DevOps Certifications Explained

The CI/CD platform family: GitHub, GitLab, Jenkins

Continuous integration and delivery is the "Dev" half of DevOps, and its certifications belong to the platforms pipelines run on.

GitHub restructured its programme recently, and this is the fact to know: since 1 July 2025, all GitHub certification exams are delivered exclusively through Pearson VUE in partnership with Microsoft Learn, with Microsoft-style exam codes — GitHub Foundations is now GH-900, GitHub Actions is GH-200. Certs earned via the old PSI route before that date stay visible on GitHub profiles; new ones live in Microsoft Learn profiles. Exams are proctored multiple-choice at $99 USD in most regions (Foundations has at times been discounted promotionally); GH-200 is listed at 100 minutes, intermediate level, with immediate pass/fail. The family also includes Advanced Security, Administration and Copilot certifications — verify individual codes on GitHub's credential hub before booking.

GitLab offers a Certified CI/CD Associate for GitLab-centred shops. Jenkins-related certification has historically existed through CloudBees. Current pricing and formats for both were not verified for this article — treat provider pages as the source of truth before spending money on either.

The cloud provider family: AWS, Azure, Google Cloud

Each hyperscaler runs a dedicated DevOps certification at the top of its own ladder. These are the most job-advert-visible credentials in the market, and the most cloud-locked: each one certifies DevOps as practised on that provider.

• AWS Certified DevOps Engineer – Professional (DOP-C02) — the current AWS DevOps exam, sitting at professional tier above the associate certs. Its scope is CI/CD, infrastructure automation, monitoring and incident response on AWS; see the AWS Certified DevOps Engineer Professional DOP-C02 exam page for its topic coverage. (Its predecessor DOP-C01 is retired.)
• Microsoft AZ-400: Designing and Implementing Microsoft DevOps Solutions — the exam behind the Azure DevOps Engineer Expert credential; expert-tier, and Microsoft's certification structure requires an associate-level Azure cert beneath it. Topic scope is on the AZ-400 exam page.
• Google Professional Cloud DevOps Engineer — Google Cloud's equivalent, professional-tier, centred on SRE-flavoured operations on GCP.

Widely cited prices for these three ($300 for AWS DevOps Pro, $200 for Google's) circulate but were not re-verified for this article — confirm on each provider's official certification page before budgeting. The practical guidance is the same for all three families: they assume production experience, and they make sense only after you know which cloud your career is anchored to.

The gap in the market: Docker

Ask what happened to Docker certification and you learn something about how this market evolves. The Docker Certified Associate (DCA) was once the standard container credential; after Mirantis acquired Docker Enterprise it was discontinued, and neither Docker Inc. nor Mirantis offers a successor. Existing holders may list it as a legacy credential, but it cannot be earned today — and its continued appearance on "best DevOps certs" round-ups is a reliable marker of stale content. Container skills are now certified through the CNCF ladder instead. Vendors also retire and renumber exams constantly (Terraform 003 → 004, DOP-C01 → DOP-C02, GitHub's PSI → Pearson VUE move), which is why every claim in this article carries a 2026 date.

Comparing across families: the five variables that actually differ

Because each vendor designs exams to its own conventions, cross-family comparisons mislead unless you normalise on the right variables. Five matter:

Cost, including the cost of failing. Sticker prices run from $70.50 (Terraform Associate) through $99 (GitHub exams) and $250 (CNCF associates) to $445 (CNCF hands-on exams). But retake policy changes the real number: CNCF hands-on purchases include one free retake and KCNA includes two attempts, while the Terraform Associate includes none — so a nervous first-timer's expected cost for a $250 KCNA can be lower than for two attempts at the $70.50 Terraform exam. Always price the second attempt.

Format. Multiple-choice versus performance-based, as covered at the top — the single biggest predictor of both preparation style and hiring weight.

Duration and delivery. From one hour (Terraform Associate) to four hours (Terraform Professional), all online-proctored across these families; the CNCF hands-on exams add the PSI Bridge secure browser's constraints (single monitor, webcam and microphone required).

Validity and renewal. Two years is the emerging norm — CNCF and HashiCorp both use it — but renewal mechanics diverge sharply: CNCF renewal is a full retake at full effort, which effectively doubles the decade-cost of staying certified on that ladder. Factor renewal into any multi-cert plan, not just the first purchase.

Published transparency. Vendors differ in what they disclose. The Linux Foundation publishes passing scores for its hands-on exams (66% for CKA/CKAD, 67% for CKS) but not for KCNA/KCSA; HashiCorp publishes no Terraform passing score; no CNCF pass rates are published at all. When a blog quotes a number the vendor does not publish, that tells you about the blog.

Two habits follow from all this. First, treat every number in every certification article — this one included — as dated, and re-verify on the official exam page before spending money. Second, when weighing an unfamiliar exam, spend an hour with its official objectives and a few representative sample questions before buying anything: format and difficulty reveal themselves faster in ten questions than in ten reviews.

Vendor-neutral "DevOps culture" certifications

A final, smaller family certifies DevOps as a methodology rather than a toolchain — the Linux Foundation's Certified DevOps Engineer track and various foundation-level process certifications sit here. They test vocabulary and practice patterns (CI/CD concepts, collaboration models) rather than hands-on tooling. They are the least demanded family in job adverts but can suit managers, and people in organisations that fund training but not lab time.

The borderlands: adjacent ladders that overlap DevOps

A complete map should mark its edges, because several certification ladders that are not "DevOps certifications" keep appearing in DevOps job descriptions.

Network automation ladders. Networking vendors have rebuilt their programmes around automation, which drags them into DevOps territory. Arista's Cloud Engineer (ACE) programme is a clear example — a five-level ladder that culminates in an automation-focused credential at ACE Level 5, Cloud Automation. For engineers whose DevOps work centres on network infrastructure, these can matter more than a second cloud badge; browse the full ladder via the Arista exams hub.

Cloud associate tracks. Below each provider's DevOps exam sits an associate tier — Google's Associate Cloud Engineer, AWS's SysOps Administrator Associate, Azure's administrator track — that certifies the operational skills the DevOps exams build on. They are stepping stones within a vendor family rather than DevOps certs in their own right, but most people who hold a cloud DevOps cert climbed through one.

Platform-specific DevOps badges. A scattering of product vendors have attached "DevOps engineer" to their own tooling over the years (Adobe once certified an Experience Manager DevOps Engineer, for instance). These certify a product, not the discipline — relevant only if that product is your job.

Knowing where the borders are keeps a certification plan honest: the families in the core of this map certify transferable DevOps capability; the borderlands certify context you may or may not need.

Reading the map: how the families fit together

Put the six families side by side and a shape emerges:

1. CNCF certifies the orchestration layer — vendor-neutral, and the only family with true hands-on exams at its core.
2. HashiCorp certifies the provisioning layer — how infrastructure gets defined.
3. GitHub/GitLab certify the pipeline layer — how code becomes deployments.
4. AWS/Azure/Google certify all three layers at once, but only as implemented on their own cloud.
5. Vendor-neutral process certs certify the vocabulary around everything.

That is why a credible DevOps profile usually mixes families rather than climbing one: a Kubernetes cert plus a Terraform cert plus one cloud cert covers more of the actual job than three certs from any single vendor. Which mix, in which order, at which career stage is deliberately out of scope here — the sequencing question has its own article, the DevOps certification roadmap, the ROI question is weighed in is a DevOps certification worth it, and pay differences by credential are covered in the DevOps certification salary guide.

Frequently asked questions

How many DevOps certifications exist in total?

No official census exists, because "DevOps" is a job description rather than a standards body. The families above cover roughly fifteen mainstream exams; the long tail (niche vendor exams touching DevOps tooling, from Arista's automation-focused cloud engineer levels to platform-specific credentials) adds dozens more. You can browse the full spread by provider in the certification exams directory.

Do all DevOps certifications expire?

Every certification named above carries a validity period — two years across CNCF and HashiCorp families. Renewal policy differs by vendor: CNCF requires a full retake, while cloud providers each run their own recertification rules; check the issuing body's policy before assuming any badge is permanent.

Are there free DevOps certifications?

No mainstream exam in these families is free, but costs range enormously — from $70.50 (Terraform Associate) to $445 (each CNCF hands-on exam) — and vendor sales are common. Free preparation is another matter: official documentation, provider curricula and free sample practice questions let you gauge an exam's difficulty before paying for it.

Which single certification covers "all of DevOps"?

None does, and any marketing that claims otherwise is overselling. The cloud providers' professional DevOps exams come closest in breadth, but each is locked to one cloud. Breadth in DevOps is assembled across families, not bought in one exam.

Where to go from this map

If this article did its job, you now know which family each certification belongs to and what kind of exam it is — which means the next question is not "what exists?" but "which one first, for me?". Answer that by career stage: newcomers should start from the entry-level ranking, experienced engineers from the professional-tier one, and anyone planning multiple exams from the roadmap. And whichever exam you eventually pick, test the decision cheaply before committing: reading its objectives and working a handful of sample questions for it — ExamPractice hosts these across the families above, with fuller sets and timed practice-test simulation for subscribers — tells you within an hour whether the exam matches the picture this map gave you.