The certifications that recur in job postings across IT, cloud, security and project roles — organised by career field, with verified costs, formats and prerequisites.
Open twenty job postings for IT, cloud, security or project roles and a strange thing happens: out of the thousands of certifications that exist, the same eight or ten names keep appearing. Employers are not adventurous about credentials. They ask for the ones their peers ask for — the certifications that recruiters recognise, that map cleanly onto job descriptions, and that compliance frameworks or vendor partnerships sometimes outright require.
Short answer: the certifications that recur most consistently in employer requirements cluster into four families — vendor-neutral IT and security foundations (CompTIA A+, Security+), networking (Cisco CCNA), cloud platforms (AWS and Microsoft Azure certifications), and management-level credentials (PMP for project delivery, CISSP for security leadership). Which of those you should pursue depends on your target role and career stage, not on any universal ranking — and this article organises them that way.
One honesty note before the list. You will find websites quoting precise "demand statistics" — percentages of postings, salary premiums, growth figures. We have not verified any such dataset, so this article won't quote one. What follows is instead organised around a durable pattern: which credentials employers name in requirements, for which roles, and why — with only verified facts about each exam. For how employers actually weigh a credential once you hold it, see how employers view certifications; this article is only about which ones are asked for.
Three forces keep the employer short list short, and understanding them tells you which credentials are safe bets:
A credential backed by at least one of these forces will keep appearing in postings. A credential backed by none of them — however good its content — rarely will.
For helpdesk, desktop support and IT technician roles, CompTIA A+ remains the credential employers most commonly name at the entry level. It is vendor-neutral, which suits generalist support work, and it is deliberately practical: the current V15 series (launched by CompTIA on 25 March 2025) uses multiple-choice, drag-and-drop and performance-based questions.
Verified facts, as of 2026: A+ requires two exams — Core 1 (220-1201, passing 675/900) and Core 2 (220-1202, passing 700/900) — each with a maximum of 90 questions in 90 minutes. There are no prerequisites, though CompTIA recommends around 12 months of hands-on IT support experience. Pricing varies by country and changes over time, so confirm current voucher prices on CompTIA's store. One thing employers increasingly notice: the exam codes. Listing the superseded 220-1101/1102 series as a fresh achievement dates a CV — make sure anything you earn and list is the current series.
Who employers ask it of: career starters and career changers targeting support roles. It is rarely requested beyond early-career positions.
Networking postings — network technician, network administrator, NOC roles — name the Cisco Certified Network Associate more than any other single credential. CCNA is Cisco's associate-level networking certification, earned through a single exam, code 200-301. Cisco's dominance in enterprise networking hardware makes its associate credential the default vocabulary for "understands routing and switching," even in shops that run mixed equipment.
Cisco publishes the current exam details, pricing and policies on its certification pages — check there before booking, as we have not independently verified the current format specifics.
Who employers ask it of: anyone whose job title contains "network," plus many general infrastructure and some security roles that touch network defence.
Security postings are unusual: demand concentrates at both ends of the seniority scale, with different credentials at each pole.
Security+ is the baseline security credential employers name for SOC analyst, junior security analyst and security-adjacent IT roles. It is vendor-neutral, has no formal prerequisites (CompTIA recommends Network+ and about two years in a security or systems administration role), and the current SY0-701 exam runs to a maximum of 90 questions in 90 minutes, mixing multiple-choice and performance-based items, with a passing score of 750 on a 100–900 scale. Note the refresh cycle: CompTIA versions Security+ roughly every three years, so verify the current exam code on CompTIA's site when you plan your attempt.
Its recurring presence in government-adjacent postings has a structural cause: baseline-certification requirements in U.S. defence workforce frameworks have long made vendor-neutral security credentials like Security+ a box that certain roles must tick.
At the senior end, the CISSP is the credential security-manager, security-architect and CISO-track postings name most often. It is deliberately hard to shortcut: ISC2 requires five years of cumulative paid work experience across its eight domains (candidates without it can pass the exam and work toward the requirement as an Associate of ISC2). It is ANAB-accredited and DoD 8140.03-approved, and priced accordingly — U.S. $749 in most regions, €719.04 in EMEA and £606.69 in the UK as of August 2026, per ISC2's pricing page.
Because of the experience requirement, CISSP demand in postings is really demand for experienced people who have also certified — it functions as a seniority marker, not a way in. If you are early in your career, Security+ is the demand-side answer; CISSP is a five-year plan. When you get there, ExamPractice maintains CISSP practice questions mapped to the certification's domains for benchmarking your preparation.
Where the posting says "IT auditor," "IS audit" or "compliance," the credential named is usually ISACA's Certified Information Systems Auditor (CISA). As of August 2026, the exam costs US$575 for ISACA members and US$760 for non-members, with a US$50 application fee at certification, and experience must be demonstrated at application. It is a narrower market than general security, but within that market it is close to a default requirement.
Cloud postings tend to name the platform first and the credential second: an "AWS engineer" posting asks for AWS certifications, an Azure shop asks for Microsoft's. Two families dominate.
The AWS Certified Solutions Architect – Associate (SAA-C03) is the AWS credential that appears most broadly across cloud engineering, DevOps and architecture postings — wide enough in scope to signal general AWS competence rather than a niche. Verified facts: 65 questions (50 scored, 15 unscored pilot items) in 130 minutes, passing score 720 on a 100–1,000 scale, $150 USD, no enforced prerequisites though AWS recommends a year of hands-on design experience. Certifications are valid for three years.
For complete beginners and non-engineering roles that touch cloud (sales, project, finance), the AWS Certified Cloud Practitioner (CLF-C02) — 65 questions, 90 minutes, passing 700/1,000, $100 USD — is the recognised first rung, though employers treat it as foundational literacy rather than an engineering qualification. Postings for senior architecture roles step up to the Professional-level architect certification. ExamPractice's Amazon exam hub covers the AWS certification line, including AWS Certified Solutions Architect – Associate practice questions.
In organisations standardised on Microsoft — a very large share of enterprise IT — Azure credentials play the equivalent role. Azure Fundamentals (AZ-900) is the entry point: a 45-minute proctored exam with no prerequisites, covering cloud concepts, Azure architecture and services, and management and governance, priced by country (Microsoft publishes local pricing; check the certification page). Microsoft also offers a free official Practice Assessment for AZ-900 — worth using. Above it, postings for engineers and architects name role-based certifications such as the Azure administrator, developer (AZ-204) and solutions-architect tracks; Microsoft's certification pages list the current exams for each role, and ExamPractice's Microsoft exam hub indexes practice material across the Azure line.
Choosing between AWS and Azure demand: don't. Choose the platform your target employers run. Postings tell you plainly — the stack is usually in the first three lines.
Outside pure IT, the Project Management Professional from the Project Management Institute (PMI) is the single most-named credential in project-delivery postings — programme offices, construction, healthcare, finance and IT alike name it. Its pull comes from the same forces as CISSP's: broad recruiter recognition plus an experience requirement that makes it a seniority marker rather than an entry ticket.
PMI sets specific eligibility, exam-format and renewal requirements which we have not verified this session — confirm all of them (experience hours, training prerequisites, fees and continuing-certification rules) directly on pmi.org before planning an attempt. The practical demand signal is simple: if your target postings say "project manager" and mention any credential at all, it is overwhelmingly this one.
| Credential | Typical roles naming it | Career stage | Prerequisites (verified) |
|---|---|---|---|
| CompTIA A+ (220-1201/1202) | Helpdesk, desktop support | Entry | None (12 months' experience recommended) |
| Cisco CCNA (200-301) | Network admin/technician | Entry–mid | Check Cisco's pages |
| CompTIA Security+ (SY0-701) | SOC/junior security analyst | Entry–mid | None (Network+ and ~2 years recommended) |
| AWS Cloud Practitioner (CLF-C02) | Cloud-adjacent, beginners | Entry | None |
| AWS Solutions Architect – Associate (SAA-C03) | Cloud/DevOps engineer, architect | Mid | None enforced (~1 year hands-on recommended) |
| Microsoft AZ-900 + role-based Azure certs | Azure-shop equivalents of the above | Entry–mid | None for AZ-900 |
| ISACA CISA | IT auditor, compliance | Mid | Experience shown at application |
| PMI PMP | Project/programme manager | Mid–senior | Confirm on pmi.org |
| ISC2 CISSP | Security manager/architect | Senior | 5 years' cumulative experience |
A demand-driven list still needs a personal filter. Ask, in order:
Then prepare properly: study the provider's official exam objectives, and use practice questions diagnostically — identify weak domains, review explanations, re-test — rather than memorising answers. A timed run in a practice-test simulation before booking tells you whether you're benchmarking at a pass or funding a retake.
The employer short list is stable at the top and churning at the edges: foundations like A+, Security+, CCNA and PMP have been recruiter vocabulary for years, while cloud demand tracks platform adoption and refreshes fastest. So anchor your plan in your target postings, pick the one credential those postings actually name for your next role, and earn it properly enough to survive the interview it wins you. If you're still surveying options, the full certification exams directory is a practical way to browse what exists across providers before you commit your study hours.
Exam facts in this guide were checked against official certification-provider pages on . Fees, exam codes and policies change — confirm on the provider’s own site before you book.
Put it into practice
Reading about an exam only takes you so far. Work through practice questions for your certification and find the gaps before exam day does.
·10 min read
A five-step decision process for choosing a professional certification: goals, market demand, true cost, prerequisites and renewal — with a comparison worksheet.
Continue reading·12 min read
The strongest professional certifications for 2026, ranked on demand, recognition and cost of ownership — with the year's retirements and AI-driven changes factored in.
Continue reading·8 min read
How certifications actually influence recruiters when you change employers, which types move offers upward, and how to time one around a job search.
Continue reading
