CAREER PATH

Cloud Security Architect

The senior design-tier complement to Security Engineer — aligned with Microsoft's capstone security certification, aimed at designing security posture, not just implementing controls.

10 clusters 5 domains ~90 hours SC-100 aligned

Drag to rotate · click a node to jump straight into that domain

Who this is for

Prior hands-on security experience strongly recommended — see Security Engineer first if you're earlier in the path.

How this path works
Each cluster below links to its real lesson page. Go in order the first time through — later clusters assume the ones before them. Once you've done a full pass, use it as reference.

The path — in order

Networking

01
Network security as an architectural layer.
Domain 3 · Networking

Identity & Security

02
Identity as the foundation of Zero Trust design.
Domain 4 · Identity & Security
03
Designing least-privilege at organisational scale.
Domain 4 · Identity & Security
04
How Defender fits the broader security architecture.
Domain 4 · Identity & Security
05
Designing for the regulatory environment, not just threats.
Domain 4 · Identity & Security

Operations

06
Security posture enforced through policy, at scale.
Domain 5 · Operations

Resilience

07
Security and resilience design are inseparable.
Domain 7 · Resilience

Security Operations

08
Designing the SIEM/SOAR layer, not just operating it.
Domain 11 · Security Operations
09
Architecting extended detection and response.
Domain 11 · Security Operations
10
Designing what gets monitored and why.
Domain 11 · Security Operations

Certification this path maps to

SC-100: Cybersecurity Architect Expert

SC-100 is Microsoft's security capstone — most candidates hold SC-200 or SC-300 (or AZ-500) before attempting it.

Where this leads

This is one of the most senior roles this hub maps to. From here, the path is usually organisational — leading security architecture for larger and larger environments.

Start the path → See other career paths