Cloud & Infrastructure Topics
Cloud platform services, infrastructure architecture, Infrastructure as Code, environment provisioning, and infrastructure operations. Covers cloud service selection, infrastructure provisioning patterns, container orchestration (Kubernetes), multi-cloud and hybrid architectures, infrastructure cost optimization, and cloud platform operations. For CI/CD pipeline and deployment automation, see DevOps & Release Engineering. For cloud security implementation, see Security Engineering & Operations. For data infrastructure design, see Data Engineering & Analytics Infrastructure.
Network Troubleshooting and Tools
Hands on skills for diagnosing and resolving network problems using standard command line and packet analysis tools. Topics include systematic troubleshooting workflows (start with reachability tests and escalate to captures), use of ping and traceroute to verify connectivity and routing paths, netstat and ss to inspect sockets and listening ports, arp and interface commands to check layer two mappings and interface state, router and switch show commands to view routing tables and interface status, and DNS troubleshooting using nslookup and dig. Deep packet capture and analysis with tcpdump and Wireshark is covered, including capture filters, interpreting packet headers and flows, identifying retransmissions, latency sources, and protocol errors. Emphasis is on interpreting tool output, correlating results across layers, and choosing the right tool at each step of an investigation.
AWS Compute and Networking
Covers design and operational knowledge of Amazon Web Services compute and network components. Candidates should understand Amazon Elastic Compute Cloud instances including instance families, sizing considerations, and pricing models such as on demand, reserved, and spot instances. Knowledge of Amazon Machine Images and launch templates, network interfaces, security groups, route tables, and Virtual Private Cloud architecture including public and private subnets, NAT gateways, and peering is expected. Expect questions on load balancing options including Application Load Balancer and Network Load Balancer, autoscaling groups and policies for availability and cost optimization, and hybrid connectivity patterns such as VPN and Direct Connect. Candidates should also be able to reason about high level multi tier application architectures on AWS, security and networking trade offs, and common infrastructure as code and automation approaches used to provision and manage these resources.
Infrastructure as Code Tools
Practical skills for authoring, deploying, and managing Infrastructure as Code templates and configurations across cloud platforms. Candidates should be able to author, read, and modify templates or configuration files for native platform tools such as AWS CloudFormation, Azure Resource Manager templates or Bicep, and Google Cloud Deployment Manager, as well as for multi cloud tools such as Terraform. Key areas include file formats such as YAML and JSON, declaring resources, passing parameters or variables, and emitting outputs, together with expressing resource dependencies, conditions, and mappings. Candidates should be able to write templates for common infrastructure patterns including networking such as virtual private clouds, subnets, and security groups, compute resources such as virtual machines and instances, and storage resources such as buckets and storage accounts. They should know how to deploy templates to create stacks or equivalent constructs, perform stack updates and change sets or plan and apply workflows, handle rollbacks and deletions, and manage state for tools that require it including remote state and state locking. Additional important skills are modularization through nested stacks or modules, template validation and linting, integration with continuous integration and continuous delivery pipelines, drift detection and remediation, and basic troubleshooting of template errors and deployment failures. Interview tasks may include writing or modifying short templates, explaining the lifecycle of a deployment, and comparing trade offs between native templates and multi cloud tooling.
Containerization and Virtualization Trade Offs
Examines trade offs between containers and virtual machines and the complexity of orchestrated environments. Topics include hypervisor and virtual machine basics, container isolation and resource models, performance and overhead comparisons, security and attack surface differences, when to prefer virtual machines versus containers, single container versus orchestrated multi container setups, operational complexity versus benefits, and criteria for selecting the appropriate platform at different scales.
Internet Protocol Suite Basics
Covers fundamental networking concepts centered on the Internet protocol suite and how its layers map to practical network functions. Topics include comparison of layering models, link layer operation and address resolution, Internet layer addressing and routing including Internet Protocol version four and Internet Protocol version six, subnetting and classless interdomain routing, transport layer semantics such as the Transmission Control Protocol three way handshake, congestion control and reliability, User Datagram Protocol use cases, common control protocols such as the Internet Control Message Protocol and address resolution mechanisms, network address translation, sockets and port concepts, domain name resolution, dynamic host configuration approaches, fragmentation and maximum transmission unit considerations, packet encapsulation and decapsulation, and basic troubleshooting and diagnostic concepts. Interviews assess conceptual understanding and the ability to reason about packet flow, addressing, and protocol behavior under failure or attack conditions.
Network Protocols and Encapsulation
Comprehensive knowledge of network protocol stacks and layering, including the Open Systems Interconnection model and the Transmission Control Protocol and Internet Protocol suite. Candidates should understand protocol purposes and behaviors at each layer, including connection oriented and connectionless transport, address resolution, discovery and multicast management, and control plane messages. Know common protocols such as the User Datagram Protocol, Internet Control Message Protocol, and Internet Group Management Protocol and how they differ in reliability, ordering, and use cases. Be familiar with tunneling and encapsulation technologies and their tradeoffs, including Virtual Private Network, Generic Routing Encapsulation, Multiprotocol Label Switching, overlay network technologies such as Virtual Extensible Local Area Network, Generic Network Virtualization Encapsulation, and Network Virtualization using Generic Routing Encapsulation. Understand encryption and integrity options at the network layer such as Internet Protocol Security and at the transport layer such as Transport Layer Security and Secure Sockets Layer, including tunnel versus transport modes. Be able to reason about encapsulation overhead, maximum transmission unit and fragmentation, latency and throughput implications, path characteristics, compatibility and interoperability, and typical deployment patterns for site to site tunnels, remote access, data center overlays, and network virtualization.
Static Routing and IP Configuration
Configure static routes on routers to direct traffic. Understand route syntax, routing table priorities, and how to verify traffic is taking the intended path. Configure IP addresses, subnet masks, and default gateways on devices to ensure Layer 3 connectivity.
Amazon Web Services Core Services
Comprehensive knowledge of the foundational Amazon Web Services that are commonly used to design, deploy, and operate cloud applications. This includes compute services such as Amazon Elastic Compute Cloud for virtual machines and instance families, Amazon Web Services Lambda for serverless functions, and Amazon Elastic Beanstalk for managed application platforms; storage services such as Amazon Simple Storage Service for object storage, Amazon Elastic Block Store for block volumes, and Amazon Elastic File System for shared file storage; database services such as Amazon Relational Database Service for managed relational databases, Amazon DynamoDB for NoSQL, and Amazon ElastiCache for in memory caching; networking and content delivery including Amazon Virtual Private Cloud networking concepts, subnets, security groups, load balancers, and Amazon CloudFront; container and orchestration options such as Amazon Elastic Container Service and Amazon Elastic Kubernetes Service; and management and security services including Identity and Access Management, Amazon CloudWatch monitoring and logging, Auto Scaling, and cost and service limit considerations. Candidates should understand core service characteristics, common configuration choices and trade offs, operational considerations such as high availability and fault tolerance, basic security and compliance approaches, performance and cost optimization, and guidance for selecting one service over another for typical application patterns.
Cloud Infrastructure Knowledge (AWS/GCP/Azure)
Have working knowledge of at least one major cloud platform: common services (EC2/Compute Engine, RDS/Cloud SQL, S3/Cloud Storage, Load Balancers, VPCs, networking), typical failure modes, and how to troubleshoot within that platform. Understand concepts like availability zones, regions, and cross-region failover.