Cloud & Infrastructure Topics
Cloud platform services, infrastructure architecture, Infrastructure as Code, environment provisioning, and infrastructure operations. Covers cloud service selection, infrastructure provisioning patterns, container orchestration (Kubernetes), multi-cloud and hybrid architectures, infrastructure cost optimization, and cloud platform operations. For CI/CD pipeline and deployment automation, see DevOps & Release Engineering. For cloud security implementation, see Security Engineering & Operations. For data infrastructure design, see Data Engineering & Analytics Infrastructure.
Network Troubleshooting and Tools
Hands on skills for diagnosing and resolving network problems using standard command line and packet analysis tools. Topics include systematic troubleshooting workflows (start with reachability tests and escalate to captures), use of ping and traceroute to verify connectivity and routing paths, netstat and ss to inspect sockets and listening ports, arp and interface commands to check layer two mappings and interface state, router and switch show commands to view routing tables and interface status, and DNS troubleshooting using nslookup and dig. Deep packet capture and analysis with tcpdump and Wireshark is covered, including capture filters, interpreting packet headers and flows, identifying retransmissions, latency sources, and protocol errors. Emphasis is on interpreting tool output, correlating results across layers, and choosing the right tool at each step of an investigation.
AWS Compute and Networking
Covers design and operational knowledge of Amazon Web Services compute and network components. Candidates should understand Amazon Elastic Compute Cloud instances including instance families, sizing considerations, and pricing models such as on demand, reserved, and spot instances. Knowledge of Amazon Machine Images and launch templates, network interfaces, security groups, route tables, and Virtual Private Cloud architecture including public and private subnets, NAT gateways, and peering is expected. Expect questions on load balancing options including Application Load Balancer and Network Load Balancer, autoscaling groups and policies for availability and cost optimization, and hybrid connectivity patterns such as VPN and Direct Connect. Candidates should also be able to reason about high level multi tier application architectures on AWS, security and networking trade offs, and common infrastructure as code and automation approaches used to provision and manage these resources.
Governance, Policy Enforcement, and Guardrails
Implementing policy as code, compliance checking, and safety mechanisms into infrastructure systems. Topics include automated cost controls, security policy enforcement, resource naming standards, tagging strategies, and preventing common misconfigurations. Discussion of balance between flexibility and governance.
Network Protocols and Encapsulation
Comprehensive knowledge of network protocol stacks and layering, including the Open Systems Interconnection model and the Transmission Control Protocol and Internet Protocol suite. Candidates should understand protocol purposes and behaviors at each layer, including connection oriented and connectionless transport, address resolution, discovery and multicast management, and control plane messages. Know common protocols such as the User Datagram Protocol, Internet Control Message Protocol, and Internet Group Management Protocol and how they differ in reliability, ordering, and use cases. Be familiar with tunneling and encapsulation technologies and their tradeoffs, including Virtual Private Network, Generic Routing Encapsulation, Multiprotocol Label Switching, overlay network technologies such as Virtual Extensible Local Area Network, Generic Network Virtualization Encapsulation, and Network Virtualization using Generic Routing Encapsulation. Understand encryption and integrity options at the network layer such as Internet Protocol Security and at the transport layer such as Transport Layer Security and Secure Sockets Layer, including tunnel versus transport modes. Be able to reason about encapsulation overhead, maximum transmission unit and fragmentation, latency and throughput implications, path characteristics, compatibility and interoperability, and typical deployment patterns for site to site tunnels, remote access, data center overlays, and network virtualization.
Cloud Basics AWS Fundamentals
Basic AWS concepts relevant to DevOps: EC2 instances, S3 storage, IAM for access control, basic networking (VPCs, security groups), and understanding how cloud services differ from on-premises infrastructure.
Static Routing and IP Configuration
Configure static routes on routers to direct traffic. Understand route syntax, routing table priorities, and how to verify traffic is taking the intended path. Configure IP addresses, subnet masks, and default gateways on devices to ensure Layer 3 connectivity.
Amazon Web Services Core Services
Comprehensive knowledge of the foundational Amazon Web Services that are commonly used to design, deploy, and operate cloud applications. This includes compute services such as Amazon Elastic Compute Cloud for virtual machines and instance families, Amazon Web Services Lambda for serverless functions, and Amazon Elastic Beanstalk for managed application platforms; storage services such as Amazon Simple Storage Service for object storage, Amazon Elastic Block Store for block volumes, and Amazon Elastic File System for shared file storage; database services such as Amazon Relational Database Service for managed relational databases, Amazon DynamoDB for NoSQL, and Amazon ElastiCache for in memory caching; networking and content delivery including Amazon Virtual Private Cloud networking concepts, subnets, security groups, load balancers, and Amazon CloudFront; container and orchestration options such as Amazon Elastic Container Service and Amazon Elastic Kubernetes Service; and management and security services including Identity and Access Management, Amazon CloudWatch monitoring and logging, Auto Scaling, and cost and service limit considerations. Candidates should understand core service characteristics, common configuration choices and trade offs, operational considerations such as high availability and fault tolerance, basic security and compliance approaches, performance and cost optimization, and guidance for selecting one service over another for typical application patterns.
Cloud Infrastructure Knowledge (AWS/GCP/Azure)
Have working knowledge of at least one major cloud platform: common services (EC2/Compute Engine, RDS/Cloud SQL, S3/Cloud Storage, Load Balancers, VPCs, networking), typical failure modes, and how to troubleshoot within that platform. Understand concepts like availability zones, regions, and cross-region failover.
Windows Service and Process Management
Administering and troubleshooting Windows services and processes. Topics include viewing and managing running processes and resource usage with Task Manager and performance monitoring tools, using command line and PowerShell commands to list, start, stop, and restart services, and understanding service configuration such as startup types including automatic, manual, and disabled. Additional areas include service dependencies, recovery and restart options, service permissions and accounts, diagnosing service related errors using the Event Viewer and logs, and strategies for resolving resource contention, hung processes, and service failures.