Trustworthy Software Lab
Career

Career Paths & Learning Roadmap

Where trustworthy software thinking leads in the real world.

Cloud Engineer

Deploys apps and manages AWS services. Understands networking, storage, compute, and IAM.

Skills
AWS core servicesLinux basicsNetworkingIAM
Mini project

Deploy a static frontend on S3 + CloudFront with HTTPS.

Beginner path

AWS free tier → IAM → EC2 & S3 → serverless basics.

DevOps Engineer

Owns CI/CD, automation, IaC, and monitoring.

Skills
GitCI/CDTerraform/CDKCloudWatch
Mini project

Build a GitHub Actions pipeline that deploys a Lambda.

Beginner path

Git → GitHub Actions → Docker → IaC → observability.

DevSecOps Engineer

Adds security to pipelines: secret scanning, dependency scanning, IaC security, compliance automation.

Skills
SAST/DASTIaC scannersPolicy as codeThreat modeling
Mini project

Add secret scanning and IaC scanning to a CI pipeline.

Beginner path

DevOps foundation → security tooling → policy as code.

Cloud Security Engineer

Focuses on IAM, logging, threat detection, security standards, and incident response.

Skills
IAMCloudTrailGuardDutySecurity Hub
Mini project

Design an IAM permission plan for a serverless app.

Beginner path

IAM deep dive → audit trails → detection → response.

Site Reliability Engineer

Owns reliability, monitoring, incident handling, performance, and availability.

Skills
SLIs/SLOsMonitoringRunbooksPostmortems
Mini project

Define SLOs and alerts for an API and publish a runbook.

Beginner path

Observability → SLOs → on-call practice → chaos basics.

Platform Engineer

Builds internal developer platforms, golden paths, and secure reusable deployment patterns.

Skills
TemplatesIaCDeveloper UXSecurity defaults
Mini project

Ship a template repo with secure defaults and a one-command deploy.

Beginner path

DevOps → IaC modules → developer experience.

Compliance Automation Engineer

Turns controls into code and automates evidence collection.

Skills
AWS ConfigAudit ManagerPolicy engines
Mini project

Enable AWS Config managed rules and export daily compliance reports.

Beginner path

Compliance basics → Config → policy engines → reporting.

AI-Native Solutions Architect

Designs AI application architecture, secure AI workflows, RAG and agentic systems, and model governance.

Skills
LLM APIsRAGGuardrailsCost & tracing
Mini project

Build a document-grounded chatbot with logged prompts and guardrails.

Beginner path

Cloud foundation → LLM APIs → RAG → agent design → governance.