A staged certification path into DevOps engineering — cloud associate, CKA, Terraform and AWS DevOps Professional — with the skills to build at each step.
Picture a Linux sysadmin, five years in, who still deploys releases by SSH-ing into servers and running a shell script — or a backend developer who writes solid services but hands them over a wall to "ops" and hopes. Both are perhaps two certifications and a year of deliberate practice away from a DevOps engineer title, and in the US that title carried an average salary of roughly $145,271 on Glassdoor and $133,662 on Indeed as of August 2026 (self-reported figures; pay varies widely by location, experience and company).
The question is not which DevOps certification is best — it is in what order you should earn them so that each one builds on real skills from the last. This article lays out that sequence: a cloud foundation, then Kubernetes, then infrastructure as code and CI/CD, then a professional-level capstone. If you want a ranked comparison of certifications for DevOps jobs in general rather than a transition roadmap, that is a different article — this one assumes you are a sysadmin or developer plotting the move.
Before sequencing exams, be clear about the skill surface the role demands, because certifications only help when they map onto it:
No single exam covers all five. That is exactly why a sequenced path beats a scattergun approach: each stage below certifies one layer and gives you the working vocabulary the next stage assumes.
Start with the platform, because everything later — cluster networking, IaC providers, pipeline runners — lives on it.
If you are choosing without an employer constraint, AWS is the pragmatic default given its market position, and the AWS Certified Solutions Architect – Associate (SAA-C03) is the classic first credential: 65 questions in 130 minutes, $150 USD (regional pricing varies), with a scaled passing score of 720 out of 1000. AWS sets no prerequisites for any of its exams, so a sysadmin with a year of hands-on exposure can go straight to Associate rather than starting at the $100 Cloud Practitioner tier.
Developers moving into DevOps sometimes prefer the AWS Certified Developer – Associate (DVA-C02) — same price and length — because its emphasis sits closer to application deployment, and passing the later DevOps Professional exam renews it automatically. Either associate works as a foundation; pick the one matching your background rather than sitting both. Working through scenario questions early helps here: the AWS Certified Developer – Associate practice questions show you the style of applied, situational reasoning AWS exams demand, which is quite unlike memorising service facts.
Already deep in Azure or Google Cloud through work? Stay there — an associate-level credential on the platform you use daily beats a "better" one you cannot practise on. Our comparison of the best cloud computing certifications weighs the three providers if you are genuinely undecided.
Skills to build alongside stage 1: Linux command-line fluency, Git, and one scripting language (Bash or Python). No exam below tests these directly at this level, yet every later exam silently assumes them.
The Certified Kubernetes Administrator (CKA), run by the Cloud Native Computing Foundation through the Linux Foundation, is the centre of gravity of this whole path. Unlike the multiple-choice cloud exams, the CKA is performance-based: two hours of hands-on tasks executed against live Kubernetes clusters from a command line, proctored online through the PSI Bridge platform. You pass at 66%, and the exam tracks current Kubernetes closely (v1.35 as of August 2026, updated within weeks of each release).
That hands-on format is why the CKA punches above its weight with hiring managers — it is difficult to pass without genuinely operating clusters. The February 2025 curriculum revision sharpened its DevOps relevance further, adding Gateway API alongside Ingress, Helm and Kustomize, and troubleshooting of CRI, CSI and CNI integrations.
The practical details matter for planning:
Two clarifications that save people wasted detours. First, developers sometimes assume the Certified Kubernetes Application Developer (CKAD) is the "easier starter" — it is not; both are intermediate exams, with CKAD aimed at people building applications on Kubernetes and CKA at people running the clusters themselves. For a DevOps transition, CKA is the better fit because operations is the half you must prove. Second, the genuine entry-level option is the Kubernetes and Cloud Native Associate (KCNA), a 90-minute multiple-choice exam at $250 — worth it only if you have never touched Kubernetes and want a structured on-ramp; otherwise put the money towards CKA study time.
What about Docker certification? There is none worth pursuing. The Docker Certified Associate was discontinued after the Mirantis acquisition and has no successor, so any list still recommending it is stale. Learn Docker thoroughly — you cannot pass CKA without container fundamentals — but expect no certificate for it beyond the CNCF ladder itself.
With cloud and orchestration certified, round out the automation layer. These two credentials are cheaper and quicker than everything else on this path, which is why they slot in third rather than first — they add breadth, not the core signal.
Terraform remains the lingua franca of infrastructure as code, and HashiCorp's Terraform Associate is the most affordable serious credential in this entire path at $70.50 USD plus taxes. The current version is 004 (delivered since January 2026 — do not study against 003 materials), a one-hour online-proctored multiple-choice exam tested on Terraform 1.12, valid for two years. There are no formal prerequisites, but sit it after you have provisioned real infrastructure — ideally the very AWS resources you studied in stage 1, rebuilt as code. That habit of re-implementing console work in Terraform is the single highest-value study technique for this exam.
For the CI/CD pillar, the GitHub Actions certification is the most portable choice, given GitHub's ubiquity. Since July 2025 GitHub exams run through Pearson VUE in partnership with Microsoft Learn under Microsoft-style codes — Actions is GH-200, a 100-minute intermediate-level multiple-choice exam at $99 USD in most regions. If you have never used Actions at all, GitHub Foundations (GH-900, also $99) exists, but a working developer or sysadmin can usually go straight to GH-200 after building a few real pipelines.
Neither of these certifications alone gets you a DevOps job. Together, stacked on a cloud associate and the CKA, they complete the picture a job description actually lists.
The AWS Certified DevOps Engineer – Professional (DOP-C02) is the credential that finally carries the job title on its face: 75 questions in 180 minutes, $300 USD, scaled passing score 750 out of 1000. AWS recommends two or more years of provisioning and operating AWS environments plus a scripting background before attempting it — which, if you have followed stages 1–3 while doing related work, describes you.
It is a demanding, scenario-dense exam covering CI/CD on AWS, configuration management, monitoring, incident response and resilient infrastructure automation. Three planning notes:
On other platforms the equivalent capstones are Microsoft's AZ-400 (DevOps Engineer Expert) and the Google Professional Cloud DevOps Engineer; verify current formats and fees on the provider pages, as they change.
| Stage | Certification | Format | Cost (USD, 2026, varies by region) | Validity |
|---|---|---|---|---|
| 1 | AWS Solutions Architect – Associate (SAA-C03) or Developer – Associate (DVA-C02) | 65 questions, 130 min, multiple choice | $150 | 3 years |
| 2 | Certified Kubernetes Administrator (CKA) | Hands-on tasks, 2 hours | $445 (retake included) | 2 years |
| 3a | HashiCorp Terraform Associate (004) | Multiple choice, 1 hour | $70.50 + tax | 2 years |
| 3b | GitHub Actions (GH-200) | Multiple choice, 100 min | $99 | check provider |
| 4 | AWS DevOps Engineer – Professional (DOP-C02) | 75 questions, 180 min | $300 | 3 years |
Total exam spend is roughly $1,065 before taxes, vouchers or sales — and the 50% AWS voucher plus the Linux Foundation's frequent promotions routinely bring it lower. Spread over the 12–24 months a realistic transition takes, it is a modest outlay against DevOps engineer pay levels: alongside the Glassdoor and Indeed figures above, Robert Half's 2026 Salary Guide put the US midpoint for DevOps engineers at $145,750.
Two adjacent roles share most of this ladder, and one sentence each is enough to point you to the right map. If your interest is building internal developer platforms and golden paths rather than pipelines per se, the platform engineer certification stack extends this path with CKS and platform-specific depth. If you lean towards hybrid datacentre, virtualisation and server estates rather than cloud-native delivery, see the certifications for infrastructure engineers instead. And sysadmins wanting to shore up their current role before transitioning can consult the sysadmin certification ladder.
Realistically, no — DevOps is a mid-career role that automates work you already understand. The certifications above accelerate a sysadmin or developer sideways; someone starting from zero should first build a foundation in one of those two roles.
For a DevOps transition, CKA alone is usually enough. Add CKAD later only if your role tilts heavily towards application packaging and deployment patterns. CKA is also the sole prerequisite for the security-focused CKS, should you go that way.
There is no official study-hours figure for any of these exams, and honest guidance depends on your starting point. Working professionals commonly spread the four stages over one to two years; the CKA is typically the longest single preparation because hands-on fluency cannot be crammed.
They are hard in different ways: DOP-C02 tests breadth of scenario judgement across AWS services in multiple-choice form; CKA tests speed and accuracy at a live terminal. Neither publishes a pass rate, so ignore anyone quoting one.
Sequenced paths fail when they stay theoretical, so compress the start. In the next ninety days: pick your stage 1 exam and book it for a date roughly twelve weeks out; stand up a small personal project — an application you containerise, deploy to a managed Kubernetes cluster, and rebuild in Terraform — that will quietly prepare stages 2 and 3 while you study; and run one full-length timed practice exam at the halfway mark to find your weak domains early rather than the night before. The certification path into DevOps is long, but it is unusually well-marked — every stage above has a clear exam, a clear skill, and a clear reason it comes when it does.
Exam facts in this guide were checked against official certification-provider pages on . Fees, exam codes and policies change — confirm on the provider’s own site before you book.
Put it into practice
Reading about an exam only takes you so far. Work through practice questions for your certification and find the gaps before exam day does.
·10 min read
A five-step decision process for choosing a professional certification: goals, market demand, true cost, prerequisites and renewal — with a comparison worksheet.
Continue reading·12 min read
The strongest professional certifications for 2026, ranked on demand, recognition and cost of ownership — with the year's retirements and AI-driven changes factored in.
Continue reading·8 min read
How certifications actually influence recruiters when you change employers, which types move offers upward, and how to time one around a job search.
Continue reading
