Learner profile · Cloud engineer

What certification should a cloud engineer take next?

Deepen on your primary platform when architecture is the gap, add AZ-104 when Azure work is genuinely entering an AWS-focused role, choose Security+ when cloud security foundations are missing, or build automation and cluster fluency when operations are the constraint. Do not collect a second platform logo without an environment where you can practice it.

Reviewed August 27, 2026. Exam and renewal figures load from the cited certification records.

Compare the four directionsWhat the role pays and does →

You are here

The branch point every cloud engineer reaches

Once you are shipping real infrastructure, another foundational cloud credential proves nothing your deployments do not already prove. The honest decision has four directions, and they are not equally right for everyone: deepen (the associate architect rung, with the professional tier as a later, senior move), broaden (a second platform, if you are genuinely multi-cloud), specialize in security (own the identity and encryption conversations), or build Kubernetes and automation fluency (when operations are the named constraint). The verdicts below are honest about who each rung fits — including where our own coverage has an honest gap.

The four directions

Choose from the cloud capability you need next

Deepen — the associate-to-professional decision: AWS Solutions Architect Associate exam $150 (fee as of 2026-08-23)

The depth rung on the platform you already practitioner-certified on. It moves you from knowing the vocabulary to defending an architecture — the trade-offs, failure modes, and well-architected thinking a cloud engineer is actually paid to make. Beyond it sits the Solutions Architect Professional tier, and here is the honest part: the professional exam is a senior, budgeted move that assumes years of real production design experience, not a quick follow-on. Clear the associate first; let the professional be a deliberate decision you make later, not a box you rush.

Broaden — a second platform: Microsoft Azure Administrator Associate exam $165 (fee as of 2026-06-19)

Multi-cloud fluency is genuine leverage, and the administrator-associate rung is the efficient way to pick up a second platform: most of the work is re-mapping concepts you already hold on one cloud into another console rather than learning them cold. Pick this when your organization is truly hybrid, or when a migration drops Azure workloads on your plate — not to collect a second logo you never touch.

Specialize — the security baseline for cloud work: CompTIA Security+ exam $439 (fee as of 2026-06-13) · 3-yr renewal $150

Choose this when identity, network controls, encryption, hardening, logging, and incident work are becoming part of your cloud remit. Pair it with a controlled cloud-security project; skip it when the gap is platform architecture rather than security foundations.

Automate — Kubernetes and infrastructure-as-code our cited record is pending

Choose this direction when the environment you run uses managed clusters or infrastructure-as-code and deployment, upgrade, policy, or troubleshooting work is the constraint. We are deliberately not linking a certification: Learnerside does not yet have a current public decision for this direction. Build and explain a controlled cluster or automation project before making an exam the goal.

Fees, renewal costs, and eligibility come from each vendor’s official pages — cited and dated on the linked certification pages, at published list price: planning context, not a promise of voucher or bundle pricing. The professional-tier and Kubernetes credentials named above are referenced without a link on purpose, because we do not yet carry a cited record we can stand behind for them.

Renewal economics

The AWS renewal model is not a fee — it is a clock

That difference matters as your stack grows: the CompTIA rung on this page carries a paid continuing-education fee, while the AWS and Microsoft role-based credentials renew by re-examination or a free reassessment. So the honest three-year budget is the exam fees plus only the CE fees on the credentials you keep — and the time to re-sit the vendor exams that expire. Decide which certs still earn that keep before you add the next one.

Adjacent moves

If this is really a career-direction question

A next cert is a skill add; the bigger moves cloud engineers weigh are upward into architecture or sideways into platform and DevOps work — the same Kubernetes and automation fluency above, but as a role rather than a rung. If that is the real question, the destination role pages carry the full cited picture, including the occupation-level outlook and what your build experience transfers.

The funding ask

Build the approval case around one cloud capability

Tie the request to the platform the employer runs, the practical work you will complete, the free preparation you will use first, and the exact constraint that makes paid structure useful. Employer eligibility, covered expenses, preapproval, reimbursement timing, completion rules, and tax treatment remain specific to the employer’s written plan and responsible HR, payroll, or benefits function.

Study while working

Official-first, in an account you already run

Open the certification decision for your chosen direction, then use its official and no-cost preparation before spending on a course. Availability varies by credential. Your advantage over a career changer is obvious: the platform is in front of you every day, and most objectives map to something you can build in a controlled sandbox or authorized development environment. We sell no training.

Common questions

The next-cert decision, answered honestly

What is the next certification for a working cloud engineer?
There are four honest directions, and the right one depends on where your work is already pulling you. Go deeper on your primary platform toward the associate architect rung and, eventually, the professional tier — a genuinely senior, experience-heavy move rather than a quick follow-on. Broaden to a second platform if your organization is hybrid. Add a security baseline if you keep ending up in the identity and encryption conversations. Or build Kubernetes and automation fluency, which is increasingly core to the role. What rarely pays off is another foundational cloud credential that restates the practitioner-level knowledge your job already demonstrates.
AWS vs Azure certification — which should a cloud professional add?
For your primary depth, follow the platform your organization actually runs — that is where you have the production experience the harder exams assume, and where a credential immediately maps to work you already do. Adding the other platform is worthwhile specifically when you are multi-cloud or facing a migration, because the second one is mostly a re-mapping of concepts you already hold rather than starting over. The trap is chasing whichever vendor sounds strongest this quarter into a certification you have no environment to practice in.
Is a Kubernetes certification worth it for a cloud engineer?
Build cluster fluency first when Kubernetes is part of the environment you run or the work you are targeting. Deploy, observe, upgrade, secure, and troubleshoot a controlled cluster before treating an exam as the goal. Learnerside does not yet have a current public certification decision for this direction, so we will not recommend a specific credential here.
Should my employer pay for my next certification?
Ask after you can name the cloud capability the team needs, the free preparation and practical work you will complete first, and the exact constraint that makes paid structure useful. Eligibility, covered expenses, preapproval, reimbursement timing, completion rules, and tax treatment remain specific to the employer’s written plan and responsible HR, payroll, or benefits function.

Choose the capability before choosing the course

Make the complete certification decision, begin with free preparation, and request paid structure only when a deadline, feedback, guided labs, accessibility support, or team consistency solves a real problem. If you have done that work and still need help comparing training, Learnerside can reply manually; nothing goes to a provider without a later named-provider approval.