
- Learn Infrastructure as Code with Terraform
- Understand VPCs, subnets, security groups, load balancers
Containers & DevOps (9–18 months)
- Learn Docker fundamentals
- Study Kubernetes (start with Minikube locally)
- Earn CKA or AWS DevOps Professional cert
- Build CI/CD pipeline with GitHub Actions / Jenkins
Senior Cloud Engineer (2–3 years)
- Lead multi-cloud or hybrid cloud architecture
- Implement FinOps (cloud cost optimization)
- Earn AWS Solutions Architect Professional
- Mentor and architect enterprise cloud migrations
🔑 Key Skills
🎓 Certifications
📚 Free Resources
- AWS Free Tier (hands-on)
- A Cloud Guru / Udemy
- Terraform by HashiCorp (free docs)
- r/aws & r/devops
- KodeKloud (Kubernetes labs)
DevOps Engineer
Bridge development and operations. Automate infrastructure, build CI/CD pipelines, and enable rapid, reliable software delivery.
Foundation (0–6 months)
- Learn Linux and Bash scripting thoroughly
- Git: branching, merging, pull requests, CI basics
- Learn Docker: build images, compose files, networking
- Python scripting for automation
CI/CD & Automation (6–12 months)
- Set up Jenkins or GitHub Actions pipeline
- Learn Ansible for configuration management
- Study Infrastructure as Code with Terraform
- Deploy apps to cloud (AWS EC2/ECS)
Containers & Orchestration (1–2 years)
- Kubernetes: pods, deployments, services, ingress
- Earn CKA certification
- Set up monitoring: Prometheus + Grafana
- Implement GitOps with Flux or ArgoCD
Platform Engineering (2–4 years)
- Build internal developer platforms
- Implement SLOs/SLIs and reliability engineering
- Lead cloud migration and modernization
- Architect multi-region deployment strategies
🔑 Key Skills
🎓 Certifications
📚 Free Resources
- KodeKloud.com
- GitHub Actions docs
- Kubernetes.io tutorials
- DevOps Roadmap (roadmap.sh)
- r/devops
Penetration Tester
Ethically hack systems to find vulnerabilities before malicious actors do. Conduct penetration tests on networks, web apps, and APIs.
Foundations (0–6 months)
- Learn networking: TCP/IP, HTTP, DNS, common ports
- Install Kali Linux in VM, explore basic tools
- Start TryHackMe — Pre-Security path (free)
- Learn Python for scripting (automate tasks)
Core Hacking Skills (6–12 months)
- TryHackMe: Jr Penetration Tester path
- Learn Nmap, Burp Suite, Metasploit basics
- Study OWASP Top 10 web vulnerabilities
- Earn eJPT or CompTIA Security+
Practice Legally (1–2 years)
- Hack The Box (Easy/Medium machines)
- Set up intentionally vulnerable labs: DVWA, Metasploitable
- Earn CEH or PNPT certification
- Start writing CTF writeups on GitHub/blog
Professional Pentester (2–4 years)
- Earn OSCP — most respected pentesting cert
- Work as junior pentester or bug bounty hunter
- Bug bounty on HackerOne or Bugcrowd
- Specialize: web apps, mobile, cloud, Active Directory
🔑 Key Skills
🎓 Certifications
📚 Free Resources
- TryHackMe.com (free tier)
- Hack The Box
- TCM Security courses
- PortSwigger Web Academy (free)
- IppSec YouTube (HTB walkthroughs)
Full Stack Developer
Build complete web applications — from frontend UI to backend APIs and databases. The most in-demand developer role.
Foundations (0–3 months)
- HTML & CSS: build real websites
- JavaScript fundamentals: variables, functions, DOM, async/await
- Git & GitHub: version control from day 1
- Build 3 static projects for portfolio
Frontend (3–6 months)
- Learn React.js (most in-demand library)
- State management: useState, useContext, Redux basics
- Build React projects: Todo app, weather app, portfolio
- Learn responsive design and Tailwind CSS
Backend & Databases (6–12 months)
- Node.js + Express: build REST APIs
- SQL basics with PostgreSQL or MySQL
- MongoDB for NoSQL projects
- Authentication: JWT, sessions, OAuth
Full Stack & Deployment (1–2 years)
- Build full-stack apps with Next.js
- Deploy to Vercel, Netlify, or AWS
- Learn Docker for containerization
- Build 5+ portfolio projects, contribute to open source
🔑 Key Skills
🎓 Certifications
📚 Free Resources
- freeCodeCamp.org (free)
- The Odin Project (free)
- roadmap.sh/fullstack
- MDN Web Docs
- JavaScript.info
Data Analyst
Turn raw data into decisions. Clean and query datasets, build dashboards, and communicate findings to non-technical stakeholders.
Foundation (0–3 months)
- Master SQL: SELECT, JOINs, GROUP BY, window functions
- Get comfortable with Excel/Sheets pivot tables and formulas
- Learn basic statistics: mean, median, standard deviation, correlation
- Practice on real public datasets (Kaggle)
Analysis Tools (3–6 months)
- Learn Python (pandas) or R for data manipulation
- Build dashboards in Tableau or Power BI
- Practice writing clear, non-technical data summaries
- Complete the Google Data Analytics Certificate
Applied Projects (6–12 months)
- Build 3-5 portfolio projects with real, messy datasets
- Learn A/B testing fundamentals
- Practice presenting findings to a non-technical audience
- Contribute analysis to a real team project or internship
Growth (1–2 years)
- Specialize toward Data Science, Analytics Engineering, or BI
- Learn data warehousing basics (BigQuery, Snowflake)
- Mentor junior analysts
- Own a full reporting pipeline end-to-end
🔑 Key Skills
🎓 Certifications
📚 Free Resources
- Google Data Analytics Certificate (Coursera)
- Kaggle (free datasets + courses)
- Mode Analytics SQL tutorial
- r/dataanalysis
- StrataScratch (practice)
AI Engineer
Build applications powered by LLMs and machine learning models — from prompt-based features to RAG pipelines and fine-tuned models.
Foundation (0–3 months)
- Solid Python fundamentals
- Understand how LLMs work at a conceptual level (tokens, context windows)
- Learn prompt engineering basics: zero-shot, few-shot, structured output
- Build a simple app calling an LLM API
Core AI Engineering (3–9 months)
- Learn RAG (Retrieval-Augmented Generation) and vector databases
- Study machine learning fundamentals (not just LLMs)
- Practice handling streaming, rate limits, and errors from AI APIs
- Build 2-3 real AI-powered projects end to end
Applied Projects (9–18 months)
- Learn evaluation techniques for AI outputs
- Study AI security basics: prompt injection, least-privilege for agents
- Contribute to or build an agent-based tool with real tool-calling
- Deploy a production AI feature with proper error handling
Growth (1.5–3 years)
- Specialize toward ML engineering, AI infrastructure, or applied research
- Learn fine-tuning and model evaluation at scale
- Mentor others on safe, effective AI integration
- Own AI feature architecture decisions on a team
🔑 Key Skills
🎓 Certifications
📚 Free Resources
- This site's free AI Course
- DeepLearning.AI (Coursera)
- Anthropic & OpenAI documentation
- r/MachineLearning
- Hugging Face courses (free)
Cloud Security Engineer
Secure cloud infrastructure (AWS/Azure/GCP) — identity and access management, network security, compliance, and incident response in the cloud.
Foundation (0–6 months)
- Solid general security fundamentals (Security+)
- Get hands-on with one major cloud provider (free tier)
- Learn cloud IAM concepts: roles, policies, least privilege
- Study basic Linux administration and networking
Cloud Security Core (6–18 months)
- Earn AZ-500 or AWS Security Specialty
- Learn Infrastructure as Code (Terraform) with a security lens
- Study container and Kubernetes security fundamentals
- Practice cloud security monitoring and logging setup
Specialization (1.5–3 years)
- Earn CKS if working heavily with Kubernetes
- Learn compliance frameworks relevant to your industry (SOC 2, ISO 27001, HIPAA)
- Practice incident response specifically in cloud environments
- Lead a real cloud security audit or hardening project
Senior Level (3–4 years)
- Earn CCSP or CISSP for broader security leadership
- Architect security for multi-cloud or hybrid environments
- Mentor engineers on secure-by-default cloud practices
- Own security posture for a production cloud environment
🔑 Key Skills
🎓 Certifications
📚 Free Resources
- This site's Linux Security & Hardening lesson
- AWS/Azure official security documentation (free)
- r/cloudsecurity
- Cloud Security Alliance (CSA) resources
SOC Analyst
Monitor security alerts in a Security Operations Center, triage incidents, and escalate real threats — often the entry point into a cybersecurity career.
Foundation (0–3 months)
- Earn CompTIA Security+
- Learn basic networking (TCP/IP, common ports, DNS)
- Get comfortable reading logs on Linux and Windows
- Practice on TryHackMe's SOC-focused learning paths
Core SOC Skills (3–9 months)
- Learn a SIEM tool hands-on (Splunk free tier, Elastic)
- Study common attack patterns (phishing, malware, brute force)
- Practice incident triage: what to escalate vs. what to close
- Understand the incident response lifecycle
Applied Experience (9–18 months)
- Work Tier 1 SOC analyst role or internship
- Earn CompTIA CySA+ for deeper analytical skills
- Build familiarity with threat intelligence feeds
- Document and present real incident findings
Growth (1–2 years)
- Move toward Tier 2/3 analyst, incident response, or threat hunting
- Specialize toward penetration testing, cloud security, or security engineering
- Mentor Tier 1 analysts
- Own detection rule tuning to reduce false positives
🔑 Key Skills
🎓 Certifications
📚 Free Resources
- TryHackMe SOC Level 1 path (free)
- LetsDefend (free SOC simulations)
- r/securityCTF
- Splunk free tutorials
IT Career Salary Comparison
US-based salaries (median). Varies by location, experience, and company.
| Career | Entry Level | Mid Level | Senior Level | Demand |
|---|---|---|---|---|
| 🛡️ Network Security Engineer | $65K | $100K | $145K | 🔥 Very High |
| ⚙️ System Administrator | $50K | $80K | $110K | 📈 High |
| ☁️ Cloud Engineer | $75K | $120K | $165K | 🔥 Very High |
| 🔄 DevOps Engineer | $80K | $115K | $155K | 🔥 Very High |
| 🔓 Penetration Tester | $65K | $100K | $140K | 📈 High |
| 💻 Full Stack Developer | $65K | $100K | $145K | 🔥 Very High |
| 📊 Data Analyst | $55K | $80K | $110K | 📈 High |
| 🤖 AI Engineer | $90K | $130K | $180K | 🔥 Very High |
| 🔒 Cloud Security Engineer | $95K | $130K | $175K | 🔥 Very High |
| 🕵️ SOC Analyst | $50K | $70K | $95K | 📈 High |