Learn DevOps and DevSecOps free, from zero to job-ready
DevOps Path needs JavaScript for lessons, quizzes and progress tracking. Please enable it. The learning path covers:
- Linux fundamentals: Almost every server you will touch runs Linux. Learn to move around, manage files, users, permissions, processes and services from the terminal.
- Shell scripting with Bash: Turn anything you did by hand into a reliable script: health checks, backups, log reports and deployments.
- Networking for DevOps: You cannot debug cloud systems without networking. Learn IPs, ports, DNS, HTTP, subnets and how load balancers and reverse proxies work.
- Git and GitHub: Git is how teams change code and infrastructure safely. Every pipeline you build starts with a commit.
- Docker and containers: Package an app and everything it needs into an image that runs the same on your laptop, in CI and in production.
- Kubernetes: Run containers at scale with self-healing, rolling updates and autoscaling. Kubernetes is the most requested skill in DevOps job posts.
- AWS cloud: AWS is the most used cloud in DevOps jobs. Learn the core services, how they connect, and how to design for security, high availability and cost.
- Terraform (Infrastructure as Code): Describe infrastructure in code, review it in pull requests and recreate whole environments in minutes.
- Ansible (configuration management): Configure many servers the same way, every time. Terraform creates servers; Ansible configures what runs on them.
- CI/CD pipelines: Automate build, test, scan and deploy on every commit. This is the heart of the DevOps job.
- Monitoring and observability: You cannot fix what you cannot see. Collect metrics, logs and traces, build dashboards and send alerts people actually act on.
- SRE, automation and security basics: The skills that make you look like a 3+ year engineer: security in the pipeline, incident handling, automation with Python and clear communication.
- Security fundamentals: What DevSecOps protects and why: core security principles, the most common web vulnerabilities, threat modeling, and the cryptography every engineer must know.
- Secure code: SAST, SCA and DAST: Automatically find vulnerabilities in your own code (SAST), in the open-source libraries you use (SCA), and in the running app (DAST), then gate the pipeline on what matters.
- Secrets management: Leaked credentials are behind a large share of cloud breaches. Keep secrets out of code, store them centrally, rotate them, and detect leaks fast.
- Container and Kubernetes security: Secure images, the cluster, workloads and runtime. This stage follows the CKS (Certified Kubernetes Security Specialist) syllabus in practical form.
- AWS cloud security: Most cloud breaches come from misconfiguration and weak identity. Build a secure AWS baseline covering identity, logging, threat detection, encryption and network protection.
- IaC security and policy as code: Catch insecure cloud configuration before it is deployed by scanning Terraform, Kubernetes YAML and Dockerfiles, and by writing your own rules as code.
- Software supply chain security: Attacks like SolarWinds, Codecov and the xz backdoor targeted build systems and dependencies. Prove what is inside your software, and that it really came from your pipeline.
- Security operations and compliance: Detect, respond and prove it: centralised security logging, incident response playbooks, and the compliance frameworks auditors and customers ask about.