Career flow diagram
43 IT roles laid out by domain and seniority, with the 42 moves between them. Nodes with a full role guide are links; the rest are roles the graph tracks but has no guide for yet.
- Roles
- 43
- Transitions
- 42
- Role guides
- 64
Role lanes by seniority
Level
Operations
Networking
Systems
Cloud
DevOps
Security
Data / AI
Software
Architecture
Management
Entry
NOC Tech
Junior Developer
Associate
Mid Developer
Professional
Linux Engineer
Mainframe Sysprog
Senior Cloud Eng
Cloud Net Eng
Senior Engineer
Solutions Architect
Tech Lead
Engineering Manager
Expert
Systems Architect
Security Architect
CISOStaff Engineer
Principal / Distinguished
Enterprise Architect
Chief Architect
Director
VP / CTO26 of 43 nodes open a full role guide.
Documented transitions
| From | To | Kind | What the move is |
|---|---|---|---|
| Help Desk T1 | Junior Sysadmin | Step up | From script-following ticket-closer to system owner. 1.5–3 yrs. Bridge certs: AZ-104, Server+, LFCS. |
| Junior Sysadmin | Sysadmin | Step up | From following runbooks to writing them. 2–4 yrs. |
| Sysadmin | Senior Sysadmin | Step up | From running systems to designing them. 3–6 yrs total. |
| Senior Sysadmin | Infrastructure Eng | Step up | 7–12 yrs total. The fork: deep IC architect or broaden into cloud/devops. |
| NOC Tech | Network Engineer | Step up | 1–3 yrs. Bridge cert: CCNA 200-301. |
| Network Engineer | Senior Net Eng | Step up | 3–6 yrs total. CCNA → CCNP era. Bridge: CCNP ENCOR 350-401. |
| Senior Net Eng | Network Architect | Step up | 7–12 yrs total. Cross-domain breadth on top of network depth. |
| Cloud Engineer | Senior Cloud Eng | Step up | 2–4 yrs. From running services to designing them at scale. |
| Senior Cloud Eng | Cloud Solutions Arch | Step up | 5–10 yrs total. Stop doing the work. Start designing it. |
| Junior DevOps | DevOps Engineer | Step up | 2–3 yrs. Build CI/CD pipelines, IaC modules. |
| DevOps Engineer | SRE | Step up | 2–4 yrs as DevOps. Specific Google-originated discipline. Read SRE books at sre.google. |
| SRE | Platform Engineer | Step up | 2–4 yrs. Devs are your customers. Build them paved roads. |
| SOC Analyst L1 | SOC L2/L3 | Step up | 1–3 yrs. From triage to investigation. |
| SOC L2/L3 | Security Engineer | Step up | 3–5 yrs. From responding to building. |
| Security Engineer | Security Architect | Step up | 5–8 yrs as Sec Eng. Cross-domain security thinking. |
| Security Architect | CISO | Fork | 10–15 yrs total. The CISO fork. No single path — CISOs come from sec eng (~35%), GRC (~25%), audit, IT, even legal. |
| Security Engineer | Pentester / Red Team | Lateral | 2–4 yrs. Adversarial mindset. Different career — not just different specialty. Bridge: OSCP. |
| Data Analyst | Data Engineer | Step up | 18–24 months. The most common pivot in data. Bridge: DP-700, DEA-C01. |
| Data Engineer | ML Engineer | Step up | 2–4 yrs. The hardest data pivot. Engineering gets MORE complex, not less. |
| Data Engineer | Data Architect | Step up | 4–7 yrs total. From pipeline-builder to platform owner. |
| Junior Developer | Mid Developer | Step up | 1–2 yrs. Earn trust on a single team. |
| Mid Developer | Senior Engineer | Step up | 2–4 yrs. From shipping features to shipping systems. |
| Senior Engineer | Staff Engineer | Fork | 3–7 yrs as Sr. The IC ladder fork. Equivalent comp to EM at most modern tech orgs. Read Larson's Staff Engineer book. |
| Staff Engineer | Principal / Distinguished | Step up | 5–10 yrs as Staff. Industry-shaping. Rare. |
| Solutions Architect | Enterprise Architect | Fork | 3–5 yrs as SA. Structural change: from system-level to portfolio-level thinking. EA scope is the whole technology portfolio, 3–5 yr horizon. |
| Enterprise Architect | Chief Architect | Step up | 5–7 yrs as EA. Architecture as an organizational practice. |
| Senior Engineer | Tech Lead | Step up | 3–5 yrs as Sr Eng. Still IC. But starting to lead. Last off-ramp before the manager fork. |
| Tech Lead | Engineering Manager | Fork | 6–18 months consideration. THE FORK. Not a promotion — a different job. Read The Manager's Path (Fournier). |
| Engineering Manager | Director | Step up | 3–6 yrs as EM. From managing engineers to managing managers. |
| Director | VP / CTO | Step up | 5–10 yrs as Director. Org design. Strategy. Equity-heavy comp. |
| Help Desk T1 | NOC Tech | Lateral | Common entry pivot. Both Tier-1 reactive but different focus. CCST or Network+ helps. |
| Senior Sysadmin | Senior Cloud Eng | Lateral | 12–18 months. The most common cloud entry path. Your ops experience is the foundation. |
| Senior Sysadmin | DevOps Engineer | Lateral | 12–24 months. Ops side of DevOps. Your foundation is strong; gap is dev skills. |
| Senior Net Eng | Cloud Net Eng | Lateral | 6–18 months. Most under-appreciated lateral move — your routing/BGP skills are gold in cloud. AZ-700 or AWS ANS-C01. |
| Mid Developer | DevOps Engineer | Lateral | 12–24 months. Dev side of DevOps. Your code is strong; gap is ops. |
| Data Engineer | AI Engineer | Lateral | 6–18 months. The 2024+ role. If you can ship software with LLM components, this is yours. |
| Senior Engineer | Solutions Architect | Step up | 7–10 yrs IC experience. From building one system to designing systems for others to build. |
| Senior Sysadmin | Solutions Architect | Lateral | Operations engineers can move into solutions architecture, especially infra/cloud SA roles. |
| Security Engineer | Security Architect | Step up | — |
| Mainframe Sysprog | Cloud Solutions Arch | Lateral | ⚡ The highest-ROI pivot in IT 2026. Aging mainframe workforce + cloud migration = premium. 12–24 months. |
| Engineering Manager | VP / CTO | Step up | Skip-the-Director path is rare but possible at startups. |
| SRE | Platform Engineer | Step up | — |
Every role guide
The graph above tracks 43 nodes. The corpus has 64 full role guides — cert sequence, cost, salary band and a 90-day plan each. Browse them as cards.
Data & AI · 8
Software Engineering · 4
Security · 10
- Application Security Engineer (AppSec)
- Chief Information Security Officer (CISO)
- Cloud Security Architect
- DFIR Analyst (Digital Forensics & Incident Response)
- GRC Analyst (Governance, Risk & Compliance)
- Identity & Access Management (IAM) Engineer
- Penetration Tester / Ethical Hacker
- Security Analyst (SOC) – Tier 1/2
- Security Engineer (SecEng)
- Threat Intelligence Analyst