Auto Apply to hundreds of jobs in a few hours

Español

日本語

Cloud Architect skills: what to learn first, and what can wait

A cloud architect gets hired for judgment, but the judgment has to sit on top of hands-on skill. Learn networking, identity and infrastructure as code first, because every design review ends up there. The cost modelling and the governance work can wait until someone trusts your diagrams.

415 open jobs

Step one

Gets you the interview

Cloud networking: VPCs, subnets, routing and private connectivityMost outages and most security findings trace back to the network. You should be able to sketch a hub-and-spoke layout, explain when you'd use a transit gateway or VNet peering, and say how on-premises traffic gets in over VPN or Direct Connect.

Identity and access designIAM roles and policies on AWS, Entra ID and role-based access on Azure, service accounts on Google Cloud. Screeners ask how you'd give a build pipeline access to one bucket and nothing else, and a vague answer ends the call.

Terraform or another infrastructure as code toolArchitects who can't read a Terraform module end up drawing designs nobody can build. Know state files, modules and how a plan gets reviewed in a pull request.

Deep working knowledge of one providerPick AWS, Azure or Google Cloud and know its compute, storage and database options well enough to argue for one over another. Breadth comes later.

Step two

Gets you the offer

Writing architecture decision recordsA short document that says what you chose, what you rejected and why. Final rounds often include a whiteboard design, and the candidate who names the trade-offs out loud, like managed Postgres versus running it on Kubernetes, wins it.

Designing for failureMulti-zone versus multi-region, recovery time and recovery point objectives, and what actually happens to sessions and queues when a zone drops. Interviewers push on this until your design breaks, so practice defending one.

Well-Architected reviewsAWS, Azure and Google each publish a framework covering reliability, security, cost and operations. Running a review against one, and turning the findings into a ranked fix list, is work you'll do in your first month.

Kubernetes and container platform designYou don't need to be the cluster admin, but you should know when EKS, AKS or GKE is worth the overhead and when a serverless option like Lambda or Cloud Run is the better call.

Step three

Gets you promoted

Cloud cost modelling and FinOpsEstimating what a design will cost before it's built, reading the billing export, and knowing where reserved capacity or savings plans pay off. Senior architects get asked why the bill jumped, and the ones with an answer get the bigger scope.

Landing zone and governance designAccount or subscription structure, organisation policies, tagging rules and guardrails that stop a team from opening a database to the internet. This is the work that shapes how every other team builds.

Migration planningDeciding which applications get rehosted, which get rebuilt and which get retired, then sequencing the moves so the business keeps running. Large migrations are where architects become principal architects.

Compliance mappingTurning SOC reports, PCI DSS or HIPAA controls into concrete settings like encryption keys, logging and network isolation. It pulls you into the rooms where budgets get set.

Certificates worth your time

Certificate	Best for	Effort	Worth it?
AWS Certified Solutions Architect Professional	Architects working mainly on AWS who already hold the Associate level	a couple of months of evenings with practice exams	The one cloud certificate hiring managers treat as a real signal. The exam is long and scenario heavy, so it proves you can reason about trade-offs, not just recall service names.
Microsoft Certified: Azure Solutions Architect Expert	People aiming at companies that run on Microsoft and Azure	a couple of months, plus the Azure Administrator Associate first	Worth it if your target employers are Azure shops, which covers a lot of enterprise and public sector work. Skip it if every posting you see says AWS.
Google Cloud Professional Cloud Architect	Architects at data-heavy companies built on Google Cloud	several weekends of study and hands-on labs	Respected and less common than the AWS one, so it can help you get noticed for Google Cloud roles. Don't take it as your first certificate unless that's where you work.
HashiCorp Certified: Terraform Associate	Anyone whose designs get built with Terraform	a few weekends	Cheap and quick. It won't get you an architect job alone, but it backs up the infrastructure as code claim on your resume.

Exam versions, prerequisites and prices change, so check the current details with AWS, Microsoft, Google or HashiCorp before you book.

Put it on your résumé like this

Weak

Designed cloud solutions for various business applications on AWS.

Strong

Designed a multi-account AWS landing zone for 14 product teams, moved 60 workloads off the data center in 9 months, and cut monthly spend 22% through rightsizing and savings plans.

Questions people ask

Do I need to code to be a cloud architect?

You need to read code comfortably and write infrastructure as code yourself. Architects who can't open a Terraform pull request and spot the problem lose credibility with engineers fast.

Should I learn AWS, Azure or Google Cloud first?

Learn the one your target employers name in their postings. AWS shows up widely, Azure is strong in enterprise and government, and Google Cloud is common at data-heavy companies. The concepts carry over, so going deep on one beats skimming three.

Which skill do engineers moving into architecture usually lack?

Writing. Plenty of strong cloud engineers can build anything and can't explain on one page why they chose it. Start writing decision records for your current team's changes.

Are certificates enough without hands-on experience?

No. A certificate gets your resume past a keyword filter, but the design interview exposes anyone who hasn't run real systems. Pair each exam with something you built and operated, even a small personal project with its own account and budget alerts.

Got step one? Start applying. HeroApply matches you to roles that fit.

Start your trial