Select your current position
Pick a role and level — we'll show the growth path, skills and gap analysis.
Development path
Junior
0-2 years
Responsibility: Setting up CI/CD pipelines. Writing Dockerfiles. Server monitoring. Managing secrets. Basic cloud work.
Key skills:
Middle
2-5 years
Responsibility: Designing CI/CD. Setting up Kubernetes clusters. IaC (Terraform). Monitoring and alerting. Optimizing build processes.
Key skills:
Senior
5-8 years
Responsibility: Infrastructure architecture. Multi-environment strategy. GitOps (ArgoCD). Disaster recovery. Security hardening. Cost optimization.
Key skills:
Lead / Staff
7-12 years
Responsibility: Infrastructure strategy. DevOps practice standards. IDP (Internal Developer Platform). Coordination with development. Vendor management.
Key skills:
Principal
10+ years
Responsibility: Enterprise DevOps strategy. Multi-cloud architecture. Platform engineering vision. Industry influence.
Key skills:
Gap analysis: skills to develop
To reach the next level you'll need to develop:
Independently writes Ansible playbooks and roles for deployment automation, configuration management, and infrastructure provisioning in CI/CD pipelines. Implements dynamic inventories, Jinja2 templates for environment-specific configurations, and handlers for service management. Structures automation code with reusable roles, variable hierarchies, and tags for selective task execution across development, staging, and production environments.
Independently implements tasks with Apache Kafka in Terraform/Ansible. Understands internals and optimizes performance. Writes tests with Terratest/InSpec.
Independently configures ArgoCD Applications with sync policies, health checks, and resource hooks for CI/CD pipeline integration. Writes ApplicationSets with Git and cluster generators for multi-environment deployments. Implements notification integrations, sync windows, and automated rollback configurations for production delivery workflows.
Implements blue-green deployments in Kubernetes: through Service selector switch, Argo Rollouts or Istio traffic management. Configures automated post-switch health verification, rollback scripts. Manages database migrations for both-version compatibility.
Implements canary deployments through Argo Rollouts or Istio: configuring promotion steps (10%→30%→70%→100%), integration tests between steps. Defines analysis metrics (error rate, latency, saturation), configures automated rollback.
Configures and manages CDN: CloudFront with custom origins, cache behaviors, Lambda@Edge. Optimizes cache hit ratio through proper headers, configures invalidation in CI/CD. Configures Cloudflare Workers for edge computing.
Implements DR solutions: automated backups (Velero for Kubernetes, AWS Backup), cross-region data replication. Configures automated database failover, tests restore procedures. Documents DR plans and runbooks.
Deploys and configures ELK stack: Elasticsearch cluster in Kubernetes (ECK operator), Logstash/Fluentd/Filebeat for log collection. Creates index templates, ILM policies for rotation, Kibana dashboards. Configures structured logging for applications.
Implements feature flags in CI/CD: LaunchDarkly/Unleash/Flagsmith integration, flag management through API. Configures percentage rollout, A/B testing, targeting rules. Automates flag lifecycle: creation on deploy, cleanup of stale flags.
Develops CI/CD pipelines in GitLab: multi-stage pipelines, parent-child and downstream pipelines, include templates. Configures GitLab Runners (Docker, Kubernetes executors), manages variables, environments and review apps.
Implements GitOps workflow: configures ArgoCD/Flux for automatic synchronization of Kubernetes manifests from Git, organizes Git repository structure (app-of-apps, monorepo vs multi-repo), manages secrets through Sealed Secrets or External Secrets Operator.
Creates custom Helm charts for service deployment: Kubernetes resource templating, helpers and named templates, dependency management. Configures values for different environments (dev/staging/prod), publishes charts to ChartMuseum.
Independently creates and maintains Jenkins. Configures CI/CD pipelines. Automates routine operations.
Configures advanced Kubernetes features: HPA/VPA for autoscaling, PodDisruptionBudget, affinity/anti-affinity rules. Manages RBAC policies, configures NetworkPolicy for namespace isolation. Deploys and manages operators (cert-manager, external-dns).
Independently implements tasks with Python Web Frameworks in Terraform/Ansible. Understands internals and optimizes performance. Writes tests with Terratest/InSpec.
Configures and administers HashiCorp Vault: KV and PKI secret engines, access policies, authentication through Kubernetes and AppRole. Integrates Vault into CI/CD pipelines for automatic secret injection, configures rotation.
Configures VPN solutions: AWS Site-to-Site VPN, WireGuard for dev environments, OpenVPN Access Server. Manages certificates and keys, configures split-tunneling and routing. Integrates VPN with cloud VPCs and Kubernetes clusters.
Configures load balancers: AWS ALB/NLB with target groups, Nginx Ingress in Kubernetes, HAProxy. Configures SSL termination, sticky sessions, health checks. Manages Ingress resources with annotations for different controllers.
Develops custom metrics for DevOps: CI/CD pipeline metrics (build duration, success rate), deployment frequency, change failure rate. Creates exporters in Python/Go, instruments applications through client libraries. Configures recording rules.
Implements documentation as code: auto-generation from Terraform (terraform-docs), Helm (helm-docs), OpenAPI. Configures MkDocs/Docusaurus for internal documentation, CI/CD for auto-publishing. Creates architecture decision records (ADR).
Integrates container scanning into CI/CD: Trivy, Grype or Snyk Container. Configures quality gates for blocking images with Critical vulnerabilities, generates SBOM through Syft. Manages allowlists for acceptable vulnerabilities.
Configures on-call processes: schedules in PagerDuty/Opsgenie, escalation policies, alert routing rules. Creates runbooks for typical incidents, automates initial diagnostics. Conducts post-mortems and tracks action items.
Career transitions
Possible career trajectories for the DevOps Engineer role
↔️ Lateral 4
Adjacent roles for a lateral move
╨Я╨╡╤А╨╡╤Е╨╛╨┤ ╨▓ Cloud Engineering ╤Б ╤Д╨╛╨║╤Г╤Б╨╛╨╝ ╨╜╨░ ╨╛╨▒╨╗╨░╤З╨╜╤Г╤О ╨╕╨╜╤Д╤А╨░╤Б╤В╤А╤Г╨║╤В╤Г╤А╤Г
╨Ф╨╛╨▒╨░╨▓╨╗╨╡╨╜╨╕╨╡ security-╤Д╨╛╨║╤Г╤Б╨░ ╨║ DevOps-╨╜╨░╨▓╤Л╨║╨░╨╝
╨Я╨╡╤А╨╡╤Е╨╛╨┤ ╨▓ Platform Engineering ╤Б ╤Д╨╛╨║╤Г╤Б╨╛╨╝ ╨╜╨░ developer experience
╨Я╨╡╤А╨╡╤Е╨╛╨┤ ╨▓ SRE ╤Б ╤Д╨╛╨║╤Г╤Б╨╛╨╝ ╨╜╨░ reliability