What the numbers say about this work
Government occupation data for the role this maps to — Computer Systems Engineers/Architects (SOC 15-1299). This is planning context for the occupation, not a salary or a job this role guarantees you.
- Median pay (occupation)
- $116,580 / yr · $55,940 to $188,470 (10th–90th percentile)
- Projected change (2024–34)
- +8.2% · ~31.3k openings/yr
- Typical entry education
- Bachelor's degree
BLS OEWS — occupation-level, national BLS Employment Projections 2024–34 This role uses a broad O*NET-SOC/BLS occupation mapping. Treat salary, outlook, and task data as occupation-level evidence, not a guarantee for this exact job title.
What it pays by metro
The national median hides a wide geographic spread. Below is the occupation’s median in some of the highest-paying and largest-employment metros, adjusted for local prices — regional price-level context, not take-home pay or a salary this role guarantees you.
| Metro | Nominal median | Cost-adjusted |
|---|
| San Jose, CA | $184,430 | $167,021 |
|---|
| Denver, CO | $160,520 | $151,746 |
|---|
| Lexington Park, MD | $144,680 | $143,589 |
|---|
| Boulder, CO | $147,590 | $140,292 |
|---|
| San Francisco, CA | $161,700 | $139,863 |
|---|
| Columbus, OH | $129,940 | $136,107 |
|---|
See all metros and how this is calculated → Sources: BLS OEWS (May 2025), occupation-level metro median ÷ BEA Regional Price Parities (2024, US=100).
What employers ask for right now
The skills and certifications employers most often name in a sample of 256public job postings for this role. Treat it as a to-learn list — it’s dated hiring language, not a count of open jobs, demand, or salary.
Most-named skills
- Kubernetes 176
- AWS 159
- Terraform 138
- Python 130
- Azure 103
- GCP 91
- Docker 86
- Linux 65
- Incident response 62
- Problem solving 61
- Ansible 56
- Cybersecurity 54
Certifications named
- Security+ 11
- CCNA 7
- CySA+ 2
- Linux+ 2
- PMP 1
Compare what employers ask across roles → Qualitative employer-language sample only; do not use as official demand, market-size, salary, or certification ROI evidence.
Certification decision support
Certifications mapped to Cloud Engineer
Certifications mapped to this role from cited OEM target-role data and the RoleMath role mapping, ordered by relationship strength and then Difficulty Score. This is planning context — not a guarantee, not an employer requirement, and not a claim that any one certification is best for everyone. Your fit depends on your background; pay/outlook context is occupation-level on the role page.
Cloud foundations
12 mappedIntroductory cloud-literacy and entry cloud credentials before deeper platform specialization.
| Credential | Difficulty | Cost | Relationship | Why it appears here |
|---|
| 20/100Foundational | $99 exam | foundation | Cloud Digital Leader maps to Cloud Engineer as a foundation credential based on its cited name keyword:cloud signal.Official source |
| 20/100Foundational | $130 exam | foundation | Splunk O11y Cloud Certified Metrics User maps to Cloud Engineer as a foundation credential based on its cited name keyword:cloud signal.Official source |
| 20/100Foundational | $250 exam | foundation | Certified Argo Project Associate (CAPA) maps to Cloud Engineer as a foundation credential based on its cited track token:cloud signal.Official source |
| 20/100Foundational | $250 exam | foundation | Certified GitOps Associate (CGOA) maps to Cloud Engineer as a foundation credential based on its cited track token:cloud signal.Official source |
| 20/100Foundational | $250 exam | foundation | Istio Certified Associate (ICA) maps to Cloud Engineer as a foundation credential based on its cited track token:cloud signal.Official source |
| 20/100Foundational | $250 exam | foundation | Kubernetes and Cloud Native Associate (KCNA) maps to Cloud Engineer as a foundation credential based on its cited name keyword:cloud signal.Official source |
| 20/100Foundational | Cost not verified | foundation | GitHub Foundations maps to Cloud Engineer as a foundation credential based on its cited track token:devops-engineer signal.Official source |
| 20/100Foundational | Cost not verified | foundation | Oracle Cloud Infrastructure Certified Foundations Associate maps to Cloud Engineer as a foundation credential based on its cited name keyword:cloud signal.Official source |
4 later-step or lower-priority mappings are kept in the data payload for review.
Provider core platforms
12 mappedAWS, Azure, Google Cloud, Oracle Cloud, and comparable provider credentials for core cloud administration or engineering.
| Credential | Difficulty | Cost | Relationship | Why it appears here |
|---|
| 40/100Moderate | $165 exam | strong signal | AZ-104 is a strong Azure administration signal for cloud operations and engineering routes.Official source |
| 40/100Moderate | Cost not verified | strong signal | Microsoft Certified: Azure for SAP Workloads Specialty maps to Cloud Engineer as a strong role signal based on its cited track token:solution-architect signal.Official source |
| 40/100Moderate | Cost not verified | strong signal | Oracle Cloud Infrastructure Certified Architect Associate maps to Cloud Engineer as a strong role signal based on its cited name keyword:cloud signal.Official source |
| 45/100Moderate | $125 exam | strong signal | Associate Cloud Engineer maps to Cloud Engineer as a strong role signal based on its cited name keyword:cloud signal.Official source |
| 55/100Moderate | $150 exam | strong signal | AWS SAA is a stronger cloud engineering signal than cloud-literacy-only credentials.Official source |
| 55/100Moderate | $150 exam | strong signal | AWS Certified Developer - Associate maps to Cloud Engineer as a strong role signal based on its cited track token:cloud signal.Official source |
| 60/100Hard | Cost not verified | advanced adjacent | Microsoft Certified: Azure Solutions Architect Expert maps to Cloud Engineer as an advanced credential for progressing toward/within this role, not an entry signal.Official source |
| 60/100Hard | Cost not verified | advanced adjacent | Oracle Cloud Infrastructure Certified Architect Professional maps to Cloud Engineer as an advanced credential for progressing toward/within this role, not an entry signal.Official source |
4 later-step or lower-priority mappings are kept in the data payload for review.
Containers and Kubernetes
6 mappedKubernetes, OpenShift, containers, and cloud-native credentials that support application platform work.
| Credential | Difficulty | Cost | Relationship | Why it appears here |
|---|
| 40/100Moderate | $445 exam | strong signal | Certified Kubernetes Administrator (CKA) maps to Cloud Engineer as a strong role signal based on its cited name keyword:cloud signal.Official source |
| 40/100Moderate | $445 exam | strong signal | Certified Kubernetes Application Developer (CKAD) maps to Cloud Engineer as a strong role signal based on its cited track token:cloud signal.Official source |
| 40/100Moderate | $500 exam | strong signal | Red Hat Certified Cloud-native Developer maps to Cloud Engineer as a strong role signal based on its cited track token:cloud signal.Official source |
| 40/100Moderate | $500 exam | strong signal | Red Hat Certified Specialist in Containers maps to Cloud Engineer as a strong role signal based on its cited track token:cloud signal.Official source |
| 40/100Moderate | $500 exam | strong signal | Red Hat Certified Specialist in OpenShift Application Development maps to Cloud Engineer as a strong role signal based on its cited name keyword:cloud signal.Official source |
| 40/100Moderate | $500 exam | strong signal | Red Hat Certified Specialist in OpenShift Administration maps to Cloud Engineer as a strong role signal based on its cited name keyword:cloud signal.Official source |
Infrastructure automation
13 mappedTerraform, Vault, Consul, GitOps, DevOps, and automation credentials for managing cloud infrastructure as code.
| Credential | Difficulty | Cost | Relationship | Why it appears here |
|---|
| 40/100Moderate | $200 exam | strong signal | Automation and DevOps, Associate (JNCIA-DevOps) maps to Cloud Engineer as a strong role signal based on its cited name keyword:cloud signal.Official source |
| 40/100Moderate | Cost not verified | strong signal | GitHub Actions maps to Cloud Engineer as a strong role signal based on its cited track token:devops-engineer signal.Official source |
| 40/100Moderate | Cost not verified | strong signal | GitHub Administration maps to Cloud Engineer as a strong role signal based on its cited track token:devops-engineer signal.Official source |
| 40/100Moderate | Cost not verified | strong signal | GitHub Copilot maps to Cloud Engineer as a strong role signal based on its cited track token:devops-engineer signal.Official source |
| 40/100Moderate | Cost not verified | strong signal | HashiCorp Certified: Consul Associate (003) maps to Cloud Engineer as a strong role signal based on its cited track token:cloud signal.Official source |
| 40/100Moderate | Cost not verified | strong signal | HashiCorp Certified: Terraform Associate (004) maps to Cloud Engineer as a strong role signal based on its cited track token:cloud signal.Official source |
| 45/100Moderate | $250 exam | strong signal | VMware Telco Cloud Automation Skills maps to Cloud Engineer as a strong role signal based on its cited name keyword:vmware cloud virtualization signal.Official source |
| 60/100Hard | Cost not verified | advanced adjacent | Microsoft Certified: DevOps Engineer Expert maps to Cloud Engineer as an advanced credential for progressing toward/within this role, not an entry signal.Official source |
5 later-step or lower-priority mappings are kept in the data payload for review.
Operations and observability
7 mappedCloud operations, reliability, monitoring, and platform operations credentials.
| Credential | Difficulty | Cost | Relationship | Why it appears here |
|---|
| 40/100Moderate | $250 exam | strong signal | Prometheus Certified Associate (PCA) maps to Cloud Engineer as a strong role signal based on its cited track token:cloud signal.Official source |
| 55/100Moderate | $150 exam | strong signal | AWS Certified CloudOps Engineer - Associate maps to Cloud Engineer as a strong role signal based on its cited track token:cloud signal.Official source |
| 60/100Hard | $399 exam | strong signal after experience | Cloud+ is more appropriate for hands-on cloud operations after support or systems experience.Official source |
| 75/100Hard | $250 exam | advanced adjacent | VMware Certified Advanced Professional - VMware Cloud Foundation Operations maps to Cloud Engineer as an advanced credential for progressing toward/within this role, not an entry signal.Official source |
| 75/100Hard | $250 exam | advanced adjacent | VMware Certified Professional - VMware Cloud Foundation Support maps to Cloud Engineer as an advanced credential for progressing toward/within this role, not an entry signal.Official source |
| 75/100Hard | $250 exam | advanced adjacent | VMware Certified Professional - VMware vSphere Foundation Support maps to Cloud Engineer as an advanced credential for progressing toward/within this role, not an entry signal.Official source |
| 75/100Hard | $295 exam | advanced adjacent | HashiCorp Certified: Terraform Authoring and Operations Professional maps to Cloud Engineer as an advanced credential for progressing toward/within this role, not an entry signal.Official source |
Network and virtualization platforms
18 mappedCloud networking, network virtualization, VMware, Juniper, and telco-cloud credentials.
| Credential | Difficulty | Cost | Relationship | Why it appears here |
|---|
| 40/100Moderate | $200 exam | strong signal | Cloud, Associate (JNCIA-Cloud) maps to Cloud Engineer as a strong role signal based on its cited name keyword:cloud signal.Official source |
| 45/100Moderate | $250 exam | strong signal | VMware Telco Cloud NFV Skills maps to Cloud Engineer as a strong role signal based on its cited name keyword:vmware cloud virtualization signal.Official source |
| 45/100Moderate | $250 exam | strong signal | VMware Telco Cloud Platform Specialist Skills maps to Cloud Engineer as a strong role signal based on its cited name keyword:vmware cloud virtualization signal.Official source |
| 65/100Hard | $250 exam | advanced adjacent | VMware Certified Advanced Professional - Data Center Virtualization Design maps to Cloud Engineer as an advanced credential for progressing toward/within this role, not an entry signal.Official source |
| 65/100Hard | $250 exam | advanced adjacent | VMware Certified Professional - Data Center Virtualization maps to Cloud Engineer as an advanced credential for progressing toward/within this role, not an entry signal.Official source |
| 65/100Hard | $250 exam | advanced adjacent | VMware Certified Professional - VMware Avi Load Balancer Administrator maps to Cloud Engineer as an advanced credential for progressing toward/within this role, not an entry signal.Official source |
| 70/100Hard | $250 exam | advanced adjacent | VMware Certified Professional - VMware Cloud Foundation Administrator maps to Cloud Engineer as an advanced credential for progressing toward/within this role, not an entry signal.Official source |
| 70/100Hard | $250 exam | advanced adjacent | VMware Certified Professional - VMware Cloud Foundation Architect maps to Cloud Engineer as an advanced credential for progressing toward/within this role, not an entry signal.Official source |
10 later-step or lower-priority mappings are kept in the data payload for review.
Cloud security
9 mappedSecurity credentials tied to cloud platforms, Kubernetes, identity, or private-cloud environments.
| Credential | Difficulty | Cost | Relationship | Why it appears here |
|---|
| 40/100Moderate | $999 exam | strong signal | GIAC Cloud Security Essentials Certification (GCLD) maps to Cloud Engineer as a strong role signal based on its cited track token:cloud signal.Official source |
| 40/100Moderate | Cost not verified | strong signal | GitHub Advanced Security maps to Cloud Engineer as a strong role signal based on its cited track token:devops-engineer signal.Official source |
| 40/100Moderate | Cost not verified | strong signal | HashiCorp Certified: Vault Associate (003) maps to Cloud Engineer as a strong role signal based on its cited track token:cloud signal.Official source |
| 50/100Moderate | $999 exam | strong signal | GIAC Cloud Forensics Responder (GCFR) maps to Cloud Engineer as a strong role signal based on its cited name keyword:cloud signal.Official source |
| 55/100Moderate | $200 exam | strong signal | Fortinet NSE 7 - Public Cloud Security 7.6.4 Architect maps to Cloud Engineer as a strong role signal based on its cited track token:cloud signal.Official source |
| 60/100Hard | $250 exam | advanced adjacent | VMware Certified Professional - Private Cloud Security Administrator maps to Cloud Engineer as an advanced credential for progressing toward/within this role, not an entry signal.Official source |
| 60/100Hard | Cost not verified | advanced adjacent | Certified Cloud Security Engineer (CCSE) maps to Cloud Engineer as an advanced credential for progressing toward/within this role, not an entry signal.Official source |
| 75/100Hard | $295 exam | advanced adjacent | HashiCorp Certified: Vault Operations Professional maps to Cloud Engineer as an advanced credential for progressing toward/within this role, not an entry signal.Official source |
1 later-step or lower-priority mappings are kept in the data payload for review.
Advanced architecture and specialization
2 mappedHarder architecture and specialist credentials retained as later-step context, not beginner recommendations.
| Credential | Difficulty | Cost | Relationship | Why it appears here |
|---|
| 80/100Expert | $375 exam | specialized | SnowPro Advanced: Administrator maps to Cloud Engineer as an advanced credential for progressing toward/within this role, not an entry signal.Official source |
| 80/100Expert | $375 exam | specialized | SnowPro Advanced: Architect maps to Cloud Engineer as an advanced credential for progressing toward/within this role, not an entry signal.Official source |
Difficulty is the RoleMath Difficulty Score, not a pass rate. Certification mappings are planning context, not employer requirements, job guarantees, salary claims, or ROI claims.
Cloud Engineer
Quick Verdict
Cloud Engineer maps to the BLS occupation Computer Systems Engineers/Architects (SOC 15-1299), which has a national median of $116,580. Pay is occupation-level and location-driven - not caused by the job title or a certification. Below are the full cited labor-market context, the skills the role draws on, and the certification paths that map to it. This role uses a broad O*NET-SOC/BLS occupation mapping. Treat salary, outlook, and task data as occupation-level evidence, not a guarantee for this exact job title.
Fit Signals
- Conventional (5.76)
- Investigative (5.46)
- Realistic (4.1)
Skills & Tools
*Tools and technologies ONET associates with this occupation* - role-specific examples with ONET hot/in-demand flags, not employer requirements:
- Amazon Web Services AWS CloudFormation (hot technology, in demand)
- Amazon Web Services AWS software (hot technology, in demand)
- Ansible software (hot technology, in demand)
- Atlassian JIRA (hot technology, in demand)
- Bash (hot technology, in demand)
- C++ (hot technology, in demand)
- Docker (hot technology, in demand)
- Git (hot technology, in demand)
*Foundational ONET skills** (broadly shared across occupations, not unique to this role): Active Listening, Critical Thinking, Reading Comprehension, Speaking, Writing, Active Learning.
Ready to see how this fits your background?
Get my fit score