Exampractice
Careers & Salaries

What Certification Should You Take After RHCSA?

RHCE, OpenShift, CKA or a cloud cert after RHCSA? A decision framework for working Linux admins choosing their second certification wisely.

Elena Rossi · 9 min read
Signpost showing three certification directions after RHCSA — Ansible automation, Kubernetes containers and cloud

There is a common assumption among newly minted Red Hat Certified System Administrators that RHCE is simply "the next level" — a rung you climb because it is there. It is not. RHCE (EX294) is an Ansible automation exam pointing at one specific kind of job, and two entirely different directions — Kubernetes platforms and public cloud — are competing for the same slot in your plan. Treating the choice as a ladder rather than a fork is how people end up a year into the wrong study cycle.

Short answer: RHCE (EX294) is the right pick when RHEL fleets are — or are about to become — your daily work; it also carries a unique perk none of the alternatives offer, resetting your RHCSA to three more years of currency from the new pass date. OpenShift or the Certified Kubernetes Administrator (CKA) win when your organisation is shifting workloads into containers, which is where hiring pressure is strongest. A cloud certification makes sense second only when cloud-platform work, not Linux engineering, is genuinely your next role.

That renewal asymmetry deserves a moment before you read on: only a Red Hat exam touches your Red Hat currency, and your RHCSA is current for three years, so a long detour through CNCF or AWS study means accepting that the clock keeps running in the background. Worth knowing; not, on its own, a reason to pick RHCE.

Scope, briefly: everything below is for people who already hold RHCSA. There is no EX200 preparation here and nothing depends on how you earned the credential.

Start with the question that actually decides it

Certification forums frame this choice as "which exam is best", but the exams are not competing on quality — they are proxies for three different jobs:

  • RHCE / Ansible → automation-heavy Linux engineering: you stay in the operating system world and scale yourself with configuration management.
  • OpenShift / Kubernetes (CKA) → platform engineering: the OS becomes the substrate and the container platform becomes your product.
  • Cloud (AWS/Azure) → cloud infrastructure engineering: provisioning, networking and services on someone else's platform, with Linux as background knowledge.

So the deciding question is not "which certification is most valuable?" but "which of these three jobs do I want to be doing in two years — and which one is my current employer actually hiring for internally?" A certification aligned with work you can practise daily compounds; one aligned with work you never touch decays into a line on a CV. Every Red Hat and CNCF exam in this article is performance-based, which makes the point sharper: these exams verify things you can do, and doing them at work is the cheapest study plan there is.

Option one: RHCE (EX294) — the default for RHEL-fleet admins

The modern RHCE is an Ansible exam: you write Ansible Automation Platform playbooks that perform real tasks across multiple systems, and they are graded by being executed against freshly installed machines. No internet, and no documentation of any kind in the room — stricter than EX200. US list price is widely reported at $500, varying by country; your current RHCSA is the prerequisite for the credential to be granted.

Note the branding in transition: as of August 2026, Red Hat's pages title EX294 "Red Hat Certified Advanced System Administrator in Ansible" under its new five-track programme, counting towards Engineer and Architect credentials in the Ansible track — but it is the same exam employers have called RHCE since 2019, and adverts still say RHCE.

Take this path when:

  • your day job involves more RHEL servers than you can comfortably manage by hand;
  • your employer runs (or is adopting) Ansible Automation Platform;
  • you want the RHCSA-renewal side effect and a coherent Red Hat stack building towards an architect-level credential — the multi-year view of that ladder is mapped in the Red Hat certification career path;
  • automation engineering appeals more than platform operations.

Skip it when your organisation is container-first and your Linux estate is shrinking into node-management — in that world, Ansible fluency still helps, but the certification signal that moves your career is the container one.

A realistic scenario: a datacentre Linux admin at an insurer with 600 RHEL hosts and an Ansible Tower deployment nobody fully owns. For her, EX294 is not just the obvious next exam — preparing for it makes her the person who owns the automation, which is a promotion case, not just a credential. When she is ready to test herself, timed drills against RHCE practice questions will expose whether her playbooks hold up with no documentation to hand, which is the exam's defining constraint.

Option two: containers — OpenShift or the CKA

If option one deepens your current identity, this one upgrades it. Container platforms are where infrastructure hiring has been concentrating, and an RHCSA holder is unusually well placed: you already understand the Linux primitives Kubernetes is built from.

Within this direction there are two sensible exams, and the choice between them is mostly about whose platform you will operate:

Red Hat OpenShift specialists. If your employer runs OpenShift, the Red Hat Certified Specialist in OpenShift Administration keeps you inside the Red Hat ecosystem, is performance-based like all Red Hat exams, and — under the five-track programme Red Hat introduced in May 2026 — sits in the OpenShift track as a specialist elective. One caution from that restructure: new Red Hat Certified Architect credentials must now be assembled entirely within one track, so an OpenShift specialist advances an OpenShift-track RHCA, not an Enterprise Linux or Ansible one. Check Red Hat's catalogue for current specialist line-ups before booking.

Certified Kubernetes Administrator (CKA). The vendor-neutral route, from CNCF and the Linux Foundation. As of 2026: $445 exam-only, online-proctored, two hours, hands-on tasks on live clusters running Kubernetes v1.35, passing score 66%, no prerequisites. The purchase includes a 12-month eligibility window, one free retake and two sessions of the killer.sh simulator — which materially softens the cost of a failed first attempt compared with Red Hat's $500 single sitting. Two facts stale blog posts get wrong: the curriculum was revised in February 2025 (Gateway API, Helm and Kustomize, CRI/CSI/CNI troubleshooting, Pod Security Standards), and CKA certifications earned since April 2024 are valid two years, not three, with renewal by full retake.

Take the container path when: your organisation is migrating workloads to Kubernetes or OpenShift; you want the platform-engineering trajectory; or your Linux estate is becoming the thing that runs under the thing that matters. Choose OpenShift if that is literally your employer's platform; choose CKA if you want the portable signal across every Kubernetes distribution, or if a future employer change is likely.

For pay context on the destination: 2026 US figures for DevOps engineers — the family of roles this path feeds — include Glassdoor at roughly $145,271 average total pay and Indeed at $133,662, self-reported averages that vary with location and experience. No credible survey isolates a premium for the CKA itself, so treat any "CKA adds $X" claim you read elsewhere as unverified.

Option three: a cloud certification — the right detour for the right reader

The third fork is AWS or Azure. From the verified 2026 pricing: AWS associate-level exams are $150 (with foundational at $100 and professional/specialty at $300), and Microsoft's AZ-104 Azure Administrator Associate is $165 in the US, renewable annually at no cost through Microsoft's online renewal assessment. Confirm current exam codes on the providers' pages before booking, as they revise periodically.

The honest counsel: this is the correct second certification for a minority of RHCSA holders — specifically those whose organisation is actively lifting infrastructure into a public cloud and who want to follow it there, or who intend to leave Linux-centred work for cloud-platform roles. A cloud associate certificate is mostly multiple-choice-based signal about a platform, where your RHCSA is performance-based proof of a craft; the two do not stack into a single ladder, and a cloud cert neither renews your RHCSA nor advances any Red Hat track. As a third certification after RHCE or CKA, cloud credentials pair excellently. As the second, they change lanes — make sure a lane change is what you want. Choosing between AWS, Azure and Google Cloud is its own decision, covered in our comparison of the best cloud computing certifications.

The decision in one table

FactorRHCE (EX294)OpenShift Specialist / CKAAWS / Azure associate
Job it points atAutomation-focused Linux engineerPlatform / Kubernetes engineerCloud infrastructure engineer
FormatHands-on, no docs allowedHands-on (both)Multiple-choice-based
Cost (US, 2026, hedged)~$500 reportedRed Hat: varies; CKA $445 incl. one retakeAWS $150; AZ-104 $165
Renews your RHCSA?Yes — 3 years from passOpenShift specialists sit in a different Red Hat track; CKA: noNo
Validity3 years (Red Hat currency)Red Hat 3 years; CKA 2 yearsAWS 3 years; Azure 1 year, free renewal
Best whenYou run RHEL fleets with AnsibleYour workloads are moving to containersYou are following workloads into cloud

Sequencing: you will probably do two of these anyway

The choice feels binary but is really about ordering. A Linux engineer five years from now plausibly holds RHCSA, an automation credential and a Kubernetes credential; the question is which comes second. Two sequences cover most readers:

  1. Fleet-first sequence: RHCSA → RHCE → OpenShift/CKA. Suits admins in traditional estates automating now and containerising later. Keeps Red Hat currency rolling from the start.
  2. Platform-first sequence: RHCSA → CKA or OpenShift → automation later. Suits admins whose employers are already deep in Kubernetes. Accept that your RHCSA may go non-current at the three-year mark and decide then whether it still earns renewal — for a platform engineer, it often becomes optional history rather than a required credential.

Whichever you pick, the working method is the same: practise in a lab, then benchmark under exam conditions before you book. Analysing which task domains you fail under time pressure — rather than re-running the ones you enjoy — is what separates a useful practice run from a comfortable one; the Red Hat exams hub covers the Red Hat side of the ladder.

Making the call

Strip away the exam branding and three verbs remain: automate the estate you have (RHCE), operate the platform your workloads are moving to (OpenShift/CKA), or follow the infrastructure off-premises (AWS/Azure). Whichever verb describes work you can actually touch this year is your answer — daily practice is what turns a certification into competence rather than a CV line. Book it with your RHCSA renewal window in view, and file the other two directions as later chapters instead of rejected options; most Linux careers eventually collect more than one of them anyway.

Frequently asked questions

Does taking the CKA renew my RHCSA?

No. Only Red Hat credentials affect Red Hat currency — earning higher credentials in the track extends lower ones by three years from the new pass date. CNCF and cloud certifications have no effect on it.

Can I go straight from RHCSA to the CKS security certification?

Not directly — the Certified Kubernetes Security Specialist requires a current CKA first. RHCSA satisfies nothing in the CNCF ladder; the two programmes are independent.

Is there an entry-level Kubernetes exam if the CKA feels like a big jump?

Yes — the Kubernetes and Cloud Native Associate (KCNA), a $250 multiple-choice exam with no prerequisites, is CNCF's entry point. For someone already holding RHCSA, though, the hands-on CKA is usually within reach and carries far more hiring weight.

How long after RHCSA should I take the next exam?

There is no official guidance, but the three-year currency window suggests a natural rhythm: a second exam 12–24 months after RHCSA keeps momentum, and if that exam is EX294, it resets your RHCSA clock as a bonus.

Exam facts in this guide were checked against official certification-provider pages on . Fees, exam codes and policies change — confirm on the provider’s own site before you book.

Put it into practice

Test what you have just read

Reading about an exam only takes you so far. Work through practice questions for your certification and find the gaps before exam day does.

You may also like