role

Cloud Engineer

Source-cited RoleMath page about Cloud Engineer.

Build my personalized career plan

Researched by RoleMath Research. Every figure on this page traces to the official source shown next to it.

What the numbers say about this work

Government occupation data for the role this maps to Computer Systems Engineers/Architects (SOC 15-1299). This is planning context for the occupation, not a salary or a job this role guarantees you.

Median pay (occupation)
$116,580 / yr · $55,940 to $188,470 (10th–90th percentile)
Projected change (2024–34)
+8.2% · ~31.3k openings/yr
Typical entry education
Bachelor's degree

BLS OEWS — occupation-level, national BLS Employment Projections 2024–34 This role uses a broad O*NET-SOC/BLS occupation mapping. Treat salary, outlook, and task data as occupation-level evidence, not a guarantee for this exact job title.

What it pays by metro

The national median hides a wide geographic spread. Below is the occupation’s median in some of the highest-paying and largest-employment metros, adjusted for local prices — regional price-level context, not take-home pay or a salary this role guarantees you.

MetroNominal medianCost-adjusted
San Jose, CA$184,430$167,021
Denver, CO$160,520$151,746
Lexington Park, MD$144,680$143,589
Boulder, CO$147,590$140,292
San Francisco, CA$161,700$139,863
Columbus, OH$129,940$136,107

See all metros and how this is calculated → Sources: BLS OEWS (May 2025), occupation-level metro median ÷ BEA Regional Price Parities (2024, US=100).

What this work involves

The tasks the U.S. Department of Labor’s O*NET lists most central to this occupation — role-fit evidence to weigh against your background, not a measure of employer demand.

  • Communicate with staff or clients to understand specific system requirements.
  • Investigate system component suitability for specified purposes, and make recommendations regarding component use.
  • Provide customers or installation teams guidelines for implementing secure systems.
  • Direct the analysis, development, and operation of complete computer systems.
  • Monitor system operation to detect potential problems.
  • Direct the installation of operating systems, network or application software, or computer or network hardware.

O*NET — occupation-level

Skills that matter

The skills O*NET rates most important for this occupation. A starting map for what to build — weigh it against the specific job you’re targeting.

  • Active Listening
  • Critical Thinking
  • Reading Comprehension
  • Speaking
  • Writing
  • Active Learning
  • Monitoring
  • Learning Strategies

O*NET — occupation-level

What employers ask for right now

The skills and certifications employers most often name in a sample of 256public job postings for this role. Treat it as a to-learn list — it’s dated hiring language, not a count of open jobs, demand, or salary.

Most-named skills

  • Kubernetes 176
  • AWS 159
  • Terraform 138
  • Python 130
  • Azure 103
  • GCP 91
  • Docker 86
  • Linux 65
  • Incident response 62
  • Problem solving 61
  • Ansible 56
  • Cybersecurity 54

Certifications named

  • Security+ 11
  • CCNA 7
  • CySA+ 2
  • Linux+ 2
  • PMP 1

Compare what employers ask across roles → Qualitative employer-language sample only; do not use as official demand, market-size, salary, or certification ROI evidence.

Certification decision support

Certifications mapped to Cloud Engineer

Certifications mapped to this role from cited OEM target-role data and the RoleMath role mapping, ordered by relationship strength and then Difficulty Score. This is planning context — not a guarantee, not an employer requirement, and not a claim that any one certification is best for everyone. Your fit depends on your background; pay/outlook context is occupation-level on the role page.

Start here signalMicrosoft Azure Administrator Associate40/100 · Moderate

Cloud foundations

12 mapped

Introductory cloud-literacy and entry cloud credentials before deeper platform specialization.

CredentialDifficultyCostRelationshipWhy it appears here
Cloud Digital LeaderGoogle Cloud · foundational
20/100Foundational$99 examfoundationCloud Digital Leader maps to Cloud Engineer as a foundation credential based on its cited name keyword:cloud signal.Official source
20/100Foundational$130 examfoundationSplunk O11y Cloud Certified Metrics User maps to Cloud Engineer as a foundation credential based on its cited name keyword:cloud signal.Official source
Certified Argo Project Associate (CAPA)Linux Foundation · foundation
20/100Foundational$250 examfoundationCertified Argo Project Associate (CAPA) maps to Cloud Engineer as a foundation credential based on its cited track token:cloud signal.Official source
Certified GitOps Associate (CGOA)Linux Foundation · foundation
20/100Foundational$250 examfoundationCertified GitOps Associate (CGOA) maps to Cloud Engineer as a foundation credential based on its cited track token:cloud signal.Official source
Istio Certified Associate (ICA)Linux Foundation · foundation
20/100Foundational$250 examfoundationIstio Certified Associate (ICA) maps to Cloud Engineer as a foundation credential based on its cited track token:cloud signal.Official source
Kubernetes and Cloud Native Associate (KCNA)Linux Foundation · foundation
20/100Foundational$250 examfoundationKubernetes and Cloud Native Associate (KCNA) maps to Cloud Engineer as a foundation credential based on its cited name keyword:cloud signal.Official source
GitHub FoundationsMicrosoft · beginner
20/100FoundationalCost not verifiedfoundationGitHub Foundations maps to Cloud Engineer as a foundation credential based on its cited track token:devops-engineer signal.Official source
20/100FoundationalCost not verifiedfoundationOracle Cloud Infrastructure Certified Foundations Associate maps to Cloud Engineer as a foundation credential based on its cited name keyword:cloud signal.Official source

4 later-step or lower-priority mappings are kept in the data payload for review.

Provider core platforms

12 mapped

AWS, Azure, Google Cloud, Oracle Cloud, and comparable provider credentials for core cloud administration or engineering.

CredentialDifficultyCostRelationshipWhy it appears here
40/100Moderate$165 examstrong signalAZ-104 is a strong Azure administration signal for cloud operations and engineering routes.Official source
40/100ModerateCost not verifiedstrong signalMicrosoft Certified: Azure for SAP Workloads Specialty maps to Cloud Engineer as a strong role signal based on its cited track token:solution-architect signal.Official source
40/100ModerateCost not verifiedstrong signalOracle Cloud Infrastructure Certified Architect Associate maps to Cloud Engineer as a strong role signal based on its cited name keyword:cloud signal.Official source
Associate Cloud EngineerGoogle Cloud · associate
45/100Moderate$125 examstrong signalAssociate Cloud Engineer maps to Cloud Engineer as a strong role signal based on its cited name keyword:cloud signal.Official source
AWS Certified Solutions Architect AssociateAmazon Web Services · associate
55/100Moderate$150 examstrong signalAWS SAA is a stronger cloud engineering signal than cloud-literacy-only credentials.Official source
AWS Certified Developer - AssociateAmazon Web Services · Associate
55/100Moderate$150 examstrong signalAWS Certified Developer - Associate maps to Cloud Engineer as a strong role signal based on its cited track token:cloud signal.Official source
60/100HardCost not verifiedadvanced adjacentMicrosoft Certified: Azure Solutions Architect Expert maps to Cloud Engineer as an advanced credential for progressing toward/within this role, not an entry signal.Official source
60/100HardCost not verifiedadvanced adjacentOracle Cloud Infrastructure Certified Architect Professional maps to Cloud Engineer as an advanced credential for progressing toward/within this role, not an entry signal.Official source

4 later-step or lower-priority mappings are kept in the data payload for review.

Containers and Kubernetes

6 mapped

Kubernetes, OpenShift, containers, and cloud-native credentials that support application platform work.

CredentialDifficultyCostRelationshipWhy it appears here
Certified Kubernetes Administrator (CKA)Linux Foundation · intermediate
40/100Moderate$445 examstrong signalCertified Kubernetes Administrator (CKA) maps to Cloud Engineer as a strong role signal based on its cited name keyword:cloud signal.Official source
40/100Moderate$445 examstrong signalCertified Kubernetes Application Developer (CKAD) maps to Cloud Engineer as a strong role signal based on its cited track token:cloud signal.Official source
40/100Moderate$500 examstrong signalRed Hat Certified Cloud-native Developer maps to Cloud Engineer as a strong role signal based on its cited track token:cloud signal.Official source
40/100Moderate$500 examstrong signalRed Hat Certified Specialist in Containers maps to Cloud Engineer as a strong role signal based on its cited track token:cloud signal.Official source
40/100Moderate$500 examstrong signalRed Hat Certified Specialist in OpenShift Application Development maps to Cloud Engineer as a strong role signal based on its cited name keyword:cloud signal.Official source
40/100Moderate$500 examstrong signalRed Hat Certified Specialist in OpenShift Administration maps to Cloud Engineer as a strong role signal based on its cited name keyword:cloud signal.Official source

Infrastructure automation

13 mapped

Terraform, Vault, Consul, GitOps, DevOps, and automation credentials for managing cloud infrastructure as code.

CredentialDifficultyCostRelationshipWhy it appears here
40/100Moderate$200 examstrong signalAutomation and DevOps, Associate (JNCIA-DevOps) maps to Cloud Engineer as a strong role signal based on its cited name keyword:cloud signal.Official source
GitHub ActionsMicrosoft · intermediate
40/100ModerateCost not verifiedstrong signalGitHub Actions maps to Cloud Engineer as a strong role signal based on its cited track token:devops-engineer signal.Official source
GitHub AdministrationMicrosoft · intermediate
40/100ModerateCost not verifiedstrong signalGitHub Administration maps to Cloud Engineer as a strong role signal based on its cited track token:devops-engineer signal.Official source
GitHub CopilotMicrosoft · intermediate
40/100ModerateCost not verifiedstrong signalGitHub Copilot maps to Cloud Engineer as a strong role signal based on its cited track token:devops-engineer signal.Official source
40/100ModerateCost not verifiedstrong signalHashiCorp Certified: Consul Associate (003) maps to Cloud Engineer as a strong role signal based on its cited track token:cloud signal.Official source
40/100ModerateCost not verifiedstrong signalHashiCorp Certified: Terraform Associate (004) maps to Cloud Engineer as a strong role signal based on its cited track token:cloud signal.Official source
VMware Telco Cloud Automation SkillsVMware (Broadcom) · specialist
45/100Moderate$250 examstrong signalVMware Telco Cloud Automation Skills maps to Cloud Engineer as a strong role signal based on its cited name keyword:vmware cloud virtualization signal.Official source
60/100HardCost not verifiedadvanced adjacentMicrosoft Certified: DevOps Engineer Expert maps to Cloud Engineer as an advanced credential for progressing toward/within this role, not an entry signal.Official source

5 later-step or lower-priority mappings are kept in the data payload for review.

Operations and observability

7 mapped

Cloud operations, reliability, monitoring, and platform operations credentials.

CredentialDifficultyCostRelationshipWhy it appears here
Prometheus Certified Associate (PCA)Linux Foundation · intermediate
40/100Moderate$250 examstrong signalPrometheus Certified Associate (PCA) maps to Cloud Engineer as a strong role signal based on its cited track token:cloud signal.Official source
AWS Certified CloudOps Engineer - AssociateAmazon Web Services · Associate
55/100Moderate$150 examstrong signalAWS Certified CloudOps Engineer - Associate maps to Cloud Engineer as a strong role signal based on its cited track token:cloud signal.Official source
CompTIA Cloud+CompTIA · intermediate
60/100Hard$399 examstrong signal after experienceCloud+ is more appropriate for hands-on cloud operations after support or systems experience.Official source
75/100Hard$250 examadvanced adjacentVMware Certified Advanced Professional - VMware Cloud Foundation Operations maps to Cloud Engineer as an advanced credential for progressing toward/within this role, not an entry signal.Official source
75/100Hard$250 examadvanced adjacentVMware Certified Professional - VMware Cloud Foundation Support maps to Cloud Engineer as an advanced credential for progressing toward/within this role, not an entry signal.Official source
75/100Hard$250 examadvanced adjacentVMware Certified Professional - VMware vSphere Foundation Support maps to Cloud Engineer as an advanced credential for progressing toward/within this role, not an entry signal.Official source
75/100Hard$295 examadvanced adjacentHashiCorp Certified: Terraform Authoring and Operations Professional maps to Cloud Engineer as an advanced credential for progressing toward/within this role, not an entry signal.Official source

Network and virtualization platforms

18 mapped

Cloud networking, network virtualization, VMware, Juniper, and telco-cloud credentials.

CredentialDifficultyCostRelationshipWhy it appears here
Cloud, Associate (JNCIA-Cloud)Juniper Networks · associate
40/100Moderate$200 examstrong signalCloud, Associate (JNCIA-Cloud) maps to Cloud Engineer as a strong role signal based on its cited name keyword:cloud signal.Official source
VMware Telco Cloud NFV SkillsVMware (Broadcom) · specialist
45/100Moderate$250 examstrong signalVMware Telco Cloud NFV Skills maps to Cloud Engineer as a strong role signal based on its cited name keyword:vmware cloud virtualization signal.Official source
VMware Telco Cloud Platform Specialist SkillsVMware (Broadcom) · specialist
45/100Moderate$250 examstrong signalVMware Telco Cloud Platform Specialist Skills maps to Cloud Engineer as a strong role signal based on its cited name keyword:vmware cloud virtualization signal.Official source
65/100Hard$250 examadvanced adjacentVMware Certified Advanced Professional - Data Center Virtualization Design maps to Cloud Engineer as an advanced credential for progressing toward/within this role, not an entry signal.Official source
65/100Hard$250 examadvanced adjacentVMware Certified Professional - Data Center Virtualization maps to Cloud Engineer as an advanced credential for progressing toward/within this role, not an entry signal.Official source
65/100Hard$250 examadvanced adjacentVMware Certified Professional - VMware Avi Load Balancer Administrator maps to Cloud Engineer as an advanced credential for progressing toward/within this role, not an entry signal.Official source
70/100Hard$250 examadvanced adjacentVMware Certified Professional - VMware Cloud Foundation Administrator maps to Cloud Engineer as an advanced credential for progressing toward/within this role, not an entry signal.Official source
70/100Hard$250 examadvanced adjacentVMware Certified Professional - VMware Cloud Foundation Architect maps to Cloud Engineer as an advanced credential for progressing toward/within this role, not an entry signal.Official source

10 later-step or lower-priority mappings are kept in the data payload for review.

Cloud security

9 mapped

Security credentials tied to cloud platforms, Kubernetes, identity, or private-cloud environments.

CredentialDifficultyCostRelationshipWhy it appears here
40/100Moderate$999 examstrong signalGIAC Cloud Security Essentials Certification (GCLD) maps to Cloud Engineer as a strong role signal based on its cited track token:cloud signal.Official source
GitHub Advanced SecurityMicrosoft · intermediate
40/100ModerateCost not verifiedstrong signalGitHub Advanced Security maps to Cloud Engineer as a strong role signal based on its cited track token:devops-engineer signal.Official source
40/100ModerateCost not verifiedstrong signalHashiCorp Certified: Vault Associate (003) maps to Cloud Engineer as a strong role signal based on its cited track token:cloud signal.Official source
GIAC Cloud Forensics Responder (GCFR)GIAC (SANS) · specialist
50/100Moderate$999 examstrong signalGIAC Cloud Forensics Responder (GCFR) maps to Cloud Engineer as a strong role signal based on its cited name keyword:cloud signal.Official source
55/100Moderate$200 examstrong signalFortinet NSE 7 - Public Cloud Security 7.6.4 Architect maps to Cloud Engineer as a strong role signal based on its cited track token:cloud signal.Official source
60/100Hard$250 examadvanced adjacentVMware Certified Professional - Private Cloud Security Administrator maps to Cloud Engineer as an advanced credential for progressing toward/within this role, not an entry signal.Official source
60/100HardCost not verifiedadvanced adjacentCertified Cloud Security Engineer (CCSE) maps to Cloud Engineer as an advanced credential for progressing toward/within this role, not an entry signal.Official source
75/100Hard$295 examadvanced adjacentHashiCorp Certified: Vault Operations Professional maps to Cloud Engineer as an advanced credential for progressing toward/within this role, not an entry signal.Official source

1 later-step or lower-priority mappings are kept in the data payload for review.

Advanced architecture and specialization

2 mapped

Harder architecture and specialist credentials retained as later-step context, not beginner recommendations.

CredentialDifficultyCostRelationshipWhy it appears here
SnowPro Advanced: AdministratorSnowflake · professional
80/100Expert$375 examspecializedSnowPro Advanced: Administrator maps to Cloud Engineer as an advanced credential for progressing toward/within this role, not an entry signal.Official source
SnowPro Advanced: ArchitectSnowflake · professional
80/100Expert$375 examspecializedSnowPro Advanced: Architect maps to Cloud Engineer as an advanced credential for progressing toward/within this role, not an entry signal.Official source

Difficulty is the RoleMath Difficulty Score, not a pass rate. Certification mappings are planning context, not employer requirements, job guarantees, salary claims, or ROI claims.

Answer blocks

Common Questions

Will AI replace cloud engineers?

We won't give you a replacement probability or timeline. AI changes tasks in cloud work (provisioning, IaC drafting, optimization), which is task shift, not role deletion. BLS projects modest growth for the related occupation group through 2034, but does not model rapid AI, so that isn't an AI forecast.

Tier B (factual): the nearest BLS occupation context, Computer occupations, all other (SOC 15-1299, which our data maps to cloud/network-security engineering roles), shows a 2024–2034 projected change of +8.2%, with ~31,300 annual openings a year — a forecast, not a guarantee; not an AI prediction. Treat this as occupation-group context, since cloud-engineer titles span more than one SOC code. Tier A (research): an attributed occupation-exposure estimate requires registered research indices we don't yet carry; we decline to forecast rather than cite an unregistered number.

Citations: U.S. BLS — Employment Projections 2024–2034, SOC 15-1299 (src_bls_employment_projections_2024_2034, bls.gov).

Cloud spans many roles — find the one that fits you. Build my personalized career plan.

Cloud Engineer

Quick Verdict

Cloud Engineer maps to the BLS occupation Computer Systems Engineers/Architects (SOC 15-1299), which has a national median of $116,580. Pay is occupation-level and location-driven - not caused by the job title or a certification. Below are the full cited labor-market context, the skills the role draws on, and the certification paths that map to it. This role uses a broad O*NET-SOC/BLS occupation mapping. Treat salary, outlook, and task data as occupation-level evidence, not a guarantee for this exact job title.

Fit Signals

  • Conventional (5.76)
  • Investigative (5.46)
  • Realistic (4.1)

Skills & Tools

*Tools and technologies ONET associates with this occupation* - role-specific examples with ONET hot/in-demand flags, not employer requirements:

  • Amazon Web Services AWS CloudFormation (hot technology, in demand)
  • Amazon Web Services AWS software (hot technology, in demand)
  • Ansible software (hot technology, in demand)
  • Atlassian JIRA (hot technology, in demand)
  • Bash (hot technology, in demand)
  • C++ (hot technology, in demand)
  • Docker (hot technology, in demand)
  • Git (hot technology, in demand)

*Foundational ONET skills** (broadly shared across occupations, not unique to this role): Active Listening, Critical Thinking, Reading Comprehension, Speaking, Writing, Active Learning.

AI & this career

What we can — and can’t — tell you about AI and this role

Cited context only: an occupation-level outlook, descriptive usage data, an employer-language sample, and attributed research — kept separate. No RoleMath AI score, no automation timeline, no job-loss prediction. How we source this →

Occupation outlook · BLS

Where the occupation is projected to go

BLS projects Computer occupations, all other at 8.2% employment change for 2024-2034, with 31.3 thousand annual openings. U.S. Bureau of Labor Statistics

A forecast, not a guarantee; occupation-level, not about you - and BLS does not model rapid AI adoption, so this is never an AI prediction.

How AI shows up in the work

Descriptive usage, not demand or loss

For this shared SOC, the May 2026 usage sample reports 36.25% augmentation-labeled and 63.75% automation-labeled Claude conversations. Anthropic Anthropic Economic Index dataset, CC-BY.

Across all occupations the same dataset splits 51.4% augmentation / 48.6% automation (May 2026) — shown so a single role’s number is never read as an outlier.

Descriptive Claude usage data, not employment demand, not job loss, and not a personal forecast; CC-BY attribution required.

Employer language · sample

What a posting sample mentions

a sample of 14 postings (as of 2026-06-12) mentions these AI-related terms RoleMath public ATS employer-language pilot

Employer-language sample only; not official demand, market-size, salary, or certification ROI evidence.

Published research · attributed

What independent research says (not RoleMath’s claim)

  • Eloundou et al. estimate that about 80% of U.S. workers have at least 10% of their work tasks exposed to large language model capabilities (Science 2024). American Association for the Advancement of Science exposure = task overlap, not job loss.
  • Eloundou et al. estimate that about 19% of U.S. workers have at least 50% of their work tasks exposed to large language model capabilities (Science 2024). American Association for the Advancement of Science exposure = task overlap, not job loss.
  • Eloundou et al. explicitly disclaim any forecast of AI adoption or timing, describing their measure as capability overlap with tasks rather than a prediction of job loss (Science 2024). American Association for the Advancement of Science exposure = task overlap, not job loss.
  • OECD reports that high-skill occupations are the most exposed to AI on task-overlap measures (OECD Employment Outlook 2023). Organisation for Economic Co-operation and Development exposure = task overlap, not job loss.
  • OECD reports that, as of 2023, there is little empirical evidence of negative employment effects from AI (OECD Employment Outlook 2023). Organisation for Economic Co-operation and Development exposure = task overlap, not job loss.
  • OECD and the AIOE research find that AI exposure and automation risk often run in opposite directions, with the most-exposed high-skill occupations tending to be the least at risk of automation. Organisation for Economic Co-operation and Development exposure = task overlap, not job loss.
  • Felten, Raj and Seamans construct an occupation-level AI Occupational Exposure index by linking AI capabilities to O*NET occupational abilities (Strategic Management Journal). Strategic Management Journal (Wiley) exposure = task overlap, not job loss.
  • Stanford Digital Economy Lab researchers find a roughly 16% relative decline in employment for workers ages 22-25 in the most AI-exposed occupations, based on high-frequency ADP payroll data (Canaries in the Coal Mine, working paper). Stanford Digital Economy Lab correlational usage data, not proof.
  • The ILO notes that AI-exposure indicators measure potential task overlap and cannot by themselves establish job loss (Workers' exposure to AI). International Labour Organization exposure = task overlap, not job loss.
  • The Anthropic Economic Index reports no measured systematic rise in unemployment attributable to AI in its usage data. Anthropic correlational usage data, not proof.

Tier A research stays attributed and separate from BLS outlook and employer-language samples.

Every figure on this page, sourced

The claims above trace to these records — the source, and when it was last checked. If a figure has no row here, we did not publish it.

IDSupportsSourceChecked
SCHEMA-CIT-1Schema citationCloud Engineer BLS OEWS wage sourceLogged in source packet
SCHEMA-CIT-2Schema citationCloud Engineer BLS Employment Projections sourceLogged in source packet
SCHEMA-CIT-3Schema citationCloud Engineer O*NET sourceLogged in source packet

Ready to see how this fits your background?

Get my fit score