A role-first guide to the certifications that matter for cloud engineers — one cloud associate cert, Kubernetes and infrastructure-as-code — with a staged plan.
Open five cloud engineer job adverts and you will see the same pattern repeat: one cloud platform named as primary (sometimes two), Kubernetes or containers somewhere in the requirements, and infrastructure as code — usually Terraform — in nearly all of them. That pattern is your certification plan. A cloud engineer's strongest credential stack is not three badges from one vendor; it is one solid associate-level cloud certification, plus proof you can run Kubernetes, plus proof you can define infrastructure in code.
This article picks the highest-value certifications for the cloud engineer role specifically. If you are still deciding which provider ecosystem to bet on — a genuinely separate question — our cross-provider comparison of the best cloud computing certifications handles the AWS-versus-Azure-versus-Google-Cloud decision in full; here we assume the role is the fixed point and choose certifications around it.
A cloud engineer builds, deploys and operates infrastructure on a cloud platform: provisioning compute and networking, automating deployments, managing identity and access, monitoring workloads, and keeping costs and security under control. The title sits between systems administration (which it grew out of) and platform or DevOps engineering (which it grows into). If your day job is mostly hybrid on-prem estates rather than public cloud, the infrastructure engineer certification list may fit you better.
For hiring managers, certifications answer three questions about a cloud engineer candidate: can you operate a specific cloud competently, can you work with the container orchestration layer, and can you automate rather than click? Each question maps to a certification category below.
This is the non-negotiable one. Pick a single provider — the one your employer or target employers run — and earn its operations-focused associate certification.
The only major certification with "cloud engineer" in its name, and the most literal match for the role. It costs $125 plus tax, runs two hours with 50–60 multiple-choice and multiple-select questions, has no prerequisites, and Google recommends six-plus months of hands-on experience. It is valid for three years, and a shorter renewal exam (20 questions, one hour, $75) now exists. Google publishes no passing score — results are pass/fail. If your market runs Google Cloud, start here.
The anchor certification for Azure operations work: identities and governance, storage, compute, virtual networking, monitoring — a 100-minute proctored exam scored out of 1,000 with 700 to pass (a scaled score, not 70%). Pricing varies by country; third-party sources commonly cite about US$165. Two things make AZ-104 unusually high-leverage: it is the mandatory prerequisite for Azure Solutions Architect Expert (AZ-305), and the practical prerequisite route for DevOps Engineer Expert (AZ-400) now that AZ-204 has been retired. It expires annually but renews free through an open-book online assessment. When you are deep into the objectives, checking yourself against AZ-104 Azure Administrator practice questions under timed conditions is a sensible readiness gauge before booking.
AWS offers two credible routes for cloud engineers, both $150, 65 questions, 130 minutes, valid three years, no prerequisites:
If you can only take one, take SAA-C03 for recognition; if your employer values operational depth or you already hold SAA, SOA-C03 is a strong second AWS credential — and passing the DevOps Professional exam later renews it automatically.
The Certified Kubernetes Administrator (CKA), run by the Cloud Native Computing Foundation through the Linux Foundation, is the one certification in this list that is genuinely hands-on: a performance-based, online-proctored practical exam where you fix and configure real clusters rather than answer multiple-choice questions. That format is exactly why hiring managers rate it — it is hard to pass without genuine keyboard skill.
As of 2026 the list price is $445, which includes one free retake within twelve months of purchase, and the certification is valid for two years — confirm the current term and price on the Linux Foundation's page, as promotional discounts of 30–50% appear frequently. Because it is vendor-neutral, the CKA travels with you across AWS, Azure and Google Cloud jobs, which arguably makes it the best value-per-dollar credential a mid-level cloud engineer can hold.
Take it after your cloud associate certification, not before: Kubernetes on the job is almost always a managed service (EKS, AKS, GKE) sitting on cloud primitives you need to understand first.
HashiCorp's Terraform Associate certification verifies the skill that most separates a cloud engineer from a cloud administrator: defining infrastructure declaratively and managing it through code review and version control. Our research pack for this article did not include verified pricing or format details for the current Terraform Associate exam, so check the exam version, fee and delivery details on HashiCorp's official certification pages before booking. What we can say with confidence is that Terraform appears in cloud engineer job requirements across all three provider ecosystems, which makes this the most portable third certification in the stack — and even if you never sit the exam, working through its objectives is a well-structured IaC syllabus.
If your organisation is all-in on a single cloud's native tooling (CloudFormation, Bicep), the provider's own exams already cover some IaC ground; the Terraform credential earns its place when you want multi-cloud portability.
Foundational exams are optional for engineers. AWS Certified Cloud Practitioner ($100), Azure Fundamentals (AZ-900) and Google's Cloud Digital Leader ($99) are worthwhile if you are entering from a non-technical background, but no provider requires them before associate exams, and hiring managers for engineering roles read them as warm-up laps. Career changers weighing up entry routes more broadly may find our guide to the best certifications for switching careers useful before committing to cloud at all.
Professional-level certifications are stage-two moves. Once you have two or three years in the role, AWS Certified DevOps Engineer – Professional (DOP-C02: $300, 75 questions, 180 minutes) is the natural deepening for automation-heavy engineers, and it renews your associate-level AWS certs when you pass. On Azure, AZ-400 (DevOps Engineer Expert) plays the same role; on Google Cloud, the Professional Cloud DevOps Engineer ($200) covers SRE practices, CI/CD and observability. Architecture-track professionals (SAP-C02, AZ-305, Professional Cloud Architect) suit engineers heading towards design responsibility rather than deeper operations.
A prioritised sequence, assuming you are starting from general IT experience:
That full stack — one associate, CKA, Terraform, one professional — is achievable inside two years and matches what senior cloud engineer adverts actually list. Resist the temptation to substitute breadth for this depth: a second provider's associate exam only makes sense once the first three layers exist, typically when a specific employer or client demands it.
No certification carries a salary, and any figure you see attached to one is survey data about people who hold it — people whose experience, not their badge, drives most of the number. With that caveat: Robert Half's 2026 US Technology Salary Guide lists a midpoint of $145,750 for DevOps engineers, the closest listed role to senior cloud engineering, and projects US tech salaries rising about 1.6% from 2025 to 2026. Skillsoft's 2025 IT Skills and Salary Report (5,100+ respondents worldwide) found IT professionals reporting roughly 5% year-on-year earnings growth, with cloud security credentials — notably AWS Certified Security – Specialty in North America, at an average of $202,959 — topping its regional pay tables. Pay varies sharply by country, sector and seniority; treat these as directional, and check sources like the named surveys rather than aggregator sites for your own market.
If you remember one thing: one cloud associate certification, then CKA, then Terraform — in that order, chosen around the jobs in front of you. An Azure-shop administrator should take AZ-104 this quarter; a jobseeker in an AWS-dominated market should book SAA-C03; an engineer at a Google Cloud company should sit the Associate Cloud Engineer exam. All three routes converge on the same vendor-neutral middle layer, so no first choice locks you in. Confirm current fees and exam versions on the official provider pages — several have changed within the past eighteen months — and benchmark with a full-length timed practice test before you spend the booking fee.
Exam facts in this guide were checked against official certification-provider pages on . Fees, exam codes and policies change — confirm on the provider’s own site before you book.
Put it into practice
Reading about an exam only takes you so far. Work through practice questions for your certification and find the gaps before exam day does.
·10 min read
A five-step decision process for choosing a professional certification: goals, market demand, true cost, prerequisites and renewal — with a comparison worksheet.
Continue reading·12 min read
The strongest professional certifications for 2026, ranked on demand, recognition and cost of ownership — with the year's retirements and AI-driven changes factored in.
Continue reading·8 min read
How certifications actually influence recruiters when you change employers, which types move offers upward, and how to time one around a job search.
Continue reading
