DevOps
Technical
Skills
01
CI
/
CD
&
Automation
10
SKILLS
Building
,
testing
,
and
shipping
software
through
automated
pipelines
with
repeatable
,
auditable
release
paths
.
Pipeline
design
multi
-
stage
build
,
test
,
and
deploy
flows
Jenkins
declarative
pipelines
,
shared
libraries
,
agents
GitHub
Actions
workflows
,
reusable
actions
,
matrix
builds
GitLab
CI
/
CD
.
gitlab
-
ci
.
yml
stages
,
runners
,
environments
CircleCI
/
Travis
CI
cloud
-
hosted
pipeline
configuration
Argo
CD
GitOps
continuous
delivery
,
sync
policies
Tekton
/
Spinnaker
Kubernetes
-
native
and
multi
-
cloud
delivery
Artifact
repositories
Artifactory
,
Nexus
,
build
caching
,
versioning
Release
strategies
blue
-
green
,
canary
,
rolling
,
feature
flags
Secrets
in
pipelines
Vault
injection
,
OIDC
short
-
lived
credentials
02
Containers
&
Orchestration
10
SKILLS
Packaging
applications
into
portable
images
and
running
them
reliably
at
scale
on
Kubernetes
.
Docker
multi
-
stage
builds
,
image
layering
,
Docker
Compose
Container
registries
ECR
,
GHCR
,
Harbor
,
image
retention
policies
Kubernetes
deployments
,
services
,
ingress
,
namespaces
Helm
chart
authoring
,
templating
,
values
overrides
Kustomize
base
and
overlay
configuration
management
Operators
&
CRDs
custom
controllers
,
reconciliation
loops
Service
mesh
Istio
,
Linkerd
,
traffic
shifting
,
mTLS
Scheduling
&
autoscaling
requests
/
limits
,
HPA
,
VPA
,
node
affinity
Container
security
image
scanning
,
Pod
Security
Standards
,
admission
control
Container
runtimes
containerd
,
CRI
-
O
,
runc
,
gVisor
isolation
03
Infrastructure
as
Code
10
SKILLS
Declaring
infrastructure
in
versioned
files
so
environments
are
reproducible
,
reviewable
,
and
recoverable
.
Terraform
modules
,
state
management
,
workspaces
,
providers
Terragrunt
DRY
configuration
,
environment
layering
Pulumi
TypeScript
and
Python
infrastructure
definitions
CloudFormation
/
CDK
AWS
-
native
stacks
and
programmatic
synthesis
Ansible
playbooks
,
roles
,
inventory
,
Galaxy
modules
Packer
golden
image
builds
for
multiple
platforms
Immutable
infrastructure
replace
rather
than
patch
,
image
promotion
Policy
as
code
OPA
,
Sentinel
,
Checkov
,
drift
detection
Remote
state
&
locking
S
3/
DynamoDB
backends
,
state
isolation
IaC
testing
Terratest
,
kitchen
-
terraform
,
plan
validation
04
Cloud
Platforms
12
SKILLS
Designing
,
operating
,
and
optimizing
workloads
across
major
public
cloud
providers
and
hybrid
estates
.
AWS
EC
2,
S
3,
EKS
,
Lambda
,
RDS
,
IAM
Microsoft
Azure
AKS
,
App
Service
,
Entra
ID
,
Bicep
Google
Cloud
Platform
GKE
,
Cloud
Run
,
BigQuery
,
Cloud
IAM
Multi
-
cloud
&
hybrid
portable
patterns
,
cross
-
provider
landing
zones
Cloud
cost
optimization
FinOps
,
rightsizing
,
savings
plans
,
tagging
IAM
&
least
privilege
role
design
,
permission
boundaries
,
access
reviews
Serverless
Lambda
,
Cloud
Functions
,
event
-
driven
design
Managed
Kubernetes
EKS
,
AKS
,
GKE
,
node
pool
strategy
Cloud
networking
VPC
design
,
subnets
,
peering
,
Transit
Gateway
Storage
tiers
lifecycle
policies
,
archival
,
object
storage
classes
Disaster
recovery
cross
-
region
failover
,
RTO
/
RPO
planning
Well
-
Architected
reviews
pillar
assessments
,
remediation
roadmaps
1 / 4
05
Configuration
Management
8
SKILLS
Enforcing
consistent
host
and
fleet
configuration
through
declarative
,
idempotent
tooling
.
Ansible
automation
inventory
,
roles
,
vault
-
encrypted
variables
Chef
recipes
,
cookbooks
,
InSpec
compliance
profiles
Puppet
manifests
,
modules
,
Hiera
data
lookups
SaltStack
states
,
grains
,
highstate
orchestration
Cloud
-
init
&
golden
images
first
-
boot
provisioning
and
pre
-
baked
AMIs
Idempotent
provisioning
convergent
state
,
repeatable
runs
Hardening
baselines
CIS
Benchmarks
,
STIG
profiles
,
audit
remediation
Fleet
management
rolling
updates
across
thousands
of
hosts
06
Scripting
&
Programming
10
SKILLS
Writing
the
glue
code
,
tooling
,
and
services
that
automate
day
-
to
-
day
operational
work
.
Bash
/
shell
scripting
process
control
,
error
handling
,
portability
Python
boto
3,
automation
tooling
,
API
clients
Go
CLI
tools
,
Kubernetes
operators
,
services
JavaScript
/
Node
.
js
build
tooling
,
serverless
handlers
PowerShell
Windows
automation
,
Azure
administration
Ruby
Chef
and
Puppet
DSL
,
internal
tooling
Config
authoring
YAML
,
JSON
,
HCL
,
TOML
Text
processing
regex
,
awk
,
sed
,
jq
,
grep
pipelines
API
integration
REST
,
GraphQL
,
webhooks
,
auth
flows
Task
runners
Makefiles
,
Just
,
npm
scripts
,
task
automation
07
Observability
&
Monitoring
10
SKILLS
Instrumenting
systems
so
failures
are
detected
early
and
diagnosed
quickly
from
metrics
,
logs
,
and
traces
.
Prometheus
PromQL
,
exporters
,
recording
and
alerting
rules
Grafana
dashboards
,
panels
,
alert
routing
,
templating
OpenTelemetry
SDK
instrumentation
,
collectors
,
semantic
conventions
Distributed
tracing
Jaeger
,
Tempo
,
AWS
X
-
Ray
,
span
analysis
Log
aggregation
Elastic
Stack
,
Loki
,
Splunk
,
structured
logging
Telemetry
correlation
metrics
,
logs
,
and
traces
tied
to
one
request
ID
SLIs
,
SLOs
&
error
budgets
service
level
objective
definition
and
reporting
Alerting
&
on
-
call
Alertmanager
,
PagerDuty
,
escalation
policies
APM
platforms
Datadog
,
New
Relic
,
Dynatrace
,
AppDynamics
Synthetic
&
RUM
uptime
checks
,
browser
and
real
-
user
monitoring
08
Security
&
Compliance
12
SKILLS
Embedding
security
controls
into
pipelines
,
infrastructure
,
and
runtime
environments
rather
than
bolting
them
on
later
.
DevSecOps
pipeline
integration
security
gates
that
don
'
t
block
delivery
SAST
/
DAST
/
IAST
static
,
dynamic
,
and
interactive
application
scanning
Software
composition
analysis
open
-
source
dependency
and
license
risk
Secret
management
HashiCorp
Vault
,
AWS
Secrets
Manager
,
rotation
Image
&
dependency
scanning
Trivy
,
Grype
,
Snyk
,
SBOM
generation
Zero
-
trust
architecture
identity
-
aware
access
,
micro
-
segmentation
Identity
&
access
management
SSO
,
SAML
,
OIDC
,
MFA
enforcement
mTLS
&
certificates
cert
-
manager
,
rotation
,
internal
CA
operations
Compliance
frameworks
SOC
2,
ISO
27001,
HIPAA
,
PCI
DSS
evidence
CIS
benchmarks
host
and
cluster
hardening
,
continuous
assessment
Threat
modeling
vulnerability
triage
,
CVSS
scoring
,
risk
registers
Runtime
security
Falco
,
eBPF
monitoring
,
anomaly
detection
2 / 4
09
Networking
&
Edge
9
SKILLS
Moving
traffic
reliably
and
securely
between
users
,
services
,
and
regions
.
Core
protocols
TCP
/
IP
,
DNS
,
HTTP
/2,
HTTP
/3,
QUIC
Load
balancing
ALB
/
NLB
,
HAProxy
,
NGINX
,
health
checks
Reverse
proxies
&
API
gateways
Kong
,
Envoy
,
Traefik
,
rate
limiting
CDN
configuration
CloudFront
,
Cloudflare
,
cache
invalidation
rules
Private
connectivity
site
-
to
-
site
VPN
,
Direct
Connect
,
PrivateLink
Service
discovery
Consul
,
CoreDNS
,
health
-
based
routing
Firewalls
&
segmentation
security
groups
,
NACLs
,
WAF
rules
TLS
termination
certificate
chains
,
cipher
policy
,
HSTS
Network
troubleshooting
tcpdump
,
traceroute
,
mtr
,
packet
capture
analysis
10
Linux
&
Systems
Administration
10
SKILLS
Operating
the
underlying
hosts
that
everything
else
runs
on
—
provisioning
,
tuning
,
and
troubleshooting
them
.
Linux
distributions
Ubuntu
,
RHEL
,
Amazon
Linux
,
Debian
systemd
unit
files
,
targets
,
service
dependencies
,
timers
Package
management
apt
,
dnf
/
yum
,
rpm
,
repository
pinning
Users
&
permissions
groups
,
sudo
,
ACLs
,
umask
,
PAM
Kernel
tuning
sysctl
parameters
,
limits
.
conf
,
ulimits
Filesystems
&
storage
LVM
,
XFS
,
ext
4,
NFS
,
mount
options
Process
monitoring
top
,
htop
,
iostat
,
vmstat
,
sar
Task
scheduling
cron
,
systemd
timers
,
at
,
batch
jobs
Log
management
journald
,
logrotate
,
rsyslog
,
retention
policy
SSH
hardening
key
-
based
auth
,
bastion
hosts
,
certificate
authority
11
Databases
&
Data
Stores
9
SKILLS
Running
stateful
services
safely
—
from
schema
changes
to
backups
to
performance
tuning
.
PostgreSQL
&
MySQL
administration
,
roles
,
extensions
,
tuning
Managed
databases
RDS
,
Aurora
,
Cloud
SQL
,
Azure
SQL
Replication
&
failover
read
replicas
,
sharding
,
automatic
promotion
Backup
&
recovery
point
-
in
-
time
recovery
,
restore
drills
,
retention
NoSQL
stores
MongoDB
,
DynamoDB
,
Cassandra
,
key
design
Caching
layers
Redis
,
Memcached
,
invalidation
strategy
Queues
&
streaming
Kafka
,
RabbitMQ
,
SQS
,
consumer
groups
Schema
migrations
Flyway
,
Liquibase
,
Alembic
,
zero
-
downtime
changes
Query
performance
indexing
,
EXPLAIN
plans
,
slow
query
analysis
12
Testing
&
Quality
Engineering
8
SKILLS
Proving
that
changes
work
before
they
reach
production
—
and
that
they
keep
working
afterward
.
Test
types
unit
,
integration
,
end
-
to
-
end
,
regression
Test
automation
pytest
,
Jest
,
JUnit
,
Playwright
,
Selenium
Contract
testing
Pact
,
consumer
-
driven
contracts
,
provider
verification
Load
&
performance
testing
k
6,
JMeter
,
Locust
,
baseline
benchmarking
Chaos
engineering
Chaos
Monkey
,
Litmus
,
fault
injection
experiments
Smoke
&
canary
validation
post
-
deploy
checks
,
automated
rollback
triggers
Linting
&
static
analysis
ESLint
,
golangci
-
lint
,
SonarQube
,
pre
-
commit
hooks
Quality
gates
coverage
thresholds
,
flaky
test
quarantine
3 / 4
13
Site
Reliability
Engineering
9
SKILLS
Keeping
production
healthy
over
time
through
measurement
,
automation
,
and
disciplined
incident
response
.
Incident
response
severity
levels
,
on
-
call
rotations
,
commander
roles
Root
cause
analysis
blameless
postmortems
,
action
item
tracking
Capacity
planning
load
forecasting
,
headroom
,
growth
modeling
Autoscaling
horizontal
and
vertical
scaling
,
cluster
autoscaler
High
availability
design
redundancy
,
fault
isolation
,
graceful
degradation
Runbooks
&
playbooks
operational
documentation
,
automation
of
recovery
steps
Change
management
progressive
delivery
,
approval
workflows
,
rollback
plans
Toil
reduction
measuring
manual
work
and
automating
it
away
Error
budget
policy
release
gating
tied
to
reliability
targets
14
Version
Control
&
Collaboration
7
SKILLS
The
shared
workflow
that
everything
else
depends
on
—
how
code
is
branched
,
reviewed
,
and
merged
.
Branching
strategies
trunk
-
based
development
,
GitFlow
,
release
branches
Promoting
code
changes
pull
request
reviews
,
branch
protection
rules
,
CODEOWNERS
Merge
&
history
management
rebase
,
squash
,
conflict
resolution
,
bisecting
Repo
structure
monorepo
vs
multi
-
repo
,
submodules
,
sparse
checkout
Commit
hygiene
conventional
commits
,
signed
commits
,
changelog
generation
Documentation
as
code
Markdown
,
MkDocs
,
Docusaurus
,
ADRs
Work
tracking
Jira
,
Linear
,
Agile
and
Scrum
ceremonies
4 / 4
