Proposed pathway · Enrolment by enquiry
Cloud, Identity & DevSecOps Architect
AWS/Azure, IAM, container pipelines and verifiable recovery · 80–120h proposed; infrastructure-as-code and controlled practical lab.
What you will be able to demonstrate
- Draw workload trust boundaries and shared responsibilities
- Implement privilege-scoped IAM, workload identities and key controls
- Assess cloud logs, containers, supply chain and CI/CD release rules
- Threat-model plausible misconfigurations and select mitigations
- Reproduce recovery and demonstrate controlled change/rollback
Evidence from the practical assessment
- Target architecture and trust matrix
- Infrastructure-as-code or policy baseline
- Threat model and evidence of control tests
- Backup restoration and rollback record
- Operations handover with ownership and limitations
How practical competence is assessed
A practical lab links a workload, role assumption, software pipeline and recovery requirement; the candidate must justify design decisions rather than copy a template.
How this connects to customer work
This assesses architecture and implementation; advanced offensive cloud testing requires its own authorization and specialist qualification.
Download sample working documents
Training and assessment are separate from independent certification. Published course durations and assessment designs are programme proposals subject to final scheduling and scheme approval.